Lucene search
+L

112 matches found

BDU FSTEC
BDU FSTEC
•added 2025/04/10 12:00 a.m.•11 views

The vulnerability of the WPE WebKit and WebKitGTK web page rendering modules, related to reading data beyond the allowed buffer limits, allows attackers to cause service failures.

The vulnerability of the WPE WebKit and WebKitGTK page rendering modules is related to reading data beyond the allowed buffer limits. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.9AI score0.00337EPSS
SaveExploits0References9Affected Software5
CNNVD
CNNVD
•added 2025/01/30 12:00 a.m.•19 views

DOJO 访问控制错误漏洞

DOJO is an open source JavaScript toolkit from pwn.college. DOJO suffers from an Access Control Error vulnerability that stems from a lack of access control when rendering a customized DOJO page, resulting in a user being able to create a stored cross-site scripting XSS vulnerability...

7.6CVSS5.6AI score0.00242EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2024/11/14 12:00 a.m.•13 views

The vulnerability of the WPE WebKit and WebKitGTK web page rendering modules, related to access to memory cells before the buffer is initialized, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the WPE WebKit and WebKitGTK page rendering modules relates to access to memory cells before the buffer is initialized. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...

10CVSS7.8AI score0.0118EPSS
SaveExploits0References13Affected Software11
BDU FSTEC
BDU FSTEC
•added 2024/09/23 12:00 a.m.•14 views

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit, related to writing beyond the buffer boundary, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of Web page rendering modules in WebKitGTK and WPE WebKit relates to buffer overflow attacks. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

10CVSS7.9AI score0.01264EPSS
SaveExploits0References4Affected Software4
BDU FSTEC
BDU FSTEC
•added 2024/09/13 12:00 a.m.•11 views

The vulnerability of the WPE WebKit and WebKitGTK web page rendering modules, related to the use of memory after it is freed, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the WPE WebKit and WebKitGTK page rendering modules is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

10CVSS7.3AI score0.00974EPSS
SaveExploits0References9Affected Software5
Veracode
Veracode
•added 2024/08/13 11:05 a.m.•21 views

Cross Site Scripting

typo3/cms is vulnerable to Cross Site Scripting. The vulnerability is caused due to a missing sanitization while rendering web page on the browser. This can lead to an authorized editors insert javascript commands by using the url scheme javascript:...

7.1AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2024/07/29 12:00 a.m.•13 views

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit, related to insecure management of privileges, allows attackers to compromise the integrity of protected information.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to compromise the integrity of protected information...

5.3CVSS6.2AI score0.00539EPSS
SaveExploits1References4Affected Software4
Veracode
Veracode
•added 2024/07/09 6:56 p.m.•20 views

Cross-site Scripting (XSS)

Typo3/Neos is vulnerable to Cross-site Scripting XSS. The vulnerability is due to improper handling of user input, allowing attackers to tamper with page rendering, redirect victims, capture credentials, and potentially upload backdoors...

6.7AI score
SaveExploits0
Github Security Blog
Github Security Blog
•added 2024/06/05 5:24 p.m.•29 views

Cross-Site Scripting (XSS) vulnerabilities in Neos

It has been discovered that Neos is vulnerable to several XSS attacks. Through these vulnerabilities, an attacker could tamper with page rendering, redirect victims to a fake login page, or capture user credentials such as cookies. With the potential backdoor upload an attacker could gain access ...

6.4AI score
SaveExploits0References3Affected Software1
OSV
OSV
•added 2024/02/02 7:15 p.m.•21 views

CVE-2023-37527

A reflected cross-site scripting XSS vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attacker to execute malicious javascript code in the application session or in database, via remote injection, while rendering content in a web page...

6.1CVSS5.9AI score0.00356EPSS
SaveExploits0References1
Prion
Prion
•added 2024/02/02 7:15 p.m.•32 views

Cross site scripting

A reflected cross-site scripting XSS vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attacker to execute malicious javascript code in the application session or in database, via remote injection, while rendering content in a web page...

5.8CVSS6.2AI score0.00356EPSS
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/12/13 12:00 a.m.•12 views

The vulnerability of the web page rendering modules in WebKitGTK+ and WPE WebKit, caused by buffer overflows, allows attackers to trigger a service failure.

The vulnerability of the Web page rendering modules in WebKitGTK+ and WPE WebKit is caused by buffer overflow. Exploiting this vulnerability can allow a malicious actor to cause a service failure...

7.8CVSS7.3AI score0.01296EPSS
SaveExploits0References22Affected Software10
BDU FSTEC
BDU FSTEC
•added 2023/10/28 12:00 a.m.•10 views

The vulnerability of the web page rendering modules in Safari’s WebKit browser for iOS, watchOS, tvOS, iPadOS operating systems allows attackers to execute arbitrary code.

The vulnerability of the Web page rendering modules in WebKit of Safari browsers for iOS, watchOS, tvOS, and iPadOS lies in the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.1AI score0.0152EPSS
SaveExploits0References11Affected Software6
BDU FSTEC
BDU FSTEC
•added 2023/10/05 12:00 a.m.•15 views

The vulnerability of the Web page rendering module in Safari web browsers, as well as in operating systems such as watchOS, tvOS, iPadOS, iOS, macOS, allows attackers to execute XSS attacks.

The vulnerability of the Web page rendering module in Safari browsers running WebKit, as well as in operating systems such as watchOS, tvOS, iPadOS, iOS, and macOS, is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious act...

6.4CVSS6.7AI score0.00578EPSS
SaveExploits0References7Affected Software6
BDU FSTEC
BDU FSTEC
•added 2023/08/11 12:00 a.m.•10 views

The vulnerability of the web page rendering modules in WebKitGTK and WPE for iOS, iPadOS, tvOS, macOS, watchOS allows a hacker to execute arbitrary code.

The vulnerability of the web page rendering modules in WebKitGTK and WPE for iOS, iPadOS, tvOS, macOS, watchOS systems is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

10CVSS8.3AI score0.00952EPSS
SaveExploits0References8Affected Software8
Akamai Blog
Akamai Blog
•added 2023/04/28 1:00 p.m.•16 views

Render Pages Faster for Optimized Browsing, Part 5 of 5

Find out what happens once the browser has downloaded usable assets and it's time to display something on-screen...

6.9AI score
SaveExploits0
Huntr
Huntr
•added 2022/11/19 5:29 a.m.•17 views

Stored cross site scripting

Hi Team, I have found a stored cross-site scripting vulnerability in the Create event section. Description What is stored cross site scripting attack? Stored XSS, occurs when user supplied input is stored and then rendered within a web page. Typical entry points for stored XSS are: message forums...

5.2AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2022/10/04 12:00 a.m.•13 views

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit, related to the use of memory after it is freed, allows attackers to execute arbitrary code or cause service interruptions.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause a service failure by using a specially created website...

9.3CVSS8.1AI score0.04938EPSS
SaveExploits1References7Affected Software5
BDU FSTEC
BDU FSTEC
•added 2022/09/19 12:00 a.m.•11 views

The vulnerability of the WPE WebKit web page rendering module, related to the lack of measures taken to protect the structure of the web page, allows attackers to access confidential data.

The vulnerability of the WPE WebKit web page rendering module is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a remote attacker to gain access to confidential data...

4.7CVSS6.1AI score0.0116EPSS
SaveExploits0References8Affected Software5
BDU FSTEC
BDU FSTEC
•added 2022/09/14 12:00 a.m.•12 views

The vulnerability of the WPE WebKit web page rendering module, related to copying buffers without checking input data, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the WPE WebKit web page rendering module is related to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9.3CVSS6.6AI score0.01932EPSS
SaveExploits0References8Affected Software5
Rows per page
Query Builder