Section
Vulnerabilities
CVE records from NVD, ZDI advisories and the CISA KEV catalog, with CVSS, EPSS, SSVC and exploitation state.
4 matching records.
-
A logic error in Epiphany's site permission handling can cause camera and microphone access to be granted when the user only approves a different…
A logic error in Epiphany's site permission handling can cause camera and microphone access to be granted when the user only approves a different permission. In src/ephy-window.c, set_permission() stores the user's Allow/Deny…
-
A race condition in Epiphany allows a malicious website to bypass the TLS/SSL certificate warning page.
A race condition in Epiphany allows a malicious website to bypass the TLS/SSL certificate warning page. Epiphany registers the main-world script message handler "tlsErrorPage" so its internal TLS error page can implement "Accept…
-
A file overwrite vulnerability exists in Epiphany when installing WebExtension packages from .xpi files.
A file overwrite vulnerability exists in Epiphany when installing WebExtension packages from .xpi files. In src/webextension/ephy-web-extension-manager.c, decompress_xpi_thread() used libarchive with…
-
A security vulnerability has been detected in GNOME libgsf up to 1.14.60.
A security vulnerability has been detected in GNOME libgsf up to 1.14.60. The impacted element is the function ole_info_read_metabat of the file gsf/gsf-infile-msole.c of the component OLE2 Parser. The manipulation leads to…
Reuse this view
Same filters as JSON: /api/items?category=vuln&window=30d&vendor=GNOME&limit=100. RSS for this section: feed.xml.