Lucene search
+L

10 matches found

Snyk
Snyk
•added 2026/06/25 3:58 p.m.•8 views

Authorization Bypass Through User-Controlled Key

Overview org.keycloak:keycloak-services is an open source identity and access management solution for modern applications and services. Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the addChild endpoint in the Admin REST API when...

7.7CVSS6AI score0.0049EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2025/07/07 2:28 a.m.•13 views

webkitgtk: heap-use-after-free in WebCore::RenderLayer::addChild()

A use-after-free vulnerability in WebCore::RenderLayer::addChild in WebKitGTK before 2.36.8 allows attackers to execute code remotely...

8.8CVSS6AI score0.01062EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2024/09/24 12:00 a.m.•12 views

The vulnerability in the `WebCore::RenderLayer::addChild` function of the WPE WebKit and WebKitGTK rendering modules allows a attacker to execute arbitrary code.

The vulnerability of the WebCore::RenderLayer::addChild function in WPE WebKit and WebKitGTK rendering modules is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

10CVSS7.7AI score0.01062EPSS
SaveExploits0References10Affected Software5
RedHat Linux
RedHat Linux
•added 2023/05/16 8:54 a.m.•15 views

webkitgtk: heap-use-after-free in WebCore::RenderLayer::addChild()

A use-after-free vulnerability in WebCore::RenderLayer::addChild in WebKitGTK before 2.36.8 allows attackers to execute code remotely...

8.8CVSS6AI score0.01062EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2023/05/09 9:52 a.m.•18 views

webkitgtk: heap-use-after-free in WebCore::RenderLayer::addChild()

A use-after-free vulnerability in WebCore::RenderLayer::addChild in WebKitGTK before 2.36.8 allows attackers to execute code remotely...

8.8CVSS6AI score0.01062EPSS
SaveExploits0References5
NVD
NVD
•added 2023/03/02 3:15 p.m.•24 views

CVE-2023-25358

A use-after-free vulnerability in WebCore::RenderLayer::addChild in WebKitGTK before 2.36.8 allows attackers to execute code remotely...

8.8CVSS8.9AI score0.01062EPSS
SaveExploits0References6
OSV
OSV
•added 2023/03/02 3:15 p.m.•3 views

DEBIAN-CVE-2023-25358

A use-after-free vulnerability in WebCore::RenderLayer::addChild in WebKitGTK before 2.36.8 allows attackers to execute code remotely...

8.8CVSS8.4AI score0.01062EPSS
SaveExploits0References1
OSV
OSV
•added 2023/03/02 3:15 p.m.•9 views

UBUNTU-CVE-2023-25358

A use-after-free vulnerability in WebCore::RenderLayer::addChild in WebKitGTK before 2.36.8 allows attackers to execute code remotely...

8.8CVSS7.3AI score0.01062EPSS
SaveExploits0References4
Debian CVE
Debian CVE
•added 2023/03/02 12:00 a.m.•35 views

CVE-2023-25358

A use-after-free vulnerability in WebCore::RenderLayer::addChild in WebKitGTK before 2.36.8 allows attackers to execute code remotely...

8.8CVSS8.6AI score0.01062EPSS
SaveExploits0
CVE
CVE
•added 2023/03/02 12:00 a.m.•154 views

CVE-2023-25358

Summary of CVE-2023-25358 (WebKitGTK) : A use-after-free vulnerability in WebCore::RenderLayer::addChild (and related RenderLayer functions) in WebKitGTK before 2.36.8 allows remote code execution. The issue appears in WebKitGTK/WebKitGTK4, affecting the WebKit rendering stack used by GTK-based a...

8.8CVSS8.6AI score0.01062EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder