CVE-2019-6216

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, watchOS 5.1.3, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution...

SUSE SLED12 / SLES12 Security Update : webkit2gtk3 (SUSE-SU-2019:0511-1)

This update for webkit2gtk3 to version 2.22.6 fixes the following issues : Security issues fixed : CVE-2019-6212: Fixed multiple memory corruption vulnerabilities which could allow arbitrary code execution during the processing of special crafted web-content. CVE-2019-6215: Fixed a type confusion...

HSYCMS suffers from arbitrary file download vulnerability

Hsycms is an enterprise-level web content management system, written by PHP+MYSQL, using template separation technology to support the creation of many types of sites. An arbitrary file download vulnerability exists in HSYCMS, which can be exploited by attackers to obtain sensitive file informati...

Latest Drupal RCE Flaw Used by Cryptocurrency Miners and Other Attackers

Another remote code execution vulnerability has been revealed in Drupal, the popular open-source Web content management system. One exploit — still working at time of this writing — has been used in dozens of unsuccessful attacks against our customers, with an unknown number of attacks, some like...

[ASA-201902-19] cairo: arbitrary code execution

Arch Linux Security Advisory ASA-201902-19 ========================================== Severity: Critical Date : 2019-02-17 CVE-ID : CVE-2018-19876 Package : cairo Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-826 Summary ======= The package cairo before...

USN-3889-1: WebKitGTK+ vulnerabilities

A large number of security issues were discovered in the WebKitGTK+ Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service...

UBUNTU-CVE-2019-6215

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2019-6215

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution...

Multiple Apple Products WebKit Memory Corruption Vulnerability (CNVD-2019-06881)

Apple iOS and others are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with the Mac OS X and iOS operating systems. iCloud for Windows is a cloud service based on the Windows platform. WebKit is...

WebKit memory corruption vulnerability in multiple Apple products (CNVD-2019-03295)

Apple iOS is an operating system developed for mobile devices; Safari is a web browser that comes with Mac OS X and iOS; tvOS is a smart TV operating system; WebKit is an open-source web browser engine developed by KDE, Apple, and Google, WebKit is an open source web browser engine developed by...

WebKit memory corruption vulnerability in multiple Apple products (CNVD-2019-03315)

Apple iOS and others are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with the Mac OS X and iOS operating systems. iCloud for Windows is a cloud service based on the Windows platform. WebKit is...

Multiple Apple Products WebKit Memory Corruption Vulnerability (CNVD-2019-03316)

Apple iOS and others are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with the Mac OS X and iOS operating systems. iCloud for Windows is a cloud service based on the Windows platform. WebKit is...

WebKit Type Obfuscation Vulnerability in Multiple Apple Products (CNVD-2019-03314)

Apple iOS and others are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with the Mac OS X and iOS operating systems. iCloud for Windows is a cloud service based on the Windows platform. WebKit is...

WebKit memory corruption vulnerability in multiple Apple products (CNVD-2019-03296)

Apple iOS is an operating system developed for mobile devices; Safari is a web browser that comes with Mac OS X and iOS; tvOS is a smart TV operating system; WebKit is an open-source web browser engine developed by KDE, Apple, and Google, WebKit is an open source web browser engine developed by...

Apple iOS and macOS Mojave WebRTC Memory Corruption Vulnerability

Apple iOS and macOS Mojave are both products of Apple Inc. Apple iOS is an operating system for mobile devices. macOS Mojave is a specialized operating system for Mac computers. webRTC is one of the components that enables browsers to engage in real-time voice or video conversations. . A security...

Memory Corruption Vulnerability in Multiple Apple Products (CNVD-2019-02753)

Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with Mac OS X and iOS; tvOS is a smart TV operating system; and watchOS is a smart watch operating system. iCloud for Windows is a cloud service based on the Windows...

Denial Of Services(DoS)

Mozilla Firefox is vulnerable to denial of service DoS. The vulnerability exists because it does not prevent the processing of malformed web content, causing an application crash or, potentially, execute arbitrary code with the privileges of the user running Firefox...

Denial Of Service (DoS)

Mozilla Thunderbird is vulnerable to denial of services DoS. The vulnerability is due to the flawed way of processing of malformed web content, causing a crash or arbitrary code execution with the privileges of the user running Thunderbird...

Denial Of Service (DoS)

Mozilla Thunderbird is vulnerable to denial of service. Two flaws were found in the processing of malformed web content. A web page containing malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird...

Denial Of Service (DoS)

Mozilla Firefox and Thunderbird are vulnerable to denial of service. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running...