Search for packages
| purl | pkg:deb/debian/epiphany-browser@2.30.6-1 |
| Next non-vulnerable version | 48.5-0+deb13u1 |
| Latest non-vulnerable version | 48.5-0+deb13u1 |
| Risk | 4.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-4ayz-e7qd-q3hv
Aliases: CVE-2021-45085 |
security update |
Affected by 2 other vulnerabilities. |
|
VCID-drpr-qvbq-c7ep
Aliases: CVE-2022-29536 |
A vulnerability has been discovered in Epiphany, which can lead to a buffer overflow. |
Affected by 2 other vulnerabilities. |
|
VCID-fw5u-mcy4-1uaz
Aliases: CVE-2018-11396 |
ephy-session.c in libephymain.so in GNOME Web (aka Epiphany) through 3.28.2.1 allows remote attackers to cause a denial of service (application crash) via JavaScript code that triggers access to a NULL URL, as demonstrated by a crafted window.open call. |
Affected by 6 other vulnerabilities. |
|
VCID-hk4w-wqwm-b7dx
Aliases: CVE-2021-45086 |
security update |
Affected by 2 other vulnerabilities. |
|
VCID-kr9h-du4n-zbck
Aliases: CVE-2021-45087 |
security update |
Affected by 2 other vulnerabilities. |
|
VCID-t8h7-hah9-bkaw
Aliases: CVE-2019-25085 |
gvdb: use after free issue was fixed in gvdb_table_write_contents_async() |
Affected by 2 other vulnerabilities. |
|
VCID-u2z3-9rm9-suda
Aliases: CVE-2017-1000025 |
GNOME Web (Epiphany) 3.23 before 3.23.5, 3.22 before 3.22.6, 3.20 before 3.20.7, 3.18 before 3.18.11, and prior versions, is vulnerable to a password manager sweep attack resulting in the remote exfiltration of stored passwords for a selected set of websites. |
Affected by 8 other vulnerabilities. |
|
VCID-v1k1-swqj-akcj
Aliases: CVE-2021-45088 |
security update |
Affected by 2 other vulnerabilities. |
|
VCID-wruk-nknh-2fh4
Aliases: CVE-2018-12016 |
libephymain.so in GNOME Web (aka Epiphany) through 3.28.2.1 allows remote attackers to cause a denial of service (application crash) via certain window.open and document.write calls. |
Affected by 6 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-h8vr-29am-jueb | Epiphany 2.28 and 2.29, when WebKit and LibSoup are used, unconditionally displays a closed-lock icon for any URL beginning with the https: substring, without any warning to the user, which allows man-in-the-middle attackers to spoof arbitrary https web sites via a crafted X.509 server certificate. |
CVE-2010-3312
|