Search CVE reports
1201 – 1210 of 1300 results
The HTML5 drag and drop functionality in WebKit in Apple Safari before 5.0.4 allows user-assisted remote attackers to bypass the Same Origin Policy and obtain sensitive information via vectors related to the dragging of content. ...
4 affected packages
qt4-x11, qtwebkit-source, webkit, webkitgtk
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| qt4-x11 | — | — | — | — | — |
| qtwebkit-source | — | — | — | — | — |
| webkit | — | — | — | — | — |
| webkitgtk | — | — | — | — | — |
WebKit, as used in Apple Safari before 5.0.4 and iOS before 4.3, does not properly handle unspecified "cached resources," which allows remote attackers to cause a denial of service (resource unavailability) via a crafted web site...
4 affected packages
qt4-x11, qtwebkit-source, webkit, webkitgtk
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| qt4-x11 | — | — | — | — | — |
| qtwebkit-source | — | — | — | — | — |
| webkit | — | — | — | — | — |
| webkitgtk | — | — | — | — | — |
WebKit, as used in Apple Safari before 5.0.4 and iOS before 4.3, does not properly handle the Attr.style accessor, which allows remote attackers to bypass the Same Origin Policy and inject Cascading Style Sheets (CSS)...
4 affected packages
qt4-x11, qtwebkit-source, webkit, webkitgtk
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| qt4-x11 | — | — | — | — | — |
| qtwebkit-source | — | — | — | — | — |
| webkit | — | — | — | — | — |
| webkitgtk | — | — | — | — | — |
WebKit, as used in Apple Safari before 5.0.4 and iOS before 4.3, does not properly handle redirects in conjunction with HTTP Basic Authentication, which might allow remote web servers to capture credentials by logging...
4 affected packages
qt4-x11, qtwebkit-source, webkit, webkitgtk
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| qt4-x11 | — | — | — | — | — |
| qtwebkit-source | — | — | — | — | — |
| webkit | — | — | — | — | — |
| webkitgtk | — | — | — | — | — |
WebKit, as used in Apple iOS before 4.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other CVEs...
4 affected packages
qt4-x11, qtwebkit-source, webkit, webkitgtk
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| qt4-x11 | — | — | — | — | — |
| qtwebkit-source | — | — | — | — | — |
| webkit | — | — | — | — | — |
| webkitgtk | — | — | — | — | — |
Some fixes available 14 of 39
Integer overflow in WebKit, as used on the Research In Motion (RIM) BlackBerry Torch 9800 with firmware 6.0.0.246, in Google Chrome before 10.0.648.133, and in Apple Safari before 5.0.5, allows remote attackers to execute...
5 affected packages
chromium-browser, qt4-x11, qtwebkit-source, webkit, webkitgtk
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| chromium-browser | — | — | — | — | — |
| qt4-x11 | — | — | — | — | — |
| qtwebkit-source | — | — | — | — | — |
| webkit | — | — | — | — | — |
| webkitgtk | — | — | — | — | — |
The Research In Motion (RIM) BlackBerry Torch 9800 with firmware 6.0.0.246 allows attackers to read the contents of memory locations via unknown vectors, as demonstrated by Vincenzo Iozzo, Willem Pinckaers, and Ralf-Philipp...
4 affected packages
qt4-x11, qtwebkit-source, webkit, webkitgtk
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| qt4-x11 | — | — | — | — | — |
| qtwebkit-source | — | — | — | — | — |
| webkit | — | — | — | — | — |
| webkitgtk | — | — | — | — | — |
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2011-1290. Reason: This candidate is a duplicate of CVE-2011-1290. Notes: All CVE users should reference CVE-2011-1290 instead of this candidate. All references...
4 affected packages
qt4-x11, qtwebkit-source, webkit, webkitgtk
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| qt4-x11 | — | — | — | — | — |
| qtwebkit-source | — | — | — | — | — |
| webkit | — | — | — | — | — |
| webkitgtk | — | — | — | — | — |
Some fixes available 14 of 39
Google Chrome before 10.0.648.127 does not properly handle attributes, which allows remote attackers to cause a denial of service (DOM tree corruption) or possibly have unspecified other impact via a crafted document.
5 affected packages
chromium-browser, qt4-x11, qtwebkit-source, webkit, webkitgtk
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| chromium-browser | — | — | — | — | — |
| qt4-x11 | — | — | — | — | — |
| qtwebkit-source | — | — | — | — | — |
| webkit | — | — | — | — | — |
| webkitgtk | — | — | — | — | — |
Some fixes available 14 of 39
Google Chrome before 10.0.648.127 does not properly handle SVG cursors, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."
5 affected packages
chromium-browser, qt4-x11, qtwebkit-source, webkit, webkitgtk
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| chromium-browser | — | — | — | — | — |
| qt4-x11 | — | — | — | — | — |
| qtwebkit-source | — | — | — | — | — |
| webkit | — | — | — | — | — |
| webkitgtk | — | — | — | — | — |