Lucene search
+L

675 matches found

OSV
OSV
added 2021/08/17 8:15 p.m.6 views

CVE-2021-29981

An issue present in lowering/register allocation could have led to obscure but deterministic register confusion failures in JITted code that would lead to a potentially exploitable crash. This vulnerability affects Firefox 91 and Thunderbird 91...

8.8CVSS7.4AI score0.01004EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2021/08/16 10:29 a.m.16 views

Mozilla: Incorrect instruction reordering during JIT optimization

Instruction reordering resulted in a sequence of instructions that would cause an object to be incorrectly considered during garbage collection. This led to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird 78.13, Thunderbird 91, Firefox ESR 78.13, and...

8.8CVSS7.2AI score0.01386EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
added 2021/08/16 9:47 a.m.7 views

Mozilla: Incorrect instruction reordering during JIT optimization

Instruction reordering resulted in a sequence of instructions that would cause an object to be incorrectly considered during garbage collection. This led to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird 78.13, Thunderbird 91, Firefox ESR 78.13, and...

8.8CVSS7.2AI score0.01386EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
added 2021/08/16 12:00 a.m.9 views

The vulnerability of the Mozilla Firefox browser, which allows a hacker to execute arbitrary code on the target system

The vulnerability of the Mozilla Firefox browser is related to a boundary error during JIT optimization. Exploiting this vulnerability allows an attacker to execute arbitrary code on the target system, as well as cause memory corruption...

10CVSS8.1AI score0.01386EPSS
SaveExploits1References17Affected Software6
CNNVD
CNNVD
added 2021/08/10 12:00 a.m.5 views

Mozilla Firefox 缓冲区错误漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from a buffer error vulnerability that stems from incorrect instruction reordering during JIT optimization...

8.8CVSS8.5AI score0.01386EPSS
SaveExploits1References32
CNNVD
CNNVD
added 2021/08/10 12:00 a.m.13 views

Mozilla Firefox和Mozilla Thunderbird输入验证错误漏洞

Mozilla Firefox and Mozilla Thunderbird are both products of the Mozilla Foundation in the U.S. Mozilla Firefox is an open source Web browser. Mozilla Thunderbird is a separate set of email client software. The software supports IMAP and POP email protocols as well as HTML email formats. Mozilla...

8.8CVSS8.8AI score0.01004EPSS
SaveExploits0References19
OSV
OSV
added 2021/07/07 12:15 p.m.19 views

CVE-2021-25952

Prototype pollution vulnerability in ‘just-safe-set’ versions 1.0.0 through 2.2.1 allows an attacker to cause a denial of service and may lead to remote code execution...

9.8CVSS7.7AI score
SaveExploits0References2
NVD
NVD
added 2021/07/07 12:15 p.m.28 views

CVE-2021-25952

Prototype pollution vulnerability in ‘just-safe-set’ versions 1.0.0 through 2.2.1 allows an attacker to cause a denial of service and may lead to remote code execution...

9.8CVSS0.03337EPSS
SaveExploits1References2
Prion
Prion
added 2021/07/07 12:15 p.m.25 views

Remote code execution

Prototype pollution vulnerability in ‘just-safe-set’ versions 1.0.0 through 2.2.1 allows an attacker to cause a denial of service and may lead to remote code execution...

7.5CVSS9.5AI score0.03337EPSS
SaveExploits1References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/07/07 12:15 p.m.6 views

CVE-2021-25952

Prototype pollution vulnerability in ‘just-safe-set’ versions 1.0.0 through 2.2.1 allows an attacker to cause a denial of service and may lead to remote code execution...

9.8CVSS8.7AI score0.03337EPSS
SaveExploits1References3
CVE
CVE
added 2021/07/07 11:47 a.m.70 views

CVE-2021-25952

CVE-2021-25952 is a prototype pollution vulnerability affecting the npm module just-safe-set in versions 1.0.0–2.2.1. The issue, described across multiple sources (NVD, Red Hat, GHSA, OSV, CVE records), enables a attacker to cause a denial of service and may lead to remote code execution. The ava...

9.8CVSS9.5AI score0.03337EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2021/07/07 11:47 a.m.36 views

CVE-2021-25952

Prototype pollution vulnerability in ‘just-safe-set’ versions 1.0.0 through 2.2.1 allows an attacker to cause a denial of service and may lead to remote code execution...

9.8AI score0.03337EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2021/07/07 12:00 a.m.17 views

just-safe-set 安全漏洞

just-safe-set is an npm module library. A security vulnerability exists in just-safe-set 1.0.0 through 2.2.1, which can be exploited by an attacker to cause a denial of service and possibly remote code execution...

9.8CVSS8.7AI score0.03337EPSS
SaveExploits1References3
OSV
OSV
added 2021/06/24 2:15 p.m.6 views

DEBIAN-CVE-2021-29945

The WebAssembly JIT could miscalculate the size of a return type, which could lead to a null read and result in a crash. Note: This issue only affected x86-32 platforms. Other platforms are unaffected.. This vulnerability affects Firefox ESR 78.10, Thunderbird 78.10, and Firefox 88...

6.5CVSS6.9AI score0.01202EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
added 2021/04/15 7:00 a.m.7 views

BPF JIT compilers in the Linux kernel through 5.11.12 have incorrect computation of branch displacements allowing them to execute arbitrary code within the kernel context. This affects arch/x86/net/bpf_jit_comp.c and arch/x86/net/bpf_jit_comp32.c.

...

7.8CVSS7.9AI score0.00931EPSS
SaveExploits0
OSV
OSV
added 2021/04/08 3:30 p.m.11 views

UBUNTU-CVE-2021-29154

BPF JIT compilers in the Linux kernel through 5.11.12 have incorrect computation of branch displacements, allowing them to execute arbitrary code within the kernel context. This affects arch/x86/net/bpfjitcomp.c and arch/x86/net/bpfjitcomp32.c...

7.8CVSS7.1AI score0.00931EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2020/11/04 12:53 a.m.13 views

pcre: Out of bounds read in JIT mode when \X is used in non-UTF mode

An out-of-bounds read was discovered in PCRE when the pattern "\X" is JIT compiled and used to match specially crafted subjects in non-UTF mode. Applications that use PCRE to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to crash the application...

7.5CVSS7.1AI score0.01561EPSS
SaveExploits1References4
Openbugbounty
Openbugbounty
added 2020/10/30 7:44 p.m.45 views

just-make-up-shop.ru Cross Site Scripting vulnerability OBB-1467712

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2020/10/12 3:50 p.m.12 views

the-rest-just-goes-up.work Cross Site Scripting vulnerability OBB-1401831

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

0.1AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2020/10/08 11:32 a.m.8 views

just-be-it.com Cross Site Scripting vulnerability OBB-1390021

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
SaveExploits0
Rows per page
Query Builder