Lucene search
+L

4326 matches found

RedHat Linux
RedHat Linux
added 2021/08/16 9:44 a.m.7 views

Mozilla: Uninitialized memory in a canvas object could have led to memory corruption

Uninitialized memory in a canvas object could have caused an incorrect free leading to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird 78.13, Thunderbird 91, Firefox ESR 78.13, and Firefox 91...

8.8CVSS7.4AI score0.01406EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
added 2021/08/16 9:32 a.m.9 views

Mozilla: Uninitialized memory in a canvas object could have led to memory corruption

Uninitialized memory in a canvas object could have caused an incorrect free leading to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird 78.13, Thunderbird 91, Firefox ESR 78.13, and Firefox 91...

8.8CVSS7.4AI score0.01406EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2021/08/16 12:0 a.m.25 views

RHEL 7 : firefox (RHSA-2021:3154)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:3154 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...

8.8CVSS8.5AI score0.01451EPSS
SaveExploits5References14
Tenable Nessus
Tenable Nessus
added 2021/08/16 12:0 a.m.38 views

CentOS 8 : thunderbird (CESA-2021:3155)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2021:3155 advisory. - Mozilla: Uninitialized memory in a canvas object could have led to memory corruption CVE-2021-29980 - Mozilla: Incorrect instruction reordering durin...

8.8CVSS8.4AI score0.01451EPSS
SaveExploits5References7
ALT Linux
ALT Linux
added 2021/08/12 12:0 a.m.40 views

Security fix for the ALT Linux 10 package thunderbird version 91.0-alt1

Aug. 12, 2021 Andrey Cherepanov 91.0-alt1 - New version. - Security fixes: + CVE-2021-29986 Race condition when resolving DNS names could have led to memory corruption + CVE-2021-29981 Live range splitting could have led to conflicting assignments in the JIT + CVE-2021-29988 Memory corruption as ...

6.8CVSS9.3AI score0.01451EPSS
SaveExploits6
UbuntuCve
UbuntuCve
added 2021/08/11 12:0 a.m.44 views

CVE-2021-29980

Uninitialized memory in a canvas object could have caused an incorrect free leading to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird 78.13, Thunderbird 91, Firefox ESR 78.13, and Firefox 91...

8.8CVSS7.2AI score0.01406EPSS
SaveExploits1References5
OSV
OSV
added 2021/08/11 12:0 a.m.5 views

UBUNTU-CVE-2021-29980

Uninitialized memory in a canvas object could have caused an incorrect free leading to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird 78.13, Thunderbird 91, Firefox ESR 78.13, and Firefox 91...

8.8CVSS7.3AI score0.01406EPSS
SaveExploits1References6
Microsoft CVE
Microsoft CVE
added 2021/08/10 7:0 a.m.3 views

In the Linux kernel through 5.13.7 an unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel attack because the protection mechanism neglects the possibility of uninitialized memory locations on the BPF stack.

...

5.5CVSS7AI score0.00419EPSS
SaveExploits2
CNVD
CNVD
added 2021/08/10 12:0 a.m.32 views

Linux kernel information disclosure vulnerability (CNVD-2021-68182)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that can be exploited by an attacker to read uninitialized memory...

3.3CVSS5.5AI score0.00308EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/08/10 12:0 a.m.4 views

Mozilla Firefox 缓冲区错误漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from a buffer error vulnerability that originates from uninitialized memory in Uninitialized memory could lead to memory corruption...

8.8CVSS8.6AI score0.01406EPSS
SaveExploits1References33
Mozilla
Mozilla
added 2021/08/10 12:0 a.m.206 views

Security Vulnerabilities fixed in Thunderbird 78.13 — Mozilla

A suspected race condition when calling getaddrinfo led to memory corruption and a potentially exploitable crash. Note: This issue only affected Linux operating systems. Other operating systems are unaffected. Thunderbird incorrectly treated an inline list-item element as a block element, resulti...

8.8CVSS1.7AI score0.01451EPSS
SaveExploits5References6Affected Software1
Kaspersky
Kaspersky
added 2021/08/10 12:0 a.m.65 views

KLA12252 Multiple vulnerabilities in Mozilla Firefox

Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to cause denial of service, spoof user interface, execute arbitrary code, obtain sensitive information, gain privileges. Below is a complete list of vulnerabilities: 1. A memory corruption...

8.8CVSS9.8AI score0.01451EPSS
SaveExploits6References3
Kaspersky
Kaspersky
added 2021/08/10 12:0 a.m.35 views

KLA12254 Multiple vulnerabilities in Mozilla Thunderbird

Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. A memory corruption vulnerability on Linux can be exploited to cause denial of service...

8.8CVSS9.7AI score0.01451EPSS
SaveExploits5References3
Tenable Nessus
Tenable Nessus
added 2021/08/10 12:0 a.m.283 views

Mozilla Firefox < 91.0

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 91.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2021-33 advisory. - Mozilla developers and community members Kershaw Chang, Philipp, Chris Peterson, and Sebastian Hengst reporte...

8.8CVSS8.3AI score0.01451EPSS
SaveExploits6References12
OSV
OSV
added 2021/08/08 6:15 a.m.7 views

CVE-2020-36452

An issue was discovered in the array-tools crate before 0.3.2 for Rust. FixedCapacityDequeLike::clone has a drop of uninitialized memory...

9.8CVSS7.3AI score0.01119EPSS
SaveExploits0References2
OSV
OSV
added 2021/08/08 6:15 a.m.7 views

CVE-2020-36432

An issue was discovered in the algds crate through 2020-08-25 for Rust. There is a drop of uninitialized memory in Matrix::new...

9.8CVSS7.3AI score0.0123EPSS
SaveExploits0References2
NVD
NVD
added 2021/08/08 6:15 a.m.26 views

CVE-2020-36432

An issue was discovered in the algds crate through 2020-08-25 for Rust. There is a drop of uninitialized memory in Matrix::new...

9.8CVSS0.0123EPSS
SaveExploits0References2
CVE
CVE
added 2021/08/08 5:19 a.m.111 views

CVE-2020-36432

CVE-2020-36432 affects the alg_ds crate for Rust (up to 2020-08-25). The issue is a drop of uninitialized memory in Matrix::new(), caused by Matrix::fill_with() using a *ptr = value pattern that assumes an initialized struct at the address, leading to dropping of uninitialized memory. Public refe...

9.8CVSS9.4AI score0.0123EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2021/08/08 5:19 a.m.32 views

CVE-2020-36432

An issue was discovered in the algds crate through 2020-08-25 for Rust. There is a drop of uninitialized memory in Matrix::new...

9.5AI score0.0123EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2021/08/08 12:0 a.m.9 views

Rust 安全漏洞

Rust is a general-purpose, compiled programming language from the Mozilla Foundation.A memory corruption vulnerability exists in versions of Mozilla Rust prior to 0.3.2, which stems from Rust's array-tools crate. for fixedcapacitydequelikes:: clone has an uninitialized memory. An attacker could...

9.8CVSS5.7AI score0.01119EPSS
SaveExploits0References3
Rows per page
Query Builder