Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully...

Microsoft Browser Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the...

CVE-2019-9633

gio/gsocketclient.c in GNOME GLib 2.59.2 does not ensure that a parent GTask remains alive during the execution of a connection-attempting enumeration, which allows remote attackers to cause a denial of service gsocketclientconnectedcallback mishandling and application crash via a crafted web sit...

GNOME GLib Denial of Service Vulnerability (CNVD-2019-13265)

GNOME Glib is a multi-platform toolkit for creating graphical user interfaces, and is the underlying core library that underlies GTK+ and GNOME projects. A security vulnerability exists in the gio/gsocketclient.c file in GNOME GLib version 2.59.2. An attacker can exploit this vulnerability to cau...

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser, related to errors in processing service data, allows attackers to compromise the confidentiality of protected information.

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is related to errors in processing service data. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality of protected information through a specially crafted website...

USN-3868-1 thunderbird vulnerabilities

Multiple security issues were discovered in Thunderbird. If a user were tricked in to opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, bypass same-origin restrictions, or execute arbitrary code...

Unspecified Vulnerability in Google Chrome DevTools

Google Chrome is the United States Google Google company developed a Web browser. Devtools is one of the development and debugging tools. A security vulnerability exists in DevTools in Google Chrome. The vulnerability can be exploited by remote attackers with the help of a specially crafted websi...

Google Chromium Security Bypass Vulnerability

Google Chromium is a web browser developed by the American company Google Google. A security vulnerability exists in Google Chromium versions prior to 69.0.3497.81. The vulnerability can be exploited by an attacker to bypass security restrictions and gain unauthorized access to the system by...

Google Chromium Information Disclosure Vulnerability

Google Chromium is a web browser developed by the American company Google Google. A security vulnerability exists in Google Chromium versions prior to 69.0.3497.81. The vulnerability can be exploited by an attacker to bypass download restrictions by tricking users into visiting a specially crafte...

CVE-2018-1000815

Brave Software Inc. Brave version version 0.22.810 to 0.24.0 contains a Other/Unknown vulnerability in function ContentSettingsObserver::AllowScript in contentsettingsobserver.cc that can result in Websites can run inline JavaScript even if script is blocked, making attackers easier to track user...

CVE-2018-1000815

Brave Software Inc. Brave version version 0.22.810 to 0.24.0 contains a Other/Unknown vulnerability in function ContentSettingsObserver::AllowScript in contentsettingsobserver.cc that can result in Websites can run inline JavaScript even if script is blocked, making attackers easier to track user...

CVE-2018-1000815

Brave Software Inc. Brave version version 0.22.810 to 0.24.0 contains a Other/Unknown vulnerability in function ContentSettingsObserver::AllowScript in contentsettingsobserver.cc that can result in Websites can run inline JavaScript even if script is blocked, making attackers easier to track user...

CVE-2018-20306

A stored cross-site scripting XSS vulnerability in the web administration user interface of Pulse Secure Virtual Traffic Manager may allow a remote authenticated attacker to inject web script or HTML via a crafted website and steal sensitive data and credentials. Affected releases are Pulse Secur...

CVE-2018-20306

A stored cross-site scripting XSS vulnerability in the web administration user interface of Pulse Secure Virtual Traffic Manager may allow a remote authenticated attacker to inject web script or HTML via a crafted website and steal sensitive data and credentials. Affected releases are Pulse Secur...

Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully...

Address bar spoofing vulnerability in multiple Apple products (CNVD-2018-24789)

Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with the Mac OS X and iOS operating systems. iTunes for Windows is a Windows-based media player and application. iTunes for Windows is one of the components of the Safari...

Logic Flaw Vulnerability in Multiple Apple Products

Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with the Mac OS X and iOS operating systems. iTunes for Windows is a Windows-based media player and application. iTunes for Windows is one of the components of the Safari...

Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully...

webkitgtk: memory corruption processing maliciously crafted web content

An issue was discovered in certain Apple products. iOS before 11.4 is affected. iOS before 11.3.1 is affected. Safari before 11.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. The issue involves the "WebKit"...

Microsoft Windows MS XML Remote Code Execution Vulnerability

Microsoft Windows Server 2016 and so on are a series of operating systems released by Microsoft USA.XML Core Services MSXML parser is one of the XML parsers. A remote code execution vulnerability exists in Microsoft XML Core Services MSXML parser. A remote attacker can exploit this vulnerability ...