Lucene search
+L

6346 matches found

BDU FSTEC
BDU FSTEC
added 2016/07/06 12:0 a.m.10 views

The vulnerability of Google Chrome browser allows a malicious actor to trigger a service failure.

Google Chrome browser contains a vulnerability related to memory reuse after deallocation use-after-free error in the HTMLBodyElement::insertedInto function in core/html/HTMLBodyElement.cpp of Blink. Exploiting this vulnerability allows malicious actors to cause system failures or other adverse...

7.5CVSS7.7AI score0.0187EPSS
SaveExploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/07/06 12:0 a.m.13 views

The vulnerability of the SeaMonkey software allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.

A vulnerability exists in the mozilla::dom::TextTrack::AddCue function in Mozilla Firefox and SeaMonkey due to improper garbage collection of text track management variables. Exploiting this vulnerability allows malicious actors to execute arbitrary code or cause service failures e.g., errors whe...

9.3CVSS8.2AI score0.04414EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/07/05 12:0 a.m.9 views

The vulnerability of Google Chrome browser allows a malicious actor to trigger a service failure.

Google Chrome browser contains a vulnerability related to memory reuse after deallocation use-after-free error in the HTMLBodyElement::insertedInto function in core/html/HTMLBodyElement.cpp of Blink. Exploiting this vulnerability allows malicious actors to cause system failures or other adverse...

7.5CVSS7.7AI score0.01369EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/07/05 12:0 a.m.12 views

The vulnerability of the Internet Explorer browser, which allows a malicious actor to execute arbitrary code

Internet Explorer contains a vulnerability related to the use of memory after its release use-after-free error when working with the CFormElement and CInput objects. Exploiting this vulnerability allows malicious actors, operating remotely, to execute arbitrary code using a specially created...

9.3CVSS5.9AI score0.46767EPSS
SaveExploits3References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/07/05 12:0 a.m.11 views

The vulnerability of Google Chrome browser allows a malicious actor to trigger a service failure.

The Google Chrome browser contains a vulnerability related to memory reuse after deallocation use-after-free error in the browser/ui/views/speechrecognitionbubbleviews.cc file. Exploiting this vulnerability allows malicious actors to remotely cause system failures or other adverse effects through...

7.5CVSS7.7AI score0.01623EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/07/05 12:0 a.m.14 views

The vulnerability of Google Chrome browser allows a malicious actor to trigger a service failure.

The Google Chrome browser contains a vulnerability related to memory reuse after deallocation use-after-free error in the browser/ui/views/speechrecognitionbubbleviews.cc file. Exploiting this vulnerability allows malicious actors to remotely cause system failures or other adverse effects through...

7.5CVSS7.7AI score0.01623EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/07/05 12:0 a.m.8 views

The vulnerability of the Firefox browser, which allows a malicious actor to bypass domain restriction rules

The Mozilla Firefox browser contains a vulnerability related to errors in the implementation of class functions. Exploiting this vulnerability allows malicious actors to circumvent Domain Restrictions Policy SOP rules and gain access to confidential information through the use of IFrame elements...

6.8CVSS7AI score0.02467EPSS
SaveExploits0References5Affected Software1
CNVD
CNVD
added 2016/06/24 12:0 a.m.8 views

libEBML Double Release Vulnerability

libEBML is a C++ library maintained by the Matroska team for parsing EBML an audio/video framework files. A double release vulnerability exists in libEBML. An attacker can exploit this vulnerability by leveraging the Track element of the MKV container to cause post-release reuse...

6.9AI score
SaveExploits0References1
Cvelist
Cvelist
added 2016/06/19 8:0 p.m.36 views

CVE-2015-7776

Cybozu Garoon 3.x and 4.x before 4.2.0 does not properly restrict loading of IMG elements, which makes it easier for remote attackers to track users via a crafted HTML e-mail message, a different vulnerability than CVE-2016-1196...

4.7AI score0.01298EPSS
SaveExploits0References6
OSV
OSV
added 2016/06/13 10:59 a.m.2 views

DEBIAN-CVE-2016-2821

Use-after-free vulnerability in the mozilla::dom::Element class in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2, when contenteditable mode is enabled, allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption by triggering deletion of DO...

7.5CVSS8.6AI score0.02771EPSS
SaveExploits0References1
OSV
OSV
added 2016/06/13 10:59 a.m.7 views

CVE-2016-2819

Heap-based buffer overflow in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allows remote attackers to execute arbitrary code via foreign-context HTML5 fragments, as demonstrated by fragments within an SVG element...

8.8CVSS9.1AI score
SaveExploits0References12
NVD
NVD
added 2016/06/13 10:59 a.m.21 views

CVE-2016-2819

Heap-based buffer overflow in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allows remote attackers to execute arbitrary code via foreign-context HTML5 fragments, as demonstrated by fragments within an SVG element...

8.8CVSS9.1AI score0.23957EPSS
SaveExploits7References12
Prion
Prion
added 2016/06/13 10:59 a.m.23 views

Heap overflow

Heap-based buffer overflow in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allows remote attackers to execute arbitrary code via foreign-context HTML5 fragments, as demonstrated by fragments within an SVG element...

6.8CVSS8.5AI score0.23957EPSS
SaveExploits7References12Affected Software6
Prion
Prion
added 2016/06/13 10:59 a.m.24 views

Code injection

Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allow remote attackers to spoof the address bar via a SELECT element with a persistent menu...

4.3CVSS6.8AI score0.02026EPSS
SaveExploits0References11Affected Software6
Debian CVE
Debian CVE
added 2016/06/13 10:0 a.m.40 views

CVE-2016-2821

Use-after-free vulnerability in the mozilla::dom::Element class in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2, when contenteditable mode is enabled, allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption by triggering deletion of DO...

7.5CVSS9.4AI score0.02771EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2016/06/13 10:0 a.m.29 views

CVE-2016-2819

Heap-based buffer overflow in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allows remote attackers to execute arbitrary code via foreign-context HTML5 fragments, as demonstrated by fragments within an SVG element...

8.8CVSS10AI score0.23957EPSS
SaveExploits7
Debian CVE
Debian CVE
added 2016/06/13 10:0 a.m.30 views

CVE-2016-2822

Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allow remote attackers to spoof the address bar via a SELECT element with a persistent menu...

6.5CVSS8.5AI score0.02026EPSS
SaveExploits0
OSV
OSV
added 2016/06/09 4:59 p.m.4 views

DEBIAN-CVE-2016-4447

The xmlParseElementDecl function in parser.c in libxml2 before 2.9.4 allows context-dependent attackers to cause a denial of service heap-based buffer underread and application crash via a crafted file, involving xmlParseName...

7.5CVSS7.6AI score0.1398EPSS
SaveExploits1References1
RedHat Linux
RedHat Linux
added 2016/06/08 5:0 p.m.10 views

Mozilla: Addressbar spoofing though the SELECT element (MFSA 2016-52)

Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allow remote attackers to spoof the address bar via a SELECT element with a persistent menu...

6.5CVSS7.4AI score0.02026EPSS
SaveExploits0References5
OSV
OSV
added 2016/06/08 12:0 a.m.7 views

UBUNTU-CVE-2016-2821

Use-after-free vulnerability in the mozilla::dom::Element class in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2, when contenteditable mode is enabled, allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption by triggering deletion of DO...

7.5CVSS7.5AI score0.02771EPSS
SaveExploits0References4
Rows per page
Query Builder