Lucene search
+L

3587 matches found

Veracode
Veracode
added 2019/05/02 4:54 a.m.27 views

Sandbox Restrictions Bypass

openjdk is vulnerable to sandbox restrictions bypass. An unspecified vulnerability allows remote attackers to affect confidentiality, integrity and availability via vectors related to Sound...

10CVSS6AI score0.0755EPSS
SaveExploits0References17Affected Software1
Veracode
Veracode
added 2019/05/02 4:45 a.m.17 views

Sandbox Restrictions Bypass

openjdk is vulnerable to sandbox restrictions bypass. An unspecified vulnerability allows remote attackers to affect confidentiality, integrity and availability via unknown vectors related to Sound...

7.6CVSS6.2AI score0.05571EPSS
SaveExploits0References34Affected Software3
Tenable Nessus
Tenable Nessus
added 2019/05/02 12:0 a.m.38 views

Fedora 30 : webkit2gtk3 (2019-d9a15be3ba)

Do not allow changes in active URI before provisional load starts for non-API requests. - Stop the threaded compositor when the page is not visible or layer tree state is frozen. - Use WebKit HTTP source element again for adaptive streaming fragments downloading. - Properly handle empty resources...

8.1CVSS6.6AI score0.04092EPSS
SaveExploits1References3
NVD
NVD
added 2019/04/26 5:29 p.m.15 views

CVE-2018-18512

A use-after-free vulnerability can occur while playing a sound notification in Thunderbird. The memory storing the sound data is immediately freed, although the sound is still being played asynchronously, leading to a potentially exploitable crash. This vulnerability affects Thunderbird 60.5...

9.8CVSS9.3AI score0.01582EPSS
SaveExploits0References2
Prion
Prion
added 2019/04/26 5:29 p.m.21 views

Design/Logic Flaw

A use-after-free vulnerability can occur while playing a sound notification in Thunderbird. The memory storing the sound data is immediately freed, although the sound is still being played asynchronously, leading to a potentially exploitable crash. This vulnerability affects Thunderbird 60.5...

7.5CVSS9.1AI score0.01582EPSS
SaveExploits0References2Affected Software1
UbuntuCve
UbuntuCve
added 2019/04/26 5:29 p.m.26 views

CVE-2018-18512

A use-after-free vulnerability can occur while playing a sound notification in Thunderbird. The memory storing the sound data is immediately freed, although the sound is still being played asynchronously, leading to a potentially exploitable crash. This vulnerability affects Thunderbird 60.5...

9.8CVSS7.2AI score0.01582EPSS
SaveExploits0References4
OSV
OSV
added 2019/04/26 5:29 p.m.4 views

UBUNTU-CVE-2018-18512

A use-after-free vulnerability can occur while playing a sound notification in Thunderbird. The memory storing the sound data is immediately freed, although the sound is still being played asynchronously, leading to a potentially exploitable crash. This vulnerability affects Thunderbird 60.5...

9.8CVSS7.3AI score0.01582EPSS
SaveExploits0References5
OSV
OSV
added 2019/04/26 5:29 p.m.9 views

CVE-2018-18512

A use-after-free vulnerability can occur while playing a sound notification in Thunderbird. The memory storing the sound data is immediately freed, although the sound is still being played asynchronously, leading to a potentially exploitable crash. This vulnerability affects Thunderbird 60.5...

9.8CVSS9.2AI score
SaveExploits0References2
OSV
OSV
added 2019/04/26 5:29 p.m.3 views

DEBIAN-CVE-2018-18512

A use-after-free vulnerability can occur while playing a sound notification in Thunderbird. The memory storing the sound data is immediately freed, although the sound is still being played asynchronously, leading to a potentially exploitable crash. This vulnerability affects Thunderbird 60.5...

9.8CVSS9.1AI score0.01582EPSS
SaveExploits0References1
CVE
CVE
added 2019/04/26 4:13 p.m.95 views

CVE-2018-18512

CVE-2018-18512 is a use-after-free vulnerability in Thunderbird triggered while playing a sound notification. The memory holding the sound data is freed while playback continues asynchronously, enabling potential crashes. Affected products: Thunderbird versions prior to 60.5. Root cause: use-afte...

9.8CVSS9AI score0.01582EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2019/04/26 4:13 p.m.29 views

CVE-2018-18512

A use-after-free vulnerability can occur while playing a sound notification in Thunderbird. The memory storing the sound data is immediately freed, although the sound is still being played asynchronously, leading to a potentially exploitable crash. This vulnerability affects Thunderbird 60.5...

9.2AI score0.01582EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2019/04/26 4:13 p.m.48 views

CVE-2018-18512

A use-after-free vulnerability can occur while playing a sound notification in Thunderbird. The memory storing the sound data is immediately freed, although the sound is still being played asynchronously, leading to a potentially exploitable crash. This vulnerability affects Thunderbird 60.5...

9.8CVSS9.3AI score0.01582EPSS
SaveExploits0
Fedora
Fedora
added 2019/04/17 4:5 p.m.18 views

[SECURITY] Fedora 30 Update: gnome-control-center-3.32.1-2.fc30

This package contains configuration utilities for the GNOME desktop, which allow to configure accessibility options, desktop fonts, keyboard and mouse properties, sound setup, desktop theme and background, user interface properties, screen resolution, and other settings...

2.7AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2019/04/04 12:0 a.m.55 views

EulerOS Virtualization 2.5.4 : kernel (EulerOS-SA-2019-1253)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A division-by-zero in settermios, when debugging is enabled, was found in the Linux kernel. When the ioti driver is loaded, a loc...

8.1CVSS6.5AI score0.02612EPSS
SaveExploits3References5
Tenable Nessus
Tenable Nessus
added 2019/04/04 12:0 a.m.50 views

EulerOS Virtualization 2.5.3 : kernel (EulerOS-SA-2019-1244)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found In the Linux kernel, through version 4.19.6, where a local user could exploit a use-after-free in the ALSA drive...

8.1CVSS6.3AI score0.02612EPSS
SaveExploits3References6
exploitpack
exploitpack
added 2019/03/11 12:0 a.m.54 views

Linux Kernel 4.4 (Ubuntu 16.04) - snd_timer_user_ccallback() Kernel Pointer Leak

Linux Kernel 4.4 Ubuntu 16.04 - sndtimeruserccallback Kernel Pointer Leak include include include include include include include include include include include include include include Exploit Title: Linux Kernel 4.4 Ubuntu 16.04 - Leak kernel pointer in sndtimeruserccallback Google Dork: - Date...

2.1CVSS0.3AI score0.01202EPSS
SaveExploits5
Tenable Nessus
Tenable Nessus
added 2019/03/06 12:0 a.m.28 views

Debian DLA-1705-1 : sox security update

Multiple vulnerabilities have been discovered in SoX Sound eXchange, a sound processing program : CVE-2017-11332 The startread function wav.c is affected by a divide-by-zero vulnerability when processing WAV file with zero channel count. This flaw might be leveraged by remote attackers using a...

5.5CVSS6.4AI score0.07401EPSS
SaveExploits7References6
Debian
Debian
added 2019/03/05 5:58 p.m.148 views

[SECURITY] [DLA 1705-1] sox security update

Package : sox Version : 14.4.1-5+deb8u3 CVE ID : CVE-2017-11332 CVE-2017-11358 CVE-2017-11359 CVE-2017-15371 Debian Bug : 878809 870328 Multiple vulnerabilities have been discovered in SoX Sound eXchange, a sound processing program: CVE-2017-11332 The startread function wav.c is affected by a...

5.5CVSS6.5AI score0.07401EPSS
SaveExploits7
Debian
Debian
added 2019/02/28 12:49 p.m.98 views

[SECURITY] [DLA 1695-1] sox security update

Package : sox Version : 14.4.1-5+deb8u2 CVE ID : CVE-2017-15370 CVE-2017-15372 CVE-2017-15642 CVE-2017-18189 Debian Bug : 878808, 878810, 882144, 881121 Multiple vulnerabilities have been discovered in SoX Sound eXchange, a sound processing program: CVE-2017-15370 The ImaAdpcmReadBlock function...

7.5CVSS6.7AI score0.05055EPSS
SaveExploits3
OpenVAS
OpenVAS
added 2019/02/27 12:0 a.m.31 views

Debian: Security Advisory (DLA-1695-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6AI score0.05055EPSS
SaveExploits4References3
Rows per page
Query Builder