Debian DSA-4923-1 : webkit2gtk - security update

The following vulnerabilities have been discovered in the webkit2gtk web engine : - CVE-2021-1788 Francisco Alonso discovered that processing maliciously crafted web content may lead to arbitrary code execution. - CVE-2021-1844 Clement Lecigne and Alison Huffman discovered that processing...

Google Patches Actively Exploited Flaw in Chrome Browser

Google has fixed a high-severity vulnerability in its Chrome browser and is warning Chrome users that an exploit exists in the wild for the flaw. The vulnerability is one of 47 security fixes that the tech giant rolled out on Tuesday in Chrome 89.0.4389.72, including patches for eight high-severi...

Debian DSA-4854-1 : webkit2gtk - security update

The following vulnerabilities have been discovered in the webkit2gtk web engine : - CVE-2020-13558 Marcin Noga discovered that processing maliciously crafted web content may lead to arbitrary code execution. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

Debian DSA-4797-1 : webkit2gtk - security update

The following vulnerabilities have been discovered in the webkit2gtk web engine : - CVE-2020-9948 Brendan Draper discovered that processing maliciously crafted web content may lead to arbitrary code execution. - CVE-2020-9951 Marcin Noga discovered that processing maliciously crafted web content...

USN-4347-1 webkit2gtk vulnerability

A large number of security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service...

[SECURITY] [DSA 4658-1] webkit2gtk security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4658-1 [email protected] https://www.debian.org/security/ Alberto Garcia April 16, 2020 https://www.debian.org/security/faq -...

Google Chrome V8 Improperly Implemented Vulnerability

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A V8 mal-implementation vulnerability exists in versions prior to Google Chrome 80.0.3987.149. A remote attacker can exploit this vulnerability to cause heap damage...

Twisted Input Validation Error Vulnerability (CNVD-2020-21499)

Twisted is an event-driven open source web engine written in the Python language. An input validation error vulnerability exists in Twisted version 19.10.0 and prior versions. The vulnerability stems from a network system or product that does not properly validate incoming data. No detailed...

Twisted Input Validation Error Vulnerability

Twisted is an event-driven open source web engine written in the Python language. An input validation error vulnerability exists in Twisted version 19.10.0 and earlier. The vulnerability stems from a network system or product that does not properly validate incoming data. No details of the...

webkitgtk: Multiple memory corruption issues leading to arbitrary code execution

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in watchOS 6.1. Processing maliciously crafted web content may lead to arbitrary code execution...

Debian: Security Advisory (DSA-4563-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-4558-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 4558-1] webkit2gtk security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4558-1 [email protected] https://www.debian.org/security/ Alberto Garcia November 04, 2019 https://www.debian.org/security/faq -...

Debian: Security Advisory (DSA-4515-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2019-12171

Dropbox.exe and QtWebEngineProcess.exe in the Web Helper in the Dropbox desktop application 71.4.108.0 store cleartext credentials in memory upon successful login or new account creation. These are not securely freed in the running process...

Memory Corruption Vulnerability in WebKit Component of Multiple Apple Products (CNVD-2018-02260)

Apple iOS and others are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; iCloud for Windows is a Windows-based cloud service; and iTunes for Windows is a Windows-based media player application. WebKit is one of the web browser engine components. A memory...

UBUNTU-CVE-2016-7968

KMail since version 5.3.0 used a QWebEngine based viewer that had JavaScript enabled. HTML Mail contents were not sanitized for JavaScript and included code was executed...

[SECURITY] Fedora 22 Update: webkitgtk4-2.12.3-1.fc22

WebKitGTK+ is the port of the portable web rendering engine WebKit to the GTK+ platform. This package contains WebKitGTK+ for GTK+ 3...

dagger web engine <= 23jan2007 - Remote File Inclusion Vulnerability

No description provided by source. Dagger-web enginecal.func.phpRemote File Inclusion download: http://kent.dl.sourceforge.net/sourceforge/dagger/daggerr23jan2007. zip found by: katatafish [email protected] code: cal.func.php include$diredgelang.'callang.inc.php'; exploit:...

Ms Commercial Internet System 2.0/2.5,IIS 4.0,Site Server Commerce Edition 3.0 alpha/3.0 DoS

No description provided by source. Microsoft Commercial Internet System 2.0/2.5,IIS 4.0,Site Server Commerce Edition 3.0 alpha/3.0 i386 Malformed HTTP Request Header DoS source: http://www.securityfocus.com/bid/579/info Microsoft IIS and all other products that use the IIS web engine have a...