Lucene search
+L

582 matches found

OpenVAS
OpenVAS
added 2021/11/11 12:00 a.m.25 views

Mozilla Firefox Security Advisory (MFSA2014-83) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

6.8CVSS5.4AI score0.03546EPSS
SaveExploits0References4
Veracode
Veracode
added 2021/10/06 3:12 a.m.41 views

Remote Code Execution (RCE)

mozjs78 is vulnerable to remote code execution. The vulnerability exists due to a memory safety bugs within the browser engine...

8.8CVSS3.5AI score0.01232EPSS
SaveExploits0References11Affected Software8
BDU FSTEC
BDU FSTEC
added 2021/09/10 12:00 a.m.9 views

The vulnerability of the MSHTML mechanism in the Internet Explorer browser, related to improper code generation, allows a hacker to execute arbitrary code.

The vulnerability of the MSHTML mechanism in the Internet Explorer browser is related to improper handling of code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created Microsoft Office document that contains an ActiveX control...

9CVSS7.5AI score0.9745EPSS
SaveExploits38References6Affected Software1
ArchLinux
ArchLinux
added 2021/07/21 12:00 a.m.133 views

[ASA-202107-46] opera: arbitrary code execution

Arch Linux Security Advisory ASA-202107-46 ========================================== Severity: High Date : 2021-07-21 CVE-ID : CVE-2021-30541 CVE-2021-30559 CVE-2021-30560 CVE-2021-30561 CVE-2021-30562 CVE-2021-30563 CVE-2021-30564 Package : opera Type : arbitrary code execution Remote : Yes Lin...

8.8CVSS1.7AI score0.21458EPSS
SaveExploits2References17
OpenVAS
OpenVAS
added 2021/06/09 12:00 a.m.28 views

SUSE: Security Advisory (SUSE-SU-2013:0292-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS9.1AI score0.73364EPSS
SaveExploits31References2
CNVD
CNVD
added 2021/04/21 12:00 a.m.10 views

Google Chrome Input Validation Error Vulnerability (CNVD-2021-31242)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from an input validation error vulnerability that stems from an integer overflow in the V8 browser engine. A remote attacker could exploit this vulnerability to execute arbitrary code on the target system...

9.6CVSS7.5AI score0.0144EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/04/21 12:00 a.m.18 views

Google Chrome Type Obfuscation Vulnerability (CNVD-2021-31241)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a security vulnerability that stems from a type confusion error in the V8 browser engine. An attacker can execute arbitrary code on the target system...

8.8CVSS7.5AI score0.84173EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/04/21 12:00 a.m.25 views

Google Chrome Buffer Overflow Vulnerability (CNVD-2021-31240)

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. Google Chrome suffers from a buffer overflow vulnerability that originates from a boundary error when handling untrusted input in the V8 browser engine. A remote...

8.8CVSS7.8AI score0.06625EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/04/16 12:00 a.m.26 views

Google Blink Resource Management Error Vulnerability

Blink is the U.S. Google Google Inc. and Norway's Opens opera Software company's set of browser layout engine rendering engine. Blink is vulnerable to a resource management error vulnerability that originates from use after release. No details of the vulnerability are available at this time...

8.8CVSS6.5AI score0.01555EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/04/02 12:00 a.m.76 views

CVE-2021-1879

This issue was addressed by improved management of object lifetimes. This issue is fixed in iOS 12.5.2, iOS 14.4.2 and iPadOS 14.4.2, watchOS 7.3.3. Processing maliciously crafted web content may lead to universal cross site scripting. Apple is aware of a report that this issue may have been...

6.1CVSS6.2AI score0.07082EPSS
SaveIn wildExploits0References4
ThreatPost
ThreatPost
added 2020/01/23 11:54 a.m.52 views

Google: Flaws in Apple’s Private-Browsing Technology Allow for Third-Party Tracking

Technology Apple designed for its Safari web browser to protect users from being tracked when they surf the web may actually do just the opposite, according to new research from Google. Google researchers have identified a number of security flaws in Safari’s Intelligent Tracking Protection that...

0.6AI score
SaveExploits0References7
CNVD
CNVD
added 2019/12/27 12:00 a.m.6 views

WebKit component buffer overflow vulnerability in multiple Apple products (CNVD-2020-00209)

Apple iOS is an operating system developed for mobile devices. apple tvOS is an operating system for smart TVs. apple macOS Mojave is a specialized operating system developed for Mac computers. webKit is one of the web browser WebKit is a Web browser engine component. A buffer overflow...

8.8CVSS8.5AI score0.08287EPSS
SaveExploits3References1
CNVD
CNVD
added 2019/12/27 12:00 a.m.7 views

WebKit Component Memory Corruption Vulnerability in Multiple Apple Products (CNVD-2020-00541)

Apple iOS is an operating system developed for mobile devices. apple tvOS is an operating system for smart TVs. apple macOS Mojave is a specialized operating system developed for Mac computers. webKit is one of the web browser WebKit is a Web browser engine component. A memory corruption...

6.8CVSS8.6AI score0.01458EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:00 a.m.10 views

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to compromise data integrity, gain unauthorized access to protected information, and cause service failures.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to compromise data integrity, gain unauthorized access to protected information, and cause service failures throug...

10CVSS7.7AI score0.01566EPSS
SaveExploits0References8Affected Software2
Tenable Nessus
Tenable Nessus
added 2019/11/06 12:00 a.m.38 views

Mozilla Firefox ESR < 17.0.10 Multiple Vulnerabilities

Binary data 701239.prm...

10CVSS7AI score0.06493EPSS
SaveExploits0References25
ThreatPost
ThreatPost
added 2019/08/28 3:05 p.m.84 views

Google Squashes High-Severity Blink Browser Engine Flaw

Google is urging users of its Chrome browser to update after a high-severity vulnerability – which could enable remote attackers to execute code and carry out other malicious attacks – was uncovered. The vulnerability CVE-2019-5869, a use-after-free flaw, specifically exists in Blink, an...

4.3CVSS0.4AI score0.00765EPSS
SaveExploits0References9
android
android
added 2019/07/03 12:00 a.m.78 views

WebKit Use-After-Free

A vulnerability in the WebKit browser engine allows a malicious webpage to perform remote code execution...

10CVSS3.1AI score0.19016EPSS
SaveExploits2References2Affected Software1
Veracode
Veracode
added 2019/05/02 5:29 a.m.24 views

Denial Of Service (DoS)

Mozilla Firefox is vulnerable to denial of service DoS attacks. The vulnerability exists as multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox. This allows a remote attacker to execute arbitrary code via unknown vectors...

8.8CVSS8.9AI score0.04692EPSS
SaveExploits0References29Affected Software2
Veracode
Veracode
added 2019/05/02 5:29 a.m.28 views

Denial Of Service (DoS)

Mozilla Firefox is vulnerable to denial of service DoS attacks. The vulnerability exists as multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox. This allows a remote attacker to execute arbitrary code via unknown vectors...

8.8CVSS8.9AI score0.04692EPSS
SaveExploits0References31Affected Software1
CNVD
CNVD
added 2019/03/28 12:00 a.m.14 views

WebKit Memory Misreference Vulnerability in Multiple Apple Products (CNVD-2019-08714)

Apple Safari is a web browser that is the default browser that comes with the MacOSX and iOS operating systems. apple iOS is a suite of operating systems for mobile devices. apple tvOS is a smart TV operating system. webKit is a component of the web browser engine. WebKit is one of the Web browse...

8.8CVSS7.5AI score0.0142EPSS
SaveExploits0References1
Rows per page
Query Builder