Lucene search
+L

5925 matches found

Exploit DB
Exploit DB
added 2019/02/28 12:00 a.m.59 views

WebKitGTK 2.23.90 / WebKitGTK+ 2.22.6 - Denial of Service

Exploit Title: Buffer overflow Date: 27-02-2019 Exploit Author: Dhiraj Mishra Vendor Homepage: https://webkit.org/ Software Link: https://gitlab.gnome.org/GNOME/epiphany Version: 2.23.90 Tested on: Linux 4.15.0-38-generic CVE: CVE-2019-8375 References: https://nvd.nist.gov/vuln/detail/CVE-2019-83...

9.8CVSS7.5AI score0.16113EPSS
SaveExploits4
exploitpack
exploitpack
added 2019/02/28 12:00 a.m.52 views

WebKitGTK 2.23.90 WebKitGTK+ 2.22.6 - Denial of Service

WebKitGTK 2.23.90 WebKitGTK+ 2.22.6 - Denial of Service Exploit Title: Buffer overflow Date: 27-02-2019 Exploit Author: Dhiraj Mishra Vendor Homepage: https://webkit.org/ Software Link: https://gitlab.gnome.org/GNOME/epiphany Version: 2.23.90 Tested on: Linux 4.15.0-38-generic CVE: CVE-2019-8375...

7.5CVSS9.3AI score0.16113EPSS
SaveExploits4
OpenVAS
OpenVAS
added 2019/02/27 12:00 a.m.29 views

Ubuntu: Security Advisory (USN-3894-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.8AI score0.01483EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2019/02/27 12:00 a.m.24 views

Ubuntu 14.04 LTS / 16.04 LTS : GNOME Keyring vulnerability (USN-3894-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3894-1 advisory. It was discovered that GNOME Keyring incorrectly cleared out credentials supplied to the PAM module. A local attacker could possibly use this issue to...

7.8CVSS7.6AI score0.01483EPSS
SaveExploits1References2
Ubuntu
Ubuntu
added 2019/02/26 2:20 p.m.78 views

USN-3894-1: GNOME Keyring vulnerability

It was discovered that GNOME Keyring incorrectly cleared out credentials supplied to the PAM module. A local attacker could possibly use this issue to discover login credentials...

7.8CVSS7.4AI score0.01483EPSS
SaveExploits1
OSV
OSV
added 2019/02/26 2:20 p.m.7 views

USN-3894-1 gnome-keyring vulnerability

It was discovered that GNOME Keyring incorrectly cleared out credentials supplied to the PAM module. A local attacker could possibly use this issue to discover login credentials...

7.8CVSS7.1AI score0.01483EPSS
SaveExploits1References2
NVD
NVD
added 2019/02/24 1:29 p.m.33 views

CVE-2019-8375

The UIProcess subsystem in WebKit, as used in WebKitGTK through 2.23.90 and WebKitGTK+ through 2.22.6 and other products, does not prevent the script dialog size from exceeding the web view size, which allows remote attackers to cause a denial of service Buffer Overflow or possibly have unspecifi...

9.8CVSS9.8AI score0.16113EPSS
SaveExploits4References8
OSV
OSV
added 2019/02/24 1:29 p.m.6 views

DEBIAN-CVE-2019-8375

The UIProcess subsystem in WebKit, as used in WebKitGTK through 2.23.90 and WebKitGTK+ through 2.22.6 and other products, does not prevent the script dialog size from exceeding the web view size, which allows remote attackers to cause a denial of service Buffer Overflow or possibly have unspecifi...

9.8CVSS9.1AI score0.16113EPSS
SaveExploits4References1
Prion
Prion
added 2019/02/24 1:29 p.m.23 views

Buffer overflow

The UIProcess subsystem in WebKit, as used in WebKitGTK through 2.23.90 and WebKitGTK+ through 2.22.6 and other products, does not prevent the script dialog size from exceeding the web view size, which allows remote attackers to cause a denial of service Buffer Overflow or possibly have unspecifi...

7.5CVSS9.6AI score0.16113EPSS
SaveExploits4References8Affected Software4
OSV
OSV
added 2019/02/24 12:00 a.m.5 views

UBUNTU-CVE-2019-8375

The UIProcess subsystem in WebKit, as used in WebKitGTK through 2.23.90 and WebKitGTK+ through 2.22.6 and other products, does not prevent the script dialog size from exceeding the web view size, which allows remote attackers to cause a denial of service Buffer Overflow or possibly have unspecifi...

9.8CVSS7AI score0.16113EPSS
SaveExploits4References5
Ubuntu
Ubuntu
added 2019/02/20 10:42 a.m.167 views

USN-3892-1: GDM vulnerability

Burghard Britzke discovered that GDM incorrectly handled certain configurations. An attacker could possibly use this issue to get unauthorized access to a different user...

6.9CVSS6.8AI score0.00504EPSS
SaveExploits1
OSV
OSV
added 2019/02/20 10:42 a.m.9 views

USN-3892-1 gdm3 vulnerability

Burghard Britzke discovered that GDM incorrectly handled certain configurations. An attacker could possibly use this issue to get unauthorized access to a different user...

6.9CVSS6.8AI score0.00504EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2019/02/15 1:49 p.m.29 views

CVE-2018-15587

GNOME Evolution through 3.28.2 is prone to OpenPGP signatures being spoofed for arbitrary messages using a specially crafted email that contains a valid signature from the entity to be impersonated as an attachment...

6.5CVSS4.2AI score0.02443EPSS
SaveExploits1References2
Prion
Prion
added 2019/02/12 5:29 p.m.20 views

Design/Logic Flaw

In pam/gkr-pam-module.c in GNOME Keyring before 3.27.2, the user's password is kept in a session-child process spawned from the LightDM daemon. This can expose the credential in cleartext...

2.1CVSS7.6AI score0.01483EPSS
SaveExploits1References8Affected Software3
NVD
NVD
added 2019/02/12 5:29 p.m.17 views

CVE-2018-20781

In pam/gkr-pam-module.c in GNOME Keyring before 3.27.2, the user's password is kept in a session-child process spawned from the LightDM daemon. This can expose the credential in cleartext...

7.8CVSS7.6AI score0.01483EPSS
SaveExploits1References8
OSV
OSV
added 2019/02/12 5:29 p.m.7 views

DEBIAN-CVE-2018-20781

In pam/gkr-pam-module.c in GNOME Keyring before 3.27.2, the user's password is kept in a session-child process spawned from the LightDM daemon. This can expose the credential in cleartext...

7.8CVSS7AI score0.01483EPSS
SaveExploits1References1
OSV
OSV
added 2019/02/12 5:29 p.m.32 views

CVE-2018-20781

In pam/gkr-pam-module.c in GNOME Keyring before 3.27.2, the user's password is kept in a session-child process spawned from the LightDM daemon. This can expose the credential in cleartext...

7.8CVSS7.2AI score
SaveExploits0References8
CVE
CVE
added 2019/02/12 5:00 p.m.82 views

CVE-2018-20781

CVE-2018-20781 affects GNOME Keyring before 3.27.2. The vulnerability occurs when the user’s password is kept in a session-child process spawned from the LightDM daemon via pam/gkr-pam-module.c, allowing the credential to be exposed in cleartext. Impact is local, with partial confidentiality and ...

7.8CVSS7.5AI score0.01483EPSS
SaveExploits1References8Affected Software1
Cvelist
Cvelist
added 2019/02/12 5:00 p.m.41 views

CVE-2018-20781

In pam/gkr-pam-module.c in GNOME Keyring before 3.27.2, the user's password is kept in a session-child process spawned from the LightDM daemon. This can expose the credential in cleartext...

7.6AI score0.01483EPSS
SaveExploits1References8
Debian CVE
Debian CVE
added 2019/02/12 5:00 p.m.56 views

CVE-2018-20781

In pam/gkr-pam-module.c in GNOME Keyring before 3.27.2, the user's password is kept in a session-child process spawned from the LightDM daemon. This can expose the credential in cleartext...

7.8CVSS7.8AI score0.01483EPSS
SaveExploits1
Rows per page
Query Builder