webkitgtk: Use-after-free leading to arbitrary code execution

A use-after-free vulnerability was found in WebKitGTK. The flaw occurs when processing maliciously crafted HTML content in WebKit. This flaw allows a remote attacker to trick the victim into visiting a specially crafted website, triggering memory corruption and executing arbitrary code on the...

Mozilla Firefox Buffer Overflow Vulnerability (CNVD-2023-17324)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A remote code execution vulnerability exists in versions prior to Mozilla Firefox 103, which originates from a boundary error when processing HTML content, and is exploited by an attacker to create a...

Mozilla Firefox 缓冲区错误漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from a buffer overflow vulnerability that originates from a boundary error when processing HTML content. An attacker can exploit this vulnerability to execute arbitrary code...

The vulnerability of Firefox browsers, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code.

The vulnerability of Firefox browsers relates to the issue of operations going beyond the buffer in memory when processing HTML content. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created malicious web page from a remote location...

EulerOS Virtualization 2.10.1 : python-lxml (EulerOS-SA-2022-2064)

According to the versions of the python-lxml package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - lxml is a library for processing XML and HTML in the Python language. Prior to version 4.6.5, the HTML Cleaner in lxml.html...

Vulnerability of Firefox web browsers, Firefox ESR, and Thunderbird email client: This vulnerability arises from allowing operations beyond the buffer in memory, enabling attackers to execute arbitrary code or cause service interruptions.

The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird is related to the issue of operations going beyond the buffer in memory when processing HTML content. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failur...

Apple tvOS 缓冲区错误漏洞

Apple tvOS is a smart TV operating system from Apple, Inc. A buffer error vulnerability exists in tvOS versions 15.0 19J346 - 15.4.1 19L452, which stems from a boundary error when processing HTML content in WebKit. A remote attacker could exploit this vulnerability to execute arbitrary code on th...

Mozilla Firefox 缓冲区错误漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from a buffer overflow vulnerability that originates from a boundary error when processing HTML content. An attacker could exploit the vulnerability by creating a specially...

Mozilla Firefox 缓冲区错误漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from a buffer error vulnerability that originates from a boundary error when processing HTML content. A remote attacker could exploit the vulnerability to create a specially...

The vulnerability in the Firefox ESR web browser and Thunderbird email client involves a memory leak during the processing of HTML content after the termination of the VR process. This allows an attacker to execute arbitrary code.

Firefox ESR web browser and Thunderbird email client have a vulnerability where memory release occurs during the processing of HTML content after the VR process is terminated. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

The vulnerability of the user interface of the WebUI on Google Chrome and Microsoft Edge browsers allows a hacker to execute arbitrary code.

The vulnerability of the WebUI user interface of Google Chrome and Microsoft Edge is related to the overflow of buffers in the dynamic memory during the processing of HTML content. Exploiting this vulnerability allows a remote attacker to execute arbitrary code through a specially created web pag...

Mozilla Firefox 缓冲区错误漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A buffer error vulnerability exists in Mozilla Firefox versions 92.0 through 98.0.2, which arises from a boundary error when the application processes HTML content. A remote attacker can create a...

The vulnerability of the GPU Process browser processes in Microsoft Edge and Google Chrome allows attackers to execute arbitrary code or cause service interruptions.

The vulnerability of the GPU Process browser engines in Microsoft Edge and Google Chrome is related to buffer overflows during the processing of HTML content. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure by using a specially created...

CKEditor 4.x < 4.18.0 Multiple Vulnerabilities - Windows

CKEditor is prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CKEditor 4.x < 4.18.0 Multiple Vulnerabilities - Linux

CKEditor is prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Huawei EulerOS: Security Advisory for python-lxml (EulerOS-SA-2022-1336)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cross-site Scripting in CKEditor4

Affected packages The vulnerability has been discovered in the core HTML processing module and may affect all plugins used by CKEditor 4. Impact A potential vulnerability has been discovered in CKEditor 4 HTML processing core module. The vulnerability allowed to inject malformed HTML bypassing...

GHSA-4FC4-4P5G-6W89 Cross-site Scripting in CKEditor4

Affected packages The vulnerability has been discovered in the core HTML processing module and may affect all plugins used by CKEditor 4. Impact A potential vulnerability has been discovered in CKEditor 4 HTML processing core module. The vulnerability allowed to inject malformed HTML bypassing...

CVE-2022-24728

CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A vulnerability has been discovered in the core HTML processing module and may affect all plugins used by CKEditor 4 prior to version 4.18.0. The vulnerability allows someone to inject malformed HTML bypassing content...

Hardcoded credentials

CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A vulnerability has been discovered in the core HTML processing module and may affect all plugins used by CKEditor 4 prior to version 4.18.0. The vulnerability allows someone to inject malformed HTML bypassing content...