PT-2015-1944

Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to 6.2.8 Apple Safari versions 7.x prior to 7.1.8 Apple Safari versions 8.x prior to 8.0.8 Description The issue is related to the private-browsing implementation in WebKit, which does not prevent caching of HTTP...

CVE-2015-3752

The Content Security Policy implementation in WebKit in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, as used in iOS before 8.4.1 and other products, does not properly restrict cookie transmission for report requests, which allows remote attackers to obtain sensitive...

CVE-2015-3754: Exposure of Sensitive Information to an Unauthorized Actor

The private-browsing implementation in WebKit in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8 does not prevent caching of HTTP authentication credentials, which makes it easier for remote attackers to track users via a crafted web site...

MGASA-2015-0194 Updated qtwebkit packages fix security vulnerabilities

Updated qtwebkit and qtwebkit5 packages fix security vulnerability: QtWebKit logs visited URLs to WebpageIcons.db in private browsing mode...

PT-2015-7900

Name of the Vulnerable Software and Affected Versions qtwebkit affected versions not specified qtwebkit5 affected versions not specified Description The issue concerns QtWebKit logging visited URLs to WebpageIcons.db even in private browsing mode. Recommendations For qtwebkit, update to a version...

Apple Safari Multiple Vulnerabilities -01 (Apr 2015) - Mac OS X

Apple Safari is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:safari"; ifdescription...

Fedora 20 : qt5-qtwebkit-5.4.1-4.fc20 (2015-4587)

QtWebKit logs visited URLs to Web pageIcons.db in private browsing mode. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

CVE-2015-1128

The private-browsing implementation in Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5 allows attackers to obtain sensitive browsing-history information via vectors involving push-notification requests...

Information disclosure

The private-browsing implementation in Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5 allows attackers to obtain sensitive browsing-history information via vectors involving push-notification requests...

CVE-2015-1128

The private-browsing implementation in Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5 allows attackers to obtain sensitive browsing-history information via vectors involving push-notification requests...

CVE-2015-1127

The private-browsing implementation in WebKit in Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5 places browsing history into an index, which might allow local users to obtain sensitive information by reading index entries...

CVE-2015-1127

CVE-2015-1127 affects WebKit’s private-browsing implementation. It places browsing history into an index, potentially allowing local users to read index entries and obtain sensitive information. Public fixes are present in vendor advisories: Safari updated to 6.2.5, 7.1.5, and 8.0.5; Linux distri...

CVE-2015-1128: Exposure of Sensitive Information to an Unauthorized Actor

The private-browsing implementation in Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5 allows attackers to obtain sensitive browsing-history information via vectors involving push-notification requests...

PT-2015-5111

Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to 6.2.5 Apple Safari versions 7.x prior to 7.1.5 Apple Safari versions 8.x prior to 8.0.5 Description The issue affects the private-browsing implementation in WebKit, potentially allowing local users to obtain...

PT-2015-5112

Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to 6.2.5 Apple Safari versions 7.x prior to 7.1.5 Apple Safari versions 8.x prior to 8.0.5 Description The issue affects the private-browsing implementation, allowing attackers to obtain sensitive browsing-history...

CVE-2015-1127: Exposure of Sensitive Information to an Unauthorized Actor

The private-browsing implementation in WebKit in Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5 places browsing history into an index, which might allow local users to obtain sensitive information by reading index entries...

CVE-2015-1127

The private-browsing implementation in WebKit in Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5 places browsing history into an index, which might allow local users to obtain sensitive information by reading index entries...

UBUNTU-CVE-2015-1127

The private-browsing implementation in WebKit in Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5 places browsing history into an index, which might allow local users to obtain sensitive information by reading index entries...

APPLE-SA-2015-04-08-1 Safari 8.0.5, Safari 7.1.5, and Safari 6.2.5

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2015-04-08-1 Safari 8.0.5, Safari 7.1.5, and Safari 6.2.5 Safari 8.0.5, Safari 7.1.5, and Safari 6.2.5 are now available and address the following: Safari Available for: OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.5, and OS X Yosemite...

PT-2017-7316

Name of the Vulnerable Software and Affected Versions qt5-qtwebkit versions prior to 5.4 Description The issue concerns the recording of private browsing URLs in the favicon database, WebpageIcons.db. This affects the privacy of users' browsing history. Recommendations For qt5-qtwebkit versions...