Lucene search
+L

4584 matches found

RedHat Linux
RedHat Linux
•added 2021/05/18 2:02 p.m.•18 views

webkitgtk: type confusion may lead to arbitrary code execution

A type confusion issue was addressed with improved memory handling. This issue is fixed in Safari 14.0. Processing maliciously crafted web content may lead to arbitrary code execution...

8.8CVSS7AI score0.01694EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2021/05/18 2:02 p.m.•26 views

webkitgtk: use-after-free may lead to arbitrary code execution

A code execution vulnerability exists in the WebSocket functionality of Webkit WebKitGTK 2.30.0. A specially crafted web page can trigger a use-after-free vulnerability which can lead to remote code execution. An attacker can get a user to visit a webpage to trigger this vulnerability...

8.8CVSS8AI score0.03487EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
•added 2021/05/18 2:02 p.m.•18 views

webkitgtk: out-of-bounds write may lead to code execution

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Safari 14.0. Processing maliciously crafted web content may lead to code execution...

8.8CVSS6.8AI score0.02201EPSS
SaveExploits0References4
osv_alsa
osv_alsa
•added 2021/05/18 5:35 a.m.•69 views

ALSA-2021:1586 Moderate: GNOME security, bug fix, and enhancement update

GNOME is the default desktop environment of AlmaLinux. The following packages have been upgraded to a later upstream version: accountsservice 0.6.55, webkit2gtk3 2.30.4. BZ1846376, BZ1883304 Security Fixes: webkitgtk: type confusion may lead to arbitrary code execution CVE-2020-9948 webkitgtk:...

8.8CVSS7.5AI score0.04938EPSS
SaveExploits3References13
Tenable Nessus
Tenable Nessus
•added 2021/05/12 12:00 a.m.•87 views

Ubuntu 18.04 LTS / 20.04 LTS : WebKitGTK vulnerabilities (USN-4939-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4939-1 advisory. A large number of security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a maliciou...

9.8CVSS7.3AI score0.07002EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2021/05/12 12:00 a.m.•26 views

WebKitGTK+ Use-After-Free

The vulnerability of the Web page rendering module in the WebKitGTK+ operating system for iOS is related to its use after release. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted web page...

9CVSS7.7AI score0.04491EPSS
SaveExploits0References7Affected Software5
BDU FSTEC
BDU FSTEC
•added 2021/05/12 12:00 a.m.•12 views

WebKitGTK WebKit Code Execution

The vulnerability of the Web page rendering module in WebKitGTK on Apple MacOS operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created malicious web page...

10CVSS7.7AI score0.01939EPSS
SaveExploits0References10Affected Software5
OpenVAS
OpenVAS
•added 2021/05/11 12:00 a.m.•52 views

Ubuntu: Security Advisory (USN-4939-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.8AI score0.07002EPSS
SaveExploits0References4
Ubuntu
Ubuntu
•added 2021/05/10 11:40 a.m.•198 views

USN-4939-1: WebKitGTK vulnerabilities

A large number of security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service...

9.8CVSS7.5AI score0.07002EPSS
SaveExploits0
osv_usn
osv_usn
•added 2021/05/10 11:40 a.m.•34 views

USN-4939-1 webkit2gtk vulnerabilities

A large number of security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service...

9.8CVSS7AI score0.07002EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2021/05/03 12:00 a.m.•197 views

GLSA-202104-03 : WebkitGTK+: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202104-03 WebkitGTK+: Multiple vulnerabilities Multiple vulnerabilities have been discovered in WebkitGTK+. Please review the CVE identifiers referenced below for details. Impact : An attacker, by enticing a user to visit...

9.8CVSS7.6AI score0.13975EPSS
SaveExploits1References12
CNNVD
CNNVD
•added 2021/04/27 12:00 a.m.•11 views

WebKitGTK+ Resource Management Vulnerability

WebKitGTK+ is a full-featured port of the WebKit engine and contains all of WebKit's functionality. A resource management error vulnerability exists in WebKitGTK+, which stems from a use-after-the-fact error when processing web content in the WebKit Storage component. The following products and...

8.8CVSS7.2AI score0.04491EPSS
SaveExploits0References19
CNNVD
CNNVD
•added 2021/04/27 12:00 a.m.•7 views

Apple WebKitGTK+ buffer error vulnerability

WebKitGTK+ is a full-featured port of the WebKit engine and contains all of WebKit's features. A buffer error vulnerability exists in WebKitGTK+ that stems from a boundary error when processing web content in WebKit. The following products and versions are affected: WebKitGTK+: 2.30.0, 2.30.1,...

8.8CVSS7.1AI score0.01939EPSS
SaveExploits0References14
Tenable Nessus
Tenable Nessus
•added 2021/04/21 12:00 a.m.•266 views

Ubuntu 18.04 LTS / 20.04 LTS : WebKitGTK vulnerabilities (USN-4894-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4894-1 advisory. A large number of security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a maliciou...

9.8CVSS7.4AI score0.13975EPSS
SaveExploits0References8
OpenVAS
OpenVAS
•added 2021/04/19 12:00 a.m.•24 views

SUSE: Security Advisory (SUSE-SU-2015:0688-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.9AI score0.02762EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
•added 2021/04/13 12:00 a.m.•16 views

WebKitGTK Safari Code Execution

The vulnerability of the web page rendering module in the WebKitGTK browser of Apple’s Safari, as well as in Apple’s Mac OS, iOS, iPadOS, watchOS, and tvOS operating systems, is related to the use of memory after it is freed during the processing of web content. Exploiting this vulnerability can...

10CVSS7.2AI score0.01676EPSS
SaveExploits0References11Affected Software10
OpenVAS
OpenVAS
•added 2021/04/12 12:00 a.m.•198 views

Fedora: Security Advisory for webkit2gtk3 (FEDORA-2021-619711d709)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.3AI score
SaveExploits0References4
Fedora
Fedora
•added 2021/04/11 2:02 p.m.•181 views

[SECURITY] Fedora 32 Update: webkit2gtk3-2.30.6-1.fc32

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. This package contains WebKit2 based WebKitGTK for GTK 3...

9.8CVSS1.3AI score0.13975EPSS
SaveExploits0
Fedora
Fedora
•added 2021/04/04 1:09 a.m.•114 views

[SECURITY] Fedora 33 Update: webkit2gtk3-2.32.0-1.fc33

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. This package contains WebKit2 based WebKitGTK for GTK 3...

9.8CVSS1.3AI score0.13975EPSS
SaveExploits0
Veracode
Veracode
•added 2021/03/30 9:40 p.m.•64 views

Sandbox Escape

webkitgtk is vulnerable to sandbox escape. Maliciously crafted web content may violate iframe sandboxing policy...

6.5CVSS1.9AI score0.01413EPSS
SaveExploits0References7Affected Software17
Rows per page
Query Builder