Lucene search
+L

16224 matches found

Github Security Blog
Github Security Blog
•added 2023/09/28 6:30 p.m.•46 views

Electron affected by libvpx's heap buffer overflow in vp8 encoding

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS9AI score0.49013EPSS
SaveExploits3References64Affected Software1
osv_ghsa
osv_ghsa
•added 2023/09/28 6:30 p.m.•33 views

GHSA-QQVQ-6XGJ-JW8G Electron affected by libvpx's heap buffer overflow in vp8 encoding

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS9AI score0.49013EPSS
SaveExploits3References64
osv_alpine
osv_alpine
•added 2023/09/28 4:15 p.m.•3 views

ALPINE-CVE-2023-5217

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS0.49013EPSS
SaveExploits3References1
Prion
Prion
•added 2023/09/28 4:15 p.m.•34 views

Heap overflow

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

6.8CVSS9.1AI score0.49013EPSS
SaveExploits3References52Affected Software11
Debian CVE
Debian CVE
•added 2023/09/28 3:23 p.m.•105 views

CVE-2023-5217

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS9AI score0.49013EPSS
SaveExploits3
Mend
Mend
•added 2023/09/28 3:23 p.m.•7 views

CVE-2023-5217

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS9AI score0.49013EPSS
SaveExploits3References76
AlpineLinux
AlpineLinux
•added 2023/09/28 3:23 p.m.•78 views

CVE-2023-5217

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS9AI score0.49013EPSS
SaveExploits3
Cvelist
Cvelist
•added 2023/09/28 3:23 p.m.•81 views

CVE-2023-5217

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

9.1AI score0.49013EPSS
SaveExploits3References52
CVE
CVE
•added 2023/09/28 3:23 p.m.•1098 views

CVE-2023-5217

CVE-2023-5217 is a heap buffer overflow in VP8 encoding in libvpx (affecting Google Chrome before 117.0.5938.132 and libvpx 1.13.1). A crafted HTML page could remotely trigger heap corruption. Multiple connected sources confirm the vulnerability in libvpx/WebP contexts; Apple’s advisory notes CVE...

8.8CVSS9AI score0.49013EPSS
SaveIn wildExploits3References53Affected Software1
osv_oesa
osv_oesa
•added 2023/09/28 11:06 a.m.•20 views

OESA-2023-1685 firefox security update

Mozilla Firefox is a standalone web browser, designed for standards compliance and performance. Its functionality can be enhanced via a plethora of extensions. Security Fixes: There exists a use after free/double free in libwebp. An attacker can use the ApplyFiltersAndEncode function and loop...

7.5CVSS6.9AI score0.00952EPSS
SaveExploits0References2
Snyk
Snyk
•added 2023/09/28 7:44 a.m.•9 views

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow in vp8 encoding in libvpx. Remediation Upgrade CefSharp.Common.NETCore to version 117.2.20 or higher. References - Chrome Releases - GitHub Commit - GitHub Commit - GitHub PR - GitHub PR - GitHub PR - GitHub P...

8.8CVSS7.8AI score0.49013EPSS
SaveExploits3References2
Snyk
Snyk
•added 2023/09/28 7:44 a.m.•10 views

Heap-based Buffer Overflow

Overview CefSharp.Common is a the CefSharp Chromium-based browser component 'Core' and common 'Element' components, needed by both WPF and WinForms. Affected versions of this package are vulnerable to Heap-based Buffer Overflow in vp8 encoding in libvpx. Remediation Upgrade CefSharp.Common to...

8.8CVSS7.8AI score0.49013EPSS
SaveExploits3References2
OSS-Fuzz
OSS-Fuzz
•added 2023/09/28 6:49 a.m.•16 views

threetenbp:ThreetenbpFuzzer: Security exception in org.threeten.bp.format.DateTimeFormatterBuilder$CompositePrinterParser.parse

Project: https://github.com/ThreeTen/threetenbp.git Detailed Report: https://oss-fuzz.com/testcase?key=6040667669004288 Project: threetenbp Fuzzing Engine: libFuzzer Fuzz Target: ThreetenbpFuzzer Job Type: libfuzzerasanthreetenbp Platform Id: linux Crash Type: Security exception Crash Address:...

5.9AI score
SaveExploits0
SUSE CVE
SUSE CVE
•added 2023/09/28 1:45 a.m.•8 views

SUSE CVE-2023-5217

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.4CVSS9AI score0.49013EPSS
SaveExploits3References19
attackerkb
attackerkb
•added 2023/09/28 12:00 a.m.•105 views

CVE-2023-5217

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High Recent assessments: Assessed Attacker Value: 0 Assessed Attacker...

8.8CVSS9.1AI score0.49013EPSS
SaveIn wildExploits3References53
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/28 12:00 a.m.•2 views

CVE-2023-5217: Out-of-bounds Write

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS9.1AI score0.49013EPSS
SaveExploits3References2
IBM Security Bulletins
IBM Security Bulletins
•added 2023/09/27 9:10 p.m.•37 views

Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in Python Cryptographic Authority cryptography

Summary IBM Watson Discovery Cartridge for IBM Cloud Pak for Data contains a vulnerable version of Python Cryptographic Authority cryptography. Vulnerability Details CVEID:CVE-2023-38325 DESCRIPTION: Python Cryptographic Authority cryptography could provide weaker than expected security, caused b...

7.5CVSS6.6AI score0.00732EPSS
SaveExploits1Affected Software1
osv_usn
osv_usn
•added 2023/09/27 9:39 a.m.•31 views

USN-6398-1 minidlna vulnerabilities

It was discovered that ReadyMedia was vulnerable to DNS rebinding attacks. A remote attacker could possibly use this issue to trick the local DLNA server to leak information. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. CVE-2022-26505 It was...

9.8CVSS7.3AI score0.02061EPSS
SaveExploits2References3
OSS-Fuzz
OSS-Fuzz
•added 2023/09/27 7:17 a.m.•22 views

javaparser:parseFuzzer: Security exception in com.github.javaparser.GeneratedJavaParser.Expression

Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=4724578221686784 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Security exception Crash Address: Crash...

5.9AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2023/09/27 12:00 a.m.•50 views

Amazon Linux 2 : tomcat (ALASTOMCAT8.5-2023-007)

The version of tomcat installed on the remote host is prior to 8.5.69-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2TOMCAT8.5-2023-007 advisory. A vulnerability in the JNDI Realm of Apache Tomcat allows an attacker to authenticate using variations of a valid...

6.5CVSS7.1AI score0.74667EPSS
SaveExploits1References6
Rows per page
Query Builder