Lucene search
+L

16465 matches found

osv_cve
osv_cve
•added 2018/06/04 2:29 p.m.•34 views

CVE-2018-11713

WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of WebKit, as used in WebKitGTK+ prior to version 2.20.0 or without libsoup 2.62.0, unexpectedly failed to use system proxy settings for WebSocket connections. As a result, users could be deanonymized by...

6.5CVSS6.6AI score0.01555EPSS
SaveExploits0References3
osv_debian
osv_debian
•added 2018/06/04 2:29 p.m.•10 views

DEBIAN-CVE-2018-11713

WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of WebKit, as used in WebKitGTK+ prior to version 2.20.0 or without libsoup 2.62.0, unexpectedly failed to use system proxy settings for WebSocket connections. As a result, users could be deanonymized by...

6.5CVSS7.2AI score0.01555EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2018/06/04 2:29 p.m.•17 views

UBUNTU-CVE-2018-11712

WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of WebKit, as used in WebKitGTK+ versions 2.20.0 and 2.20.1, failed to perform TLS certificate verification for WebSocket connections...

7.5CVSS6.8AI score0.01159EPSS
SaveExploits0References3
Mend
Mend
•added 2018/06/04 2:00 p.m.•6 views

CVE-2018-11713

WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of WebKit, as used in WebKitGTK+ prior to version 2.20.0 or without libsoup 2.62.0, unexpectedly failed to use system proxy settings for WebSocket connections. As a result, users could be deanonymized by...

7.1CVSS0.01555EPSS
SaveExploits0References4
CVE
CVE
•added 2018/06/04 2:00 p.m.•195 views

CVE-2018-11713

CVE-2018-11713 concerns WebKitGTK's WebKit Libsoup network backend. WebCore/SocketStreamHandleImplSoup.cpp could fail to use system proxy settings for WebSocket connections in WebKitGTK+ builds prior to 2.20.0 or when libsoup 2.62.0 is not present. This could allow a crafted web page to deanonymi...

6.5CVSS7AI score0.01555EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
•added 2018/06/04 12:00 a.m.•10 views

Multiple Apple Products WebKit Cookies Override Vulnerability

Apple iOS and others are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with the Mac OS X and iOS operating systems. iCloud for Windows is a cloud service based on the Windows platform. WebKit is...

4.3CVSS6.3AI score0.02075EPSS
SaveExploits0References1
CNVD
CNVD
•added 2018/06/04 12:00 a.m.•9 views

Multiple Apple Products WebKit Type Obfuscation Vulnerability

Apple iOS and others are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with the Mac OS X and iOS operating systems. iCloud for Windows is a cloud service based on the Windows platform. WebKit is...

8.8CVSS8.8AI score0.02966EPSS
SaveExploits0References1
CNVD
CNVD
•added 2018/06/04 12:00 a.m.•7 views

Address bar spoofing vulnerability in multiple Apple products

Apple iOS and others are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with the Mac OS X and iOS operating systems. iCloud for Windows is a cloud service based on the Windows platform. WebKit is...

6.5CVSS6.9AI score0.02483EPSS
SaveExploits0References1
CNVD
CNVD
•added 2018/06/04 12:00 a.m.•7 views

Buffer Overflow Vulnerability in Multiple Apple Products

Apple iOS and others are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with the Mac OS X and iOS operating systems. iCloud for Windows is a cloud service based on the Windows platform. WebKit is...

8.8CVSS8.8AI score0.04361EPSS
SaveExploits0References1
CNVD
CNVD
•added 2018/06/04 12:00 a.m.•7 views

Memory Corruption Vulnerability in Multiple Apple Products (CNVD-2018-12193)

Apple iOS and others are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with the Mac OS X and iOS operating systems. iCloud for Windows is a cloud service based on the Windows platform. WebKit is...

8.8CVSS8.8AI score0.09055EPSS
SaveExploits4References1
CNVD
CNVD
•added 2018/06/04 12:00 a.m.•7 views

Multiple Apple Products WebKit Memory Corruption Vulnerability (CNVD-2018-12273)

Apple iOS and others are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with the Mac OS X and iOS operating systems. iCloud for Windows is a cloud service based on the Windows platform. WebKit is...

8.8CVSS8.7AI score0.02658EPSS
SaveExploits0References1
CNVD
CNVD
•added 2018/06/04 12:00 a.m.•8 views

WebKit memory corruption vulnerability in multiple Apple products (CNVD-2018-12279)

Apple iOS and others are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with the Mac OS X and iOS operating systems. iCloud for Windows is a cloud service based on the Windows platform. WebKit is...

8.8CVSS8.2AI score0.02154EPSS
SaveExploits0References1
CNVD
CNVD
•added 2018/06/04 12:00 a.m.•16 views

Multiple Apple Products Information Disclosure Vulnerability

Apple iOS and others are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with the Mac OS X and iOS operating systems. iCloud for Windows is a cloud service based on the Windows platform. WebKit is...

8.8CVSS8.2AI score0.03395EPSS
SaveExploits0References1
CNVD
CNVD
•added 2018/06/04 12:00 a.m.•8 views

Multiple Apple products cross-border read vulnerability

Apple iOS and others are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with the Mac OS X and iOS operating systems. iCloud for Windows is a cloud service based on the Windows platform. WebKit is...

8.8CVSS8.8AI score0.10173EPSS
SaveExploits4References1
CNVD
CNVD
•added 2018/06/04 12:00 a.m.•7 views

Memory Corruption Vulnerability in Multiple Apple Products (CNVD-2018-12194)

Apple iOS and others are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with the Mac OS X and iOS operating systems. iCloud for Windows is a cloud service based on the Windows platform. WebKit is...

8.8CVSS8.4AI score0.53816EPSS
SaveExploits12References1
zdt
zdt
•added 2018/06/04 12:00 a.m.•97 views

WebKit not_number defineProperties Use-After-Free Exploit

Exploit for multiple platform in category dos / poc This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'WebKit notnumber defineProperties UAF', 'Description' = %q This module exploits a UAF...

9.3CVSS0.66788EPSS
SaveExploits13
Packet Storm
Packet Storm
•added 2018/06/04 12:00 a.m.•66 views

WebKit not_number defineProperties Use-After-Free

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'WebKit notnumber defineProperties UAF', 'Description' = %q This module exploits a UAF vulnerability in WebKit's JavaScriptCore library. , 'Licens...

9.3CVSS7.2AI score0.66788EPSS
SaveExploits13
CNVD
CNVD
•added 2018/06/04 12:00 a.m.•5 views

Multiple Apple Products WebKit Arbitrary Code Execution Vulnerability (CNVD-2018-12277)

Apple iOS and others are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with the Mac OS X and iOS operating systems. iCloud for Windows is a cloud service based on the Windows platform. WebKit is...

7.5CVSS8.2AI score0.11761EPSS
SaveExploits4References1
Metasploit
Metasploit
•added 2018/06/03 12:00 a.m.•57 views

WebKitGTK+ WebKitFaviconDatabase DoS

This module exploits a vulnerability in WebKitFaviconDatabase when pageURL is unset. If successful, it could lead to application crash, resulting in denial of service. Module Options msf use auxiliary/dos/http/webkitplus msf undefinedwebkitplus show actions ...actions... msf undefinedwebkitplus s...

7.5CVSS7.6AI score0.68018EPSS
SaveExploits10
Prion
Prion
•added 2018/06/01 1:29 p.m.•30 views

Design/Logic Flaw

webkitFaviconDatabaseSetIconForPageURL and webkitFaviconDatabaseSetIconURLForPageURL in UIProcess/API/glib/WebKitFaviconDatabase.cpp in WebKit, as used in WebKitGTK+ through 2.21.3, mishandle an unset pageURL, leading to an application crash...

5CVSS7.4AI score0.68018EPSS
SaveExploits10References5Affected Software1
Rows per page
Query Builder