Search CVE reports


Toggle filters

681 – 690 of 1231 results


CVE-2016-4651

Medium priority

Some fixes available 1 of 13

Cross-site scripting (XSS) vulnerability in the WebKit JavaScript bindings in Apple iOS before 9.3.3 and Safari before 9.1.2 allows remote attackers to inject arbitrary web script or HTML via a crafted HTTP/0.9 response, related...

5 affected packages

webkit, qtwebkit-opensource-src, qtwebkit-source, webkit2gtk, webkitgtk

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
webkit
qtwebkit-opensource-src
qtwebkit-source
webkit2gtk
webkitgtk
Show less packages

CVE-2016-4624

Medium priority

Some fixes available 1 of 13

WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than...

5 affected packages

webkit, webkit2gtk, webkitgtk, qtwebkit-opensource-src, qtwebkit-source

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
webkit
webkit2gtk
webkitgtk
qtwebkit-opensource-src
qtwebkit-source
Show less packages

CVE-2016-4623

Medium priority

Some fixes available 1 of 13

WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than...

5 affected packages

webkit2gtk, webkitgtk, qtwebkit-opensource-src, qtwebkit-source, webkit

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
webkit2gtk
webkitgtk
qtwebkit-opensource-src
qtwebkit-source
webkit
Show less packages

CVE-2016-4622

Medium priority

Some fixes available 1 of 13

WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than...

5 affected packages

webkit, webkit2gtk, webkitgtk, qtwebkit-source, qtwebkit-opensource-src

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
webkit
webkit2gtk
webkitgtk
qtwebkit-source
qtwebkit-opensource-src
Show less packages

CVE-2016-4591

Medium priority

Some fixes available 1 of 13

WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 mishandles the location variable, which allows remote attackers to access the local filesystem via unspecified vectors.

5 affected packages

webkit, webkitgtk, qtwebkit-opensource-src, qtwebkit-source, webkit2gtk

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
webkit
webkitgtk
qtwebkit-opensource-src
qtwebkit-source
webkit2gtk
Show less packages

CVE-2016-4590

Medium priority

Some fixes available 1 of 13

WebKit in Apple iOS before 9.3.3 and Safari before 9.1.2 mishandles about: URLs, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.

5 affected packages

qtwebkit-opensource-src, qtwebkit-source, webkit, webkit2gtk, webkitgtk

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
qtwebkit-opensource-src
qtwebkit-source
webkit
webkit2gtk
webkitgtk
Show less packages

CVE-2016-4589

Medium priority

Some fixes available 1 of 13

WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than...

5 affected packages

webkit2gtk, webkitgtk, qtwebkit-opensource-src, qtwebkit-source, webkit

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
webkit2gtk
webkitgtk
qtwebkit-opensource-src
qtwebkit-source
webkit
Show less packages

CVE-2016-4588

Medium priority

Some fixes available 1 of 13

WebKit in Apple tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.

5 affected packages

qtwebkit-opensource-src, qtwebkit-source, webkit, webkit2gtk, webkitgtk

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
qtwebkit-opensource-src
qtwebkit-source
webkit
webkit2gtk
webkitgtk
Show less packages

CVE-2016-4586

Medium priority

Some fixes available 1 of 13

WebKit in Apple Safari before 9.1.2 and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.

5 affected packages

webkit, webkit2gtk, webkitgtk, qtwebkit-opensource-src, qtwebkit-source

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
webkit
webkit2gtk
webkitgtk
qtwebkit-opensource-src
qtwebkit-source
Show less packages

CVE-2016-4585

Medium priority

Some fixes available 1 of 13

Cross-site scripting (XSS) vulnerability in the WebKit Page Loading implementation in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to inject arbitrary web script or HTML via an HTTP...

5 affected packages

qtwebkit-opensource-src, qtwebkit-source, webkit, webkit2gtk, webkitgtk

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
qtwebkit-opensource-src
qtwebkit-source
webkit
webkit2gtk
webkitgtk
Show less packages