Lucene search
K

4495 matches found

OSV
OSV
added 2016/09/25 12:0 a.m.2 views

UBUNTU-CVE-2016-5172

The parser in Google V8, as used in Google Chrome before 53.0.2785.113, mishandles scopes, which allows remote attackers to obtain sensitive information from arbitrary memory locations via crafted JavaScript code...

6.5CVSS7.1AI score0.0186EPSS
Exploits0References4
Prion
Prion
added 2016/09/14 10:59 a.m.18 views

Memory corruption

The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3377...

7.6CVSS7.7AI score0.16166EPSS
Exploits0References3
CVE
CVE
added 2016/09/14 10:0 a.m.71 views

CVE-2016-3350

The CVE-2016-3350 entry concerns the Chakra JavaScript engine in Microsoft Edge. It describes a memory corruption vulnerability in the Chakra engine that could allow remote code execution or a denial of service via a specially crafted website. Connected sources corroborate a Chakra memory corrupt...

7.6CVSS7.7AI score0.15398EPSS
Exploits0References3Affected Software1
CVE
CVE
added 2016/09/14 10:0 a.m.76 views

CVE-2016-3377

CVE-2016-3377 affects the Chakra JavaScript engine in Microsoft Edge. The vulnerability involves memory corruption in the scripting engine when handling objects, exploitable by remote attackers via a crafted website, potentially enabling remote code execution or a denial-of-service. Connected doc...

7.6CVSS7.7AI score0.16166EPSS
Exploits0References3Affected Software1
OpenVAS
OpenVAS
added 2016/09/14 12:0 a.m.49 views

Microsoft Edge Multiple Vulnerabilities (3183043)

This host is missing a critical security update according to Microsoft Bulletin MS16-105 SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

8.8CVSS6.5AI score0.71478EPSS
Exploits6References12
Tenable Nessus
Tenable Nessus
added 2016/08/30 12:0 a.m.30 views

openSUSE Security Update : MozillaFirefox / mozilla-nss (openSUSE-2016-1028)

This update for MozillaFirefox, mozilla-nss fixes the following issues : Changes in MozillaFirefox : - Mozilla Firefox 48.0.1 : - Fixed an audio regression impacting some major websites bmo1295296 - Fix a top crash in the JavaScript engine bmo1290469 - Fix a startup crash issue caused by Websense...

9.8CVSS7.5AI score0.08838EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2016/08/29 12:0 a.m.28 views

openSUSE Security Update : Firefox (openSUSE-2016-1019)

This update includes Firefox 48.0.1 to fix a few regressions and a security issue : - Fix an audio regression impacting some major websites - Fix a top crash in the JavaScript engine - Fix a startup crash issue caused by Websense - Fix a different behavior with e10s / non-e10s on select and mouse...

9.8CVSS7.6AI score0.08838EPSS
Exploits0References11
BDU FSTEC
BDU FSTEC
added 2016/08/16 12:0 a.m.4 views

Vulnerabilities of Microsoft Edge and Internet Explorer browsers, which allow attackers to trigger service failures or execute arbitrary code.

The vulnerability of JScript 9, VBScript, and Chakra JavaScript in Microsoft Edge and Internet Explorer browsers is due to buffer overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure memory corruption through a specially crafted web page...

9.3CVSS8.5AI score0.36361EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/08/16 12:0 a.m.4 views

Microsoft Edge browser vulnerability, which allows a hacker to trigger a service failure or execute arbitrary code

The vulnerability in Microsoft Edge’s Chakra JavaScript engine is caused by buffer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or trigger a service denial-of-service attack memory corruption using a specially crafted web page...

9.3CVSS8.5AI score0.20732EPSS
Exploits0References2
Cvelist
Cvelist
added 2016/08/09 9:0 p.m.25 views

CVE-2016-3296

The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability."...

7.5AI score0.14871EPSS
Exploits0References3
Fedora
Fedora
added 2016/08/08 8:36 p.m.32 views

[SECURITY] Fedora 24 Update: v8-3.14.5.10-25.fc24

V8 is Google's open source JavaScript engine. V8 is written in C++ and is u sed in Google Chrome, the open source browser from Google. V8 implements ECMASc ript as specified in ECMA-262, 3rd edition...

9.3CVSS1.5AI score0.04168EPSS
Exploits0
RedHat Linux
RedHat Linux
added 2016/07/26 5:18 a.m.2 views

chromium-browser: memory corruption in v8

Google V8 before 5.2.361.32, as used in Google Chrome before 52.0.2743.82, does not properly process left-trimmed objects, which allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via crafted JavaScript code...

8.8CVSS7.5AI score0.02065EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2016/07/26 5:18 a.m.6 views

chromium-browser: same-origin bypass in v8

objects.cc in Google V8 before 5.2.361.27, as used in Google Chrome before 52.0.2743.82, does not prevent API interceptors from modifying a store target without setting a property, which allows remote attackers to bypass the Same Origin Policy via a crafted web site...

8.8CVSS7.4AI score0.01268EPSS
Exploits0References5
OSV
OSV
added 2016/07/23 7:59 p.m.2 views

ALPINE-CVE-2016-5129

Google V8 before 5.2.361.32, as used in Google Chrome before 52.0.2743.82, does not properly process left-trimmed objects, which allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via crafted JavaScript code...

8.8CVSS9.4AI score0.02065EPSS
Exploits0References1
CNVD
CNVD
added 2016/07/14 12:0 a.m.2 views

Microsoft Edge Scripting Engine Memory Corruption Vulnerability

Microsoft Edge is a web browser developed by Microsoft and is the default browser that comes with the Windows 10 operating system.Chakra JavaScript engine is a JavaScript engine component used by Edge web browser. A memory corruption vulnerability exists in the Chakra JavaScript engine in Microso...

9.3CVSS7.6AI score0.21447EPSS
Exploits0References1
NVD
NVD
added 2016/07/13 1:59 a.m.21 views

CVE-2016-3269

The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3265...

9.3CVSS8.7AI score0.21447EPSS
Exploits0References3
NVD
NVD
added 2016/07/13 1:59 a.m.22 views

CVE-2016-3265

The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3269...

9.3CVSS8.7AI score0.20732EPSS
Exploits0References3
Prion
Prion
added 2016/07/13 1:59 a.m.19 views

Memory corruption

The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3269...

9.3CVSS8.6AI score0.21447EPSS
Exploits0References3
Cvelist
Cvelist
added 2016/07/13 1:0 a.m.26 views

CVE-2016-3265

The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3269...

8.7AI score0.20732EPSS
Exploits0References3
CVE
CVE
added 2016/07/13 1:0 a.m.64 views

CVE-2016-3265

CVE-2016-3265 impacts the Chakra JavaScript engine used by Microsoft Edge (ChakraCore). The connected documents describe a memory corruption vulnerability in the ChakraJS engine that could allow a remote attacker to execute arbitrary code or cause a denial of service via a crafted web site. The r...

9.3CVSS8.6AI score0.20732EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder