Lucene search
+L

6353 matches found

OSV
OSV
added 2019/05/08 5:29 p.m.4 views

CVE-2019-2053

In wnmparseneighborreportelem of wnmsta.c, there is a possible out-of-bounds read due to missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0...

5.5CVSS6.5AI score0.00171EPSS
SaveExploits0References1
OSV
OSV
added 2019/05/08 5:29 p.m.4 views

UBUNTU-CVE-2019-2053

In wnmparseneighborreportelem of wnmsta.c, there is a possible out-of-bounds read due to missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0...

5.5CVSS7.4AI score0.00171EPSS
SaveExploits0References3
CNVD
CNVD
added 2019/05/07 12:0 a.m.6 views

Google Android System Buffer Overflow Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A buffer overflow vulnerability exists in the wnmparseneighborreportelem of wnmsta.c file in Android. The vulnerability stems from a network system or product performing operation...

5.5CVSS7.3AI score0.00171EPSS
SaveExploits0References1
Veracode
Veracode
added 2019/05/02 6:45 a.m.19 views

Denial Of Service (DoS)

Firefox is vulnerable to use-after-free vulnerability. This occurs when manipulating the DOM during the resize event of an image element. This could result in a potentially exploitable crash when the freed elements are accessed if these elements have been freed due to lack of strong references...

9.8CVSS9.3AI score0.02711EPSS
SaveExploits1References13Affected Software2
Veracode
Veracode
added 2019/05/02 5:18 a.m.27 views

Remote Code Execution (RCE)

firefox/thunderbird is vulnerable to remote code execution. A use-after-free vulnerability in the HTMLVideoElement interface allows remote attackers to execute arbitrary code via Javascript code that modifies the URI table of a media element...

7.5CVSS9.7AI score0.0608EPSS
SaveExploits0References24Affected Software2
Prion
Prion
added 2019/04/29 2:29 p.m.25 views

Code injection

Element Plug-in for vCenter Server versions prior to 4.2.3 may disclose sensitive account information to an unauthenticated attacker. NetApp HCI Compute Node versions prior to 1.4P2 bundle affected versions of Element Plug-in for vCenter Server...

5CVSS7.5AI score0.01542EPSS
SaveExploits0References2Affected Software2
CVE
CVE
added 2019/04/29 1:49 p.m.84 views

CVE-2019-5492

CVE-2019-5492 affects Element Plug-in for vCenter Server prior to 4.2.3, with NetApp HCI Compute Node versions prior to 1.4P2 bundle affecting the same plug-in. The vulnerability is that it may disclose sensitive account information to an unauthenticated attacker. The available connected document...

7.5CVSS7.4AI score0.01542EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2019/04/26 5:29 p.m.7 views

CVE-2019-9797

Cross-origin images can be read in violation of the same-origin policy by exporting an image after using createImageBitmap to read the image and then rendering the resulting bitmap image within a canvas element. This vulnerability affects Firefox 66...

5.3CVSS8.7AI score
SaveExploits0References19
NVD
NVD
added 2019/04/26 5:29 p.m.14 views

CVE-2019-9797

Cross-origin images can be read in violation of the same-origin policy by exporting an image after using createImageBitmap to read the image and then rendering the resulting bitmap image within a canvas element. This vulnerability affects Firefox 66...

5.3CVSS5.3AI score0.01109EPSS
SaveExploits0References19
NVD
NVD
added 2019/04/26 5:29 p.m.22 views

CVE-2019-9790

A use-after-free vulnerability can occur when a raw pointer to a DOM element on a page is obtained using JavaScript and the element is then removed while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 60.6, Firefox ESR 60.6, and Firefox 66...

9.8CVSS9.3AI score0.01838EPSS
SaveExploits0References6
OSV
OSV
added 2019/04/26 5:29 p.m.10 views

CVE-2019-9790

A use-after-free vulnerability can occur when a raw pointer to a DOM element on a page is obtained using JavaScript and the element is then removed while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 60.6, Firefox ESR 60.6, and Firefox 66...

9.8CVSS9.2AI score
SaveExploits0References6
Prion
Prion
added 2019/04/26 5:29 p.m.21 views

Design/Logic Flaw

A use-after-free vulnerability can occur when a raw pointer to a DOM element on a page is obtained using JavaScript and the element is then removed while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 60.6, Firefox ESR 60.6, and Firefox 66...

7.5CVSS9.1AI score0.01838EPSS
SaveExploits0References6Affected Software3
Prion
Prion
added 2019/04/26 5:29 p.m.35 views

Cross site scripting

Cross-origin images can be read from a canvas element in violation of the same-origin policy using the transferFromImageBitmap method. Note: This only affects Firefox 65. Previous versions are unaffected.. This vulnerability affects Firefox 65.0.1...

4.3CVSS5.6AI score0.01622EPSS
SaveExploits0References19Affected Software1
OSV
OSV
added 2019/04/26 5:29 p.m.6 views

CVE-2018-18511

Cross-origin images can be read from a canvas element in violation of the same-origin policy using the transferFromImageBitmap method. Note: This only affects Firefox 65. Previous versions are unaffected.. This vulnerability affects Firefox 65.0.1...

4.3CVSS8.7AI score
SaveExploits0References19
Cvelist
Cvelist
added 2019/04/26 4:13 p.m.25 views

CVE-2018-18511

Cross-origin images can be read from a canvas element in violation of the same-origin policy using the transferFromImageBitmap method. Note: This only affects Firefox 65. Previous versions are unaffected.. This vulnerability affects Firefox 65.0.1...

5.5AI score0.01622EPSS
SaveExploits0References19
Debian CVE
Debian CVE
added 2019/04/26 4:13 p.m.30 views

CVE-2019-9790

A use-after-free vulnerability can occur when a raw pointer to a DOM element on a page is obtained using JavaScript and the element is then removed while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 60.6, Firefox ESR 60.6, and Firefox 66...

9.8CVSS10AI score0.01838EPSS
SaveExploits0
CVE
CVE
added 2019/04/26 4:13 p.m.468 views

CVE-2019-9797

CVE-2019-9797: Cross-origin images can be read in violation of the same-origin policy by exporting an image after read-through createImageBitmap and rendering the bitmap on a canvas. Affected product: Mozilla Firefox; impact is cross-origin image theft via canvas rendering. The vulnerability expl...

5.3CVSS5.8AI score0.01109EPSS
SaveExploits0References19Affected Software1
AlpineLinux
AlpineLinux
added 2019/04/26 4:13 p.m.61 views

CVE-2019-9797

Cross-origin images can be read in violation of the same-origin policy by exporting an image after using createImageBitmap to read the image and then rendering the resulting bitmap image within a canvas element. This vulnerability affects Firefox 66...

5.3CVSS6.2AI score0.01109EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2019/04/25 12:0 a.m.12 views

The vulnerability of Firefox and Firefox ESR browsers, related to the use of memory after it is freed, allows a hacker to trigger a service failure.

The vulnerability of Firefox and Firefox ESR browsers relates to the use of a pointer to a DOM element obtained through JavaScript the element is removed during use. Exploiting this vulnerability can allow an attacker acting locally to cause a service failure...

8.8CVSS7.4AI score0.01838EPSS
SaveExploits0References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2019/04/25 12:0 a.m.15 views

The vulnerability of the xml_elem_parse_buf() function in the PHP programming language lies in its ability to read data beyond the boundaries of the memory buffer, allowing an attacker to gain unauthorized access to protected data.

The vulnerability of the xmlelemparsebuf function ext/xmlrpc/libxmlrpc/xmlelement.c in the PHP interpreter is related to reading data beyond the boundaries of the memory buffer. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected data...

9.8CVSS6.8AI score0.10059EPSS
SaveExploits1References7Affected Software2
Rows per page
Query Builder