40 matches found
CVE-2025-50738
The Memos application, up to version v0.24.3, allows for the embedding of markdown images with arbitrary URLs. When a user views a memo containing such an image, their browser automatically fetches the image URL without explicit user consent or interaction beyond viewing the memo. This can be...
CVE-1999-0095
creationtimestamp| type| source ---|---|--- 2025-07-26 20:42:56+00:00| seen| https://gist.github.com/DEEPML1818/fef33d765177026df668a4476d4fe698 2025-07-26 20:48:36+00:00| seen| https://gist.github.com/DEEPML1818/8672f137125674c3936651ee63417e61 2026-02-13 03:35:30+00:00| seen|...
CVE-2025-46686
creationtimestamp| type| source ---|---|--- 2025-07-23 18:33:18+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114903980298033862 2025-07-23 21:12:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lunwoinpsi2j...
CVE-2025-7487
creationtimestamp| type| source ---|---|--- 2025-07-12 19:49:06+00:00| seen| https://bsky.app/profile/potato.software/post/3lts4w2tptd2b...
CVE-2025-46549
creationtimestamp| type| source ---|---|--- 2025-04-28 16:52:26+00:00| published-proof-of-concept| https://github.com/YesWiki/yeswiki/security/advisories/GHSA-r9gv-qffm-xw6f 2025-04-28 16:52:26+00:00| published-proof-of-concept|...
CVE-2025-3421
creationtimestamp| type| source ---|---|--- 2025-04-11 15:37:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmkdyc2kc42a 2025-04-11 16:27:15+00:00| seen| https://t.me/cvedetector/22748...
CVE-2025-22231
creationtimestamp| type| source ---|---|--- 2025-04-01 14:00:26+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114263066271453967 2025-04-01 14:00:26+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114263066271453967 2025-04-01 16:32:33+00:00| seen|...
Linux Distros Unpatched Vulnerability : CVE-2023-38599
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A logic issue was addressed with improved state management. This issue is fixed in Safari 16.6, watchOS 9.6, iOS 15.7.8 and iPadOS 15.7.8, tvOS 16.6, iOS 16.6 a...
CVE-2024-43430
creationtimestamp| type| source ---|---|--- 2024-11-11 12:29:59+00:00| seen| https://infosec.exchange/users/cve/statuses/113464324851825948 2024-11-11 12:33:05+00:00| seen| https://infosec.exchange/users/cve/statuses/113464337042501312 2024-11-11 15:15:56+00:00| seen| https://t.me/cvedetector/104...
CVE-2024-52351
creationtimestamp| type| source ---|---|--- 2024-11-11 06:48:40+00:00| seen| https://infosec.exchange/users/cve/statuses/113462982732953651 2024-11-11 09:24:44+00:00| seen| https://t.me/cvedetector/10475...
openSUSE: Security Advisory for webkit2gtk3 (SUSE-SU-2023:3233-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE: Security Advisory for webkit2gtk3 (SUSE-SU-2023:3419-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle Linux 9 : webkit2gtk3 (ELSA-2023-6535)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-6535 advisory. 2.40.5-1 - Update to 2.40.5 Related: 2176270 2.40.4-1 - Update to 2.40.4 Related: 2176270 2.40.3-2 - Disable JIT Related: 2176270 2.40.3-1 - Update to...
RHEL 8 : webkit2gtk3 (RHSA-2023:7055)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7055 advisory. WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: webkitgtk: arbitrary code execution...
RHEL 9 : webkit2gtk3 (RHSA-2023:6535)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:6535 advisory. WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: webkitgtk: arbitrary code execution...
SUSE-SU-2023:3419-1 Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Update to version 2.40.5 bsc1213905: - CVE-2023-38133: Fixed information disclosure. - CVE-2023-38572: Fixed Same-Origin-Policy bypass. - CVE-2023-38592: Fixed arbitrary code execution. - CVE-2023-38594: Fixed arbitrary code execution. -...
SUSE: Security Advisory (SUSE-SU-2023:3237-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE-SU-2023:3237-1 Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Update to version 2.40.5 bsc1213905: - CVE-2023-38133: Fixed information disclosure. - CVE-2023-38572: Fixed Same-Origin-Policy bypass. - CVE-2023-38592: Fixed arbitrary code execution. - CVE-2023-38594: Fixed arbitrary code execution. -...
CVE-2023-38599
A logic issue was addressed with improved state management. This issue is fixed in Safari 16.6, watchOS 9.6, iOS 15.7.8 and iPadOS 15.7.8, tvOS 16.6, iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. A website may be able to track sensitive user information...
CVE-2023-38599
A logic issue was addressed with improved state management. This issue is fixed in Safari 16.6, watchOS 9.6, iOS 15.7.8 and iPadOS 15.7.8, tvOS 16.6, iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. A website may be able to track sensitive user information...