Lucene search
+L

577 matches found

OSV
OSV
added 2019/09/27 6:15 p.m.6 views

DEBIAN-CVE-2019-11749

A vulnerability exists in WebRTC where malicious web content can use probing techniques on the getUserMedia API using constraints to reveal device properties of cameras on the system without triggering a user prompt or notification. This allows for the potential fingerprinting of users. This...

4.3CVSS6.8AI score0.00896EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/09/09 12:00 a.m.5 views

Mozilla Firefox and Mozilla Firefox ESR Information Disclosure Vulnerability (CNVD-2019-32239)

Mozilla Firefox and Mozilla Firefox ESR are both products of the Mozilla Foundation in the U.S. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. A security vulnerability exists in WebRTC in Mozilla Firefox versions prior to 6...

4.3CVSS8.7AI score0.00896EPSS
SaveExploits0References1
OSV
OSV
added 2019/09/04 12:00 a.m.7 views

UBUNTU-CVE-2019-11749

A vulnerability exists in WebRTC where malicious web content can use probing techniques on the getUserMedia API using constraints to reveal device properties of cameras on the system without triggering a user prompt or notification. This allows for the potential fingerprinting of users. This...

4.3CVSS6.7AI score0.00896EPSS
SaveExploits0References4
OSV
OSV
added 2019/06/27 5:15 p.m.8 views

UBUNTU-CVE-2018-6130

Incorrect handling of object lifetimes in WebRTC in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page...

6.5CVSS7AI score0.02954EPSS
SaveExploits2References3
CNVD
CNVD
added 2019/03/22 12:00 a.m.9 views

Mozilla Firefox Incorrect Source Vulnerability

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in versions of Mozilla Firefox prior to 66, which stems from a privilege notification that fails to properly display the originating domain when requesting WebRTC...

5.3CVSS8.7AI score0.00397EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2019/03/06 12:00 a.m.9 views

The vulnerability of the WebRTC technology implementation in Google Chrome web browsers allows a hacker to induce a service failure.

The vulnerability of the WebRTC technology implemented in Google Chrome browser is related to the use of memory after deallocation. Exploiting this vulnerability allows a remote attacker to cause a service failure through a specially created HTML page...

8.8CVSS7.7AI score0.01418EPSS
SaveExploits0References4Affected Software2
ATTACKERKB
ATTACKERKB
added 2019/02/19 5:29 p.m.5 views

CVE-2019-5764

Incorrect pointer management in WebRTC in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS5.5AI score0.01418EPSS
SaveExploits0References10
RedHat Linux
RedHat Linux
added 2019/02/12 2:46 a.m.7 views

chromium-browser: Use after free in WebRTC

Insufficient checks of pointer validity in WebRTC in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.4AI score0.01457EPSS
SaveExploits0References5
CNVD
CNVD
added 2019/01/30 12:00 a.m.12 views

Apple iOS and macOS Mojave WebRTC Memory Corruption Vulnerability

Apple iOS and macOS Mojave are both products of Apple Inc. Apple iOS is an operating system for mobile devices. macOS Mojave is a specialized operating system for Mac computers. webRTC is one of the components that enables browsers to engage in real-time voice or video conversations. . A security...

8.8CVSS7.5AI score0.01211EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2018/09/10 9:31 p.m.10 views

chromium-browser: Use after free in WebRTC

A use after free in WebRTC in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit heap corruption via a crafted video file...

8.8CVSS7.4AI score0.04798EPSS
SaveExploits2References5
CNVD
CNVD
added 2018/09/07 12:00 a.m.12 views

Google Chrome WebRTC Memory Misreference Vulnerability (CNVD-2018-20753)

Google Chrome is a web browser developed by Google, Inc. WebRTC is a component of the browser that supports real-time voice or video conversations. A memory misreference vulnerability exists in WebRTC in Google Chrome versions prior to 69.0.3497.81. No details of the vulnerability are provided at...

8.8CVSS8.6AI score0.04798EPSS
SaveExploits2References1
CNVD
CNVD
added 2018/09/07 12:00 a.m.53 views

Google Chrome WebRTC Buffer Overflow Vulnerability

Google Chrome is a web browser developed by Google, Inc. WebRTC is a component of the browser that supports real-time voice or video conversations. A buffer overflow vulnerability exists in WebRTC in Google Chrome versions prior to 69.0.3497.81. An attacker can exploit the vulnerability to obtain...

8.8CVSS8.8AI score0.05264EPSS
SaveExploits2References1
RedHat Linux
RedHat Linux
added 2018/07/30 3:10 p.m.15 views

chromium-browser: Type confusion in WebRTC

Type confusion in WebRTC in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap corruption via a crafted video file...

8.8CVSS7.4AI score0.00825EPSS
SaveExploits0References5
CNVD
CNVD
added 2018/07/25 12:00 a.m.12 views

Google Chrome memory misreference vulnerability (CNVD-2018-17042)

Google Chrome is a web browser developed by the American company Google Google. A memory misreference vulnerability exists in WebRTC in Google Chrome. An attacker can exploit the vulnerability to execute arbitrary code in the browser context...

6.5CVSS7.8AI score0.00675EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/07/02 12:00 a.m.7 views

Google WebRTC VP9 Out-of-Bounds Memory Access Vulnerability

WebRTC, whose name derives from the acronym Web Real-Time Communication, is a technology that supports real-time voice or video conversations in web browsers. A security vulnerability exists in Google WebRTC VP9. An attacker can exploit the vulnerability to cause Chrome to crash. The vulnerabilit...

6.6AI score
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2018/06/07 8:37 p.m.18 views

chromium-browser: Use of uninitialized memory in WebRTC

Uninitialized data in WebRTC in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted video file...

4.3CVSS7.4AI score0.00868EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2018/06/07 8:37 p.m.22 views

chromium-browser: Out of bounds memory access in WebRTC

Incorrect handling of object lifetimes in WebRTC in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page...

6.5CVSS7.4AI score0.02954EPSS
SaveExploits2References5
CNVD
CNVD
added 2018/04/02 12:00 a.m.12 views

DuckDuckGo Private IP Address Disclosure Vulnerability

DuckDuckGo is an extension for use in browsers. It is used to access the web anonymously.WebRTC component is a component used in it to support real-time voice conversations or video conversations in the browser. A security vulnerability exists in the WebRTC component in DuckDuckGo version 4.2.0. ...

4.3CVSS6.8AI score0.29198EPSS
SaveExploits7References1
OSV
OSV
added 2018/03/28 9:29 p.m.9 views

CVE-2018-6608

In the WebRTC component in Opera 51.0.2830.55, after visiting a web site that attempts to gather complete client information such as https://ip.voidsec.com, the browser can disclose a private IP address in a STUN request...

4.3CVSS5.6AI score0.03241EPSS
SaveExploits0References5
Exploit DB
Exploit DB
added 2018/02/21 12:00 a.m.44 views

EChat Server 3.1 - 'CHAT.ghp' Buffer Overflow

Exploit Author: Juan Sacco Vulnerability found using Exploit Pack v10 - http://exploitpack.com Impact: An attacker could exploit this vulnerability to execute arbitrary code in the context of the application. Failed exploit attempts will result in adenial-of-service condition. Program description...

5.3AI score
SaveExploits0
Rows per page
Query Builder