WordPress User Messages <= 1.2.4 - Reflected XSS

WordPress User Messages plugin = 1.2.4 contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter before outputting it in the page, letting attackers execute malicious scripts in the context of high privilege users, exploit requires victim to load a...

CVE-2019-1332

CVE-2019-1332: Reflected Cross-Site Scripting in Microsoft SQL Server Reporting Services A cross-site scripting XSS vulnerability exists when Microsoft SQL Server Reporting Services SSRS does not properly sanitize a specially-crafted web request to an affected SSRS server. An attacker who...

SUSE SLES15: WebKitGTK-4.0-lang / WebKitGTK-4.1-lang / WebKitGTK-6.0-lang / etc (SUSE-SU-2026:4868-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4868-1 advisory. Security issues fixed: - CVE-2026-64718: webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari cra...

Astra Linux – vulnerability in Chromium

In DevTools for Google Chrome prior to version 92.0.4515.107, using “After Free” allowed attackers who convinced users to install a malicious extension to potentially exploit heap corruption via a crafted HTML page...

Astra Linux – vulnerability in Chromium

A stack buffer overflow in Printing in Google Chrome prior to version 92.0.4515.107 allowed a remote attacker who had compromised the renderer process to potentially exploit stack corruption via a crafted HTML page...

Astra Linux – Vulnerability in WebKit2GTK

A correctness issue in JIT was addressed through improved checks. This issue has been fixed in tvOS 16.1, iOS 15.7.1, iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1, and iPadOS 16. Processing maliciously crafted web content may disclose internal states of the app...

Astra Linux – vulnerability in Chromium

Prior to version 150.0.7871.115, race conditions in GetUserMedia within Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a specially crafted HTML page. Chromium security severity: High...

Astra Linux – vulnerability in webkit2gtk

The issue has been resolved through improved memory handling. It is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2, watchOS 9.3, macOS Big Sur 11.7.3, Safari 16.3, tvOS 16.3, iOS 16.3, and iPadOS 16.3. Processing maliciously crafted web content may result in arbitrary code execution...

Astra Linux – Vulnerability in Chromium

Before version 89.0.4389.114, using screen sharing in Google Chrome allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...

Astra Linux – vulnerability in Chromium

In V8 in Google Chrome prior to 91.0.4472.77, out-of-bounds reads allowed a remote attacker to potentially exploit stack corruption via a crafted HTML page...

Astra Linux - vulnerability in htmldoc

Null pointer dereferencing in htmldoc v1.9.11 and earlier may allow attackers to execute arbitrary code and cause a denial of service via a specially crafted html file...

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in the File System API of Google Chrome on Windows prior to version 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions through a crafted HTML page...

Astra Linux – vulnerability in Chromium

An improper implementation in DevTools within Google Chrome prior to version 88.0.4324.96 allowed a remote attacker to retrieve potentially sensitive information from the disk via a specially crafted HTML page...

Astra Linux – Vulnerability in Chromium

A heap buffer overflow in ANGLE in Google Chrome on Windows, prior to version 90.0.4430.93, allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...

Astra Linux – Vulnerability in Chromium

Before version 88.0.4324.96, using Blink with a "after free" mechanism allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...

Astra Linux – vulnerability in Chromium

Prior to version 87.0.4280.141, using “After Free” in drag-and-drop functionality within Google Chrome on Linux allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape by using a specially crafted HTML page...

Astra Linux – Vulnerability in Chromium

Before version 91.0.4472.164, using "after free" in WebSerial with Google Chrome allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...

Astra Linux – vulnerability in Chromium

Insufficient policy enforcement in AppCache within Google Chrome prior to version 89.0.4389.72 allowed a remote attacker to extract potentially sensitive information from process memory via a specially crafted HTML page...

Astra Linux – Vulnerability in WebKit2GTK

A memory management issue related to “use after free” operations has been addressed through improved memory management practices. This issue is fixed in Safari 16.4.1, iOS 15.7.5, and iPadOS 15.7.5; iOS 16.4.1, and iPadOS 16.4.1; as well as macOS Ventura 13.3.1. Processing maliciously crafted web...

Astra Linux – vulnerability in webkit2gtk

A memory corruption issue has been addressed through improved validation. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5, and Safari 15.6. Processing maliciously crafted web content may result in arbitrary code execution...