Lucene search
K

6 matches found

Tenable Nessus
Tenable Nessus
added 2025/08/24 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2017-2442

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the WebKit JavaScript Binding...

6.5CVSS7.4AI score0.06166EPSS
Exploits3References2
SUSE CVE
SUSE CVE
added 2023/02/15 5:7 a.m.4 views

SUSE CVE-2016-1668

The forEachForBinding function in WebKit/Source/bindings/core/v8/Iterable.h in the V8 bindings in Blink, as used in Google Chrome before 50.0.2661.102, uses an improper creation context, which allows remote attackers to bypass the Same Origin Policy via a crafted web site...

8.8CVSS6.7AI score0.01285EPSS
Exploits1References6
BDU FSTEC
BDU FSTEC
added 2017/04/13 12:0 a.m.6 views

The vulnerability of the iOS operating system and the Safari browser allows attackers to obtain confidential information or circumvent existing access control policies.

The vulnerability of the WebKit JavaScript Bindings component in the iOS operating system and Safari browser exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass existing access restrictions or obtain confidential information throug...

4.3CVSS7AI score0.06166EPSS
Exploits3References4Affected Software2
OSV
OSV
added 2017/04/02 1:59 a.m.2 views

DEBIAN-CVE-2017-2442

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "WebKit JavaScript Bindings" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site...

6.5CVSS6.3AI score0.06166EPSS
Exploits3References1
OSV
OSV
added 2016/09/25 12:0 a.m.0 views

UBUNTU-CVE-2016-5171

WebKit/Source/bindings/templates/interface.cpp in Blink, as used in Google Chrome before 53.0.2785.113, does not prevent certain constructor calls, which allows remote attackers to cause a denial of service use-after-free or possibly have unspecified other impact via crafted JavaScript code...

8.8CVSS7.4AI score0.01118EPSS
Exploits0References4
OSV
OSV
added 2016/07/21 12:0 a.m.1 views

UBUNTU-CVE-2016-4651

Cross-site scripting XSS vulnerability in the WebKit JavaScript bindings in Apple iOS before 9.3.3 and Safari before 9.1.2 allows remote attackers to inject arbitrary web script or HTML via a crafted HTTP/0.9 response, related to a "cross-protocol cross-site scripting XPXSS" vulnerability...

6.1CVSS7AI score0.02259EPSS
Exploits0References8
Rows per page
Query Builder