Lucene search
+L

2194 matches found

Prion
Prion
added 2021/05/28 1:15 p.m.26 views

Buffer overflow

The GTK version of ettercap uses a global settings file at /tmp/.ettercapgtk and does not verify ownership of this file. When parsing this file for settings in gtkuiconfread src/interfacesgtk/ecgtkconf.c, an unchecked sscanf call allows a maliciously placed settings file to overflow a...

4.6CVSS7.2AI score0.00313EPSS
SaveExploits0References3Affected Software1
UbuntuCve
UbuntuCve
added 2021/05/28 1:15 p.m.31 views

CVE-2010-3843

The GTK version of ettercap uses a global settings file at /tmp/.ettercapgtk and does not verify ownership of this file. When parsing this file for settings in gtkuiconfread src/interfacesgtk/ecgtkconf.c, an unchecked sscanf call allows a maliciously placed settings file to overflow a...

7.8CVSS7.2AI score0.00313EPSS
SaveExploits0References1
CVE
CVE
added 2021/05/28 12:14 p.m.68 views

CVE-2010-3843

CVE-2010-3843 affects the GTK branch of Ettercap. The vulnerable element is the global settings file located at /tmp/.ettercap_gtk, whose ownership is not verified. During parsing in gtkui_conf_read() (src/interfacesgtk/ec_gtk_conf.c), an unchecked sscanf() call can overflow a statically-sized bu...

7.8CVSS7.7AI score0.00313EPSS
SaveExploits0References3Affected Software1
Debian CVE
Debian CVE
added 2021/05/28 12:14 p.m.64 views

CVE-2010-3843

The GTK version of ettercap uses a global settings file at /tmp/.ettercapgtk and does not verify ownership of this file. When parsing this file for settings in gtkuiconfread src/interfacesgtk/ecgtkconf.c, an unchecked sscanf call allows a maliciously placed settings file to overflow a...

7.8CVSS7.9AI score0.00313EPSS
SaveExploits0
Cvelist
Cvelist
added 2021/05/28 12:14 p.m.48 views

CVE-2010-3843

The GTK version of ettercap uses a global settings file at /tmp/.ettercapgtk and does not verify ownership of this file. When parsing this file for settings in gtkuiconfread src/interfacesgtk/ecgtkconf.c, an unchecked sscanf call allows a maliciously placed settings file to overflow a...

7.8AI score0.00313EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2021/05/18 2:02 p.m.24 views

webkitgtk: use-after-free may lead to arbitrary code execution

An exploitable use-after-free vulnerability exists in WebKitGTK browser version 2.30.1 x64. A specially crafted HTML web page can cause a use-after-free condition, resulting in a remote code execution. The victim needs to visit a malicious web site to trigger this vulnerability...

8.8CVSS7.6AI score0.04938EPSS
SaveExploits1References4
AlmaLinux
AlmaLinux
added 2021/05/18 6:10 a.m.23 views

spice-gtk bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

1.6AI score
SaveExploits0References1
Rockylinux
Rockylinux
added 2021/05/18 6:10 a.m.17 views

spice-gtk bug fix and enhancement update

An update is available for spice-gtk. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterpri...

2.1AI score
SaveExploits0
OSV
OSV
added 2021/05/18 6:10 a.m.15 views

ALBA-2021:1821 spice-gtk bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

6.8AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2021/05/12 12:00 a.m.8 views

The vulnerability of the web page rendering module in WebKitGTK operating systems such as Apple MacOS, iOS, and iPadOS allows attackers to execute arbitrary code.

The vulnerability of the web page rendering module in WebKitGTK-based operating systems such as Apple MacOS, iOS, and iPadOS relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created malicious web pag...

10CVSS7.7AI score0.04491EPSS
SaveExploits0References9Affected Software5
OpenVAS
OpenVAS
added 2021/04/19 12:00 a.m.29 views

SUSE: Security Advisory (SUSE-SU-2019:0511-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8AI score0.09755EPSS
SaveExploits4References4
OpenVAS
OpenVAS
added 2021/04/19 12:00 a.m.31 views

SUSE: Security Advisory (SUSE-SU-2017:2847-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.8AI score0.02285EPSS
SaveExploits8References184
OpenVAS
OpenVAS
added 2021/04/19 12:00 a.m.16 views

SUSE: Security Advisory (SUSE-SU-2018:0877-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS9.6AI score0.05249EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2021/04/19 12:00 a.m.39 views

SUSE: Security Advisory (SUSE-SU-2018:2594-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.6AI score0.03934EPSS
SaveExploits0References5
OpenVAS
OpenVAS
added 2021/04/19 12:00 a.m.26 views

SUSE: Security Advisory (SUSE-SU-2018:2593-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.6AI score0.03934EPSS
SaveExploits0References5
OpenVAS
OpenVAS
added 2021/04/19 12:00 a.m.24 views

SUSE: Security Advisory (SUSE-SU-2020:3841-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.6AI score0.03934EPSS
SaveExploits0References5
OpenVAS
OpenVAS
added 2021/04/19 12:00 a.m.17 views

SUSE: Security Advisory (SUSE-SU-2020:3085-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.6CVSS7.1AI score0.02656EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2021/04/12 12:00 a.m.195 views

Fedora: Security Advisory for webkit2gtk3 (FEDORA-2021-619711d709)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.3AI score
SaveExploits0References4
Fedora
Fedora
added 2021/04/11 2:02 p.m.169 views

[SECURITY] Fedora 32 Update: webkit2gtk3-2.30.6-1.fc32

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. This package contains WebKit2 based WebKitGTK for GTK 3...

9.8CVSS1.3AI score0.14479EPSS
SaveExploits0
OPENSUSE Linux
OPENSUSE Linux
added 2021/04/09 12:00 a.m.41 views

Security update for flatpak, libostree, xdg-desktop-portal, xdg-desktop-portal-gtk (important)

openSUSE Security Update: Security update for flatpak, libostree, xdg-desktop-portal, xdg-desktop-portal-gtk Announcement ID: openSUSE-SU-2021:0520-1 Rating: important References: 1133120 1133124 1175899 1180996 Cross-References: CVE-2021-21261 CVSS scores: CVE-2021-21261 NVD : 8.8...

7.3CVSS7.4AI score0.0057EPSS
SaveExploits0References4
Rows per page
Query Builder