89 matches found
The vulnerability of the WPE WebKit web page rendering module, related to copying buffers without checking input data, allows attackers to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the WPE WebKit web page rendering module is related to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...
CVE-2022-2316
HTML injection vulnerability in secure messages of Devolutions Server before 2022.2 allows attackers to alter the rendering of the page or redirect a user to another site...
CVE-2022-2316
HTML injection vulnerability in secure messages of Devolutions Server before 2022.2 allows attackers to alter the rendering of the page or redirect a user to another site...
The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit, related to insufficient validation of input data, allows attackers to execute arbitrary code or cause service failures.
The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause service failures...
The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit, related to the use of memory after it is freed, allows attackers to execute arbitrary code or cause service interruptions.
The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code or cause a service failure...
The vulnerability of the AME Page rendering component of the Oracle Approvals Management component within the Oracle E-Business Suite system, which allows a perpetrator to gain access to read, modify, add, or delete data.
The vulnerability in the AME Page rendering of the Oracle Approvals Management component of the Oracle E-Business Suite exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to gain access to read, modify, add, or delete data through HTTP...
The vulnerability of the Web page rendering module in Safari’s WebKit browser allows a hacker to execute arbitrary code.
The vulnerability of the Web page rendering module in Safari’s WebKit browser relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
The vulnerability of the web page rendering modules in WebKitGTK and WPE for Apple operating systems such as iPadOS, watchOS, iOS, tvOS, as well as in browsers like Safari, multimedia player iTunes, and iCloud service for Windows operating systems, allows a perpetrator to execute arbitrary code on the target system.
The vulnerability of the web page rendering modules in WebKitGTK and WPE for Apple’s iPadOS, watchOS, iOS, tvOS, Safari browser, multimedia player iTunes, and iCloud service for Windows operating systems is related to writing beyond the buffer limit in memory. Exploiting this vulnerability could...
The vulnerability of WebKitGTK and WPE WebKit’s display modules, related to memory management after memory is freed, allows attackers to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of Web page rendering modules in WebKitGTK and WPE WebKit relates to the use of memory after it is released. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures due to malicious web content...
CVE-2021-3983
kimai2 is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2021-2360
Vulnerability in the Oracle Approvals Management product of Oracle E-Business Suite component: AME Page rendering. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Approvals...
The vulnerability of the web page rendering module in the WebKitGTK+ operating system for iOS, related to the use after release, allows a hacker to execute arbitrary code.
The vulnerability of the Web page rendering module in the WebKitGTK+ operating system for iOS is related to its use after release. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted web page...
The vulnerability of the web page rendering module in WebKitGTK of Apple MacOS operating systems, related to incorrect handling of logical operations, allows an attacker to execute arbitrary code.
The vulnerability of the web page rendering module in WebKitGTK on Apple MacOS operating systems is related to incorrect handling of logical operations. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created malicious web page...
Microsoft SharePoint Server Information Disclosure Vulnerability (CNVD-2020-63720)
Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A security...
Input validation
Contao before 4.4.52, 4.9.x before 4.9.6, and 4.10.x before 4.10.1 have Improper Input Validation. It is possible to inject insert tags in front end forms which will be replaced when the page is rendered...
The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit allows a hacker to execute arbitrary code.
The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted web page or file...
Erroneous Stylesheet Caching
SeaMonkey is vulnerable to erroneous stylesheet caching. The CSSLoaderImpl::DoSheetComplete function in layout/style/nsCSSLoader.cpp changes the case of certain strings in a stylesheet before adding this stylesheet to the XUL cache, which might allow remote attackers to modify the browser's font...
The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit, related to the use of memory after it is freed, allows attackers to execute arbitrary code.
The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
Hewlett Packard Enterprise Intelligent Management Center eventInfo_content Expression Language Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hewlett Packard Enterprise Intelligent Management Center. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw...
Insert tag injection in the Contao login module
Impact It is possible to inject insert tags into the login module which will be replaced when the page is rendered. Patches Update to Contao 4.8.6. Workarounds None. References https://contao.org/en/security-advisories/insert-tag-injection-in-the-login-module For more information If you have any...