Lucene search
+L

449 matches found

Mend
Mend
•added 2022/07/22 11:36 p.m.•6 views

CVE-2022-1127

Use after free in QR Code Generator in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via user interaction...

8.8CVSS0.00919EPSS
SaveExploits1References5
CVE
CVE
•added 2022/07/22 11:36 p.m.•208 views

CVE-2022-1127

CVE-2022-1127 concerns Google Chrome prior to version 100.0.4896.60, with a use-after-free in the QR Code Generator that could allow a remote attacker, after convincing a user to perform specific interactions, to potentially exploit heap corruption. The issue is tied to Chrome’s QR Code Generator...

8.8CVSS8.9AI score0.00919EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/22 12:00 a.m.•3 views

CVE-2022-1127: Use After Free

Use after free in QR Code Generator in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via user interaction...

8.8CVSS8.7AI score0.00919EPSS
SaveExploits1References2
Github Security Blog
Github Security Blog
•added 2022/07/21 10:34 p.m.•63 views

Cranelift vulnerable to miscompilation of constant values in division on AArch64

Impact There was a bug in Wasmtime's code generator, Cranelift, for AArch64 targets where constant divisors could result in incorrect division results at runtime. The translation rules for constants did not take into account whether sign- or zero-extension should happen, which resulted in an...

7.5CVSS7.4AI score0.00924EPSS
SaveExploits0References5Affected Software2
OSV
OSV
•added 2022/07/21 10:34 p.m.•82 views

GHSA-7F6X-JWH5-M9R4 Cranelift vulnerable to miscompilation of constant values in division on AArch64

Impact There was a bug in Wasmtime's code generator, Cranelift, for AArch64 targets where constant divisors could result in incorrect division results at runtime. The translation rules for constants did not take into account whether sign- or zero-extension should happen, which resulted in an...

5.9CVSS6.7AI score0.00924EPSS
SaveExploits1References5
Mend
Mend
•added 2022/07/21 1:50 p.m.•6 views

CVE-2022-31169

Wasmtime is a standalone runtime for WebAssembly. There is a bug in Wasmtime's code generator, Cranelift, for AArch64 targets where constant divisors can result in incorrect division results at runtime. This affects Wasmtime prior to version 0.38.2 and Cranelift prior to 0.85.2. This issue only...

8.2CVSS0.00924EPSS
SaveExploits0References6
OSV
OSV
•added 2022/07/20 10:30 p.m.•33 views

CVE-2022-31146 Use After Free in Wasmtime

Wasmtime is a standalone runtime for WebAssembly. There is a bug in the Wasmtime's code generator, Cranelift, where functions using reference types may be incorrectly missing metadata required for runtime garbage collection. This means that if a GC happens at runtime then the GC pass will...

6.4CVSS8.6AI score
SaveExploits0References5
OpenVAS
OpenVAS
•added 2022/07/18 12:00 a.m.•27 views

Fedora: Security Advisory for golang-github-dave-jennifer (FEDORA-2022-3969b64d4b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.3CVSS8.9AI score0.0995EPSS
SaveExploits4References2
OpenVAS
OpenVAS
•added 2022/07/18 12:00 a.m.•20 views

Fedora: Security Advisory for golang-k8s-code-generator (FEDORA-2022-3969b64d4b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.3CVSS8.9AI score0.0995EPSS
SaveExploits4References2
Fedora
Fedora
•added 2022/07/17 1:15 a.m.•23 views

[SECURITY] Fedora 35 Update: golang-github-dave-jennifer-1.4.1-5.fc35

Jennifer is a code generator for Go...

9.3CVSS1.5AI score0.0995EPSS
SaveExploits4
Fedora
Fedora
•added 2022/07/17 1:15 a.m.•51 views

[SECURITY] Fedora 35 Update: act-1.6.0-6.fc35

The Automatic Component Toolkit ACT is a code generator that takes an instance of an Interface Description Language file and generates a thin C89-API, implementation stubs and language bindings of your desired software component...

9.3CVSS2.2AI score0.0995EPSS
SaveExploits4
OpenVAS
OpenVAS
•added 2022/07/06 12:00 a.m.•19 views

Fedora: Security Advisory for act (FEDORA-2022-fae3ecee19)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.3CVSS8.9AI score0.0995EPSS
SaveExploits4References2
OpenVAS
OpenVAS
•added 2022/07/06 12:00 a.m.•34 views

Fedora: Security Advisory for golang-github-dave-jennifer (FEDORA-2022-fae3ecee19)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.3CVSS8.9AI score0.0995EPSS
SaveExploits4References2
OpenVAS
OpenVAS
•added 2022/07/06 12:00 a.m.•40 views

Fedora: Security Advisory for golang-k8s-code-generator (FEDORA-2022-fae3ecee19)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS8.9AI score0.0995EPSS
SaveExploits3References2
Fedora
Fedora
•added 2022/07/04 1:35 a.m.•22 views

[SECURITY] Fedora 36 Update: golang-github-dave-jennifer-1.4.1-5.fc36

Jennifer is a code generator for Go...

9.3CVSS8.3AI score0.0995EPSS
SaveExploits4
Fedora
Fedora
•added 2022/07/04 1:35 a.m.•52 views

[SECURITY] Fedora 36 Update: act-1.6.0-6.fc36

The Automatic Component Toolkit ACT is a code generator that takes an instance of an Interface Description Language file and generates a thin C89-API, implementation stubs and language bindings of your desired software component...

9.3CVSS8.3AI score0.0995EPSS
SaveExploits4
OSSF Malicious Packages
OSSF Malicious Packages
•added 2022/06/20 8:17 p.m.•6 views

Malicious code in util-raml-code-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 799fc21544f2a219ef768485dd268c4ff8ce0c60253b674a5941ef22ad018be5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2022/06/20 8:10 p.m.•6 views

Malicious code in random-vouchercode-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6bbacfc884557460a66c2cfc6df6b2615f6de1009a2aa4305e728411f9212fcd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OpenVAS
OpenVAS
•added 2022/04/29 12:00 a.m.•19 views

Fedora: Security Advisory for golang-k8s-code-generator (FEDORA-2022-5cbd6de569)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS10AI score0.03931EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2022/04/29 12:00 a.m.•17 views

Fedora: Security Advisory for golang-k8s-code-generator (FEDORA-2022-3a63897745)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS10AI score0.03931EPSS
SaveExploits0References2
Rows per page
Query Builder