Lucene search
+L

1450 matches found

NVD
NVD
added 2022/03/31 11:15 p.m.24 views

CVE-2022-24791

Wasmtime is a standalone JIT-style runtime for WebAssembly, using Cranelift. There is a use after free vulnerability in Wasmtime when both running Wasm that uses externrefs and enabling epoch interruption in Wasmtime. If you are not explicitly enabling epoch interruption it is disabled by default...

9.8CVSS0.01161EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2022/03/31 11:15 p.m.37 views

CVE-2022-24791

Wasmtime is a standalone JIT-style runtime for WebAssembly, using Cranelift. There is a use after free vulnerability in Wasmtime when both running Wasm that uses externrefs and enabling epoch interruption in Wasmtime. If you are not explicitly enabling epoch interruption it is disabled by default...

9.8CVSS7.2AI score0.01161EPSS
SaveExploits0References3
OSV
OSV
added 2022/03/31 11:15 p.m.7 views

UBUNTU-CVE-2022-24791

Wasmtime is a standalone JIT-style runtime for WebAssembly, using Cranelift. There is a use after free vulnerability in Wasmtime when both running Wasm that uses externrefs and enabling epoch interruption in Wasmtime. If you are not explicitly enabling epoch interruption it is disabled by default...

9.8CVSS7.3AI score0.01161EPSS
SaveExploits0References4
Prion
Prion
added 2022/03/31 11:15 p.m.17 views

Design/Logic Flaw

Wasmtime is a standalone JIT-style runtime for WebAssembly, using Cranelift. There is a use after free vulnerability in Wasmtime when both running Wasm that uses externrefs and enabling epoch interruption in Wasmtime. If you are not explicitly enabling epoch interruption it is disabled by default...

6.8CVSS9.6AI score0.01161EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2022/03/31 11:0 p.m.44 views

CVE-2022-24791 Use after free in Wasmtime

Wasmtime is a standalone JIT-style runtime for WebAssembly, using Cranelift. There is a use after free vulnerability in Wasmtime when both running Wasm that uses externrefs and enabling epoch interruption in Wasmtime. If you are not explicitly enabling epoch interruption it is disabled by default...

8.1CVSS9.9AI score0.01161EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2022/03/31 11:0 p.m.8 views

CVE-2022-24791

Wasmtime is a standalone JIT-style runtime for WebAssembly, using Cranelift. There is a use after free vulnerability in Wasmtime when both running Wasm that uses externrefs and enabling epoch interruption in Wasmtime. If you are not explicitly enabling epoch interruption it is disabled by default...

9.8CVSS9.7AI score0.01161EPSS
SaveExploits0
CVE
CVE
added 2022/03/31 11:0 p.m.130 views

CVE-2022-24791

The CVE refers to Wasmtime (WebAssembly JIT runtime using Cranelift) with a use-after-free vulnerability that occurs when running Wasm code using externrefs while epoch interruption is enabled. The issue is caused by Cranelift failing to emit stack maps for safepoints inside cold blocks, which re...

9.8CVSS9.1AI score0.01161EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2022/03/31 11:0 p.m.19 views

CVE-2022-24791 Use after free in Wasmtime

Wasmtime is a standalone JIT-style runtime for WebAssembly, using Cranelift. There is a use after free vulnerability in Wasmtime when both running Wasm that uses externrefs and enabling epoch interruption in Wasmtime. If you are not explicitly enabling epoch interruption it is disabled by default...

8.1CVSS9.2AI score
SaveExploits0References4
RustSec
RustSec
added 2022/03/31 12:0 p.m.29 views

Use after free with `externref`s and epoch interruption in Wasmtime

Use after free with externrefs and epoch interruption in Wasmtime...

9.8CVSS1.6AI score0.01161EPSS
SaveExploits0Affected Software1
OSV
OSV
added 2022/03/31 12:0 p.m.6 views

RUSTSEC-2022-0016 Use after free with `externref`s and epoch interruption in Wasmtime

Use after free with externrefs and epoch interruption in Wasmtime...

9.8CVSS7.2AI score0.01161EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/03/30 12:0 a.m.17 views

Vulnerability of the Server component: The Optimizer component of the MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the MySQL Server component involves errors in resource release. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL network protocol...

6.3CVSS6.3AI score0.01856EPSS
SaveExploits0References8Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/03/30 12:0 a.m.7 views

Vulnerability of the MySQL Server component: The DML mechanism of the MySQL Database Management System allows attackers to compromise data integrity or cause service interruptions.

The vulnerability of the MySQL Server component exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to compromise data integrity or cause service failures...

7.5CVSS6.4AI score0.01604EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/03/30 12:0 a.m.11 views

Vulnerability of the Server component: The Replication function of the MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the MySQL Server database management system’s replication component is related to errors in resource release. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL network protocol...

6.8CVSS6.3AI score0.01398EPSS
SaveExploits0References8Affected Software2
RedHat Linux
RedHat Linux
added 2022/03/28 12:1 p.m.8 views

expat: Integer overflow in lookup in xmlparse.c

expat libexpat is susceptible to a software flaw that causes process interruption. When processing a large number of prefixed XML attributes on a single tag can libexpat can terminate unexpectedly due to integer overflow. The highest threat from this vulnerability is to availability,...

8.8CVSS7.5AI score0.02636EPSS
SaveExploits0References5
OSV
OSV
added 2022/03/28 12:0 p.m.7 views

RUSTSEC-2022-0099 Use after free with `externref`s and epoch interruption in Wasmtime

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-gwc9-348x-qwv2. For more information see the GitHub-hosted security advisory...

9.8CVSS7.2AI score0.01161EPSS
SaveExploits0References3
RustSec
RustSec
added 2022/03/28 12:0 p.m.6 views

Use after free with `externref`s and epoch interruption in Wasmtime

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-gwc9-348x-qwv2. For more information see the GitHub-hosted security advisory...

9.8CVSS7AI score0.01161EPSS
SaveExploits0Affected Software1
OSV
OSV
added 2022/03/23 8:15 p.m.6 views

CVE-2021-27430

GE UR bootloader binary Version 7.00, 7.01 and 7.02 included unused hardcoded credentials. Additionally, a user with physical access to the UR IED can interrupt the boot sequence by rebooting the UR...

6.8CVSS5.8AI score0.00245EPSS
SaveExploits0References2
Prion
Prion
added 2022/03/23 8:15 p.m.25 views

Hardcoded credentials

GE UR bootloader binary Version 7.00, 7.01 and 7.02 included unused hardcoded credentials. Additionally, a user with physical access to the UR IED can interrupt the boot sequence by rebooting the UR...

4.6CVSS7.1AI score0.00245EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2022/03/23 7:46 p.m.113 views

CVE-2021-27430

GE UR bootloader binary versions 7.00–7.02 include unused hardcoded credentials. With physical access to the UR Intelligent Electronic Device, an attacker can interrupt the boot sequence by rebooting the UR. The issue is fixed by upgrading UR firmware to 8.10 or newer (GE publication GES-2021-004...

8.4CVSS7.2AI score0.00245EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/03/16 12:0 a.m.8 views

The vulnerability in the implementation of the TCP/IP protocol stack for Linux-based operating systems allows a hacker to cause a service failure.

The vulnerability of the TCP/IP protocol stack implementation in Linux-based operating systems is related to errors in processing ICMPv6 packets. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

7.8CVSS7AI score0.05038EPSS
SaveExploits0References7Affected Software4
Rows per page
Query Builder