Lucene search
K

2106 matches found

BDU FSTEC
BDU FSTEC
added 2023/08/02 12:0 a.m.5 views

The vulnerability of the WASM JIT component in the Firefox browser, including Firefox Firefox ESR, allows a hacker to trigger a service failure.

The vulnerability of the WASM JIT component in Firefox browsers, including Firefox ESR, is related to improper resource cleanup or release mechanisms. Exploiting this vulnerability can allow an attacker to cause service interruptions...

7.8CVSS6.2AI score0.01007EPSS
Exploits0References12Affected Software6
OSV
OSV
added 2023/08/01 3:15 p.m.4 views

DEBIAN-CVE-2023-4046

In some circumstances, a stale value could have been used for a global variable in WASM JIT analysis. This resulted in incorrect compilation and a potentially exploitable crash in the content process. This vulnerability affects Firefox 116, Firefox ESR 102.14, and Firefox ESR 115.1...

5.3CVSS6.2AI score0.01007EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/08/01 12:0 a.m.2 views

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the U.S. Mozilla Firefox ESR is Firefox Enterprise Edition. A denial of service vulnerability exists in Mozilla Firefox and Mozilla Firefox ESR that stems from incorrect values used during WASM compilation. An attacker c...

5.3CVSS8.5AI score0.01007EPSS
Exploits0References15
Positive Technologies
Positive Technologies
added 2023/07/28 12:0 a.m.12 views

PT-2023-7025 · Node.Js +6 · Node.Js +6

Name of the Vulnerable Software and Affected Versions: Node.js versions prior to the fixed version Description: Maliciously crafted export names in an imported WebAssembly module can inject JavaScript code. The injected code may be able to access data and functions that the WebAssembly module...

9.8CVSS6.5AI score0.99999EPSS
Exploits22References158
RedhatCVE
RedhatCVE
added 2023/07/19 4:6 p.m.49 views

CVE-2023-37450

A vulnerability was found in webkitgtk. This issue occurs when processing web content, which may lead to arbitrary code execution. Mitigation This vulnerability can be mitigated by setting the environment variable JSCuseWebAssembly=0, which will disable support for WebAssembly. It's not necessary...

8.8CVSS8.7AI score0.18185EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2023/06/30 7:17 a.m.61 views

CVE-2023-32435

A vulnerability was found in webkitgtk. This issue occurs when processing web content, which may lead to arbitrary code execution. Mitigation This vulnerability can be mitigated by setting the environment variable JSCuseWebAssembly=0, which will disable support for WebAssembly. It's not necessary...

8.8CVSS8.8AI score0.22951EPSS
Exploits1References5
Fedora
Fedora
added 2023/06/26 12:41 a.m.44 views

[SECURITY] Fedora 38 Update: wabt-1.0.33-1.fc38

WABT we pronounce it "wabbit" is a suite of tools for WebAssembly. These to ols are intended for use in or for development of toolchains or other systems t hat want to manipulate WebAssembly files. Unlike the WebAssembly spec interpreter which is written to be as simple, declarative and "speccy" ...

5.5CVSS5.4AI score0.00285EPSS
Exploits3
Tenable Nessus
Tenable Nessus
added 2023/06/26 12:0 a.m.22 views

Fedora 38 : wabt (2023-ab291ca614)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-ab291ca614 advisory. Latest stable release. Full upstream changelog: https://github.com/WebAssembly/wabt/compare/1.0.32...1.0.33 . Fixes CVE-2023-27116, CVE-2023-30300 a...

5.5CVSS5.7AI score0.00285EPSS
Exploits3References4
OpenVAS
OpenVAS
added 2023/06/26 12:0 a.m.19 views

Fedora: Security Advisory for wabt (FEDORA-2023-ab291ca614)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS5.5AI score0.00285EPSS
Exploits3References2
NVD
NVD
added 2023/05/23 12:15 p.m.18 views

CVE-2023-31669

WebAssembly wat2wasm v1.0.32 allows attackers to cause a libc++abi.dylib crash by putting '@' before a quote "...

5.5CVSS5.3AI score0.00284EPSS
Exploits1References2
OSV
OSV
added 2023/05/23 12:15 p.m.2 views

DEBIAN-CVE-2023-31669

WebAssembly wat2wasm v1.0.32 allows attackers to cause a libc++abi.dylib crash by putting '@' before a quote "...

5.5CVSS5.5AI score0.00284EPSS
Exploits1References1
OSV
OSV
added 2023/05/23 12:15 p.m.16 views

CVE-2023-31669

WebAssembly wat2wasm v1.0.32 allows attackers to cause a libc++abi.dylib crash by putting '@' before a quote "...

5.5CVSS7AI score
Exploits0References2
UbuntuCve
UbuntuCve
added 2023/05/23 12:15 p.m.16 views

CVE-2023-31669

WebAssembly wat2wasm v1.0.32 allows attackers to cause a libc++abi.dylib crash by putting '@' before a quote "...

5.5CVSS6.1AI score0.00284EPSS
Exploits1References2
Prion
Prion
added 2023/05/23 12:15 p.m.14 views

Design/Logic Flaw

WebAssembly wat2wasm v1.0.32 allows attackers to cause a libc++abi.dylib crash by putting '@' before a quote "...

1.9CVSS5.4AI score0.00284EPSS
Exploits1References2Affected Software1
OSV
OSV
added 2023/05/23 12:15 p.m.1 views

UBUNTU-CVE-2023-31669

WebAssembly wat2wasm v1.0.32 allows attackers to cause a libc++abi.dylib crash by putting '@' before a quote "...

5.5CVSS5.8AI score0.00284EPSS
Exploits1References3
OSV
OSV
added 2023/05/23 1:15 a.m.4 views

DEBIAN-CVE-2023-31670

An issue in wasm2c 1.0.32, wasm2wat 1.0.32, wasm-decompile 1.0.32, and wasm-validate 1.0.32 allows attackers to cause a Denial of Service DoS via running a crafted binary...

7.5CVSS7.6AI score0.00833EPSS
Exploits1References1
CNNVD
CNNVD
added 2023/05/23 12:0 a.m.4 views

WABT 安全漏洞

WABT is a WebAssembly binary toolkit open-sourced by WebAssembly. A security vulnerability in WABT wasm2c version 1.0.32, wasm2wat version 1.0.32, wasm-decompile version 1.0.32, and wasm-validate version 1.0.32 exists that originates from a vulnerability that could allow an attacker to cause a...

7.5CVSS7.5AI score0.00833EPSS
Exploits1References2
Cvelist
Cvelist
added 2023/05/23 12:0 a.m.15 views

CVE-2023-31669

WebAssembly wat2wasm v1.0.32 allows attackers to cause a libc++abi.dylib crash by putting '@' before a quote "...

5.6AI score0.00284EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2023/05/23 12:0 a.m.2 views

PT-2023-23409 · Unknown +1 · Webassembly Wat2Wasm +1

Name of the Vulnerable Software and Affected Versions: WebAssembly wat2wasm version 1.0.32 Description: The issue allows attackers to cause a libc++abi.dylib crash by putting '@' before a quote "". Recommendations: For version 1.0.32, avoid using the '@' symbol before a quote " in the input to...

5.5CVSS5.7AI score0.00284EPSS
Exploits1References14
CNNVD
CNNVD
added 2023/05/23 12:0 a.m.3 views

WebAssembly 安全漏洞

WebAssembly is a binary instruction format for stack-based virtual machines from WebAssembly. A security vulnerability exists in WebAssembly wat2wasm version v1.0.32-35-g9990b0cf, which originated from a vulnerability that allows an attacker to cause libc++abi.dylib to crash by placing an @ befor...

5.5CVSS5.7AI score0.00284EPSS
Exploits1References3
Rows per page
Query Builder