Lucene search
+L

5739 matches found

RedHat Linux
RedHat Linux
added 2021/12/09 12:58 p.m.9 views

Mozilla: GC rooting failure when calling wasm instance methods

The Mozilla Foundation Security Advisory describes this flaw as: Failure to correctly record the location of live pointers across wasm instance calls resulted in a GC occurring within the call not tracing those live pointers. This could have led to a use-after-free causing a potentially exploitab...

8.8CVSS7.3AI score0.0162EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2021/12/09 12:43 p.m.13 views

Mozilla: GC rooting failure when calling wasm instance methods

The Mozilla Foundation Security Advisory describes this flaw as: Failure to correctly record the location of live pointers across wasm instance calls resulted in a GC occurring within the call not tracing those live pointers. This could have led to a use-after-free causing a potentially exploitab...

8.8CVSS7.3AI score0.0162EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2021/12/09 12:41 p.m.11 views

Mozilla: GC rooting failure when calling wasm instance methods

The Mozilla Foundation Security Advisory describes this flaw as: Failure to correctly record the location of live pointers across wasm instance calls resulted in a GC occurring within the call not tracing those live pointers. This could have led to a use-after-free causing a potentially exploitab...

8.8CVSS7.3AI score0.0162EPSS
SaveExploits0References4
Veracode
Veracode
added 2021/12/09 9:12 a.m.26 views

Authentication Bypass

github.com/grafana/agent is vulnerable to authentication bypass. The library does not properly restrict access to config endpoints, allowing an attacker to authenticate against a system for discovering Prometheus targets and collecting metrics leads to information disclosure...

7.5CVSS4.2AI score0.00736EPSS
SaveExploits0References7Affected Software1
OSV
OSV
added 2021/12/08 10:15 p.m.1 views

DEBIAN-CVE-2021-43539

Failure to correctly record the location of live pointers across wasm instance calls resulted in a GC occurring within the call not tracing those live pointers. This could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Thunderbird 91.4.0, Firefox...

8.8CVSS8.1AI score0.0162EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/12/08 10:15 p.m.6 views

CVE-2021-43539

Failure to correctly record the location of live pointers across wasm instance calls resulted in a GC occurring within the call not tracing those live pointers. This could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Thunderbird 91.4.0, Firefox...

8.8CVSS7.3AI score0.0162EPSS
SaveExploits0References11
Prion
Prion
added 2021/12/08 10:15 p.m.31 views

Design/Logic Flaw

Failure to correctly record the location of live pointers across wasm instance calls resulted in a GC occurring within the call not tracing those live pointers. This could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Thunderbird 91.4.0, Firefox...

6.8CVSS8.7AI score0.0162EPSS
SaveExploits0References10Affected Software4
RedHat Linux
RedHat Linux
added 2021/12/08 10:36 a.m.15 views

Mozilla: GC rooting failure when calling wasm instance methods

The Mozilla Foundation Security Advisory describes this flaw as: Failure to correctly record the location of live pointers across wasm instance calls resulted in a GC occurring within the call not tracing those live pointers. This could have led to a use-after-free causing a potentially exploitab...

8.8CVSS7.3AI score0.0162EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2021/12/08 10:16 a.m.11 views

Mozilla: GC rooting failure when calling wasm instance methods

The Mozilla Foundation Security Advisory describes this flaw as: Failure to correctly record the location of live pointers across wasm instance calls resulted in a GC occurring within the call not tracing those live pointers. This could have led to a use-after-free causing a potentially exploitab...

8.8CVSS7.3AI score0.0162EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2021/12/08 10:16 a.m.11 views

Mozilla: GC rooting failure when calling wasm instance methods

The Mozilla Foundation Security Advisory describes this flaw as: Failure to correctly record the location of live pointers across wasm instance calls resulted in a GC occurring within the call not tracing those live pointers. This could have led to a use-after-free causing a potentially exploitab...

8.8CVSS7.3AI score0.0162EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2021/12/08 10:13 a.m.10 views

Mozilla: GC rooting failure when calling wasm instance methods

The Mozilla Foundation Security Advisory describes this flaw as: Failure to correctly record the location of live pointers across wasm instance calls resulted in a GC occurring within the call not tracing those live pointers. This could have led to a use-after-free causing a potentially exploitab...

8.8CVSS7.3AI score0.0162EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2021/12/08 10:02 a.m.16 views

Mozilla: GC rooting failure when calling wasm instance methods

The Mozilla Foundation Security Advisory describes this flaw as: Failure to correctly record the location of live pointers across wasm instance calls resulted in a GC occurring within the call not tracing those live pointers. This could have led to a use-after-free causing a potentially exploitab...

8.8CVSS7.3AI score0.0162EPSS
SaveExploits0References4
OSV
OSV
added 2021/12/08 12:00 a.m.22 views

UBUNTU-CVE-2021-43539

Failure to correctly record the location of live pointers across wasm instance calls resulted in a GC occurring within the call not tracing those live pointers. This could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Thunderbird 91.4.0, Firefox...

8.8CVSS7.3AI score0.0162EPSS
SaveExploits0References8
ThreatPost
ThreatPost
added 2021/11/24 5:28 p.m.127 views

9.3M+ Androids Running ‘Malicious’ Games from Huawei AppGallery

Why would a game about a cat’s “cute diary” need permission to make phone calls or suss out your location? It doesn’t: “Cat cute diary” is one of 190 trojanized games that Doctor Web malware analysts have found on AppGallery, the official app store for Huawei Android. They’re littering the Androi...

6.9AI score
SaveExploits0References10
ATTACKERKB
ATTACKERKB
added 2021/11/23 10:15 p.m.7 views

CVE-2021-37998

Use after free in Garbage Collection in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.3AI score0.00942EPSS
SaveExploits0References6
NVD
NVD
added 2021/11/23 10:15 p.m.24 views

CVE-2021-37998

Use after free in Garbage Collection in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS0.00942EPSS
SaveExploits0References4
OSV
OSV
added 2021/11/23 10:15 p.m.2 views

DEBIAN-CVE-2021-37998

Use after free in Garbage Collection in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.2AI score0.00942EPSS
SaveExploits0References1
Prion
Prion
added 2021/11/23 10:15 p.m.30 views

Design/Logic Flaw

Use after free in Garbage Collection in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

6.8CVSS9AI score0.00942EPSS
SaveExploits0References4Affected Software3
CVE
CVE
added 2021/11/23 9:30 p.m.150 views

CVE-2021-37998

CVE-2021-37998 is a use-after-free vulnerability in the Garbage Collection component of the Chromium browser engine (Chrome) prior to 95.0.4638.69. The issue could allow a remote attacker to cause heap corruption via a crafted HTML page, potentially enabling arbitrary code execution. Public recor...

8.8CVSS9AI score0.00942EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2021/11/23 9:30 p.m.28 views

CVE-2021-37998

Use after free in Garbage Collection in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

9.3AI score0.00942EPSS
SaveExploits0References4
Rows per page
Query Builder