Lucene search
+L

9575 matches found

RedhatCVE
RedhatCVE
•added 2022/01/12 11:23 p.m.•58 views

CVE-2022-22742

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as: When inserting text in edit mode, some characters might have led to out-of-bounds memory access, causing a potentially exploitable crash...

7.5CVSS2.9AI score0.00818EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2022/01/12 11:23 p.m.•62 views

CVE-2022-22740

The Mozilla Foundation Security Advisory describes this flaw as: Certain network request objects were freed too early when releasing a network request handle. This could have led to a use-after-free issue, causing a potentially exploitable crash...

8.8CVSS1.4AI score0.0097EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2022/01/12 11:23 p.m.•70 views

CVE-2022-22737

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as: Constructing audio sinks could have led to a race condition when playing audio files and closing windows. This could have lead to a use-after-free issue, causing a potentially exploitable crash...

7.5CVSS2.5AI score0.00752EPSS
SaveExploits1References3
ThreatPost
ThreatPost
•added 2022/01/12 9:05 p.m.•503 views

Widespread, Easily Exploitable Windows RDP Bug Opens Users to Data Theft

Remote Desktop Protocol RDP pipes have a security bug that could allow any standard, unprivileged Joe-Schmoe user to access other connected users’ machines. If exploited, it could lead to data-privacy issues, lateral movement and privilege escalation, researchers warned. Insider attackers could,...

10CVSS9.5AI score0.99999EPSS
SaveExploits126References16
RedHat Linux
RedHat Linux
•added 2022/01/12 1:09 p.m.•19 views

Mozilla: Out-of-bounds memory access when inserting text in edit mode

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as: When inserting text in edit mode, some characters might have led to out-of-bounds memory access, causing a potentially exploitable crash...

6.5CVSS7.3AI score0.00818EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2022/01/12 12:35 p.m.•18 views

Mozilla: Use-after-free of ChannelEventQueue::mOwner

The Mozilla Foundation Security Advisory describes this flaw as: Certain network request objects were freed too early when releasing a network request handle. This could have led to a use-after-free issue, causing a potentially exploitable crash...

8.8CVSS7.3AI score0.0097EPSS
SaveExploits1References6
RedHat Linux
RedHat Linux
•added 2022/01/12 12:35 p.m.•14 views

Mozilla: Out-of-bounds memory access when inserting text in edit mode

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as: When inserting text in edit mode, some characters might have led to out-of-bounds memory access, causing a potentially exploitable crash...

6.5CVSS7.3AI score0.00818EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2022/01/12 12:35 p.m.•17 views

Mozilla: Heap-buffer-overflow in blendGaussianBlur

The Mozilla Foundation Security Advisory describes this flaw as: Applying a CSS filter effect could have accessed out-of-bounds memory. This could have led to a heap-buffer-overflow, causing a potentially exploitable crash...

8.8CVSS7.3AI score0.00998EPSS
SaveExploits1References6
RedHat Linux
RedHat Linux
•added 2022/01/12 12:21 p.m.•15 views

Mozilla: Race condition when playing audio files

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as: Constructing audio sinks could have led to a race condition when playing audio files and closing windows. This could have lead to a use-after-free issue, causing a potentially exploitable crash...

7.5CVSS7.3AI score0.00752EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
•added 2022/01/12 12:21 p.m.•24 views

Mozilla: Use-after-free of ChannelEventQueue::mOwner

The Mozilla Foundation Security Advisory describes this flaw as: Certain network request objects were freed too early when releasing a network request handle. This could have led to a use-after-free issue, causing a potentially exploitable crash...

8.8CVSS7.3AI score0.0097EPSS
SaveExploits1References6
RedHat Linux
RedHat Linux
•added 2022/01/12 12:08 p.m.•14 views

Mozilla: Heap-buffer-overflow in blendGaussianBlur

The Mozilla Foundation Security Advisory describes this flaw as: Applying a CSS filter effect could have accessed out-of-bounds memory. This could have led to a heap-buffer-overflow, causing a potentially exploitable crash...

8.8CVSS7.3AI score0.00998EPSS
SaveExploits1References6
RedHat Linux
RedHat Linux
•added 2022/01/12 12:04 p.m.•22 views

Mozilla: Use-after-free of ChannelEventQueue::mOwner

The Mozilla Foundation Security Advisory describes this flaw as: Certain network request objects were freed too early when releasing a network request handle. This could have led to a use-after-free issue, causing a potentially exploitable crash...

8.8CVSS7.3AI score0.0097EPSS
SaveExploits1References6
RedHat Linux
RedHat Linux
•added 2022/01/12 12:04 p.m.•14 views

Mozilla: Heap-buffer-overflow in blendGaussianBlur

The Mozilla Foundation Security Advisory describes this flaw as: Applying a CSS filter effect could have accessed out-of-bounds memory. This could have led to a heap-buffer-overflow, causing a potentially exploitable crash...

8.8CVSS7.3AI score0.00998EPSS
SaveExploits1References6
RedHat Linux
RedHat Linux
•added 2022/01/12 11:48 a.m.•14 views

Mozilla: Use-after-free of ChannelEventQueue::mOwner

The Mozilla Foundation Security Advisory describes this flaw as: Certain network request objects were freed too early when releasing a network request handle. This could have led to a use-after-free issue, causing a potentially exploitable crash...

8.8CVSS7.3AI score0.0097EPSS
SaveExploits1References6
RedHat Linux
RedHat Linux
•added 2022/01/12 10:26 a.m.•11 views

Mozilla: Out-of-bounds memory access when inserting text in edit mode

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as: When inserting text in edit mode, some characters might have led to out-of-bounds memory access, causing a potentially exploitable crash...

6.5CVSS7.3AI score0.00818EPSS
SaveExploits0References4
Mageia
Mageia
•added 2022/01/11 11:22 p.m.•70 views

Updated nss and firefox packages fix security vulnerabilities

It was possible to construct specific XSLT markup that would be able to bypass an iframe sandbox CVE-2021-4140. Constructing audio sinks could have lead to a race condition when playing audio files and closing windows. This could have lead to a use-after-free causing a potentially exploitable cra...

10CVSS0.2AI score0.01354EPSS
SaveExploits6References5
Prion
Prion
•added 2022/01/11 7:15 p.m.•28 views

Privilege escalation

The eFTL Server component of TIBCO Software Inc.'s TIBCO eFTL - Community Edition, TIBCO eFTL - Developer Edition, and TIBCO eFTL - Enterprise Edition contains an easily exploitable vulnerability that allows clients to inherit the permissions of the client that initially connected on the affected...

6.5CVSS8.6AI score0.00676EPSS
SaveExploits0References2Affected Software1
Code423n4
Code423n4
•added 2022/01/11 12:00 a.m.•23 views

No slippage tolerance set in NonUSTStrategy

Handle palina Vulnerability details Impact The exchange performed in NonUSTStrategy.sol via Curve is executed with "0" as the minimum amount received as the result of the operation, which is likely to be exploited by front-running and may lead to the loss of funds. Proof of Concept...

6.9AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2022/01/11 12:00 a.m.•37 views

Mozilla Thunderbird < 91.5

The version of Thunderbird installed on the remote Windows host is prior to 91.5. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2022-03 advisory. - Mozilla developers Calixte Denizet, Kershaw Chang, Christian Holler, Jason Kratzer, Gabriele Svelto, Tyson Smith,...

10CVSS7.8AI score0.01381EPSS
SaveExploits6References15
Tibco
Tibco
•added 2022/01/07 12:36 a.m.•26 views

TIBCO Security Advisory: January 11, 2022 - TIBCO eFTL -2021-43055

TIBCO eFTL Token Caching Vulnerability Original release date: January 11, 2022 Last revised:--- CVE-2021-43055 Source: TIBCO SoftwareInc. Products Affected TIBCO eFTL - Community Edition versions 6.7.2 and below TIBCO eFTL - Developer Edition versions 6.7.2 and below TIBCO eFTL - Enterprise Editi...

8.8CVSS7.4AI score0.00676EPSS
SaveExploits0Affected Software3
Rows per page
Query Builder