Lucene search
+L

52 matches found

RedHat Linux
RedHat Linux
added 2020/11/04 1:21 a.m.11 views

webkitgtk: Violation of iframe sandboxing policy

This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in Safari 13.0.1, iOS 13. Maliciously crafted web content may violate iframe sandboxing policy...

6.1CVSS6.7AI score0.00995EPSS
SaveExploits0References5
Prion
Prion
added 2020/10/27 8:15 p.m.21 views

Code injection

This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in Safari 13.0.1, iOS 13. Maliciously crafted web content may violate iframe sandboxing policy...

4.3CVSS6.6AI score0.00995EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist
added 2020/10/06 5:35 p.m.47 views

CVE-2020-15174 Unpreventable top-level navigation in Electron

In Electron before versions 11.0.0-beta.1, 10.0.1, 9.3.0 or 8.5.1 the will-navigate event that apps use to prevent navigations to unexpected destinations as per our security recommendations can be bypassed when a sub-frame performs a top-frame navigation across sites. The issue is patched in...

7.5CVSS7.4AI score0.01351EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2020/09/07 6:19 p.m.39 views

CVE-2019-8771

This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in Safari 13.0.1, iOS 13. Maliciously crafted web content may violate iframe sandboxing policy...

6.1CVSS2.5AI score0.00995EPSS
SaveExploits0References4
Apple
Apple
added 2020/07/28 5:32 a.m.64 views

About the security content of Safari 13.0.1 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

8.8CVSS0.5AI score0.06927EPSS
SaveExploits3Affected Software3
OPENSUSE Linux
OPENSUSE Linux
added 2019/11/30 12:00 a.m.156 views

Security update for webkit2gtk3 (important)

openSUSE Security Update: Security update for webkit2gtk3 Announcement ID: openSUSE-SU-2019:2591-1 Rating: important References: 1155321 1156318 Cross-References: CVE-2019-8551 CVE-2019-8558 CVE-2019-8559 CVE-2019-8563 CVE-2019-8625 CVE-2019-8674 CVE-2019-8681 CVE-2019-8684 CVE-2019-8686...

9.3CVSS6.6AI score0.12852EPSS
SaveExploits15References2
OPENSUSE Linux
OPENSUSE Linux
added 2019/11/30 12:00 a.m.156 views

Security update for webkit2gtk3 (important)

openSUSE Security Update: Security update for webkit2gtk3 Announcement ID: openSUSE-SU-2019:2587-1 Rating: important References: 1155321 1156318 Cross-References: CVE-2019-8551 CVE-2019-8558 CVE-2019-8559 CVE-2019-8563 CVE-2019-8625 CVE-2019-8674 CVE-2019-8681 CVE-2019-8684 CVE-2019-8686...

9.3CVSS6.6AI score0.12852EPSS
SaveExploits15References2
Tenable Nessus
Tenable Nessus
added 2019/11/26 12:00 a.m.54 views

SUSE SLED15 / SLES15 Security Update : webkit2gtk3 (SUSE-SU-2019:3044-1)

This update for webkit2gtk3 to version 2.26.2 fixes the following issues : Webkit2gtk3 was updated to version 2.26.2 WSA-2019-0005 and WSA-2019-0006, bsc1155321 bsc1156318 Security issues addressed : CVE-2019-8625: Fixed a logic issue where by processing maliciously crafted web content may lead t...

9.3CVSS6.5AI score0.12852EPSS
SaveExploits15References87
OSV
OSV
added 2019/11/14 4:58 p.m.16 views

MGASA-2019-0324 Updated webkit2 packages fix security vulnerabilities

Updated webkit2 packages fix security vulnerabilities: Processing maliciously crafted web content may lead to universal cross site scripting CVE-2019-8625, CVE-2019-8674, CVE-2019-8719, CVE-2019-8813 Processing maliciously crafted web content may lead to arbitrary code execution CVE-2019-8707,...

9.3CVSS6.6AI score0.09543EPSS
SaveExploits6References8
Tenable Nessus
Tenable Nessus
added 2019/11/06 12:00 a.m.61 views

Debian DSA-4558-1 : webkit2gtk - security update

Several vulnerabilities have been discovered in the webkit2gtk web engine : - CVE-2019-8625 Sergei Glazunov discovered that maliciously crafted web content may lead to universal cross site scripting. - CVE-2019-8720 Wen Xu discovered that maliciously crafted web content may lead to arbitrary code...

8.8CVSS6.5AI score0.01543EPSS
SaveExploits0References11
CNVD
CNVD
added 2019/11/06 12:00 a.m.12 views

Unspecified Vulnerability in Apple iOS WebKit Component

Apple iOS is an operating system developed by Apple for mobile devices, of which WebKit is a component of the Web browser engine. A security vulnerability exists in the WebKit component in versions of Apple iOS prior to 13, which can be exploited by attackers to violate iframe sandboxing policies...

6.1CVSS8.5AI score0.00995EPSS
SaveExploits0References1
Debian
Debian
added 2019/11/04 10:06 p.m.104 views

[SECURITY] [DSA 4558-1] webkit2gtk security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4558-1 [email protected] https://www.debian.org/security/ Alberto Garcia November 04, 2019 https://www.debian.org/security/faq -...

8.8CVSS8.5AI score0.01543EPSS
SaveExploits0
Rows per page
Query Builder