CVSS: 8.8EPSS: 0%CPEs: 9EXPL: 0CVE-2018-4213 – Gentoo Linux Security Advisory 201812-04
https://notcve.org/view.php?id=CVE-2018-4213
01 Oct 2018 — In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, unexpected interaction causes an ASSERT failure. This issue was addressed with improved checks. En iOS en versiones anteriores a la 11.3, Safari en versiones anteriores a la 11.1, iCloud para Windows en versiones anteriores a la 7.4, tvOS en versiones anteriores a la 11.3, watchOS en versiones anteriores a la 4.3 e iTunes en versiones anteriores a la 12.7.4 para Wind... • https://security.gentoo.org/glsa/201812-04 • CWE-20: Improper Input Validation •
CVSS: 9.8EPSS: 0%CPEs: 3EXPL: 0CVE-2018-12911 – Ubuntu Security Notice USN-3743-1
https://notcve.org/view.php?id=CVE-2018-12911
19 Jul 2018 — WebKitGTK+ 2.20.3 has an off-by-one error, with a resultant out-of-bounds write, in the get_simple_globs functions in ThirdParty/xdgmime/src/xdgmimecache.c and ThirdParty/xdgmime/src/xdgmimeglob.c. WebKitGTK+ 2.20.3 tiene un error por un paso con una escritura fuera de límites resultante en las funciones get_simple_globs en ThirdParty/xdgmime/src/xdgmimecache.c y ThirdParty/xdgmime/src/xdgmimeglob.c. A large number of security issues were discovered in the WebKitGTK+ Web and JavaScript engines. If a user we... • https://trac.webkit.org/changeset/233404/webkit • CWE-787: Out-of-bounds Write •
CVSS: 8.8EPSS: 42%CPEs: 5EXPL: 2CVE-2018-12293 – WebkitGTK+ 2.20.3 - 'ImageBufferCairo::getImageData()' Buffer Overflow (PoC)
https://notcve.org/view.php?id=CVE-2018-12293
14 Jun 2018 — The getImageData function in the ImageBufferCairo class in WebCore/platform/graphics/cairo/ImageBufferCairo.cpp in WebKit, as used in WebKitGTK+ prior to version 2.20.3 and WPE WebKit prior to version 2.20.1, is vulnerable to a heap-based buffer overflow triggered by an integer overflow, which could be abused by crafted HTML content. La función getImageData en la clase ImageBufferCairo en WebCore/platform/graphics/cairo/ImageBufferCairo.cpp en WebKit, tal y como se emplea en WebKitGTK+ en versiones anterior... • https://packetstorm.news/files/id/148960 • CWE-190: Integer Overflow or Wraparound CWE-787: Out-of-bounds Write •
CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 0CVE-2018-11712 – webkitgtk: Improper TLS certificate verification for WebSocket connections
https://notcve.org/view.php?id=CVE-2018-11712
04 Jun 2018 — WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of WebKit, as used in WebKitGTK+ versions 2.20.0 and 2.20.1, failed to perform TLS certificate verification for WebSocket connections. WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp en el backend de red de WebKit, tal y como se emplea en WebKitGTK+ 2.20.0 y 2.20.1, no pudo realizar la verificación de certificados TLS para las conexiones WebSocket. Several vulnerabilities were discovered in WebKitGTK+ an... • https://bugs.webkit.org/show_bug.cgi?id=184804 • CWE-295: Improper Certificate Validation •
CVSS: 6.5EPSS: 0%CPEs: 2EXPL: 0CVE-2018-11713 – webkitgtk: WebSockets don't use system proxy settings
https://notcve.org/view.php?id=CVE-2018-11713
04 Jun 2018 — WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of WebKit, as used in WebKitGTK+ prior to version 2.20.0 or without libsoup 2.62.0, unexpectedly failed to use system proxy settings for WebSocket connections. As a result, users could be deanonymized by crafted web sites via a WebSocket connection. WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp en el backend de red de WebKit, tal y como se emplea en WebKitGTK+ en versiones anteriores a la 2.20.0 o sin ... • https://bugs.webkit.org/show_bug.cgi?id=126384 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 7.5EPSS: 75%CPEs: 1EXPL: 5CVE-2018-11646 – WebKitGTK+ < 2.21.3 - 'WebKitFaviconDatabase' Denial of Service
https://notcve.org/view.php?id=CVE-2018-11646
01 Jun 2018 — webkitFaviconDatabaseSetIconForPageURL and webkitFaviconDatabaseSetIconURLForPageURL in UIProcess/API/glib/WebKitFaviconDatabase.cpp in WebKit, as used in WebKitGTK+ through 2.21.3, mishandle an unset pageURL, leading to an application crash. webkitFaviconDatabaseSetIconForPageURL y webkitFaviconDatabaseSetIconURLForPageURL en UIProcess/API/glib/WebKitFaviconDatabase.cpp en WebKit, tal y como se distribuye en Safari Technology Preview Release 57, gestiona de manera incorrecta una pageURL no establecida, lo ... • https://packetstorm.news/files/id/148135 •
CVSS: 8.8EPSS: 0%CPEs: 10EXPL: 0CVE-2018-4101 – Ubuntu Security Notice USN-3635-1
https://notcve.org/view.php?id=CVE-2018-4101
30 Mar 2018 — An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. Se ha descubierto un problema en algunos productos Apple. • http://www.securitytracker.com/id/1040604 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 6.5EPSS: 1%CPEs: 11EXPL: 0CVE-2018-4113 – Ubuntu Security Notice USN-3635-1
https://notcve.org/view.php?id=CVE-2018-4113
30 Mar 2018 — An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves a JavaScriptCore function in the "WebKit" component. It allows attackers to trigger an assertion failure by leveraging improper array indexing. Se ha descubierto un problema en algunos productos Apple. • http://www.securitytracker.com/id/1040604 • CWE-617: Reachable Assertion •
CVSS: 8.8EPSS: 0%CPEs: 11EXPL: 0CVE-2018-4114 – Ubuntu Security Notice USN-3635-1
https://notcve.org/view.php?id=CVE-2018-4114
30 Mar 2018 — An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. Se ha descubierto un problema en algunos productos Apple. • http://www.securitytracker.com/id/1040604 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 8.8EPSS: 0%CPEs: 10EXPL: 0CVE-2018-4118 – Ubuntu Security Notice USN-3635-1
https://notcve.org/view.php?id=CVE-2018-4118
30 Mar 2018 — An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. Se ha descubierto un problema en algunos productos Apple. • http://www.securitytracker.com/id/1040604 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •