Lucene search
+L

66 matches found

CVE
CVE
added 2023/11/02 8:26 a.m.76 views

CVE-2023-5876

Mattermost security issue CVE-2023-5876: a RegExp built from the server URL path is not properly validated, allowing a malicious server-enrolled attacker to cause a Denial of Service. Descriptions across sources attribute this to Mattermost and note vulnerability affects Mattermost versions up to...

5.3CVSS4.6AI score0.00494EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/10/02 12:00 a.m.20 views

PT-2023-5876 · Qualcomm · Qualcomm

Name of the Vulnerable Software and Affected Versions: Qualcomm affected versions not specified Description: The issue is related to memory corruption in the modem while processing security-related configuration before AS Security Exchange. This corruption is due to an out-of-bounds pointer offse...

10CVSS7.4AI score0.00538EPSS
SaveExploits0References12
F5 Networks
F5 Networks
added 2023/02/21 6:33 p.m.53 views

K32121038: BIG-IP mcpd vulnerability CVE-2020-5876

Security Advisory Description A race condition exists where mcpd and other processes may make unencrypted connection attempts to a new configuration sync peer. The race condition can occur when changing the ConfigSync IP address of a peer, adding a new peer, or when the Traffic Management...

8.1CVSS7.9AI score0.00571EPSS
SaveExploits0Affected Software11
NVD
NVD
added 2020/04/30 9:15 p.m.42 views

CVE-2020-5876

On BIG-IP 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, a race condition exists where mcpd and other processes may make unencrypted connection attempts to a new configuration sync peer. The race condition can occur when changing the ConfigSync IP address...

8.1CVSS8AI score0.00571EPSS
SaveExploits0References1
CVE
CVE
added 2020/04/30 8:30 p.m.89 views

CVE-2020-5876

The CVE-2020-5876 issue affects BIG-IP mcpd and related components due to a race condition that can cause unencrypted config sync attempts when changing peer ConfigSync IPs, adding peers, or TMM startup. Vulnerable versions include BIG-IP 15.0.0–15.0.1, 14.0.0–14.1.2, 13.1.0–13.1.3, 12.1.0–12.1.5...

8.1CVSS7.9AI score0.00571EPSS
SaveExploits0References1Affected Software1
OpenVAS
OpenVAS
added 2020/01/09 12:00 a.m.33 views

openSUSE: Security Advisory for chromium (openSUSE-SU-2019:2152-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.6CVSS6.6AI score0.01443EPSS
SaveExploits0References2
OSV
OSV
added 2019/11/25 3:15 p.m.5 views

CVE-2019-5876

Use after free in media in Google Chrome on Android prior to 77.0.3865.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS9.4AI score
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2019/11/25 3:15 p.m.20 views

CVE-2019-5876

Use after free in media in Google Chrome on Android prior to 77.0.3865.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.2AI score0.00914EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2019/11/25 2:22 p.m.27 views

CVE-2019-5876

Use after free in media in Google Chrome on Android prior to 77.0.3865.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS9.4AI score0.00914EPSS
SaveExploits0
CVE
CVE
added 2019/11/25 2:22 p.m.243 views

CVE-2019-5876

CVE-2019-5876 describes a use-after-free in media handling in Google Chrome/Chromium. Public description states that on Android, prior to 77.0.3865.75, a remote attacker could potentially trigger heap corruption via a crafted HTML page. The Debian advisory lists CVE-2019-5876 among multiple Chrom...

8.8CVSS8.9AI score0.00914EPSS
SaveExploits0References2Affected Software1
OpenVAS
OpenVAS
added 2019/11/12 12:00 a.m.31 views

Debian: Security Advisory (DSA-4562-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.6CVSS7.2AI score0.4914EPSS
SaveExploits4References6
Tenable Nessus
Tenable Nessus
added 2019/10/28 12:00 a.m.80 views

Fedora 31 : chromium (2019-9a5e81214f)

Chromium update to 77.0.3865.120. For the upstream announcement see https://chromereleases.googleblog.com/2019/10/stable-channel-update-fo r-desktop.html. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has...

9.6CVSS6.9AI score0.01443EPSS
SaveExploits0References39
RedhatCVE
RedhatCVE
added 2019/10/16 6:21 p.m.17 views

CVE-2019-5876

Use after free in media in Google Chrome on Android prior to 77.0.3865.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS3AI score0.00914EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2019/09/20 12:00 a.m.44 views

openSUSE Security Update : chromium (openSUSE-2019-2153)

This update for chromium fixes the following issues : Security issues fixed : - CVE-2019-5870: Fixed a use-after-free in media. boo1150425 - CVE-2019-5871: Fixed a heap overflow in Skia. boo1150425 - CVE-2019-5872: Fixed a use-after-free in Mojo boo1150425 - CVE-2019-5874: Fixed a behavior that...

9.6CVSS7.2AI score0.01443EPSS
SaveExploits0References36
OpenVAS
OpenVAS
added 2019/09/13 12:00 a.m.31 views

Google Chrome Security Updates (stable-channel-update-for-desktop-2019-09) - Windows

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

9.6CVSS6.3AI score0.01443EPSS
SaveExploits0References1
CVE
CVE
added 2018/07/06 5:00 p.m.67 views

CVE-2018-5876

The CVE-2018-5876 issue affects Snapdragon Automotive, Snapdragon Mobile, and Snapdragon Wear. It stems from a buffer overflow while parsing MP4 files. The documented impact is high: CVSS v3 base score 8.8 (Network attack, no privileges required, user interaction required) with high confidentiali...

8.8CVSS8.1AI score0.00824EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2017/02/06 3:59 p.m.21 views

CVE-2017-5876

XSS was discovered in dotCMS 3.7.0, with an unauthenticated attack against the /news-events/events date parameter...

6.1CVSS6.1AI score0.00922EPSS
SaveExploits1References2
CVE
CVE
added 2017/01/23 9:00 p.m.70 views

CVE-2016-5876

Summary (CVE-2016-5876) : OwnCloud Server versions < 8.2.6 and

5.9CVSS5.7AI score0.01171EPSS
SaveExploits0References2Affected Software1
myhack58
myhack58
added 2015/11/13 12:00 a.m.26 views

muymacho---dyld_root_path exploit analysis-exploit warning-the black bar safety net

muymacho is an exploit tool. Exists in Mac OS X 10.10.5 in dyld bug can be used to extract right to the root. In the latest chief stone of EI Capitan 10.11 in has been patched. This is an interesting bug, the use of the process is also a lot of fun. The present article aims to introduce the use o...

6.9AI score
SaveExploits0
NVD
NVD
added 2015/09/18 12:00 p.m.31 views

CVE-2015-5876

dyld in Dev Tools in Apple iOS before 9 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

9.3CVSS5.9AI score0.02782EPSS
SaveExploits0References8
Rows per page
Query Builder