Lucene search
+L

354 matches found

CNVD
CNVD
•added 2016/08/15 12:00 a.m.•9 views

Microsoft Internet Explorer Denial of Service Vulnerability

Microsoft Internet Explorer IE is a Web browser developed by the American company Microsoft and is the default browser that comes with the Windows operating system. A denial of service vulnerability exists in Microsoft Internet Explorer, which is caused by the re-exploitation of CTreePos after it...

6.6AI score
SaveExploits0
RedHat Linux
RedHat Linux
•added 2016/03/07 3:22 a.m.•19 views

chromium-browser: use-after-free in Blink

extensions/renderer/renderframeobservernatives.cc in Google Chrome before 49.0.2623.75 does not properly consider object lifetimes and re-entrancy issues during OnDocumentElementCreated handling, which allows remote attackers to cause a denial of service use-after-free or possibly have unspecifie...

10CVSS7.5AI score0.02342EPSS
SaveExploits0References5
OSV
OSV
•added 2016/03/06 2:59 a.m.•15 views

UBUNTU-CVE-2016-1635

extensions/renderer/renderframeobservernatives.cc in Google Chrome before 49.0.2623.75 does not properly consider object lifetimes and re-entrancy issues during OnDocumentElementCreated handling, which allows remote attackers to cause a denial of service use-after-free or possibly have unspecifie...

9.8CVSS7.3AI score0.02342EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2016/03/02 12:00 a.m.•2 views

PT-2016-1347

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 49.0.2623.75 Opera versions prior to 49.0.2623.75 Description The issue is related to the handling of OnDocumentElementCreated in the extensions/renderer/render frame observer natives.cc file, which does not...

10CVSS0.02342EPSS
SaveExploits0
RedHat Linux
RedHat Linux
•added 2015/12/14 4:23 a.m.•14 views

chromium-browser: Use-after free in Blink

Race condition in the MutationObserver implementation in Blink, as used in Google Chrome before 47.0.2526.80, allows remote attackers to cause a denial of service use-after-free or possibly have unspecified other impact by leveraging unanticipated object deletion...

9.3CVSS7.5AI score0.01706EPSS
SaveExploits0References5
OSV
OSV
•added 2015/12/14 12:00 a.m.•14 views

UBUNTU-CVE-2015-6789

Race condition in the MutationObserver implementation in Blink, as used in Google Chrome before 47.0.2526.80, allows remote attackers to cause a denial of service use-after-free or possibly have unspecified other impact by leveraging unanticipated object deletion...

9.3CVSS7.4AI score0.01706EPSS
SaveExploits0References4
CNVD
CNVD
•added 2015/12/09 12:00 a.m.•14 views

Microsoft Internet Explorer Memory Corruption Vulnerability (CNVD-2016-01501)

Internet Explorer is a web browser from Microsoft. Internet Explorer 11 notified Mutation Observer of a security vulnerability in the way document character data is modified. By tampering with document elements, an attacker could force a CTreePos object in memory to be reused after release and th...

9.3CVSS7.5AI score0.1842EPSS
SaveExploits0References1
ThreatPost
ThreatPost
•added 2015/09/08 3:09 p.m.•55 views

Flawed TLS Implementations Leak RSA Keys

A number of TLS software implementations contain vulnerabilities that allow hackers with minimal computational expense to learn RSA keys. Florian Weimer, a researcher with Red Hat, last week published a paper called “Factoring RSA Keys With TLS Perfect Forward Secrecy” that demonstrated...

4.3CVSS6AI score0.02833EPSS
SaveExploits0References1
Openbugbounty
Openbugbounty
•added 2015/07/22 5:32 p.m.•10 views

watfordobserver.co.uk XSS vulnerability

Vulnerable URL: http://www.watfordobserver.co.uk/search/?search=%22+autofocus+onfocus%3D%22alert%28%27XSSPOSED%27%29 Details: Description| Value ---|--- Patched:| Yes, at 29.08.2015 Latest check for patch:| 29.08.2015 01:33 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

6.3AI score
SaveExploits0
CNVD
CNVD
•added 2015/01/08 12:00 a.m.•17 views

e107 ' e107_admin/users.php 'Cross-Site Request Forgery Vulnerability'

E107 is an open source, free and based on PHP and MySQL content management system CMS of the United States E107 company. The system supports a variety of plug-in programs and appearance of the theme , can be used as a personal blog , discussion community , archive repository and so on. A cross-si...

6.8CVSS6.9AI score0.01105EPSS
SaveExploits0References1
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•26 views

Observer 0.3.2.1 - Multiple Remote Command Execution Vulnerabilities

No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP YmmMMMM MMM YM Discovered by dun \ dunatstrcpy.pl observer = 0.3.2.1 Remote Command Execution Script: Observer is an autodiscovering PHP/MySQL/SNMP/CDP...

7.1AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2013/12/17 12:00 a.m.•20 views

Fedora Update for php-symfony2-EventDispatcher FEDORA-2013-22422

Check for the Version of php-symfony2-EventDispatcher OpenVAS Vulnerability Test Fedora Update for php-symfony2-EventDispatcher FEDORA-2013-22422 Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

5CVSS6.3AI score0.01868EPSS
SaveExploits0References2
Fedora
Fedora
•added 2013/12/09 2:00 a.m.•23 views

[SECURITY] Fedora 18 Update: php-symfony2-EventDispatcher-2.2.10-1.fc18

The Symfony2 Event Dispatcher component implements the Observer http://en.wikipedia.org/wiki/Observerpattern pattern in a simple and effective way to make all these things possible and to make your projects truly extensible. Take a simple example from the Symfony2 HttpKernel component. Once a...

5CVSS0.7AI score0.01868EPSS
SaveExploits0
securityvulns
securityvulns
•added 2012/06/13 12:00 a.m.•22 views

Network Instruments Observer security vulnerabilities

Buffer overflows on SNMP parsing...

4.1AI score
SaveExploits0References2Affected Software1
securityvulns
securityvulns
•added 2012/06/13 12:00 a.m.•48 views

Secunia Research: Network Instruments Observer SNMP OID Processing Denial of Service

====================================================================== Secunia Research 07/06/2012 - Network Instruments Observer - - SNMP OID Processing Denial of Service Vulnerability - ====================================================================== Table of Contents Affected...

0.7AI score
SaveExploits0
securityvulns
securityvulns
•added 2012/06/13 12:00 a.m.•50 views

Secunia Research: Network Instruments Observer SNMP Processing Buffer Overflows

====================================================================== Secunia Research 07/06/2012 - Network Instruments Observer - - SNMP Processing Buffer Overflows - ====================================================================== Table of Contents Affected...

0.6AI score
SaveExploits0
ThreatPost
ThreatPost
•added 2011/07/11 2:56 p.m.•13 views

New SMS Trojan Targeting Android Users

The Apple iPhone may still be the gold standard when it comes to smartphones, but the Android platform has become the playground of choice for attackers and malware authors looking to make a quick buck. The latest example is a premium-rate SMS Trojan that not only automatically sends costly SMS...

1AI score
SaveExploits0References6
Cvelist
Cvelist
•added 2011/05/07 6:00 p.m.•40 views

CVE-2011-0066

Use-after-free vulnerability in Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, allows remote attackers to execute arbitrary code via vectors related to OBJECT's mObserverList...

9.6AI score0.0478EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 2011/04/29 3:14 a.m.•15 views

Mozilla mObserverList use after free (MFSA 2011-13)

Use-after-free vulnerability in Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, allows remote attackers to execute arbitrary code via vectors related to OBJECT's mObserverList...

10CVSS6.9AI score0.0478EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2010/12/09 11:07 p.m.•12 views

Mozilla use-after-free error with nsDOMAttribute MutationObserver (MFSA 2010-80)

Use-after-free vulnerability in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, allows remote attackers to execute arbitrary code via vectors involving a change to an nsDOMAttribute node...

9.3CVSS7.8AI score0.06997EPSS
SaveExploits0References4
Rows per page
Query Builder