Lucene search
+L

5542 matches found

Vulnrichment
Vulnrichment
•added 2024/05/09 6:54 a.m.•22 views

CVE-2024-32672

A Segmentation Fault issue discovered in Samsung Open Source Escargot JavaScript engine allows remote attackers to cause a denial of service via crafted input. This issue affects Escargot: 4.0.0...

5.3CVSS7AI score0.00791EPSS
SaveExploits0References1
CVE
CVE
•added 2024/05/09 6:54 a.m.•47 views

CVE-2024-32672

CVE-2024-32672 describes a segmentation fault in Samsung Open Source Escargot JavaScript engine (Escargot 4.0.0) that can be triggered by crafted input to cause a denial of service. Connected sources confirm the affected product and version (Escargot 4.0.0) and the underlying issue is a segmentat...

5.3CVSS6.9AI score0.00791EPSS
SaveExploits0References1
OSV
OSV
•added 2024/05/09 6:54 a.m.•9 views

CVE-2024-32672

A Segmentation Fault issue discovered in Samsung Open Source Escargot JavaScript engine allows remote attackers to cause a denial of service via crafted input. This issue affects Escargot: 4.0.0...

5.3CVSS5.8AI score
SaveExploits0References4
Mend
Mend
•added 2024/05/09 6:02 a.m.•3 views

CVE-2024-32669

Improper Input Validation vulnerability in Samsung Open Source escargot JavaScript engine allows Overflow Buffers. However, it occurs in the test code and does not include in the release. This issue affects escargot: 4.0.0...

6.9CVSS0.00649EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2024/05/09 6:02 a.m.•39 views

CVE-2024-32669 Possible stack overflow due to a string encoding processing error

Improper Input Validation vulnerability in Samsung Open Source escargot JavaScript engine allows Overflow Buffers. However, it occurs in the test code and does not include in the release. This issue affects escargot: 4.0.0...

5.3CVSS5.8AI score0.00649EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/05/09 6:02 a.m.•21 views

CVE-2024-32669 Possible stack overflow due to a string encoding processing error

Improper Input Validation vulnerability in Samsung Open Source escargot JavaScript engine allows Overflow Buffers. However, it occurs in the test code and does not include in the release. This issue affects escargot: 4.0.0...

5.3CVSS7.1AI score0.00649EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/05/09 12:00 a.m.•13 views

PT-2024-24757 · Samsung · Escargot

Name of the Vulnerable Software and Affected Versions: Escargot version 4.0.0 Description: A Segmentation Fault issue in the Samsung Open Source Escargot JavaScript engine allows remote attackers to cause a denial of service via crafted input. Recommendations: For Escargot version 4.0.0, at the...

5.3CVSS7.1AI score0.00791EPSS
SaveExploits0References4
OSV
OSV
•added 2024/05/01 1:15 p.m.•7 views

DEBIAN-CVE-2024-4059

Out of bounds read in V8 API in Google Chrome prior to 124.0.6367.78 allowed a remote attacker to leak cross-site data via a crafted HTML page. Chromium security severity: High...

6.5CVSS6.2AI score0.00895EPSS
SaveExploits1References1
Talos
Talos
•added 2024/04/30 12:00 a.m.•44 views

Foxit Reader Lock object fields property type confusion vulnerability

Talos Vulnerability Report TALOS-2024-1963 Foxit Reader Lock object fields property type confusion vulnerability April 30, 2024 CVE Number CVE-2024-25575 SUMMARY A type confusion vulnerability vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a Lock object. A specially crafted...

8.8CVSS7.3AI score0.17716EPSS
SaveExploits1
Veracode
Veracode
•added 2024/04/23 5:34 a.m.•37 views

Object Corruption

chrome is vulnerable to a Object Corruption. The vulnerability is due to object corruption in the V8 JavaScript engine within Google Chrome. It allows a remote attacker to potentially exploit object corruption via a crafted HTML page...

8.8CVSS8.8AI score0.01685EPSS
SaveExploits1References6Affected Software1
Veracode
Veracode
•added 2024/04/19 1:20 a.m.•33 views

Memory Access Issue

Firefox is vulnerable to a memory access issue. The vulnerability is due to accessing uninitialized memory when the MarkStack assignment operator, part of the JavaScript engine, is used in a self-assignment...

5.3CVSS6.5AI score0.00365EPSS
SaveExploits0References3Affected Software1
SUSE CVE
SUSE CVE
•added 2024/04/18 2:31 a.m.•8 views

SUSE CVE-2024-3832

Object corruption in V8 in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS6.9AI score0.01685EPSS
SaveExploits1References6
OSV
OSV
•added 2024/04/17 6:15 p.m.•14 views

DEBIAN-CVE-2024-3914

Use after free in V8 in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

6.5CVSS6.2AI score0.0098EPSS
SaveExploits1References1
NVD
NVD
•added 2024/04/16 4:15 p.m.•19 views

CVE-2024-3862

The MarkStack assignment operator, part of the JavaScript engine, could access uninitialized memory if it were used in a self-assignment. This vulnerability affects Firefox 125...

5.3CVSS5.6AI score0.00365EPSS
SaveExploits0References2
OSV
OSV
•added 2024/04/16 4:15 p.m.•14 views

CVE-2024-3862

The MarkStack assignment operator, part of the JavaScript engine, could access uninitialized memory if it were used in a self-assignment. This vulnerability affects Firefox 125...

5.3CVSS7.3AI score0.00365EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2024/04/16 4:15 p.m.•35 views

CVE-2024-3854

In some code patterns the JIT incorrectly optimized switch statements and generated code with out-of-bounds-reads. This vulnerability affects Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10...

8.8CVSS7.2AI score0.00733EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
•added 2024/04/16 4:15 p.m.•32 views

CVE-2024-3855

In certain cases the JIT incorrectly optimized MSubstr operations, which led to out-of-bounds reads. This vulnerability affects Firefox 125...

6.5CVSS6.9AI score0.00398EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2024/04/16 4:15 p.m.•31 views

CVE-2024-3862

The MarkStack assignment operator, part of the JavaScript engine, could access uninitialized memory if it were used in a self-assignment. This vulnerability affects Firefox 125...

5.3CVSS6.8AI score0.00365EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2024/04/16 4:15 p.m.•21 views

CVE-2024-3865

Memory safety bugs present in Firefox 124. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox 125...

8.1CVSS7.2AI score0.00486EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2024/04/16 4:15 p.m.•34 views

CVE-2024-3853

A use-after-free could result if a JavaScript realm was in the process of being initialized when a garbage collection started. This vulnerability affects Firefox 125...

7.5CVSS7.1AI score0.00356EPSS
SaveExploits0References3
Rows per page
Query Builder