Lucene search
+L

5302 matches found

osv_ubuntu
osv_ubuntu
•added 2017/08/10 12:00 a.m.•6 views

UBUNTU-CVE-2017-7800

A use-after-free vulnerability can occur in WebSockets when the object holding the connection is freed before the disconnection operation is finished. This results in an exploitable crash. This vulnerability affects Thunderbird 52.3, Firefox ESR 52.3, and Firefox 55...

9.8CVSS7.1AI score0.02937EPSS
SaveExploits1References4
ThreatPost
ThreatPost
•added 2017/08/09 12:39 p.m.•23 views

Mozilla Fixes 29 Vulnerabilities in Firefox, Makes Flash Click-To-Activate

Mozilla fixed three critical vulnerabilities when it released Firefox 55 on Tuesday, including bugs that could have triggered a crash of the browser and allowed for the execution of arbitrary code. The code execution vulnerability stems from an XUL injection vulnerability due to improper...

1.4AI score
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2017/08/09 1:53 a.m.•27 views

CVE-2017-7800

A use-after-free vulnerability can occur in WebSockets when the object holding the connection is freed before the disconnection operation is finished. This results in an exploitable crash. This vulnerability affects Thunderbird 52.3, Firefox ESR 52.3, and Firefox 55...

9.8CVSS0.8AI score0.02937EPSS
SaveExploits1References2
Mozilla
Mozilla
•added 2017/08/08 12:00 a.m.•562 views

Security vulnerabilities fixed in Firefox 55 — Mozilla

The Developer Tools feature suffers from a XUL injection vulnerability due to improper sanitization of the web page source code. In the worst case, this could allow arbitrary code execution when opening a malicious page with the style editor tool. A use-after-free vulnerability can occur in...

9.8CVSS10AI score0.04051EPSS
SaveExploits7References29Affected Software1
Mozilla
Mozilla
•added 2017/08/08 12:00 a.m.•538 views

Security vulnerabilities fixed in Firefox ESR 52.3 — Mozilla

The Developer Tools feature suffers from a XUL injection vulnerability due to improper sanitization of the web page source code. In the worst case, this could allow arbitrary code execution when opening a malicious page with the style editor tool. A use-after-free vulnerability can occur in...

9.8CVSS9.7AI score0.04051EPSS
SaveExploits7References17Affected Software1
Oracle linux
Oracle linux
•added 2017/08/07 12:00 a.m.•39 views

gtk-vnc security, bug fix, and enhancement update

0.7.0-2 - Fix reserved data size rhbz 1416783 - Fix inverted args in tests rhbz 1416783 - Avoid sign extension problems rhbz 1416783 - Fix crash with opening via GSocketAddress rhbz 1416783 - Fix crash & error reporting during connection timeout rhbz 1441120 - Fix incompatibility with libvncserve...

9.8CVSS9AI score0.04985EPSS
SaveExploits2
osv_cve
osv_cve
•added 2017/07/17 1:18 p.m.•20 views

CVE-2017-1000080

Linux foundation ONOS 1.9.0 allows unauthenticated use of websockets...

7.5CVSS7AI score
SaveExploits0References1
NVD
NVD
•added 2017/07/17 1:18 p.m.•29 views

CVE-2017-1000080

Linux foundation ONOS 1.9.0 allows unauthenticated use of websockets...

7.5CVSS7.6AI score0.01049EPSS
SaveExploits0References1
Prion
Prion
•added 2017/07/17 1:18 p.m.•31 views

Design/Logic Flaw

Linux foundation ONOS 1.9.0 allows unauthenticated use of websockets...

5CVSS7.6AI score0.01049EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/07/17 12:00 a.m.•10 views

CVE-2017-1000080: Undefined Security Weakness

Linux foundation ONOS 1.9.0 allows unauthenticated use of websockets...

7.5CVSS5.8AI score0.01049EPSS
SaveExploits0References1
CVE
CVE
•added 2017/07/13 8:00 p.m.•69 views

CVE-2017-1000080

CVE-2017-1000080 affects Linux Foundation ONOS 1.9.0. The vulnerability allows unauthenticated use of the websocket protocol, enabling an attacker to interact with ONOS WS endpoints without authentication. Associated sources (CNVD-2017-19578, NVD entry) describe exploitation as unauthenticated WS...

7.5CVSS7.5AI score0.01049EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2017/07/13 8:00 p.m.•34 views

CVE-2017-1000080

Linux foundation ONOS 1.9.0 allows unauthenticated use of websockets...

7.6AI score0.01049EPSS
SaveExploits0References1
Mend
Mend
•added 2017/07/13 8:00 p.m.•6 views

CVE-2017-1000080

Linux foundation ONOS 1.9.0 allows unauthenticated use of websockets...

8.7CVSS0.01049EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2017/07/13 12:00 a.m.•6 views

PT-2017-10787

Name of the Vulnerable Software and Affected Versions Linux foundation ONOS version 1.9.0 Description The issue allows unauthenticated use of websockets. Recommendations For Linux foundation ONOS version 1.9.0, consider disabling the use of websockets until a patch is available...

7.5CVSS0.01049EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2017/06/18 12:00 a.m.•4 views

PT-2017-3382

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 55 Firefox ESR versions prior to 52.3 Thunderbird versions prior to 52.3 Description The issue is related to a use-after-free vulnerability in the implementation of WebSockets technology. This vulnerability can be...

9.8CVSS0.02937EPSS
SaveExploits1
Wallarm Lab
Wallarm Lab
•added 2017/04/06 12:51 a.m.•41 views

Wallarm Teams up with NGINX Plus to Provide Advanced Security

Wallarm is excited to be a pioneer security vendor in NGINX Certified Module program and provide trusted and verified security functionality to NGINX Plus customers. “We are pleased to announce that Wallarm is now part of the NGINX Plus Certified Module program with the Wallarm Next Generation WA...

6.8AI score
SaveExploits0
Wallarm Lab
Wallarm Lab
•added 2017/04/04 4:28 p.m.•63 views

Using WebSocket as your Real Time Protocol? Wallam got you covered.

In the beginning there was http 1 or 2, web pages were static and did not do much beyond displaying static text and images. Life has changed since… Web applications discovered that bi-directional communication between the browser and the web server is essential. Of course, http protocol, with it’...

6.5AI score
SaveExploits0
n0where
n0where
•added 2017/03/03 5:23 a.m.•82 views

Browser-based GDB frontend: gdbGUI

A modern, browser-based frontend to gdb gnu debugger. Add breakpoints, view stack traces, and more in C, C++, Go, and Rust! Simply run gdbgui from the terminal and a new tab will open in your browse Features Debug a different program in each tab new gdb instance is spawned for each tab Set/remove...

7.1AI score
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2016/11/15 12:00 a.m.•12 views

Fedora 25 : mod_cluster (2016-b6866c5c35)

Fixed remote exploits in Apache HTTP Server modmanager and modproxycluster modules, fixed performance problems with shared memory, fixed thread pool off-by-one errors, enhanced Tomcat 8 interoperability, fixed modproxy integration, added WebSockets proxy layer for modcluster. Note that Tenable...

5.5AI score
SaveExploits0References1
n0where
n0where
•added 2016/10/09 4:42 a.m.•227 views

Tunnel TCP connections over HTTP: Tunna

Tunnel TCP connections over HTTP Tunna is a set of tools which will wrap and tunnel any TCP communication over HTTP. It can be used to bypass network restrictions in fully firewalled environments. In a fully firewalled inbound and outbound connections restricted – except the webserver port. The...

SaveExploits0References1
Rows per page
Query Builder