Lucene search
+L

26 matches found

Github Security Blog
Github Security Blog
added 2021/11/10 8:38 p.m.37 views

Infinite certificate chain depth results in OctoRPKI running forever

OctoRPKI github.com/cloudflare/cfrpki/cmd/octorpki does not limit the depth of a certificate chain, allowing for a CA to create children in an ad-hoc fashion, thereby making tree traversal never end. For more information If you have any questions or comments about this advisory email us at...

7.5CVSS7.5AI score0.00707EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2018/06/11 9:29 p.m.7 views

DEBIAN-CVE-2017-7809

A use-after-free vulnerability can occur when an editor DOM node is deleted prematurely during tree traversal while still bound to the document. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 52.3, Firefox ESR 52.3, and Firefox 55...

9.8CVSS9.2AI score0.02643EPSS
SaveExploits1References1
Debian CVE
Debian CVE
added 2018/06/11 9:00 p.m.31 views

CVE-2017-7809

A use-after-free vulnerability can occur when an editor DOM node is deleted prematurely during tree traversal while still bound to the document. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 52.3, Firefox ESR 52.3, and Firefox 55...

9.8CVSS10AI score0.02643EPSS
SaveExploits1
RedHat Linux
RedHat Linux
added 2017/08/10 11:20 p.m.10 views

Mozilla: Use-after-free while deleting attached editor DOM node (MFSA 2017-19)

A use-after-free vulnerability can occur when an editor DOM node is deleted prematurely during tree traversal while still bound to the document. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 52.3, Firefox ESR 52.3, and Firefox 55...

9.8CVSS7.3AI score0.02643EPSS
SaveExploits1References5
OSV
OSV
added 2017/08/10 12:00 a.m.7 views

UBUNTU-CVE-2017-7809

A use-after-free vulnerability can occur when an editor DOM node is deleted prematurely during tree traversal while still bound to the document. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 52.3, Firefox ESR 52.3, and Firefox 55...

9.8CVSS7.1AI score0.02643EPSS
SaveExploits1References4
Zero Day Initiative
Zero Day Initiative
added 2010/06/08 12:00 a.m.51 views

Apple Webkit Option Element ContentEditable Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apples Webkit. User interaction is required in that the user must coerced into visiting a website or opening a malicious document. The specific flaw exists within how the library removes a particul...

10CVSS5AI score0.08732EPSS
SaveExploits0References1
Rows per page
Query Builder