803 matches found
MAL-2025-34095 Malicious code in string-magnetosphere-webdriver-mocha-uglify-js (npm)
The package string-magnetosphere-webdriver-mocha-uglify-js was found to contain malicious code...
MAL-2025-5984 Malicious code in @3kali182/selenium-webdriver4 (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bff78cc4315b550d5909b8c816e780ca2f8d9a2faf17fcf35ec85eecdec84644 Any computer that has this package installed or running should be considered...
CVE-2022-22757
Remote Agent, used in WebDriver, did not validate the Host or Origin headers. This could have allowed websites to connect back locally to the user's browser to control it. This bug only affected Firefox when WebDriver was enabled, which is not the default configuration.. This vulnerability affect...
Zabbix webdriver_session_query DoS
The vulnerability of the webdriversessionquery function in the universal monitoring system Zabbix is related to the assignment of a null pointer. Exploiting this vulnerability can allow an attacker to trigger a Denial-of-Service Attack...
SUSE CVE-2024-42328
When the webdriver for the Browser object downloads data from a HTTP server, the data pointer is set to NULL and is allocated only in curlwritecb when receiving data. If the server's response is an empty document, then wd-data in the code below will remain NULL and an attempt to read from it will...
SUSE CVE-2024-42329
The webdriver for the Browser object expects an error object to be initialized when the webdriversessionquery function fails. But this function can fail for various reasons without an error description and then the wd-error will be NULL and trying to read from it will result in a crash...
DEBIAN-CVE-2024-42329
The webdriver for the Browser object expects an error object to be initialized when the webdriversessionquery function fails. But this function can fail for various reasons without an error description and then the wd-error will be NULL and trying to read from it will result in a crash...
CVE-2024-42329
The webdriver for the Browser object expects an error object to be initialized when the webdriversessionquery function fails. But this function can fail for various reasons without an error description and then the wd-error will be NULL and trying to read from it will result in a crash...
CVE-2024-42328
When the webdriver for the Browser object downloads data from a HTTP server, the data pointer is set to NULL and is allocated only in curlwritecb when receiving data. If the server's response is an empty document, then wd-data in the code below will remain NULL and an attempt to read from it will...
DEBIAN-CVE-2024-42328
When the webdriver for the Browser object downloads data from a HTTP server, the data pointer is set to NULL and is allocated only in curlwritecb when receiving data. If the server's response is an empty document, then wd-data in the code below will remain NULL and an attempt to read from it will...
CVE-2024-42328
When the webdriver for the Browser object downloads data from a HTTP server, the data pointer is set to NULL and is allocated only in curlwritecb when receiving data. If the server's response is an empty document, then wd-data in the code below will remain NULL and an attempt to read from it will...
UBUNTU-CVE-2024-42329
The webdriver for the Browser object expects an error object to be initialized when the webdriversessionquery function fails. But this function can fail for various reasons without an error description and then the wd-error will be NULL and trying to read from it will result in a crash...
UBUNTU-CVE-2024-42328
When the webdriver for the Browser object downloads data from a HTTP server, the data pointer is set to NULL and is allocated only in curlwritecb when receiving data. If the server's response is an empty document, then wd-data in the code below will remain NULL and an attempt to read from it will...
CVE-2024-42329 JS - Crash on unexpected HTTP server response
The webdriver for the Browser object expects an error object to be initialized when the webdriversessionquery function fails. But this function can fail for various reasons without an error description and then the wd-error will be NULL and trying to read from it will result in a crash...
CVE-2024-42329 JS - Crash on unexpected HTTP server response
The webdriver for the Browser object expects an error object to be initialized when the webdriversessionquery function fails. But this function can fail for various reasons without an error description and then the wd-error will be NULL and trying to read from it will result in a crash...
CVE-2024-42329
The webdriver for the Browser object expects an error object to be initialized when the webdriversessionquery function fails. But this function can fail for various reasons without an error description and then the wd-error will be NULL and trying to read from it will result in a crash...
CVE-2024-42328
CVE-2024-42328 affects Zabbix’s Browser object webdriver when downloading data over HTTP. Root cause: the data pointer is set to NULL and only allocated in curl_write_cb; an empty HTTP response leaves wd->data NULL, causing a crash when read. Impact stated as a crash (potential denial of servi...
CVE-2024-42328
When the webdriver for the Browser object downloads data from a HTTP server, the data pointer is set to NULL and is allocated only in curlwritecb when receiving data. If the server's response is an empty document, then wd-data in the code below will remain NULL and an attempt to read from it will...
PT-2024-9609
Name of the Vulnerable Software and Affected Versions Zabbix affected versions not specified Description The issue is related to the webdriver session query function in Zabbix, which can lead to a null pointer dereference. This can cause a denial of service DoS when the function fails without...
CVE-2024-42328: Unchecked Return Value to NULL Pointer Dereference
When the webdriver for the Browser object downloads data from a HTTP server, the data pointer is set to NULL and is allocated only in curlwritecb when receiving data. If the server's response is an empty document, then wd-data in the code below will remain NULL and an attempt to read from it will...