Lucene search
+L

16449 matches found

Cvelist
Cvelist
•added 2020/02/17 6:24 p.m.•44 views

CVE-2013-7324

Webkit-GTK 2.x any version with HTML5 audio/video support based on GStreamer allows remote attackers to trigger unexpectedly high sound volume via malicious javascript. NOTE: this WebKit-GTK behavior complies with existing W3C standards and existing practices for GNOME desktop integration...

5.3AI score0.01431EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/02/17 12:00 a.m.•4 views

CVE-2013-7324: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Webkit-GTK 2.x any version with HTML5 audio/video support based on GStreamer allows remote attackers to trigger unexpectedly high sound volume via malicious javascript. NOTE: this WebKit-GTK behavior complies with existing W3C standards and existing practices for GNOME desktop integration...

5.3CVSS6AI score0.01431EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2020/02/17 12:00 a.m.•5 views

PT-2020-7575

Name of the Vulnerable Software and Affected Versions Webkit-GTK versions 2.x Description The issue allows remote attackers to trigger unexpectedly high sound volume via malicious javascript. This behavior complies with existing W3C standards and existing practices for GNOME desktop integration...

5.3CVSS0.01431EPSS
SaveExploits0References8
UbuntuCve
UbuntuCve
•added 2020/02/14 12:00 a.m.•39 views

CVE-2020-3865

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. Processing maliciously crafted web content may lead to...

8.8CVSS7.1AI score0.01858EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2020/02/14 12:00 a.m.•62 views

CVE-2020-3868

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. Processing maliciously crafted web content may lead to...

9.3CVSS7.3AI score0.027EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2020/02/14 12:00 a.m.•55 views

CVE-2020-3862

A denial of service issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. A malicious website may be able to cause a denial of service...

6.5CVSS6.7AI score0.02009EPSS
SaveExploits0References3
Apple
Apple
•added 2020/02/11 8:43 a.m.•75 views

About the security content of iCloud for Windows 10.9.2 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

9.3CVSS0.3AI score0.027EPSS
SaveExploits0Affected Software1
CNVD
CNVD
•added 2020/02/06 12:00 a.m.•35 views

Apple iTunes for Windows Permission Logic Vulnerability

Apple iTunes for Windows is a Windows-based media player application from Apple.WebKit is one of the components of the Web browser engine. A security vulnerability exists in the WebKit component of Apple iTunes for Windows prior to version 12.10.4. An attacker could exploit the vulnerability to...

7.1CVSS6.7AI score0.00403EPSS
SaveExploits0References1
Apple
Apple
•added 2020/02/04 5:29 a.m.•69 views

About the security content of iCloud for Windows 7.15 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

9.3CVSS8.6AI score0.09543EPSS
SaveExploits3Affected Software1
Apple
Apple
•added 2020/02/04 5:27 a.m.•113 views

About the security content of iTunes 12.10.2 for Windows - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

9.3CVSS8.5AI score0.09543EPSS
SaveExploits3Affected Software1
Apple
Apple
•added 2020/02/04 5:18 a.m.•154 views

About the security content of Safari 13.0.3 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

9.3CVSS8.3AI score0.09543EPSS
SaveExploits3Affected Software3
NVD
NVD
•added 2020/02/03 6:15 p.m.•32 views

CVE-2016-4676

A Cross-origin vulnerability exists in WebKit in Apple Safari before 10.0.1 when processing location attributes, which could let a remote malicious user obtain sensitive information...

7.5CVSS6.9AI score0.02011EPSS
SaveExploits0References5
osv_cve
osv_cve
•added 2020/02/03 6:15 p.m.•15 views

CVE-2016-4676

A Cross-origin vulnerability exists in WebKit in Apple Safari before 10.0.1 when processing location attributes, which could let a remote malicious user obtain sensitive information...

7.5CVSS5.8AI score0.02011EPSS
SaveExploits0References5
Prion
Prion
•added 2020/02/03 6:15 p.m.•29 views

Cross site scripting

A Cross-origin vulnerability exists in WebKit in Apple Safari before 10.0.1 when processing location attributes, which could let a remote malicious user obtain sensitive information...

5CVSS6.3AI score0.02011EPSS
SaveExploits0References5Affected Software2
Cvelist
Cvelist
•added 2020/02/03 5:07 p.m.•45 views

CVE-2016-4676

A Cross-origin vulnerability exists in WebKit in Apple Safari before 10.0.1 when processing location attributes, which could let a remote malicious user obtain sensitive information...

6.9AI score0.02011EPSS
SaveExploits0References5
CVE
CVE
•added 2020/02/03 5:07 p.m.•97 views

CVE-2016-4676

CVE-2016-4676 : A cross-origin vulnerability in WebKit used by Apple Safari prior to 10.0.1 occurs when processing location attributes, allowing a remote attacker to obtain sensitive information. The NVD entry assigns a CVSS v3.1 base score of 7.5 (HIGH) with network attack and no user interactio...

7.5CVSS6.7AI score0.02011EPSS
SaveExploits0References5Affected Software2
Positive Technologies
Positive Technologies
•added 2020/02/03 12:00 a.m.•10 views

PT-2020-8036

Name of the Vulnerable Software and Affected Versions: Apple Safari versions prior to 10.0.1 Description: A Cross-origin issue exists in WebKit when processing location attributes, which could let a remote malicious user obtain sensitive information. Recommendations: For versions prior to 10.0.1,...

7.5CVSS0.02011EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/02/03 12:00 a.m.•7 views

CVE-2016-4676: Exposure of Sensitive Information to an Unauthorized Actor

A Cross-origin vulnerability exists in WebKit in Apple Safari before 10.0.1 when processing location attributes, which could let a remote malicious user obtain sensitive information...

7.5CVSS7.3AI score0.02011EPSS
SaveExploits0References2
Fedora
Fedora
•added 2020/01/31 2:04 a.m.•41 views

[SECURITY] Fedora 31 Update: chromium-79.0.3945.130-1.fc31

Chromium is an open-source web browser, powered by WebKit Blink...

8.8CVSS1.8AI score0.01218EPSS
SaveExploits1
OpenVAS
OpenVAS
•added 2020/01/31 12:00 a.m.•35 views

Fedora: Security Advisory for chromium (FEDORA-2020-9382ceb2f8)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.8CVSS8.8AI score0.01218EPSS
SaveExploits1References2
Rows per page
Query Builder