Lucene search
+L

7011 matches found

Github Security Blog
Github Security Blog
added 2022/05/03 12:00 a.m.27 views

Denial of service vulnerability exists in libxmljs

libxmljs provides libxml bindings for v8 javascript engine. This affects all versions of package libxmljs. When invoking the libxmljs.parseXml function with a non-buffer argument the V8 code will attempt invoking the .toString method of the argument. If the argument's toString value is not a...

7.5CVSS4.6AI score0.01888EPSS
SaveExploits1References5Affected Software1
OpenVAS
OpenVAS
added 2022/05/03 12:00 a.m.47 views

Mageia: Security Advisory (MGASA-2022-0158)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7AI score0.01161EPSS
SaveExploits23References4
NVD
NVD
added 2022/05/01 4:15 p.m.37 views

CVE-2022-21227

The package sqlite3 before 5.0.3 are vulnerable to Denial of Service DoS which will invoke the toString function of the passed parameter. If passed an invalid Function object it will throw and crash the V8 engine...

7.5CVSS0.02068EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2022/05/01 4:15 p.m.31 views

CVE-2022-21227

The package sqlite3 before 5.0.3 are vulnerable to Denial of Service DoS which will invoke the toString function of the passed parameter. If passed an invalid Function object it will throw and crash the V8 engine...

7.5CVSS7.1AI score0.02068EPSS
SaveExploits0References6
Prion
Prion
added 2022/05/01 4:15 p.m.33 views

Code injection

This affects all versions of package libxmljs. When invoking the libxmljs.parseXml function with a non-buffer argument the V8 code will attempt invoking the .toString method of the argument. If the argument's toString value is not a Function object V8 will crash...

5CVSS7.5AI score0.01888EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2022/05/01 3:25 p.m.63 views

CVE-2022-21227 Denial of Service (DoS)

The package sqlite3 before 5.0.3 are vulnerable to Denial of Service DoS which will invoke the toString function of the passed parameter. If passed an invalid Function object it will throw and crash the V8 engine...

7.5CVSS7.6AI score0.02068EPSS
SaveExploits0References3
OSV
OSV
added 2022/05/01 3:25 p.m.31 views

CVE-2022-21227 Denial of Service (DoS)

The package sqlite3 before 5.0.3 are vulnerable to Denial of Service DoS which will invoke the toString function of the passed parameter. If passed an invalid Function object it will throw and crash the V8 engine...

7.5CVSS7.1AI score
SaveExploits0References5
CVE
CVE
added 2022/05/01 3:25 p.m.100 views

CVE-2022-21144

Summary: CVE-2022-21144 affects all versions of the libxmljs package. The issue occurs when libxmljs.parseXml is called with a non-buffer argument, causing the V8 engine to invoke the argument’s toString method; if toString is not a Function, V8 will crash, leading to a potential denial of servic...

7.5CVSS7.5AI score0.01888EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2022/05/01 3:25 p.m.48 views

CVE-2022-21144 Denial of Service (DoS)

This affects all versions of package libxmljs. When invoking the libxmljs.parseXml function with a non-buffer argument the V8 code will attempt invoking the .toString method of the argument. If the argument's toString value is not a Function object V8 will crash...

7.5CVSS7.8AI score0.01888EPSS
SaveExploits1References3
OSV
OSV
added 2022/05/01 3:25 p.m.30 views

CVE-2022-21144 Denial of Service (DoS)

This affects all versions of package libxmljs. When invoking the libxmljs.parseXml function with a non-buffer argument the V8 code will attempt invoking the .toString method of the argument. If the argument's toString value is not a Function object V8 will crash...

7.5CVSS7.1AI score
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2022/05/01 3:20 p.m.10 views

CVE-2022-21227

The package sqlite3 before 5.0.3 are vulnerable to Denial of Service DoS which will invoke the toString function of the passed parameter. If passed an invalid Function object it will throw and crash the V8 engine...

7.5CVSS7.1AI score0.02068EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2022/05/01 12:00 a.m.20 views

PT-2022-14877 · Npm · Libxmljs

Name of the Vulnerable Software and Affected Versions: libxmljs versions all Description: The issue arises when the libxmljs.parseXml function is invoked with a non-buffer argument. In such cases, the V8 code attempts to call the toString method of the argument. If the argument's toString value i...

7.5CVSS7.4AI score0.01888EPSS
SaveExploits1References9
CNNVD
CNNVD
added 2022/05/01 12:00 a.m.11 views

libxmljs 输入验证错误漏洞

libxmljs is the LibXML binding for node.js. All versions of the libxmljs package have an input validation error vulnerability that stems from the fact that when calling a non-buffered parameter, the V8 code will attempt to call the .toString method for that parameter. If the toString value of the...

7.5CVSS7.4AI score0.01888EPSS
SaveExploits1References4
GithubExploit
GithubExploit
added 2022/04/29 7:09 a.m.269 views

Exploit for Integer Overflow or Wraparound in Google Android

V8 JavaScript Engine ============= V8 is Google's open source J...

7.8CVSS7.5AI score0.00961EPSS
SaveExploits1
GithubExploit
GithubExploit
added 2022/04/29 5:28 a.m.300 views

Exploit for Out-of-bounds Write in Google Android

V8 JavaScript Engine ============= V8 is Google's open source J...

9.8CVSS9.5AI score0.0193EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2022/04/29 12:00 a.m.39 views

Google Chrome Security Update (stable-channel-update-for-desktop_26-2022-04) - Linux

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

9.6CVSS7.4AI score0.01161EPSS
SaveExploits25References1
Microsoft CVE
Microsoft CVE
added 2022/04/28 3:55 p.m.32 views

Chromium: CVE-2022-1486 Type Confusion in V8

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS8.4AI score0.00916EPSS
SaveExploits1
Veracode
Veracode
added 2022/04/28 2:00 p.m.21 views

Denial Of Service (DoS)

chrome is vulnerable to denial of service. The vulnerability exists due to a Type Confusion in V8 which allows an attacker to cause an application crash...

8.8CVSS3.4AI score0.00916EPSS
SaveExploits1References4Affected Software2
Kaspersky
Kaspersky
added 2022/04/28 12:00 a.m.48 views

KLA12519 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, bypass security restrictions, gain privileges, spoof user interface. Below is a complete list of vulnerabilities: 1. Use after free...

8.8CVSS9.4AI score0.01161EPSS
SaveExploits21References27
Tenable Nessus
Tenable Nessus
added 2022/04/28 12:00 a.m.62 views

Siemens PROFINET Stack Integrated on Interniche Stack Uncontrolled Resource Consumption (CVE-2022-25622)

A vulnerability has been identified in SIMATIC CFU DIQ All versions, SIMATIC CFU PA All versions, SIMATIC S7-1500 CPU family incl. related ET200 CPUs and SIPLUS variants All versions V2.0.0, SIMATIC S7-300 CPU family incl. related ET200 CPUs and SIPLUS variants All versions, SIMATIC S7-400 H V6 C...

7.5CVSS7.1AI score0.00884EPSS
SaveExploits0References3
Rows per page
Query Builder