Cross-site Scripting (XSS)

jquery is vulnerable to cross-site scripting XSS. The vulnerability exists as the htmlPrefilter method intercepted html code that can cause unwanted HTML to be rendered...

Fedora 30 : webkit2gtk3 (2020-11b0f45883)

Update to WebKitGTK 2.28.1 : - Fix position of default option element popup windows under Wayland. - Fix rendering after a cross site navigation with PSON enabled and hardware acceleration forced. - Fix a crash in nested wayland compositor when closing a tab with PSON enabled. - Update Chrome and...

[SECURITY] Fedora 30 Update: webkit2gtk3-2.28.1-3.fc30

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. This package contains WebKit2 based WebKitGTK for GTK 3...

[SECURITY] Fedora 31 Update: webkit2gtk3-2.28.1-3.fc31

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. This package contains WebKit2 based WebKitGTK for GTK 3...

[SECURITY] Fedora 32 Update: webkit2gtk3-2.28.1-4.fc32

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. This package contains WebKit2 based WebKitGTK for GTK 3...

The vulnerability of the rendering module in WebKit operating systems for iOS, tvOS, the multimedia player iTunes for Windows, the browser Safari, and the iCloud for Windows service allows a hacker to execute arbitrary code.

The vulnerability of the rendering module in WebKit operating systems for iOS, tvOS, the multimedia player iTunes for Windows, the browser Safari, and the iCloud for Windows service is related to insufficient protection of the web page structure. Exploiting this vulnerability allows an attacker t...

The vulnerability of Google Chrome’s Blink rendering module allows a hacker to gain access to confidential data.

The vulnerability of Google Chrome’s Blink rendering module is related to insufficient checks on the implementation of the policy within the module. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...

The vulnerability of the WebKit rendering module, related to the execution of operations beyond the buffer boundaries in memory, allows an attacker to execute arbitrary code.

The vulnerability of the WebKit rendering module is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted web page...

Application DoS via the /rendering/wiki endpoint - CVE-2019-20418

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to prevent users from accessing the instance via an Application Denial of Service vulnerability in the /rendering/wiki endpoint. Affected versions version 8.8.0 Fixed versions 8.8.0...

Application DoS via the /rendering/wiki endpoint - CVE-2019-20418

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to prevent users from accessing the instance via an Application Denial of Service vulnerability in the /rendering/wiki endpoint. Affected versions version 8.8.0 Fixed versions 8.8.0...

The vulnerability of the WebKit rendering module, related to the execution of operations beyond the buffer boundaries in memory, allows an attacker to execute arbitrary code.

The vulnerability of the WebKit rendering module is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the rendering kernel of Google Chrome’s Blink web pages, related to improper restriction of the user interface frames that are displayed, allows attackers to compromise data integrity.

The vulnerability of the rendering kernel of Google Chrome’s Blink web pages is related to improper restrictions on the frames that are displayed in the user interface. Exploiting this vulnerability could allow a malicious actor to compromise data integrity through a specially created HTML page...

The vulnerability of the WebKit rendering module, related to uncontrolled resource consumption, allows attackers to execute arbitrary code.

The vulnerability of the WebKit rendering module is related to an uncontrolled resource consumption. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the WebKit rendering module, related to the execution of operations beyond the buffer boundaries in memory, allows an attacker to execute arbitrary code.

The vulnerability of the WebKit rendering module is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the WebKit rendering module, related to type conversion errors, allows attackers to execute arbitrary code.

The vulnerability of the WebKit rendering module is related to a type conversion error. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

The vulnerability of the WebKit rendering module, related to the use of memory after it is freed, allows a hacker to execute arbitrary code.

The vulnerability of the WebKit rendering module is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

The vulnerability of the WebKit rendering module, related to type conversion errors, allows attackers to execute arbitrary code.

The vulnerability of the WebKit rendering module is related to a type conversion error. Exploiting this vulnerability allows an attacker to execute arbitrary code by opening a specially crafted malicious file or web page...

The vulnerability of Google Chrome’s Blink rendering module relates to improper access control to critical resources, allowing attackers to compromise data integrity.

The vulnerability of Google Chrome’s Blink rendering module is related to improper control of access to critical resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise data integrity through a specially created HTML page...

The vulnerability of Google Chrome’s Blink rendering module allows a hacker to compromise data integrity.

The vulnerability of Google Chrome’s Blink rendering module is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially crafted HTML page...

Cross-site Scripting (XSS)

svg2png is vulnerable to cross-site scripting XSS. The attack exists because it renders XML snippet using phantomjs directly into an image without sanitizing it, allowing an attacker to inject arbitrary script inside SVG document...