Lucene search
+L

264 matches found

osv_debian
osv_debian
•added 2023/08/01 3:15 p.m.•22 views

DEBIAN-CVE-2023-4046

In some circumstances, a stale value could have been used for a global variable in WASM JIT analysis. This resulted in incorrect compilation and a potentially exploitable crash in the content process. This vulnerability affects Firefox 116, Firefox ESR 102.14, and Firefox ESR 115.1...

5.3CVSS6.2AI score0.01125EPSS
SaveExploits0References1
NVD
NVD
•added 2023/08/01 3:15 p.m.•24 views

CVE-2023-4046

In some circumstances, a stale value could have been used for a global variable in WASM JIT analysis. This resulted in incorrect compilation and a potentially exploitable crash in the content process. This vulnerability affects Firefox 116, Firefox ESR 102.14, and Firefox ESR 115.1...

5.3CVSS6.8AI score0.01125EPSS
SaveExploits0References8
osv_cve
osv_cve
•added 2023/08/01 3:15 p.m.•16 views

CVE-2023-4046

In some circumstances, a stale value could have been used for a global variable in WASM JIT analysis. This resulted in incorrect compilation and a potentially exploitable crash in the content process. This vulnerability affects Firefox 116, Firefox ESR 102.14, and Firefox ESR 115.1...

5.3CVSS9.1AI score
SaveExploits0References8
CVE
CVE
•added 2023/08/01 2:57 p.m.•398 views

CVE-2023-4046

CVE-2023-4046 corresponds to a bug where an incorrect value used during WASM JIT compilation could cause a stale global variable to influence compilation, yielding an exploitable crash in the content process. The vulnerability affects Firefox plus ESR branches: Firefox < 116, ESR < 102.14, ...

5.3CVSS6.9AI score0.01125EPSS
SaveExploits0References8Affected Software1
Debian CVE
Debian CVE
•added 2023/08/01 2:57 p.m.•40 views

CVE-2023-4046

In some circumstances, a stale value could have been used for a global variable in WASM JIT analysis. This resulted in incorrect compilation and a potentially exploitable crash in the content process. This vulnerability affects Firefox 116, Firefox ESR 102.14, and Firefox ESR 115.1...

5.3CVSS8.1AI score0.01125EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2023/08/01 2:57 p.m.•35 views

CVE-2023-4046

In some circumstances, a stale value could have been used for a global variable in WASM JIT analysis. This resulted in incorrect compilation and a potentially exploitable crash in the content process. This vulnerability affects Firefox 116, Firefox ESR 102.14, and Firefox ESR 115.1...

5.3CVSS7.4AI score0.01125EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2023/08/01 12:00 a.m.•29 views

Mozilla Firefox ESR < 115.1

The version of Firefox ESR installed on the remote Windows host is prior to 115.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2023-31 advisory. - Memory safety bugs present in Firefox 115, Firefox ESR 115.0, and Thunderbird 115.0. Some of these bugs showed...

9.8CVSS7.5AI score0.12584EPSS
SaveExploits1References12
Mozilla
Mozilla
•added 2023/08/01 12:00 a.m.•68 views

Security Vulnerabilities fixed in Firefox ESR 115.1 — Mozilla

Offscreen Canvas did not properly track cross-origin tainting, which could have been used to access image data from another site in violation of same-origin policy. In some circumstances, a stale value could have been used for a global variable in WASM JIT analysis. This resulted in incorrect...

8.8CVSS7.3AI score0.12584EPSS
SaveExploits1References11Affected Software1
osv_ubuntu
osv_ubuntu
•added 2023/08/01 12:00 a.m.•16 views

UBUNTU-CVE-2023-4046

In some circumstances, a stale value could have been used for a global variable in WASM JIT analysis. This resulted in incorrect compilation and a potentially exploitable crash in the content process. This vulnerability affects Firefox 116, Firefox ESR 102.14, and Firefox ESR 115.1...

5.3CVSS6.6AI score0.01125EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2023/08/01 12:00 a.m.•33 views

CVE-2023-4046

In some circumstances, a stale value could have been used for a global variable in WASM JIT analysis. This resulted in incorrect compilation and a potentially exploitable crash in the content process. This vulnerability affects Firefox 116, Firefox ESR 102.14, and Firefox ESR 115.1...

5.3CVSS6.8AI score0.01125EPSS
SaveExploits0References8
osv_cve
osv_cve
•added 2023/03/06 8:15 a.m.•18 views

CVE-2023-1187

A vulnerability was found in FabulaTech Webcam for Remote Desktop 2.8.42 and classified as problematic. This issue affects some unknown processing in the library ftwebcam.sys of the component Global Variable Handler. The manipulation leads to denial of service. It is possible to launch the attack...

5.5CVSS4.7AI score0.00366EPSS
SaveExploits1References3
NVD
NVD
•added 2023/03/06 8:15 a.m.•24 views

CVE-2023-1187

A vulnerability was found in FabulaTech Webcam for Remote Desktop 2.8.42 and classified as problematic. This issue affects some unknown processing in the library ftwebcam.sys of the component Global Variable Handler. The manipulation leads to denial of service. It is possible to launch the attack...

5.5CVSS4.5AI score0.00366EPSS
SaveExploits1References3
CVE
CVE
•added 2023/03/06 7:09 a.m.•78 views

CVE-2023-1187

FabulaTech Webcam for Remote Desktop (version 2.8.42) is affected by a vulnerability in the library ftwebcam.sys within the Global Variable Handler, causing a denial of service when exploited locally. The issue has public exploit visibility. Mitigation guidance from PT-2023-16808 and related sour...

5.5CVSS4.7AI score0.00366EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2023/03/06 7:09 a.m.•37 views

CVE-2023-1187 FabulaTech Webcam for Remote Desktop Global Variable ftwebcam.sys denial of service

A vulnerability was found in FabulaTech Webcam for Remote Desktop 2.8.42 and classified as problematic. This issue affects some unknown processing in the library ftwebcam.sys of the component Global Variable Handler. The manipulation leads to denial of service. It is possible to launch the attack...

3.3CVSS5.8AI score0.00366EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/06 12:00 a.m.•8 views

CVE-2023-1187: Improper Resource Shutdown or Release

A vulnerability was found in FabulaTech Webcam for Remote Desktop 2.8.42 and classified as problematic. This issue affects some unknown processing in the library ftwebcam.sys of the component Global Variable Handler. The manipulation leads to denial of service. It is possible to launch the attack...

5.5CVSS5.2AI score0.00366EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/03/06 12:00 a.m.•16 views

PT-2023-16808 · Fabulatech · Fabulatech Webcam For Remote Desktop

Name of the Vulnerable Software and Affected Versions: FabulaTech Webcam for Remote Desktop version 2.8.42 Description: A vulnerability was found in the library ftwebcam.sys of the component Global Variable Handler, which affects some unknown processing and leads to denial of service. The...

5.5CVSS7.1AI score0.00366EPSS
SaveExploits1References6
GitLab Advisory Database
GitLab Advisory Database
•added 2022/06/28 12:00 a.m.•44 views

Missing Release of Memory after Effective Lifetime

DCMTK through 3.6.6 does not handle memory free properly. The malloced memory for storing all file information are recorded in a global variable LST and are not freed properly. Sending specific requests to the dcmqrdb program can incur a memory leak. An attacker can use it to launch a DoS attack...

7.5CVSS2AI score0.01794EPSS
SaveExploits0References3Affected Software1
vulnersOsv
vulnersOsv
•added 2022/05/24 5:46 p.m.•3 views

org.jenkins-ci.main:jenkins-test-harness (1.525), org.jenkins-ci.main:jenkins-war (1.525) +5 more potentially affected by CVE-2021-21640 via org.jenkins-ci.main:jenkins-core (1.525)

org.jenkins-ci.main:jenkins-core MAVEN version 1.525 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.525 - org.jenkins-ci.main:jenkins-war 1.525 -...

4.3CVSS0.01905EPSS
SaveExploits0
CNVD
CNVD
•added 2022/05/19 12:00 a.m.•29 views

Jenkins Global Variable String Parameter Plugin跨站脚本漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application software.A cross-site scripting vulnerabili...

5.4CVSS1.4AI score0.0077EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2022/05/18 12:00 a.m.•47 views

Cross-site Scripting in Jenkins Global Variable String Parameter Plugin

Jenkins Global Variable String Parameter Plugin 1.2 and earlier does not escape the name and description of Global Variable String parameters on views displaying parameters. This results in stored cross-site scripting XSS vulnerabilities exploitable by attackers with Item/Configure permission...

5.4CVSS5.8AI score0.0077EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder