Lucene search
K

26 matches found

Redos
Redos
added yesterday3 views

ROS-20260610-73-0014

The vulnerability of the IndexedDB component in browsers such as Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to the exposure of information. Exploiting this vulnerability can allow an attacker to compromise the confidentiality and accessibility of protected informati...

6.5CVSS5.8AI score0.00065EPSS
Exploits1
NVD
NVD
added 6 days ago3 views

CVE-2026-11246

Insufficient validation of untrusted input in IndexedDB in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page. Chromium security severity: Low...

5.3CVSS0.00032EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2026/02/24 12:0 a.m.3 views

Mozilla Thunderbird < 148.0

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 148.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-16 advisory. - Memory safety bugs present in Firefox 147 and Thunderbird 147. Some of these bugs showed evidence of...

10CVSS7.7AI score0.00145EPSS
Exploits2References51
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2017-16818

Malware in sbrugna...

7.5CVSS8.6AI score0.0088EPSS
Exploits1References13
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2019-3422

Malware in sbrugna...

9.3CVSS9.3AI score0.00738EPSS
Exploits0References26
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2019-5113

Malware in sbrugna...

8.8CVSS8.5AI score0.0194EPSS
Exploits0References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2017-14200

Malware in sbrugna...

8.8CVSS9.1AI score0.01098EPSS
Exploits0References11
Tenable Nessus
Tenable Nessus
added 2025/08/11 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2024-7528

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect garbage collection interaction in IndexedDB could have led to a use-after-free. This vulnerability affects Firefox 129, Firefox ESR 128.1, and...

9.8CVSS7.5AI score0.00238EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2024/09/30 12:0 a.m.1 views

The vulnerability of the IndexedDB component in the Google Chrome web browser, which allows a hacker to trigger a service failure

The vulnerability of the IndexedDB component in the Google Chrome web browser relates to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to cause a service failure through a specially created HTML page...

7.8CVSS7AI score0.00831EPSS
Exploits0References6Affected Software2
SUSE CVE
SUSE CVE
added 2023/02/15 4:16 a.m.1 views

SUSE CVE-2019-5826

Use after free in IndexedDB in Google Chrome prior to 73.0.3683.86 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page...

6.5CVSS7.3AI score0.00831EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 4:10 a.m.1 views

SUSE CVE-2019-13693

Use after free in IndexedDB in Google Chrome prior to 77.0.3865.120 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page...

8.8CVSS8.4AI score0.0194EPSS
Exploits0References8
BDU FSTEC
BDU FSTEC
added 2022/05/26 12:0 a.m.2 views

The vulnerability of Google Chrome’s IndexedDB function allows attackers to execute arbitrary code.

The vulnerability of the IndexedDB function in Google Chrome browser is related to the use of memory after deallocation. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

10CVSS7.2AI score0.01124EPSS
Exploits1References10Affected Software6
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.42 views

Mageia: Security Advisory (MGASA-2015-0036)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS9.8AI score0.04178EPSS
Exploits0References7
BDU FSTEC
BDU FSTEC
added 2021/09/29 12:0 a.m.1 views

The vulnerability of the Indexed DB API for browser storage interfaces in Google Chrome and Microsoft Edge allows a attacker to trigger a service failure or execute arbitrary code.

The vulnerability of the Indexed DB API for browser-based structured data storage in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code through a specially...

10CVSS8.2AI score0.30063EPSS
Exploits0References9Affected Software5
OSV
OSV
added 2021/04/26 5:15 p.m.2 views

CVE-2021-21207

Use after free in IndexedDB in Google Chrome prior to 90.0.4430.72 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension...

8.6CVSS9.4AI score
Exploits0References7
BDU FSTEC
BDU FSTEC
added 2020/04/21 12:0 a.m.2 views

The vulnerability in Google Chrome’s built-in Database API, IndexedDB, allows a hacker to gain unauthorized access to information and compromise its integrity and accessibility.

The vulnerability of Google Chrome’s built-in Database API, IndexedDB, relates to memory management after freeing resources. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to information and compromise its integrity and accessibility through a specially...

9.3CVSS7.5AI score0.0194EPSS
Exploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/04/10 12:0 a.m.2 views

The vulnerability of the IndexedDB component in web browsers such as Firefox, Firefox ESR, and the email client Thunderbird allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the IndexedDB component in web browsers such as Firefox, Firefox ESR, and the email client Thunderbird is related to a key deletion error. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service...

9.3CVSS7.7AI score0.00738EPSS
Exploits0References17Affected Software7
Tenable Nessus
Tenable Nessus
added 2019/10/07 12:0 a.m.39 views

openSUSE Security Update : MozillaThunderbird (openSUSE-2019-2249)

This update for MozillaThunderbird to version 68.1.1 fixes the following issues : - CVE-2019-11709: Fixed several memory safety bugs. bsc1140868 - CVE-2019-11710: Fixed several memory safety bugs. bsc1140868 - CVE-2019-11711: Fixed a script injection within domain through inner window reuse...

9.8CVSS7.2AI score0.18406EPSS
Exploits7References37
OSV
OSV
added 2019/09/27 6:15 p.m.4 views

CVE-2019-11752

It is possible to delete an IndexedDB key value and subsequently try to extract it during conversion. This results in a use-after-free and a potentially exploitable crash. This vulnerability affects Firefox 69, Thunderbird 68.1, Thunderbird 60.9, Firefox ESR 60.9, and Firefox ESR 68.1...

8.8CVSS8.6AI score
Exploits0References12
OSV
OSV
added 2019/09/04 12:0 a.m.0 views

UBUNTU-CVE-2019-11752

It is possible to delete an IndexedDB key value and subsequently try to extract it during conversion. This results in a use-after-free and a potentially exploitable crash. This vulnerability affects Firefox 69, Thunderbird 68.1, Thunderbird 60.9, Firefox ESR 60.9, and Firefox ESR 68.1...

8.8CVSS7.3AI score0.00738EPSS
Exploits0References6
Rows per page
Query Builder