Lucene search
+L

147 matches found

NVD
NVD
•added 2024/10/09 1:15 p.m.•48 views

CVE-2024-9680

An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulnerability being exploited in the wild. This vulnerability affects Firefox 131.0.2, Firefox ESR 128.3.1, Firefox ESR 115.16.1, Thunderbird...

9.8CVSS0.23184EPSS
SaveExploits1References8
osv_debian
osv_debian
•added 2024/10/09 1:15 p.m.•8 views

DEBIAN-CVE-2024-9680

An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulnerability being exploited in the wild. This vulnerability affects Firefox 131.0.2, Firefox ESR 128.3.1, Firefox ESR 115.16.1, Thunderbird...

9.8CVSS8.8AI score0.23184EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2024/10/09 1:15 p.m.•26 views

CVE-2024-9680

An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulnerability being exploited in the wild. This vulnerability affects Firefox 131.0.2, Firefox ESR 128.3.1, Firefox ESR 115.16.1, Thunderbird...

9.8CVSS8.8AI score0.23184EPSS
SaveExploits1References8
Mend
Mend
•added 2024/10/09 12:59 p.m.•6 views

CVE-2024-9680

An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulnerability being exploited in the wild. This vulnerability affects Firefox 131.0.2, Firefox ESR 128.3.1, Firefox ESR 115.16.1, Thunderbird...

9.8CVSS8.8AI score0.23184EPSS
SaveExploits1References8
Cvelist
Cvelist
•added 2024/10/09 12:59 p.m.•57 views

CVE-2024-9680

An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulnerability being exploited in the wild. This vulnerability affects Firefox 131.0.2, Firefox ESR 128.3.1, Firefox ESR 115.16.1, Thunderbird...

0.23184EPSS
SaveExploits1References4
Debian CVE
Debian CVE
•added 2024/10/09 12:59 p.m.•29 views

CVE-2024-9680

An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulnerability being exploited in the wild. This vulnerability affects Firefox 131.0.2, Firefox ESR 128.3.1, Firefox ESR 115.16.1, Thunderbird...

9.8CVSS8.8AI score0.23184EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
•added 2024/10/09 12:00 a.m.•26 views

Mozilla Firefox < 131.0.2

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 131.0.2. It is, therefore, affected by a vulnerability as referenced in the mfsa2024-51 advisory. - An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation...

9.8CVSS8.8AI score0.23184EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2024/10/09 12:00 a.m.•25 views

Mozilla Firefox ESR < 128.3.1

The version of Firefox ESR installed on the remote Windows host is prior to 128.3.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2024-51 advisory. - An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation...

9.8CVSS8.8AI score0.23184EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2024/10/09 12:00 a.m.•25 views

Mozilla Firefox < 131.0.2

The version of Firefox installed on the remote Windows host is prior to 131.0.2. It is, therefore, affected by a vulnerability as referenced in the mfsa2024-51 advisory. - An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. ...

9.8CVSS8.8AI score0.23184EPSS
SaveExploits1References2
Mozilla
Mozilla
•added 2024/10/09 12:00 a.m.•80 views

Security Vulnerability fixed in Firefox 131.0.2, Firefox ESR 128.3.1, Firefox ESR 115.16.1 — Mozilla

An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulnerability being exploited in the wild...

9.8CVSS8.8AI score0.23184EPSS
SaveExploits3References2Affected Software2
Tenable Nessus
Tenable Nessus
•added 2024/10/09 12:00 a.m.•17 views

Mozilla Firefox ESR < 115.16.1

The version of Firefox ESR installed on the remote Windows host is prior to 115.16.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2024-51 advisory. - An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation...

9.8CVSS8.8AI score0.23184EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/09 12:00 a.m.•5 views

CVE-2024-9680: Use After Free

An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulnerability being exploited in the wild. This vulnerability affects Firefox 131.0.2, Firefox ESR 128.3.1, Firefox ESR 115.16.1, Thunderbird...

9.8CVSS8.9AI score0.23184EPSS
SaveExploits1References5
attackerkb
attackerkb
•added 2024/10/09 12:00 a.m.•45 views

CVE-2024-9680

An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulnerability being exploited in the wild. This vulnerability affects Firefox 131.0.2, Firefox ESR 128.3.1, Firefox ESR 115.16.1, Thunderbird...

9.8CVSS8.9AI score0.23184EPSS
SaveIn wildExploits3References5
Tenable Nessus
Tenable Nessus
•added 2024/10/09 12:00 a.m.•19 views

Mozilla Firefox ESR < 128.3.1

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 128.3.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2024-51 advisory. - An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animati...

9.8CVSS8.8AI score0.23184EPSS
SaveExploits1References2
VulnCheck KEV
VulnCheck KEV
•added 2024/10/09 12:00 a.m.•6 views

VulnCheck KEV: CVE-2024-9680

Mozilla Firefox and Firefox ESR contain a use-after-free vulnerability in Animation timelines that allows for code execution in the content process...

9.8CVSS8.9AI score0.23184EPSS
SaveIn wildExploits1References28
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/06 12:00 a.m.•4 views

CVE-2024-47322: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ex-Themes WP Timeline – Vertical and Horizontal timeline plugin wp-timelines allows Reflected XSS.This issue affects WP Timeline – Vertical and Horizontal timeline plugin: from n/a through = 3.6.7...

7.1CVSS5.8AI score0.00287EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/07/18 12:00 a.m.•19 views

PT-2024-37102 · WordPress · Timeline Event History Plugin

Name of the Vulnerable Software and Affected Versions: Timeline Event History plugin for WordPress versions up to, and including, 3.1 Description: The issue allows authenticated attackers with Contributor-level access and above to inject a PHP Object via deserialization of untrusted input...

8.8CVSS6.9AI score0.00718EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/18 12:00 a.m.•6 views

CVE-2024-5726: Deserialization of Untrusted Data

The Timeline Event History plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.1 via deserialization of untrusted input 'timelines-data' parameter. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject...

8.8CVSS6.2AI score0.00718EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2024/06/07 12:00 a.m.•24 views

Fedora: Security Advisory for qt6-qtquicktimeline (FEDORA-2024-bfb8617ba3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.3AI score0.0097EPSS
SaveExploits0References2
Fedora
Fedora
•added 2024/05/29 3:37 a.m.•29 views

[SECURITY] Fedora 40 Update: qt6-qtquicktimeline-6.7.1-1.fc40

The Qt Quick Timeline plugin provides QML types to use timelines and keyframes to animate Qt Quick user interfaces...

9.8CVSS8.2AI score0.0097EPSS
SaveExploits0
Rows per page
Query Builder