Lucene search
K

55 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2026/02/06 2:7 a.m.8 views

Malicious code in ac-dom-events (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f238a5b77b3e11372b1aa3ce3a92c8faf8ec01536ec65004a05051de2ec306c The package ac-dom-events was found to contain malicious code...

5.3AI score
Exploits0
OSV
OSV
added 2026/02/06 2:7 a.m.3 views

MAL-2026-777 Malicious code in ac-dom-events (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f238a5b77b3e11372b1aa3ce3a92c8faf8ec01536ec65004a05051de2ec306c The package ac-dom-events was found to contain malicious code...

5.3AI score
Exploits0
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2013-6457

Malware in sbrugna...

7.5CVSS9.3AI score0.01281EPSS
Exploits1References9
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2013-1668

Malware in sbrugna...

9.3CVSS6.1AI score0.04587EPSS
Exploits0References5
SUSE CVE
SUSE CVE
added 2023/02/15 5:40 a.m.4 views

SUSE CVE-2013-1637

Opera before 12.13 allows remote attackers to execute arbitrary code via vectors involving DOM events...

9.3CVSS7.7AI score0.04587EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 5:33 a.m.3 views

SUSE CVE-2013-6655

Use-after-free vulnerability in Blink, as used in Google Chrome before 33.0.1750.117, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to improper handling of overflowchanged DOM events during interaction between JavaScript and...

7.5CVSS9.6AI score0.01281EPSS
Exploits1References3
SUSE CVE
SUSE CVE
added 2023/02/15 4:54 a.m.5 views

SUSE CVE-2016-9899

Use-after-free while manipulating DOM events and removing audio elements due to errors in the handling of node adoption. This vulnerability affects Firefox 50.1, Firefox ESR 45.6, and Thunderbird 45.6...

9.8CVSS6.5AI score0.21401EPSS
Exploits6References23
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.26 views

SUSE: Security Advisory (SUSE-SU-2016:3223-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.7AI score0.21401EPSS
Exploits12References6
Veracode
Veracode
added 2019/05/02 5:51 a.m.24 views

Use-After-Free (UAF)

Firefox, Firefox ESR and Thunderbird are vulnerable to use-after-free vulnerability. Errors in the handling of node adoption while manipulating DOM events and removing audio elements could possibly result in a system crash...

9.8CVSS9.1AI score0.21401EPSS
Exploits6References13Affected Software3
OSV
OSV
added 2018/06/11 9:29 p.m.2 views

DEBIAN-CVE-2016-9899

Use-after-free while manipulating DOM events and removing audio elements due to errors in the handling of node adoption. This vulnerability affects Firefox 50.1, Firefox ESR 45.6, and Thunderbird 45.6...

9.8CVSS8.5AI score0.21401EPSS
Exploits6References1
NVD
NVD
added 2018/06/11 9:29 p.m.21 views

CVE-2016-9899

Use-after-free while manipulating DOM events and removing audio elements due to errors in the handling of node adoption. This vulnerability affects Firefox 50.1, Firefox ESR 45.6, and Thunderbird 45.6...

9.8CVSS8.9AI score0.21401EPSS
Exploits6References11
Prion
Prion
added 2018/06/11 9:29 p.m.27 views

Double free

Use-after-free while manipulating DOM events and removing audio elements due to errors in the handling of node adoption. This vulnerability affects Firefox 50.1, Firefox ESR 45.6, and Thunderbird 45.6...

7.5CVSS5.9AI score0.21401EPSS
Exploits6References11Affected Software10
AlpineLinux
AlpineLinux
added 2018/06/11 9:0 p.m.33 views

CVE-2016-9899

Use-after-free while manipulating DOM events and removing audio elements due to errors in the handling of node adoption. This vulnerability affects Firefox 50.1, Firefox ESR 45.6, and Thunderbird 45.6...

9.8CVSS9.1AI score0.21401EPSS
Exploits6
CVE
CVE
added 2018/06/11 9:0 p.m.206 views

CVE-2016-9899

CVE-2016-9899 describes a use-after-free in Firefox/Thunderbird caused by errors in node adoption handling during DOM event manipulation and audio element removal. Affected: Firefox < 50.1, Firefox ESR < 45.6, Thunderbird

9.8CVSS8.8AI score0.21401EPSS
Exploits6References11Affected Software1
Cvelist
Cvelist
added 2018/06/11 9:0 p.m.26 views

CVE-2016-9899

Use-after-free while manipulating DOM events and removing audio elements due to errors in the handling of node adoption. This vulnerability affects Firefox 50.1, Firefox ESR 45.6, and Thunderbird 45.6...

8.9AI score0.21401EPSS
Exploits6References11
Debian CVE
Debian CVE
added 2018/06/11 9:0 p.m.27 views

CVE-2016-9899

Use-after-free while manipulating DOM events and removing audio elements due to errors in the handling of node adoption. This vulnerability affects Firefox 50.1, Firefox ESR 45.6, and Thunderbird 45.6...

9.8CVSS9.6AI score0.21401EPSS
Exploits6
Hacker One
Hacker One
added 2018/01/26 11:36 a.m.29 views

Rockstar Games: Stored XSS in Snapmatic + R★Editor comments

Summary provided by the Researcher, @europa . I requested the disclosure of what I hope is the final report regarding stored cross-site-scripting vulnerabilities on the Rockstar Games SocialClub, to also allow me to summarize the research that went into the other 5 reports. Have fun! Report 1 The...

6.7AI score
Exploits0
OSV
OSV
added 2017/01/06 8:28 a.m.9 views

MGASA-2017-0006 Updated thunderbird packages fix security vulnerabilities

Use-after-free while manipulating DOM events and removing audio elements due to errors in the handling of node adoption CVE-2016-9899. Event handlers on marquee elements were executed despite a strict Content Security Policy CSP that disallowed inline JavaScript CVE-2016-9895. Memory corruption...

9.8CVSS7.1AI score0.21401EPSS
Exploits11References5
Tenable Nessus
Tenable Nessus
added 2017/01/03 12:0 a.m.41 views

Mozilla Thunderbird < 45.6 Multiple Vulnerabilities

The version of Mozilla Thunderbird installed on the remote Windows host is prior to 45.6. It is, therefore, affected by the following vulnerabilities : - Multiple memory corruption issues exists, such as when handling document state changes or HTML5 content, or else due to dereferencing already...

9.8CVSS8.1AI score0.21401EPSS
Exploits11References9
Tenable Nessus
Tenable Nessus
added 2017/01/03 12:0 a.m.51 views

Mozilla Thunderbird < 45.6 Multiple Vulnerabilities (macOS)

The version of Mozilla Thunderbird installed on the remote macOS or Mac OS X host is prior to 45.6. It is, therefore, affected by the following vulnerabilities : - Multiple memory corruption issues exists, such as when handling document state changes or HTML5 content, or else due to dereferencing...

9.8CVSS8.1AI score0.21401EPSS
Exploits11References9
Rows per page
Query Builder