Lucene search
K

984 matches found

OpenVAS
OpenVAS
added 2015/12/07 12:0 a.m.46 views

Google Chrome Multiple Vulnerabilities-01 (Dec 2015) - Windows

google chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

10CVSS9.6AI score0.40209EPSS
Exploits6References3
CNVD
CNVD
added 2015/12/07 12:0 a.m.4 views

Google Chrome Denial of Service Vulnerability (CNVD-2015-07975)

Google Chrome is a web browser developed by the American company Google Google. The 'VideoFramePool::PoolImpl::CreateFrame' function in the media/base/videoframepool.cc file in Google Chrome versions prior to 47.0.2526.73 has a security vulnerability. Due to the program failing to properly...

10CVSS6.5AI score0.00733EPSS
Exploits0References1
CVE
CVE
added 2015/12/06 1:0 a.m.66 views

CVE-2015-8480

The CVE-2015-8480 entry relates to Google Chrome before 47.0.2526.73. The vulnerability arises because VideoFramePool::PoolImpl::CreateFrame does not initialize memory for a video-frame data structure, enabling remote attackers to trigger a denial of service via out-of-bounds memory access, poten...

10CVSS9.5AI score0.00733EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2015/12/02 12:0 a.m.2 views

UBUNTU-CVE-2015-8367

The phaseonecorrect function in Libraw before 0.17.1 allows attackers to cause memory errors and possibly execute arbitrary code, related to memory object initialization...

9.8CVSS7.5AI score0.01429EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2015/12/02 12:0 a.m.4 views

PT-2015-7775 · Libraw +3 · Libraw +3

Name of the Vulnerable Software and Affected Versions: Libraw versions prior to 0.17.1 Description: The issue is related to memory object initialization in the phase one correct function, which can cause memory errors and potentially allow attackers to execute arbitrary code. Recommendations: For...

9.8CVSS7.5AI score0.05248EPSS
Exploits2References63
OSV
OSV
added 2015/09/06 2:59 a.m.2 views

DEBIAN-CVE-2015-6826

The ffrv34decodeinitthreadcopy function in libavcodec/rv34.c in FFmpeg before 2.7.2 does not initialize certain structure members, which allows remote attackers to cause a denial of service invalid pointer access or possibly have unspecified other impact via crafted 1 RV30 or 2 RV40 RealVideo dat...

7.5CVSS9.2AI score0.00887EPSS
Exploits0References1
CNVD
CNVD
added 2015/08/19 12:0 a.m.1 views

Apple iOS ImageIO Memory Information Disclosure Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A memory incorrect initialization vulnerability exists in Apple iOS ImageIO's handling of PNG files, which allows remote attackers to exploit the vulnerability to construct special files that can be parse...

4.3CVSS6.6AI score0.00651EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2015/07/15 12:0 a.m.61 views

Microsoft Windows Hyper-V Remote Code Execution Vulnerability (3072000)

This host is missing a critical security update according to Microsoft Bulletin MS15-068. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

7.2CVSS5AI score0.00702EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2015/07/15 12:0 a.m.52 views

MS15-068: Vulnerabilities in Windows Hyper-V Could Allow Remote Code Execution (3072000)

The remote Windows host is affected by multiple remote code execution vulnerabilities in Hyper-V : - An error exists in how Hyper-V handles packet size memory initialization in guest virtual machines. An authenticated attacker with access to a guest virtual machine can exploit this by running a...

7.2CVSS6.3AI score0.00702EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2015/06/05 12:0 a.m.2 views

The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure.

The PDFium module of the Google Chrome browser incorrectly performs the memory initialization process, which may cause a service failure for users...

7.5CVSS7.7AI score0.01456EPSS
Exploits0References3Affected Software1
RedHat Linux
RedHat Linux
added 2015/05/25 3:25 a.m.1 views

chromium-browser: Uninitialized value in PDFium.

PDFium, as used in Google Chrome before 43.0.2357.65, does not properly initialize memory, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors...

7.5CVSS7.5AI score0.01456EPSS
Exploits0References5
CNVD
CNVD
added 2015/05/21 12:0 a.m.2 views

Google Chrome PDFium Code Injection Vulnerability

Google Chrome is the United States Google Google company developed a Web browser. PDFium is one of the open source PDF rendering engine. Google Chrome PDFium has a security vulnerability. Due to the program failed to properly initialize memory. A remote attacker can exploit the vulnerability to...

7.5CVSS6.7AI score0.01456EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2015/05/20 10:59 a.m.23 views

CVE-2015-1259

PDFium, as used in Google Chrome before 43.0.2357.65, does not properly initialize memory, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors...

7.5CVSS7.2AI score0.01456EPSS
Exploits0References3
OSV
OSV
added 2015/05/20 10:59 a.m.0 views

UBUNTU-CVE-2015-1259

PDFium, as used in Google Chrome before 43.0.2357.65, does not properly initialize memory, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors...

7.5CVSS7.3AI score0.01456EPSS
Exploits0References4
Prion
Prion
added 2015/05/20 10:59 a.m.21 views

Design/Logic Flaw

PDFium, as used in Google Chrome before 43.0.2357.65, does not properly initialize memory, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors...

7.5CVSS7.5AI score0.01456EPSS
Exploits0References8Affected Software2
Debian CVE
Debian CVE
added 2015/05/20 10:0 a.m.23 views

CVE-2015-1259

Removed by vendor...

7.5CVSS9.4AI score0.01456EPSS
Exploits0
CVE
CVE
added 2015/05/20 10:0 a.m.88 views

CVE-2015-1259

The CVE-2015-1259 entry is confirmed in connected sources as a PDFium memory initialization issue in Google Chrome/Chromium prior to 43.0.2357.65. The root cause is an uninitialized memory condition in the PDFium component, which can allow a remote attacker to cause a denial of service or potenti...

7.5CVSS7AI score0.01456EPSS
Exploits0References8Affected Software1
Cvelist
Cvelist
added 2015/05/20 10:0 a.m.31 views

CVE-2015-1259

PDFium, as used in Google Chrome before 43.0.2357.65, does not properly initialize memory, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors...

6.9AI score0.01456EPSS
Exploits0References8
Packet Storm
Packet Storm
added 2015/05/01 12:0 a.m.58 views

Adobe Flash Player UncompressViaZlibVariant Uninitialized Memory

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Adobe Flash Player UncompressViaZlibVariant Uninitialized Memory', 'Description' = %q This module exploits an unintialized memory...

10CVSS0.9AI score0.87982EPSS
Exploits5
OSV
OSV
added 2015/04/12 12:0 a.m.32 views

DLA-193-1 chrony - security update

Bulletin has no description...

6.5CVSS6.5AI score0.02605EPSS
Exploits0
Rows per page
Query Builder