256 matches found
chromium-browser: Uninitialized Use in V8
The Mozilla Foundation Security Advisory describes this flaw as: When a BigInt was right-shifted the backing store was not properly cleared, allowing uninitialized memory to be read...
chromium-browser: Uninitialized Use in V8
The Mozilla Foundation Security Advisory describes this flaw as: When a BigInt was right-shifted the backing store was not properly cleared, allowing uninitialized memory to be read...
chromium-browser: Uninitialized Use in V8
The Mozilla Foundation Security Advisory describes this flaw as: When a BigInt was right-shifted the backing store was not properly cleared, allowing uninitialized memory to be read...
Firefox Patches Critical Mystery Bug, Also Impacting Google Chrome
A Mozilla Foundation update to the Firefox web browser, released Tuesday, tackles one critical vulnerability and a handful of high-severity bugs. The update, released as Firefox version 84, is also billed by Mozilla as boosting the browser’s performance and adding native support for macOS hardwar...
CVE-2020-16042
The Mozilla Foundation Security Advisory describes this flaw as: When a BigInt was right-shifted the backing store was not properly cleared, allowing uninitialized memory to be read...
Security Vulnerabilities fixed in Thunderbird 78.6 — Mozilla
When a BigInt was right-shifted the backing store was not properly cleared, allowing uninitialized memory to be read. Certain blit values provided by the user were not properly constrained leading to a heap buffer overflow on some video drivers. Certain input to the CSS Sanitizer confused it,...
new module: perl:5.30
An update is available for perl-Pod-Perldoc, perl-DBI, perl-Pod-Escapes, perl-Devel-PPPort, perl-Pod-Usage, perl-Sub-Exporter, perl-perlfaq, perl-Object-HashBase, perl-CPAN-Meta-YAML, perl-Digest, perl-podlators, perl-bignum, perl-Text-ParseWords, perl-Text-Template, perl-DBD-MySQL, perl-Text-Glo...
CVE-2020-8237
A flaw was found in nodejs-json-bigint. A Prototype pollution in json-bigint npm may lead to a denial-of-service DoS attack...
CVE-2020-8237
Prototype pollution in json-bigint npm package 1.0.0 may lead to a denial-of-service DoS attack...
CVE-2020-8237
Prototype pollution in json-bigint npm package 1.0.0 may lead to a denial-of-service DoS attack...
Design/Logic Flaw
Prototype pollution in json-bigint npm package 1.0.0 may lead to a denial-of-service DoS attack...
CVE-2020-8237
Prototype pollution in json-bigint npm package 1.0.0 may lead to a denial-of-service DoS attack...
CVE-2020-8237
Prototype pollution in json-bigint npm package 1.0.0 may lead to a denial-of-service DoS attack...
CVE-2020-8237
CVE-2020-8237 describes a DoS via prototype pollution in the json-bigint npm package (
0chain (>=1.0.1, <=1.3.14), 20scoops-localizer (>=1.0.0, <=1.2.8) +3050 more potentially affected by CVE-2020-8237 via json-bigint (>=0.1.4, <=0.4.0)
json-bigint NPM version =0.1.4, =1.0.1, =1.0.0, =2.0.0, =0.1.0, =1.0.0, =1.0.24, =1.5.4, =1.9.6, =1.1.0, =1.4.1-beta, =0.0.1, =0.0.14, =0.0.14, =0.0.13, =0.0.14, =0.0.16 and more Source cves: CVE-2020-8237 Source advisory: MEND:CVE-2020-8237...
CVE-2020-8237
Prototype pollution in json-bigint npm package 1.0.0 may lead to a denial-of-service DoS attack...
CVE-2020-8237: Uncontrolled Resource Consumption
Prototype pollution in json-bigint npm package 1.0.0 may lead to a denial-of-service DoS attack...
PT-2020-20048
Name of the Vulnerable Software and Affected Versions json-bigint versions prior to 1.0.0 Description The issue is related to prototype pollution in the json-bigint npm package, which may lead to a denial-of-service DoS attack. Recommendations For versions prior to 1.0.0, update to version 1.0.0 ...
GHSA-9R3M-MHFM-39CM Incorrect Calculation in bigint-money
Versions of bigint-money prior to 0.6.2 are vulnerable to an Incorrect Calculation. The package incorrectly rounded certain numbers, which could have drastic consequences due to its usage in financial systems. Recommendation Upgrade to version 0.6.2 or later...
Incorrect Calculation in bigint-money
Versions of bigint-money prior to 0.6.2 are vulnerable to an Incorrect Calculation. The package incorrectly rounded certain numbers, which could have drastic consequences due to its usage in financial systems. Recommendation Upgrade to version 0.6.2 or later...