Lucene search
K

29 matches found

Positive Technologies
Positive Technologies
added 2024/03/21 12:0 a.m.1 views

PT-2024-22272 · Grav · Grav

Name of the Vulnerable Software and Affected Versions: Grav versions prior to 1.7.45 Description: Grav is an open-source, flat-file content management system. The issue arises because Grav validates accessible functions through the Utils::isDangerousFunction function but does not impose...

8.8CVSS8.6AI score0.00482EPSS
Exploits1References12
OSV
OSV
added 2022/09/16 11:45 p.m.7 views

GSD-2022-1005281 bpf: fix potential 32-bit overflow when accessing ARRAY map element

bpf: fix potential 32-bit overflow when accessing ARRAY map element This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

7.5AI score
Exploits0
OSV
OSV
added 2022/03/30 4:15 p.m.0 views

CVE-2021-39739

In ArrayMap, there is a possible leak of the content of SMS messages due to log information disclosure. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID:...

3.3CVSS5.9AI score
Exploits0References1
Packet Storm
Packet Storm
added 2020/03/05 12:0 a.m.113 views

Google Chrome 72 / 73 Array.map Corruption

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Google Chrome 72 and 73 Array.map exploit', 'Description' = %q This module exploits an issue in Chrome 73.0.3683.86 64 bit. The exploit corrupts...

4.3CVSS0.4AI score0.73662EPSS
Exploits6
CNVD
CNVD
added 2018/02/24 12:0 a.m.2 views

Google V8 Out of Bounds Write 'Array.prototype.map' Built-in Denial of Service Vulnerability

Google V8 is a Web browser developed by the American company Google Google. A denial of service vulnerability exists built into Google V8 Out of Bounds Write 'Array.prototype.map'. A remote attacker could exploit this vulnerability to cause a denial of service...

6.7AI score
Exploits0References1
RedHat Linux
RedHat Linux
added 2016/11/03 8:8 a.m.4 views

kernel: Use after free in array_map_alloc

Use after free vulnerability was found in percpu using previously allocated memory in bpf. First allocpercpugfp is called, then the memory is freed with freepercpu which triggers async pcpubalancework and then pcpuextendareamap could use a chunk after it has been freed...

7.8CVSS7AI score0.00092EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2016/11/03 8:6 a.m.4 views

kernel: Use after free in array_map_alloc

Use after free vulnerability was found in percpu using previously allocated memory in bpf. First allocpercpugfp is called, then the memory is freed with freepercpu which triggers async pcpubalancework and then pcpuextendareamap could use a chunk after it has been freed...

7.8CVSS7AI score0.00092EPSS
Exploits1References4
OSV
OSV
added 2015/12/05 12:0 a.m.0 views

UBUNTU-CVE-2015-6771

js/array.js in Google V8, as used in Google Chrome before 47.0.2526.73, improperly implements certain map and filter operations for arrays, which allows remote attackers to cause a denial of service out-of-bounds memory access or possibly have unspecified other impact via crafted JavaScript code...

7.5CVSS7.3AI score0.02195EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2015/12/03 7:39 p.m.2 views

chromium-browser: Out of bounds access in v8

js/array.js in Google V8, as used in Google Chrome before 47.0.2526.73, improperly implements certain map and filter operations for arrays, which allows remote attackers to cause a denial of service out-of-bounds memory access or possibly have unspecified other impact via crafted JavaScript code...

7.5CVSS7.5AI score0.02195EPSS
Exploits0References5
Rows per page
Query Builder