7684 matches found
The vulnerability of the web page rendering modules in WebKitGTK and WPE for iOS, iPadOS, tvOS, macOS, watchOS allows a hacker to execute arbitrary code.
The vulnerability of the web page rendering modules in WebKitGTK and WPE for iOS, iPadOS, tvOS, macOS, watchOS systems is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
CVE-2020-19952
Cross Site Scripting XSS vulnerability in Rendering Engine in jbt Markdown Editor thru commit 2252418c27dffbb35147acd8ed324822b8919477, allows remote attackers to execute arbirary code via crafted payload or opening malicious .md file...
Markdown Editor Cross-Site Scripting Vulnerability
Markdown Editor is an Electron-based Markdown text editor. A security vulnerability exists in Markdown Editor that stems from a cross-site scripting XSS vulnerability in the Rendering Engine. The vulnerability can be exploited by an attacker to execute arbitrary code by designing a payload or...
CVE-2023-39955 Notes attachment render HTML in preview mode
Notes is a note-taking app for Nextcloud, an open-source cloud platform. Starting in version 4.4.0 and prior to version 4.8.0, when creating a note file with HTML, the content is rendered in the preview instead of the file being offered to download. Nextcloud Notes app version 4.8.0 contains a...
CVE-2023-39955 Notes attachment render HTML in preview mode
Notes is a note-taking app for Nextcloud, an open-source cloud platform. Starting in version 4.4.0 and prior to version 4.8.0, when creating a note file with HTML, the content is rendered in the preview instead of the file being offered to download. Nextcloud Notes app version 4.8.0 contains a...
CVE-2023-39955 Notes attachment render HTML in preview mode
Notes is a note-taking app for Nextcloud, an open-source cloud platform. Starting in version 4.4.0 and prior to version 4.8.0, when creating a note file with HTML, the content is rendered in the preview instead of the file being offered to download. Nextcloud Notes app version 4.8.0 contains a...
@nguniversal/builders (>=16.1.0-next.0, <=16.1.1), @nguniversal/express-engine (>=16.1.0-next.0, <=16.1.1) potentially affected by unknown CVE via @nguniversal/common (>=16.1.0, <=16.1.1)
@nguniversal/common NPM version =16.1.0, =16.1.0-next.0, =16.1.0-next.0, =16.1.1 Source cves: unknown CVE Source advisory: OSV:GHSA-R3HF-Q8Q7-FV2P...
The vulnerability of the web page rendering modules in WebKitGTK and WPE for iOS, iPadOS, tvOS, macOS, watchOS, and the Safari browser allows a perpetrator to execute arbitrary code.
The vulnerability of the web page rendering modules in WebKitGTK and WPE for iOS, iPadOS, tvOS, macOS, watchOS, and the Safari browser is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Web page rendering module in the WebKit PDF operating system for macOS allows a hacker to execute arbitrary code.
The vulnerability of the Web page rendering module in the WebKit PDF operating system for macOS is related to data type conversion errors. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the Web page rendering module in the WebKit operating system of macOS allows a hacker to execute arbitrary code.
The vulnerability of the Web page rendering module in the WebKit operating system of macOS is related to an improper use after deallocation. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
webkit2gtk3 security update
An update is available for webkit2gtk3. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list WebKitGTK is the port of the portable web rendering engine WebKit to the...
Improper rendering of text nodes in golang.org/x/net/html
...
The vulnerability of the web page rendering modules in WebKitGTK and WPE for iOS, iPadOS, tvOS, macOS, watchOS, and the Safari browser allows a perpetrator to execute arbitrary code.
The vulnerability of the web page rendering modules in WebKitGTK and WPE for iOS, iPadOS, tvOS, macOS, watchOS, and the Safari browser is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the web page rendering modules in WebKitGTK+ and WPE WebKit operating systems for iOS, iPadOS, tvOS, macOS, watchOS, and the Safari browser allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of Web page rendering modules in WebKitGTK+ and WPE WebKit operating systems for iOS, iPadOS, tvOS, macOS, watchOS, and the Safari browser is related to the disclosure of information. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to...
The vulnerability of the web page rendering modules in WebKitGTK and WPE for iOS, iPadOS, tvOS, macOS, watchOS, as well as the Safari browser, allows attackers to execute arbitrary code.
The vulnerability of the web page rendering modules in WebKitGTK and WPE for iOS, iPadOS, tvOS, macOS, watchOS, and the Safari browser is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the web page rendering modules in WebKitGTK and WPE for iOS, iPadOS, macOS, watchOS, Safari browser allows a perpetrator to execute arbitrary code.
The vulnerability of the web page rendering modules in WebKitGTK and WPE for iOS, iPadOS, tvOS, macOS, watchOS, and the Safari browser is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the web page rendering modules in WebKitGTK and WPE for iOS, iPadOS, tvOS, macOS, watchOS, as well as the Safari browser, allows attackers to execute arbitrary code.
The vulnerability of the web page rendering modules in WebKitGTK and WPE for iOS, iPadOS, tvOS, macOS, watchOS, and the Safari browser is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Code Injection
gitlab is vulnerable to Code Injection. The vulnerability exists due to the improper code rendering while rendering merge requests, which allows an attacker to inject and execute malicious code...