Lucene search
+L

542 matches found

CNNVD
CNNVD
added 2021/08/31 12:0 a.m.7 views

Google WebRTC 资源管理错误漏洞

Google Chrome is a web browser from Google, Inc. A code execution vulnerability exists in Google Chrome WebRTC. The vulnerability is caused by post-release use in WebRTC. A remote attacker could exploit this vulnerability to execute arbitrary code on the system or cause a denial of service...

8.8CVSS9.2AI score0.02798EPSS
Exploits0References12
CNNVD
CNNVD
added 2021/08/31 12:0 a.m.5 views

Google WebRTC 资源管理错误漏洞

Google Chrome is a web browser from Google, Inc. A code execution vulnerability exists in Google Chrome WebRTC. The vulnerability is caused by post-release use in WebRTC. A remote attacker could exploit this vulnerability to execute arbitrary code on the system or cause a denial of service...

8.8CVSS9.2AI score0.02768EPSS
Exploits0References12
CNNVD
CNNVD
added 2021/08/16 12:0 a.m.11 views

Microsoft Edge 资源管理错误漏洞

Chrome is a web browsing tool developed by Google. A post-release reuse vulnerability exists in WebRTC in versions of Google Chrome prior to 92.0.4515.159. An attacker could exploit this vulnerability to potentially cause heap corruption via a crafted HTML page...

8.8CVSS7AI score0.02118EPSS
Exploits1References12
OSV
OSV
added 2021/06/07 8:15 p.m.3 views

DEBIAN-CVE-2021-30523

Use after free in WebRTC in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to potentially exploit heap corruption via a crafted SCTP packet...

8.8CVSS8.2AI score0.01102EPSS
Exploits1References1
BDU FSTEC
BDU FSTEC
added 2021/03/30 12:0 a.m.7 views

The vulnerability of the WebRTC data transfer standard in Google Chrome allows attackers to access confidential data.

The vulnerability of the WebRTC data transfer standard in Google Chrome relates to the disclosure of information. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data...

4.3CVSS6.4AI score0.01189EPSS
Exploits1References12Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/03/30 12:0 a.m.7 views

The vulnerability affects the implementation of the COOKIE-ECHO extension for WebRTC browsers such as Google Chrome, Mozilla Firefox, Firefox ESR, and Firefox for Android. This vulnerability allows a perpetrator to cause a service failure or execute arbitrary code.

The vulnerability of the COOKIE-ECHO extension implementation in WebRTC browsers such as Google Chrome, Mozilla Firefox, Firefox ESR, and Firefox for Android is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to cause a service failure or...

7.3CVSS8.1AI score0.01304EPSS
Exploits0References18Affected Software11
RedHat Linux
RedHat Linux
added 2021/03/25 12:56 p.m.5 views

Mozilla: Internal network hosts could have been probed by a malicious webpage

Using techniques that built on the slipstream research, a malicious webpage could have scanned both an internal network's hosts as well as services running on the user's local machine utilizing WebRTC connections. This vulnerability affects Firefox ESR 78.9, Firefox 87, and Thunderbird 78.9...

6.5CVSS7.4AI score0.00743EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2021/03/25 12:24 p.m.6 views

Mozilla: Internal network hosts could have been probed by a malicious webpage

Using techniques that built on the slipstream research, a malicious webpage could have scanned both an internal network's hosts as well as services running on the user's local machine utilizing WebRTC connections. This vulnerability affects Firefox ESR 78.9, Firefox 87, and Thunderbird 78.9...

6.5CVSS7.4AI score0.00743EPSS
Exploits0References5
OSV
OSV
added 2021/03/24 12:0 a.m.15 views

UBUNTU-CVE-2021-23982

Using techniques that built on the slipstream research, a malicious webpage could have scanned both an internal network's hosts as well as services running on the user's local machine utilizing WebRTC connections. This vulnerability affects Firefox ESR 78.9, Firefox 87, and Thunderbird 78.9...

6.5CVSS6.9AI score0.00743EPSS
Exploits0References8
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.6 views

The vulnerability of the WebRTC technology implemented in Google Chrome browsers allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the WebRTC technology implementation in Google Chrome browser is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

7.3CVSS7.7AI score0.01043EPSS
Exploits0References10Affected Software5
OSV
OSV
added 2021/03/16 3:15 p.m.1 views

UBUNTU-CVE-2021-21191

Use after free in WebRTC in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.3AI score0.01374EPSS
Exploits1References2
CNNVD
CNNVD
added 2021/03/15 12:0 a.m.2 views

Google Chrome 资源管理错误漏洞

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A post-release reuse vulnerability exists in WebRTC in versions prior to Google Chrome 89.0.4389.90. No detailed vulnerability details are provided at this time...

8.8CVSS5.5AI score0.01374EPSS
Exploits1References10
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:0 a.m.6 views

The vulnerability of the WebRTC extension in the Google Chrome web browser allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the WebRTC extension in the Google Chrome web browser relates to its use after release. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

7.3CVSS7.6AI score0.01376EPSS
Exploits1References11Affected Software6
OSV
OSV
added 2021/03/09 6:15 p.m.1 views

DEBIAN-CVE-2021-21162

Use after free in WebRTC in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.2AI score0.01376EPSS
Exploits1References1
Kitploit
Kitploit
added 2021/02/24 8:30 p.m.36 views

BlackMamba - C2/post-exploitation Framework

BlackMamba is a multi client C2/post exploitation framework with some spyware features. Powered by Python 3.8.6 and QT Framework. Some of BlackMamba features are: Multi Client - Supports multiple client connections at the same time. Real Time Communication Updates - Real time communication and...

7.9AI score
Exploits0References4
OSV
OSV
added 2021/02/17 2:15 p.m.6 views

CVE-2020-12339

Insufficient control flow management in the API for the IntelR Collaboration Suite for WebRTC before version 4.3.1 may allow an authenticated user to potentially enable escalation of privilege via network access...

8.8CVSS7.3AI score
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2021/02/02 12:0 a.m.8 views

The vulnerability in the implementation of the WebRTC technology for browser-based applications by Mozilla Firefox and Firefox-ESR allows a attacker to induce a service failure.

The vulnerability of the WebRTC streaming data transmission technology in Mozilla Firefox and Firefox-ESR implementations is related to an inappropriate type of payload type in the RTP packets sent. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

9.3CVSS7.4AI score0.02393EPSS
Exploits0References11Affected Software7
BDU FSTEC
BDU FSTEC
added 2021/01/28 12:0 a.m.5 views

The vulnerability of the WebRTC technology implementation in Mozilla Firefox and Firefox-ESR browsers allows a perpetrator to trigger a service failure.

The vulnerability of the WebRTC implementation in Mozilla Firefox and Firefox-ESR browsers is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

10CVSS7.7AI score0.03393EPSS
Exploits0References10Affected Software8
OSV
OSV
added 2021/01/08 7:15 p.m.1 views

DEBIAN-CVE-2020-16026

Use after free in WebRTC in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.6AI score0.0099EPSS
Exploits0References1
OSV
OSV
added 2021/01/08 7:15 p.m.1 views

UBUNTU-CVE-2020-16034

Inappropriate implementation in WebRTC in Google Chrome prior to 87.0.4280.66 allowed a local attacker to bypass policy restrictions via a crafted HTML page...

4.3CVSS7.3AI score0.0049EPSS
Exploits0References2
Rows per page
Query Builder