7287 matches found
CVE-2023-47127 Weak Authentication in Session Handling in typo3/cms-core
TYPO3 is an open source PHP based web content management system released under the GNU GPL. In typo3 installations there are always at least two different sites. Eg. first.example.org and second.example.com. In affected versions a session cookie generated for the first site can be reused on the...
CVE-2023-47127
TYPO3 core vulnerability CVE-2023-47127: in installations with multiple sites, a session cookie from one site can be reused on another without re-authentication. Affects TYPO3 CMS core; remediation is to upgrade to fixed versions (8.7.55, 9.5.44, 10.4.41, 11.5.33, 12.4.8). The connected advisorie...
webkitgtk: Processing web content may lead to arbitrary code execution
A flaw was found in WebKitGTK. This issue occurs when processing malicious web content, which may lead to arbitrary code execution...
webkitgtk: arbitrary code execution
A flaw was found in WebKitGTK. This issue occurs when processing malicious web content, which may lead to arbitrary code execution...
webkitgtk: arbitrary code execution
A flaw was found in WebKitGTK. This issue occurs when processing malicious web content, which may lead to arbitrary code execution...
webkitgtk: arbitrary code execution
A flaw was found in WebKitGTK. This issue occurs when processing malicious web content, which may lead to arbitrary code execution...
webkitgtk: arbitrary code execution
A flaw was found in WebKitGTK. This issue occurs when processing malicious web content, which may lead to arbitrary code execution...
webkitgtk: use after free vulnerability
A vulnerability was found in WebKit. When processing web content, it may lead to arbitrary code execution...
webkitgtk: Memory corruption issue when processing web content
A vulnerability was found in WebKitGTK. This security issue occurs when processing maliciously crafted web content that may lead to arbitrary code execution. This memory corruption issue was addressed with improved validation...
webkitgtk: arbitrary code execution
A flaw was found in WebKitGTK. This issue occurs when processing malicious web content, which may lead to arbitrary code execution...
webkitgtk: arbitrary code execution
A flaw was found in WebKitGTK. This issue occurs when processing malicious web content, which may lead to arbitrary code execution...
CVE-2023-39796
SQL injection vulnerability in the miniform module in WBCE CMS v.1.6.0 allows remote unauthenticated attacker to execute arbitrary code via the DBRECORDTABLE parameter...
webkitgtk: Processing web content may lead to arbitrary code execution
A vulnerability was found in WebKitGTK. This flaw allows a remote attacker to trigger arbitrary code execution by persuading a victim to visit a specially crafted website...
webkitgtk: arbitrary code execution
A flaw was found in WebKitGTK. This issue occurs when processing malicious web content, which may lead to arbitrary code execution...
webkitgtk: arbitrary code execution
A flaw was found in WebKitGTK. This issue occurs when processing malicious web content, which may lead to arbitrary code execution...
webkitgtk: arbitrary code execution
A flaw was found in WebKitGTK. This issue occurs when processing malicious web content, which may lead to arbitrary code execution...
webkitgtk: arbitrary code execution
A flaw was found in WebKitGTK. This issue occurs when processing malicious web content, which may lead to arbitrary code execution...
webkitgtk: arbitrary code execution
A flaw was found in WebKitGTK. This issue occurs when processing malicious web content, which may lead to arbitrary code execution...
webkitgtk: Processing web content may lead to arbitrary code execution
A flaw was found in WebKitGTK. This issue occurs when processing malicious web content, which may lead to arbitrary code execution...