Lucene search
+L

189 matches found

AlpineLinux
AlpineLinux
added 2024/07/23 2:40 p.m.21 views

CVE-2024-4076

Client queries that trigger serving stale data and that also require lookups in local authoritative zone data may result in an assertion failure. This issue affects BIND 9 versions 9.16.13 through 9.16.50, 9.18.0 through 9.18.27, 9.19.0 through 9.19.24, 9.11.33-S1 through 9.11.37-S1, 9.16.13-S1...

7.5CVSS9.3AI score0.02111EPSS
Exploits0
Ubuntu
Ubuntu
added 2024/07/23 2:19 p.m.388 views

USN-6909-1: Bind vulnerabilities

It was discovered that Bind incorrectly handled a flood of DNS messages over TCP. A remote attacker could possibly use this issue to cause Bind to become unstable, resulting in a denial of service. CVE-2024-0760 Toshifumi Sakaguchi discovered that Bind incorrectly handled having a very large numb...

7.5CVSS7.5AI score0.0468EPSS
Exploits0
UbuntuCve
UbuntuCve
added 2024/07/23 12:0 a.m.22 views

CVE-2024-4076

Client queries that trigger serving stale data and that also require lookups in local authoritative zone data may result in an assertion failure. This issue affects BIND 9 versions 9.16.13 through 9.16.50, 9.18.0 through 9.18.27, 9.19.0 through 9.19.24, 9.11.33-S1 through 9.11.37-S1, 9.16.13-S1...

7.5CVSS7.3AI score0.02111EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2024/07/23 12:0 a.m.62 views

Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS : Bind vulnerabilities (USN-6909-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6909-1 advisory. It was discovered that Bind incorrectly handled a flood of DNS messages over TCP. A remote attacker could possibly use this issue...

7.5CVSS7.7AI score0.0468EPSS
Exploits0References5
OpenVAS
OpenVAS
added 2024/03/04 12:0 a.m.13 views

openSUSE: Security Advisory for cni (SUSE-SU-2023:4076-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2024/02/29 12:0 a.m.18 views

CentOS 9 : tang-11-1.el9

The remote CentOS Linux 9 host has a package installed that is affected by a vulnerability as referenced in the tang-11-1.el9 build changelog. - A flaw exists in tang, a network-based cryptographic binding server, which could result in leak of private keys. CVE-2021-4076 Note that Nessus has not...

7.5CVSS7.3AI score0.0154EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2023/09/24 12:0 a.m.205 views

openSUSE 15 Security Update : opera (openSUSE-SU-2023:0251-1)

The remote openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2023:0251-1 advisory. - Use after free in Offline in Google Chrome on Android prior to 116.0.5845.96 allowed a remote attacker who had compromised the renderer process...

8.8CVSS8AI score0.56192EPSS
Exploits2References73
Tenable Nessus
Tenable Nessus
added 2023/08/31 12:0 a.m.24 views

Rocky Linux 8 : firefox (RLSA-2023:4076)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:4076 advisory. - An attacker could have triggered a use-after-free condition when creating a WebRTC connection over HTTPS. This vulnerability affects Firefox 115,...

8.8CVSS8.2AI score0.00755EPSS
Exploits0References11
FreeBSD
FreeBSD
added 2023/08/23 12:0 a.m.60 views

electron25 -- multiple vulnerabilities

Electron developers report: This update fixes the following vulnerabilities: Security: backported fix for CVE-2023-4071. Security: backported fix for CVE-2023-4070. Security: backported fix for CVE-2023-4075. Security: backported fix for CVE-2023-4076. Security: backported fix for CVE-2023-4074...

8.8CVSS8.7AI score0.26819EPSS
Exploits0References12
Kaspersky
Kaspersky
added 2023/08/09 12:0 a.m.44 views

KLA61309 Multiple vulnerabilities in Opera

Multiple vulnerabilities were found in Opera. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Type confusion vulnerability in V8 can be exploited to cause denial of...

8.8CVSS10AI score0.24116EPSS
Exploits0References5
Microsoft CVE
Microsoft CVE
added 2023/08/07 7:0 a.m.23 views

Chromium: CVE-2023-4076 Use after free in WebRTC

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS8.5AI score0.00944EPSS
Exploits0
Kaspersky
Kaspersky
added 2023/08/07 12:0 a.m.40 views

KLA51709 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Type confusion vulnerability in V8 can be exploited to caus...

8.8CVSS9.6AI score0.24116EPSS
Exploits0References15
OPENSUSE Linux
OPENSUSE Linux
added 2023/08/07 12:0 a.m.3 views

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2023:0216-1 Rating: important References: 1213920 Cross-References: CVE-2023-4068 CVE-2023-4069 CVE-2023-4070 CVE-2023-4071 CVE-2023-4072 CVE-2023-4073 CVE-2023-4074 CVE-2023-4075 CVE-2023-4076 CVE-2023-4077...

8.8CVSS7.4AI score0.24116EPSS
Exploits0References1
NVD
NVD
added 2023/08/03 1:15 a.m.22 views

CVE-2023-4076

Use after free in WebRTC in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted WebRTC session. Chromium security severity: High...

8.8CVSS8.9AI score0.00944EPSS
Exploits0References7
OSV
OSV
added 2023/08/03 1:15 a.m.19 views

CVE-2023-4076

Use after free in WebRTC in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted WebRTC session. Chromium security severity: High...

8.8CVSS6.2AI score
Exploits0References7
CVE
CVE
added 2023/08/03 12:27 a.m.346 views

CVE-2023-4076

CVE-2023-4076 is a use-after-free in WebRTC in Google Chrome/Chromium, leading to potential heap corruption. Public details in connected sources confirm the vulnerability affects Chrome/Chromium prior to version 115.0.5790.170, with the Debian/FreeBSD/Fedora advisories noting fixes in 115.0.5790....

8.8CVSS8.8AI score0.00944EPSS
Exploits0References7Affected Software1
Debian CVE
Debian CVE
added 2023/08/03 12:27 a.m.41 views

CVE-2023-4076

Use after free in WebRTC in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted WebRTC session. Chromium security severity: High...

8.8CVSS9.4AI score0.00944EPSS
Exploits0
UbuntuCve
UbuntuCve
added 2023/08/03 12:0 a.m.34 views

CVE-2023-4076

Use after free in WebRTC in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted WebRTC session. Chromium security severity: High...

8.8CVSS7.2AI score0.00944EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2023/08/03 12:0 a.m.37 views

Google Chrome Security Updates (stable-channel-update-for-desktop-2023-08) - Linux

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

8.8CVSS8.7AI score0.24116EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2023/08/02 12:0 a.m.67 views

Google Chrome < 115.0.5790.170 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 115.0.5790.170. It is, therefore, affected by multiple vulnerabilities as referenced in the 202308stable-channel-update-for-desktop advisory. - Inappropriate implementation in Extensions in Google Chrome prior to...

8.8CVSS8.7AI score0.24116EPSS
Exploits0References23
Rows per page
Query Builder