Lucene search
+L

7412 matches found

Mageia
Mageia
added 2023/05/21 8:42 a.m.59 views

Updated webkit2 packages fix security vulnerability

HTML document may be able to render iframes with sensitive user information CVE-2022-0108 maliciously crafted web content may lead to arbitrary code execution. CVE-2022-32885 use-after-free vulnerability exists in WebCore::RenderLayer. This issue allows remote attackers to execute arbitrary code ...

8.8CVSS8.4AI score0.27076EPSS
SaveExploits1References3
OSV
OSV
added 2023/05/21 8:42 a.m.10 views

MGASA-2023-0177 Updated webkit2 packages fix security vulnerability

HTML document may be able to render iframes with sensitive user information CVE-2022-0108 maliciously crafted web content may lead to arbitrary code execution. CVE-2022-32885 use-after-free vulnerability exists in WebCore::RenderLayer. This issue allows remote attackers to execute arbitrary code ...

8.8CVSS7.9AI score0.27076EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
added 2023/05/16 8:54 a.m.44 views

Important: Red Hat Security Advisory: webkit2gtk3 security and bug fix update

An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

8.8CVSS7.7AI score0.34574EPSS
SaveExploits2References26
RedHat Linux
RedHat Linux
added 2023/05/16 8:54 a.m.16 views

webkitgtk: Same Origin Policy bypass issue

A logic issue was found in WebKitGTK and WPE WebKit. This flaw allows a remote attacker to process unexpected cross-origin attacks...

5.5CVSS5.8AI score0.00197EPSS
SaveExploits0References5
OSV
OSV
added 2023/05/16 12:0 a.m.35 views

ALSA-2023:2834 Important: webkit2gtk3 security and bug fix update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: webkitgtk: use-after-free issue leading to arbitrary code execution CVE-2022-42826 webkitgtk: memory corruption issue leading to arbitrary code execution CVE-2023-23517 webkitgtk: memory...

8.8CVSS9AI score0.34574EPSS
SaveExploits2References46
Tenable Nessus
Tenable Nessus
added 2023/05/16 12:0 a.m.32 views

RHEL 8 : webkit2gtk3 (RHSA-2023:2834)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:2834 advisory. WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: webkitgtk: use-after-free issue leadi...

8.8CVSS8.5AI score0.34574EPSS
SaveExploits2References50
OpenVAS
OpenVAS
added 2023/05/15 12:0 a.m.36 views

Debian: Security Advisory (DLA-3419-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.9AI score0.27076EPSS
SaveExploits1References6
Tenable Nessus
Tenable Nessus
added 2023/05/15 12:0 a.m.39 views

Oracle Linux 9 : webkit2gtk3 (ELSA-2023-2256)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-2256 advisory. 2.38.5-1 - Update to 2.38.5 Related: 2127467 2.38.4-1 - Update to 2.38.4 Related: 2127467 2.38.3-1 - Update to 2.38.3 Related: 2127467 2.38.2-1 - Updat...

8.8CVSS7.1AI score0.34574EPSS
SaveExploits2References23
Tenable Nessus
Tenable Nessus
added 2023/05/14 12:0 a.m.48 views

Debian dla-3419 : gir1.2-javascriptcoregtk-4.0 - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3419 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3419-1 [email protected]...

8.8CVSS8.4AI score0.27076EPSS
SaveExploits1References12
Tenable Nessus
Tenable Nessus
added 2023/05/14 12:0 a.m.40 views

AlmaLinux 9 : webkit2gtk3 (ALSA-2023:2256)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2023:2256 advisory. - A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Safari 16, iOS 16, iOS 15.7 and iPadOS 15.7. Processing...

8.8CVSS7.9AI score0.34574EPSS
SaveExploits2References23
Debian
Debian
added 2023/05/12 9:29 a.m.43 views

[SECURITY] [DLA 3419-1] webkit2gtk security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3419-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort May 12, 2023 https://wiki.debian.org/LTS -...

8.8CVSS9AI score0.27076EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2023/05/12 12:0 a.m.33 views

RHEL 9 : webkit2gtk3 (RHSA-2023:2256)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:2256 advisory. WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: webkitgtk: use-after-free issue leadi...

8.8CVSS8.5AI score0.34574EPSS
SaveExploits2References49
RedHat Linux
RedHat Linux
added 2023/05/09 9:52 a.m.7 views

webkitgtk: Same Origin Policy bypass issue

A logic issue was found in WebKitGTK and WPE WebKit. This flaw allows a remote attacker to process unexpected cross-origin attacks...

5.5CVSS5.8AI score0.00197EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2023/05/09 9:52 a.m.38 views

Important: Red Hat Security Advisory: webkit2gtk3 security and bug fix update

An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

8.8CVSS7.7AI score0.34574EPSS
SaveExploits2References25
OSV
OSV
added 2023/05/09 12:0 a.m.33 views

ALSA-2023:2256 Important: webkit2gtk3 security and bug fix update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: webkitgtk: use-after-free issue leading to arbitrary code execution CVE-2022-42826 webkitgtk: memory corruption issue leading to arbitrary code execution CVE-2023-23517 webkitgtk: memory...

8.8CVSS9AI score0.34574EPSS
SaveExploits2References46
NVD
NVD
added 2023/05/08 8:15 p.m.24 views

CVE-2023-27932

This issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, tvOS 16.4, watchOS 9.4. Processing maliciously crafted web content may bypass Same Origin Policy...

5.5CVSS6AI score0.00202EPSS
SaveExploits0References5
OSV
OSV
added 2023/05/08 8:15 p.m.10 views

CVE-2023-27932

This issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, tvOS 16.4, watchOS 9.4. Processing maliciously crafted web content may bypass Same Origin Policy...

5.5CVSS7.6AI score
SaveExploits0References5
OSV
OSV
added 2023/05/08 8:15 p.m.4 views

DEBIAN-CVE-2023-27932

This issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, tvOS 16.4, watchOS 9.4. Processing maliciously crafted web content may bypass Same Origin Policy...

5.5CVSS6.5AI score0.00202EPSS
SaveExploits0References1
Prion
Prion
added 2023/05/08 8:15 p.m.29 views

Design/Logic Flaw

This issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, tvOS 16.4, watchOS 9.4. Processing maliciously crafted web content may bypass Same Origin Policy...

1.9CVSS5.7AI score0.00202EPSS
SaveExploits0References5Affected Software7
Cvelist
Cvelist
added 2023/05/08 12:0 a.m.30 views

CVE-2023-27932

This issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, tvOS 16.4, watchOS 9.4. Processing maliciously crafted web content may bypass Same Origin Policy...

6.1AI score0.00202EPSS
SaveExploits0References5
Rows per page
Query Builder