Lucene search
+L

3283 matches found

Mend
Mend
•added 2021/11/02 8:25 p.m.•2 views

CVE-2021-37979

heap buffer overflow in WebRTC in Google Chrome prior to 94.0.4606.81 allowed a remote attacker who convinced a user to browse to a malicious website to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS0.01767EPSS
SaveExploits1References9
AlpineLinux
AlpineLinux
•added 2021/11/02 8:25 p.m.•98 views

CVE-2021-37979

heap buffer overflow in WebRTC in Google Chrome prior to 94.0.4606.81 allowed a remote attacker who convinced a user to browse to a malicious website to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.9AI score0.01767EPSS
SaveExploits1
CVE
CVE
•added 2021/11/02 8:25 p.m.•213 views

CVE-2021-37979

CVE-2021-37979 is a Chrome/Chromium-related vulnerability describing a heap buffer overflow in the WebRTC component of the Chromium engine (before version 94.0.4606.81). The issue could allow a remote attacker to trigger heap corruption by convincing a user to visit a malicious page containing cr...

8.8CVSS7.8AI score0.01767EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2021/11/02 8:25 p.m.•53 views

CVE-2021-37979

heap buffer overflow in WebRTC in Google Chrome prior to 94.0.4606.81 allowed a remote attacker who convinced a user to browse to a malicious website to potentially exploit heap corruption via a crafted HTML page...

8.9AI score0.01767EPSS
SaveExploits1References5
Debian CVE
Debian CVE
•added 2021/11/02 8:25 p.m.•60 views

CVE-2021-37979

heap buffer overflow in WebRTC in Google Chrome prior to 94.0.4606.81 allowed a remote attacker who convinced a user to browse to a malicious website to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.6AI score0.01767EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/02 12:00 a.m.•4 views

CVE-2021-37979: Out-of-bounds Write

heap buffer overflow in WebRTC in Google Chrome prior to 94.0.4606.81 allowed a remote attacker who convinced a user to browse to a malicious website to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.1AI score0.01767EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2021/10/27 12:00 a.m.•38 views

NewStart CGSL CORE 5.05 / MAIN 5.05 : firefox Multiple Vulnerabilities (NS-SA-2021-0178)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has firefox packages installed that are affected by multiple vulnerabilities: - Use after free in WebRTC in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted SCTP...

8.8CVSS7.7AI score0.01639EPSS
SaveExploits0References21
Tenable Nessus
Tenable Nessus
•added 2021/10/27 12:00 a.m.•35 views

NewStart CGSL CORE 5.05 / MAIN 5.05 : firefox Multiple Vulnerabilities (NS-SA-2021-0154)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has firefox packages installed that are affected by multiple vulnerabilities: - In non-standard configurations, a JPEG image created by JavaScript could have caused an internal variable to overflow, resulting in an out of bound...

9.8CVSS8.4AI score0.42327EPSS
SaveExploits5References65
Tenable Nessus
Tenable Nessus
•added 2021/10/27 12:00 a.m.•21 views

NewStart CGSL CORE 5.04 / MAIN 5.04 : firefox Multiple Vulnerabilities (NS-SA-2021-0102)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has firefox packages installed that are affected by multiple vulnerabilities: - A texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the buffer used to unpack it, resulting in memory...

8.8CVSS8.2AI score0.01416EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
•added 2021/10/27 12:00 a.m.•28 views

NewStart CGSL CORE 5.04 / MAIN 5.04 : thunderbird Multiple Vulnerabilities (NS-SA-2021-0101)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has thunderbird packages installed that are affected by multiple vulnerabilities: - A texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the buffer used to unpack it, resulting in memory...

8.8CVSS8.2AI score0.01416EPSS
SaveExploits0References9
BDU FSTEC
BDU FSTEC
•added 2021/10/27 12:00 a.m.•25 views

The vulnerability of the WebRTC component in the Google Chrome web browser, related to the use of memory after it is freed, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the WebRTC component in the Google Chrome web browser is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service interruptions through a specially create...

8.8CVSS8AI score0.01102EPSS
SaveExploits1References11Affected Software5
Tenable Nessus
Tenable Nessus
•added 2021/10/27 12:00 a.m.•218 views

NewStart CGSL CORE 5.05 / MAIN 5.05 : thunderbird Multiple Vulnerabilities (NS-SA-2021-0177)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has thunderbird packages installed that are affected by multiple vulnerabilities: - Use after free in WebRTC in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted...

8.8CVSS7.7AI score0.01639EPSS
SaveExploits1References23
zdt
zdt
•added 2021/10/26 12:00 a.m.•491 views

FreeSWITCH 1.10.6 SRTP Packet Denial Of Service Vulnerability

FreeSWITCH susceptible to Denial of Service via invalid SRTP packets - Fixed versions: v1.10.7 - Enable Security Advisory: https://github.com/EnableSecurity/advisories/tree/master/ES2021-09-freeswitch-srtp-dos - Vendor Security Advisory:...

7.5CVSS0.2AI score0.02521EPSS
SaveExploits3
Cvelist
Cvelist
•added 2021/10/25 10:05 p.m.•38 views

CVE-2021-41105 FreeSWITCH susceptible to Denial of Service via invalid SRTP packets

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. When handling SRTP calls, FreeSWITCH prior to version 1.10.7 is susceptible to a DoS where calls can be terminated...

7.5CVSS7.8AI score0.02521EPSS
SaveExploits3References3
AlpineLinux
AlpineLinux
•added 2021/10/25 10:05 p.m.•86 views

CVE-2021-41105

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. When handling SRTP calls, FreeSWITCH prior to version 1.10.7 is susceptible to a DoS where calls can be terminated...

7.5CVSS7.5AI score0.02521EPSS
SaveExploits3
Packet Storm
Packet Storm
•added 2021/10/25 12:00 a.m.•504 views

FreeSWITCH 1.10.6 SRTP Packet Denial Of Service

FreeSWITCH susceptible to Denial of Service via invalid SRTP packets - Fixed versions: v1.10.7 - Enable Security Advisory: https://github.com/EnableSecurity/advisories/tree/master/ES2021-09-freeswitch-srtp-dos - Vendor Security Advisory:...

0.02521EPSS
SaveExploits3
Positive Technologies
Positive Technologies
•added 2021/10/25 12:00 a.m.•22 views

PT-2021-23092 · Unknown +1 · Freeswitch +1

Name of the Vulnerable Software and Affected Versions: FreeSWITCH versions prior to 1.10.7 Description: The issue allows remote attackers to terminate calls by flooding a media port handling SRTP traffic with specially crafted SRTP packets, leading to denial of service. This can be done...

8.6CVSS6.2AI score0.03753EPSS
SaveExploits19References28
Kaspersky
Kaspersky
•added 2021/10/21 12:00 a.m.•56 views

KLA12334 Multiple vulnerabilities in Opera

Multiple vulnerabilities were found in Opera. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Use after free in Garbage Collection can be exploited to cause denial of service or execute arbitrary...

8.8CVSS9.6AI score0.01462EPSS
SaveExploits0References3
Veracode
Veracode
•added 2021/10/20 2:39 a.m.•49 views

Denial Of Service (DoS)

qt5-qtwebengine is vulnerable to denial of service. The vulnerability exists due to a Heap buffer overflow in WebRTC...

8.8CVSS2.3AI score0.01767EPSS
SaveExploits1References8Affected Software3
OPENSUSE Linux
OPENSUSE Linux
•added 2021/10/12 12:00 a.m.•64 views

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2021:1350-1 Rating: important References: 1190765 1191166 1191204 1191463 Cross-References: CVE-2021-37956 CVE-2021-37957 CVE-2021-37958 CVE-2021-37959 CVE-2021-37960 CVE-2021-37961 CVE-2021-37962 CVE-2021-37963...

9.6CVSS9.2AI score0.34887EPSS
SaveExploits5References4
Rows per page
Query Builder