Lucene search
+L

14078 matches found

BDU FSTEC
BDU FSTEC
added 2022/01/17 12:0 a.m.6 views

The vulnerability of WebKitGTK and WPE WebKit rendering modules, related to writing beyond the buffer boundary, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of Web page rendering modules in WebKitGTK and WPE WebKit relates to buffer overflow attacks. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures due to malicious web content...

9.3CVSS7.4AI score0.02156EPSS
SaveExploits0References8Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/01/17 12:0 a.m.8 views

The vulnerability of WebKitGTK and WPE WebKit rendering modules, related to writing beyond the buffer boundary, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of Web page rendering modules in WebKitGTK and WPE WebKit relates to buffer overflow attacks. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures due to malicious web content...

8.8CVSS7.2AI score0.02015EPSS
SaveExploits1References8Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/01/17 12:0 a.m.9 views

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit, related to the lack of measures taken to protect the structure of web pages, allows attackers to compromise data integrity.

The vulnerability of Web page rendering modules in WebKitGTK and WPE WebKit is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor to compromise data integrity through malicious web content...

6.1CVSS6.7AI score0.01105EPSS
SaveExploits0References8Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/01/17 12:0 a.m.7 views

The vulnerability of elements in iframe modules for web page rendering in WebKitGTK and WPE WebKit allows attackers to exploit it to compromise the integrity of web page data. This vulnerability is related to the lack of protection for the structure of web pages.

The vulnerability of elements in iframe modules for displaying web pages in WebKitGTK and WPE WebKit is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor to compromise data integrity through malicious web content...

6.1CVSS6.7AI score0.01068EPSS
SaveExploits0References8Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/01/17 12:0 a.m.7 views

The vulnerability of WebKitGTK and WPE WebKit’s display modules, related to memory management after memory is freed, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of Web page rendering modules in WebKitGTK and WPE WebKit relates to the use of memory after it is released. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures due to malicious web content...

9.3CVSS6.9AI score0.02164EPSS
SaveExploits2References8Affected Software5
RedHat Linux
RedHat Linux
added 2022/01/11 4:9 p.m.6 views

webkitgtk: Use-after-free leading to arbitrary code execution

A flaw was found in webkitgtk. This flaw could allow an attacker to use maliciously crafted web content leading to arbitrary code execution...

8.8CVSS6AI score0.13486EPSS
SaveExploits0References7
Fedora
Fedora
added 2022/01/07 1:12 a.m.49 views

[SECURITY] Fedora 34 Update: chromium-96.0.4664.110-3.fc34

Chromium is an open-source web browser, powered by WebKit Blink...

9.6CVSS1.8AI score0.38573EPSS
SaveExploits7
UbuntuCve
UbuntuCve
added 2021/12/31 12:0 a.m.44 views

CVE-2021-30934

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution...

9.3CVSS7.4AI score0.02641EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2021/12/31 12:0 a.m.41 views

CVE-2021-30953

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution...

8.8CVSS7.2AI score0.01939EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2021/12/20 12:0 a.m.9 views

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit, related to the execution of operations beyond the buffer boundaries in memory, allows attackers to execute arbitrary code.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to the escape of operations beyond the buffer in memory when processing HTML content. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created malicious...

9.3CVSS7.7AI score0.10591EPSS
SaveExploits0References9Affected Software7
BDU FSTEC
BDU FSTEC
added 2021/12/20 12:0 a.m.6 views

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit, related to type mixing errors, allows attackers to execute arbitrary code.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit is related to type mixing errors. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

9.3CVSS8.3AI score0.1322EPSS
SaveExploits0References17Affected Software14
CNVD
CNVD
added 2021/12/17 12:0 a.m.29 views

GNOME Web Cross-Site Scripting Vulnerability (CNVD-2022-02767)

GNOME Web Epiphany is a Web browser based on the WebKit rendering engine. The product provides paginated browsing, cookie management, pop-up ad control, etc. GNOME Web has a cross-site scripting vulnerability that can be exploited by attackers to conduct vulnerability attacks via the pdfname fiel...

6.1CVSS4.3AI score0.01294EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/12/17 12:0 a.m.65 views

GNOME Web Cross-Site Scripting Vulnerability

GNOME Web Epiphany is a Web browser based on the WebKit rendering engine. The product provides paginated browsing, cookie management, pop-up ad control, etc. GNOME Web has a cross-site scripting vulnerability that can be exploited by attackers to conduct exploit attacks via false pages...

6.1CVSS4.3AI score0.01417EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/12/17 12:0 a.m.121 views

GNOME Web Cross-Site Scripting Vulnerability (CNVD-2022-02768)

GNOME Web Epiphany is a Web browser based on the WebKit rendering engine. The product provides paginated browsing, cookie management, pop-up ad control, etc. GNOME Web contains a cross-site scripting vulnerability that can be exploited by attackers to conduct exploit attacks when viewing in sourc...

6.1CVSS3.9AI score0.01485EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2021/12/16 12:0 a.m.6 views

The vulnerability of the WPE WebKit browser’s web page rendering module in Safari for iOS, iPadOS, tvOS, watchOS, macOS lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of the WPE WebKit browser’s web page rendering module in Safari for iOS, iPadOS, tvOS, watchOS, and macOS relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9.3CVSS7AI score0.01405EPSS
SaveExploits0References8Affected Software7
The Hacker News
The Hacker News
added 2021/12/14 6:10 a.m.89 views

Latest Apple iOS Update Patches Remote Jailbreak Exploit for iPhones

Apple on Monday released updates to iOS, macOS, tvOS, and watchOS with security patches for multiple vulnerabilities, including a remote jailbreak exploit chain as well as a number of critical issues in the Kernel and Safari web browser that were first demonstrated at the Tianfu Cup held in China...

9.3CVSS1.4AI score0.1796EPSS
SaveExploits7
Apple
Apple
added 2021/12/14 12:0 a.m.814 views

About the security content of Safari 15.2

About the security content of Safari 15.2 This document describes the security content of Safari 15.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

9.3CVSS9.3AI score0.07617EPSS
SaveExploits1References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/12/13 12:0 a.m.14 views

The vulnerability of the WPE WebKit browser’s web page rendering module for Safari on iOS, iPadOS, tvOS, watchOS, and macOS lies in type conversion errors, allowing attackers to execute arbitrary code.

The vulnerability of the WPE WebKit browser’s web page rendering module for Safari operating systems—iOS, iPadOS, tvOS, watchOS, and macOS—is related to type conversion errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9.3CVSS7.1AI score0.01517EPSS
SaveExploits0References13Affected Software10
BDU FSTEC
BDU FSTEC
added 2021/12/01 12:0 a.m.8 views

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit operating systems for iOS, related to the use of memory after it is freed, allows attackers to execute arbitrary code.

The vulnerability of the web page rendering modules in WebKitGTK and WPE for iOS operating systems is related to the use of memory after it is freed during the processing of malicious web content. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9.3CVSS7.4AI score0.10986EPSS
SaveExploits0References6Affected Software5
Tenable Nessus
Tenable Nessus
added 2021/11/24 12:0 a.m.59 views

SUSE SLES15: libjavascriptcoregtk-4_0-18 / libwebkit2gtk-4_0-37 / etc (SUSE-SU-2021:3769-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3769-1 advisory. - CVE-2021-30846: Fixed memory corruption issue that could lead to arbitrary code execution when processing maliciously crafted web...

8.8CVSS7.4AI score0.02319EPSS
SaveExploits1References9
Rows per page
Query Builder