117 matches found
CVE-2023-4057
Memory safety bugs present in Firefox 115, Firefox ESR 115.0, and Thunderbird 115.0. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox 116, Firefox ESR...
CVE-2023-4057
Memory safety bugs present in Firefox 115, Firefox ESR 115.0, and Thunderbird 115.0. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox 116, Firefox ESR...
CVE-2023-4057
CVE-2023-4057 affects Firefox (115 and ESR 115.x) and Thunderbird 115.x. The connected sources confirm memory-safety bugs in Firefox/Thunderbird that could allow memory corruption and, with sufficient effort, arbitrary code execution. The documented impact states affected versions are Firefox <...
KLA51573 Multiple vulnerabilities in Mozilla Firefox
Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, spoof user interface, cause denial of service, obtain sensitive information, bypass security restrictions. Below is a complete list of...
KLA51619 Multiple vulnerabilities in Mozilla Firefox ESR
Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, cause denial of service, bypass security restrictions. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability ...
Mozilla Firefox < 116.0
The version of Firefox installed on the remote macOS or Mac OS X host is prior to 116.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2023-29 advisory. - Memory safety bugs present in Firefox 115. Some of these bugs showed evidence of memory corruption and we...
AlmaLinux 9 : .NET 7.0 (ALSA-2023:4057)
The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2023:4057 advisory. - ASP.NET and Visual Studio Security Feature Bypass Vulnerability CVE-2023-33170 Note that Nessus has not tested for this issue but has instead relied only on the...
RHEL 9 : .NET 7.0 (RHSA-2023:4057)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:4057 advisory. .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. T...
CVE-2022-4057
creationtimestamp| type| source ---|---|--- 2023-01-03 00:29:47+00:00| seen| https://t.me/cibsecurity/55773...
CVE-2022-4057
CVE-2022-4057 affects the Autoptimize WordPress plugin pre-3.1.0. The issue is an information disclosure due to an easily guessable path used to store plugin exports (settings and logs). The practical impact is exposure of potentially sensitive data. Mitigation: upgrade to Autoptimize version 3.1...
SUSE: Security Advisory (SUSE-SU-2022:4057-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
AlmaLinux 8 : python3 (ALSA-2021:4057)
The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2021:4057 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 70300 C Tenable Network...
OPENSUSE-SU-2021:1632-1 Security update for chromium
This update for chromium fixes the following issues: Chromium 96.0.4664.110 boo1193713: CVE-2021-4098: Insufficient data validation in Mojo CVE-2021-4099: Use after free in Swiftshader CVE-2021-4100: Object lifecycle issue in ANGLE CVE-2021-4101: Heap buffer overflow in Swiftshader CVE-2021-4102:...
CVE-2021-4057
Use after free in file API in Google Chrome prior to 96.0.4664.93 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page...
CVE-2021-4057
Use after free in file API in Google Chrome prior to 96.0.4664.93 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page...
CVE-2021-4057
CVE-2021-4057 is a use-after-free in Chromium’s file API prior to 96.0.4664.93. Multiple connected advisories describe it as allowing a remote attacker who gains renderer access to potentially trigger heap corruption. The vulnerability is among a set of Chromium issues fixed in version 96.0.4664....
CVE-2021-4057
Use after free in file API in Google Chrome prior to 96.0.4664.93 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page...
CVE-2021-4057
Use after free in file API in Google Chrome prior to 96.0.4664.93 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page...
openSUSE 15 Security Update : chromium (openSUSE-SU-2021:1582-1)
The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1582-1 advisory. - Use after free in loader. CVE-2021-38005 - Use after free in storage foundation. CVE-2021-38006, CVE-2021-38011 - Type Confusion in V8...
Chromium: CVE-2021-4057 Use after free in file API
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...