Lucene search
+L

2892 matches found

Tenable Nessus
Tenable Nessus
added 2026/01/24 12:0 a.m.13 views

SUSE SLES16 Security Update : webkit2gtk3 (SUSE-SU-2026:20102-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:20102-1 advisory. Update to version 2.50.4. Security issues fixed: - CVE-2025-13502: processing of maliciously crafted payloads by the GLib remote...

9.8CVSS7.5AI score0.32483EPSS
SaveExploits15References91
AstraLinux
AstraLinux
added 2026/01/13 2:1 p.m.7 views

Astra Linux – Vulnerability in Chromium

In Google Chrome versions prior to 142.0.7444.59, policy bypass in Extensions allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data through a crafted Chrome Extension. Chromium security severity: Low...

6.5CVSS5.4AI score0.00139EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.7 views

PT-2026-25848

Name of the Vulnerable Software and Affected Versions Glances versions prior to 4.5.2 Description Glances, a cross-platform system monitoring tool, has a configuration issue in its REST API web server. The default CORS Cross-Origin Resource Sharing configuration sets allow origins to '' and allow...

8.1CVSS5.6AI score0.00339EPSS
SaveExploits1References25
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.5 views

PT-2026-7643

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 145.0.7632.45 Description An issue existed in the Animation rendering within Google Chrome, specifically related to an inappropriate implementation. This could allow a remote attacker to leak cross-origin data...

7.8CVSS5.5AI score0.00199EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.3 views

PT-2026-26524

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 146.0.7680.153 Description An integer overflow in the Dawn renderer within Google Chrome on Mac systems could allow a remote attacker to leak cross-origin data. This is achieved through a crafted HTML page...

8.8CVSS6.2AI score0.00415EPSS
SaveExploits1References40
Tenable Nessus
Tenable Nessus
added 2025/12/22 12:0 a.m.5 views

RHEL 8 : webkit2gtk3 (RHSA-2025:23743)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:23743 advisory. WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: webkit: WebKitGTK / WPE WebKit:...

8.8CVSS7.4AI score0.01378EPSS
SaveExploits0References32
RedHat Linux
RedHat Linux
added 2025/12/17 6:13 a.m.12 views

Important: Red Hat Security Advisory: webkit2gtk3 security update

An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common...

8.8CVSS7.1AI score0.01378EPSS
SaveExploits0References16
RedHat Linux
RedHat Linux
added 2025/12/17 4:58 a.m.10 views

Important: Red Hat Security Advisory: webkit2gtk3 security update

An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

8.8CVSS7.1AI score0.01378EPSS
SaveExploits0References16
RedHat Linux
RedHat Linux
added 2025/12/17 4:58 a.m.7 views

webkitgtk: A website may exfiltrate image data cross-origin

A flaw was found in WebKitGTK. A malicious website may exfiltrate image data cross-origin due to improper handling of caches...

4.3CVSS5.7AI score0.00456EPSS
SaveExploits0References5
Rockylinux
Rockylinux
added 2025/12/09 9:3 a.m.8 views

webkit2gtk3 security update

An update is available for webkit2gtk3. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list WebKitGTK is the port of the portable web rendering engine WebKit to the...

8.8CVSS6.5AI score0.01378EPSS
SaveExploits0
Rockylinux
Rockylinux
added 2025/12/09 9:2 a.m.15 views

webkit2gtk3 security update

An update is available for webkit2gtk3. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list WebKitGTK is the port of the portable web rendering engine WebKit to the...

8.8CVSS6.5AI score0.01378EPSS
SaveExploits0
RedHat Linux
RedHat Linux
added 2025/12/08 1:55 a.m.5 views

Important: Red Hat Security Advisory: webkit2gtk3 security update

An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

8.8CVSS7.1AI score0.01378EPSS
SaveExploits0References16
SUSE CVE
SUSE CVE
added 2025/11/25 12:25 a.m.11 views

SUSE CVE-2025-43480

The issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. A malicious website may exfiltrate data cross-origin...

6.5CVSS6.9AI score0.00448EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
added 2025/11/20 12:0 a.m.5 views

TencentOS Server 4: webkitgtk (TSSA-2025:0397)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0397 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

10CVSS7.7AI score0.0424EPSS
SaveExploits4References17
Tenable Nessus
Tenable Nessus
added 2025/11/20 12:0 a.m.5 views

Google Chrome < 140.0.7339.207 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 140.0.7339.207. It is, therefore, affected by multiple vulnerabilities as referenced in the 202509stable-channel-update-for-desktop23 advisory. - Integer overflow in V8 in Google Chrome prior to 140.0.7339.207 allowed a...

9.1CVSS7.4AI score0.06608EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2025/11/18 12:0 a.m.5 views

Mozilla Thunderbird < 60.4

The version of Thunderbird installed on the remote Windows host is prior to 60.4. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2018-31 advisory. - A potential vulnerability leading to an integer overflow can occur during buffer size calculations for images when ...

9.8CVSS8AI score0.09646EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2025/11/13 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2025-12909

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient policy enforcement in Devtools in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to leak cross-origin data via Devtools. Chromium...

5.3CVSS6.2AI score0.00191EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2025/11/12 10:27 a.m.5 views

CVE-2025-12909

Insufficient policy enforcement in Devtools in Google Chrome allowed a remote attacker to leak cross-origin data via Devtools...

5.3CVSS6.4AI score0.00191EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/11/10 9:30 p.m.7 views

EUVD-2025-50791

Policy bypass in Extensions in Google Chrome prior to 142.0.7444.59 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension. Chromium security severity: Low...

5.4AI score0.00139EPSS
SaveExploits0References3
NVD
NVD
added 2025/11/10 8:15 p.m.7 views

CVE-2025-12445

Policy bypass in Extensions in Google Chrome prior to 142.0.7444.59 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension. Chromium security severity: Low...

6.5CVSS0.00139EPSS
SaveExploits0References2
Rows per page
Query Builder