Lucene search
+L

6903 matches found

Cvelist
Cvelist
added 2022/05/01 3:25 p.m.48 views

CVE-2022-21144 Denial of Service (DoS)

This affects all versions of package libxmljs. When invoking the libxmljs.parseXml function with a non-buffer argument the V8 code will attempt invoking the .toString method of the argument. If the argument's toString value is not a Function object V8 will crash...

7.5CVSS7.8AI score0.01888EPSS
SaveExploits1References3
OSV
OSV
added 2022/05/01 3:25 p.m.30 views

CVE-2022-21144 Denial of Service (DoS)

This affects all versions of package libxmljs. When invoking the libxmljs.parseXml function with a non-buffer argument the V8 code will attempt invoking the .toString method of the argument. If the argument's toString value is not a Function object V8 will crash...

7.5CVSS7.1AI score
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2022/05/01 3:20 p.m.10 views

CVE-2022-21227

The package sqlite3 before 5.0.3 are vulnerable to Denial of Service DoS which will invoke the toString function of the passed parameter. If passed an invalid Function object it will throw and crash the V8 engine...

7.5CVSS7.1AI score0.02068EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2022/05/01 12:00 a.m.20 views

PT-2022-14877 · Npm · Libxmljs

Name of the Vulnerable Software and Affected Versions: libxmljs versions all Description: The issue arises when the libxmljs.parseXml function is invoked with a non-buffer argument. In such cases, the V8 code attempts to call the toString method of the argument. If the argument's toString value i...

7.5CVSS7.4AI score0.01888EPSS
SaveExploits1References9
CNNVD
CNNVD
added 2022/05/01 12:00 a.m.11 views

libxmljs 输入验证错误漏洞

libxmljs is the LibXML binding for node.js. All versions of the libxmljs package have an input validation error vulnerability that stems from the fact that when calling a non-buffered parameter, the V8 code will attempt to call the .toString method for that parameter. If the toString value of the...

7.5CVSS7.4AI score0.01888EPSS
SaveExploits1References4
GithubExploit
GithubExploit
added 2022/04/29 7:09 a.m.267 views

Exploit for Integer Overflow or Wraparound in Google Android

V8 JavaScript Engine ============= V8 is Google's open source J...

7.8CVSS7.5AI score0.00961EPSS
SaveExploits1
GithubExploit
GithubExploit
added 2022/04/29 5:28 a.m.299 views

Exploit for Out-of-bounds Write in Google Android

V8 JavaScript Engine ============= V8 is Google's open source J...

9.8CVSS9.5AI score0.0193EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2022/04/29 12:00 a.m.36 views

Google Chrome Security Update (stable-channel-update-for-desktop_26-2022-04) - Linux

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

9.6CVSS7.4AI score0.01161EPSS
SaveExploits25References1
Microsoft CVE
Microsoft CVE
added 2022/04/28 3:55 p.m.31 views

Chromium: CVE-2022-1486 Type Confusion in V8

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS8.4AI score0.00916EPSS
SaveExploits1
Veracode
Veracode
added 2022/04/28 2:00 p.m.19 views

Denial Of Service (DoS)

chrome is vulnerable to denial of service. The vulnerability exists due to a Type Confusion in V8 which allows an attacker to cause an application crash...

8.8CVSS3.4AI score0.00916EPSS
SaveExploits1References4Affected Software2
Kaspersky
Kaspersky
added 2022/04/28 12:00 a.m.47 views

KLA12519 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, bypass security restrictions, gain privileges, spoof user interface. Below is a complete list of vulnerabilities: 1. Use after free...

8.8CVSS9.4AI score0.01161EPSS
SaveExploits21References27
Tenable Nessus
Tenable Nessus
added 2022/04/28 12:00 a.m.61 views

Siemens PROFINET Stack Integrated on Interniche Stack Uncontrolled Resource Consumption (CVE-2022-25622)

A vulnerability has been identified in SIMATIC CFU DIQ All versions, SIMATIC CFU PA All versions, SIMATIC S7-1500 CPU family incl. related ET200 CPUs and SIPLUS variants All versions V2.0.0, SIMATIC S7-300 CPU family incl. related ET200 CPUs and SIPLUS variants All versions, SIMATIC S7-400 H V6 C...

7.5CVSS7.1AI score0.00884EPSS
SaveExploits0References3
FreeBSD
FreeBSD
added 2022/04/26 12:00 a.m.37 views

chromium -- multiple vulnerabilities

Chrome Releases reports: This release contains 30 security fixes, including: 1313905 High CVE-2022-1477: Use after free in Vulkan. Reported by SeongHwan Park SeHwa on 2022-04-06 1299261 High CVE-2022-1478: Use after free in SwiftShader. Reported by SeongHwan Park SeHwa on 2022-02-20 1305190 High...

8.8CVSS0.2AI score0.01161EPSS
SaveExploits23References1
Kaspersky
Kaspersky
added 2022/04/26 12:00 a.m.516 views

KLA12517 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, bypass security restrictions, spoof user interface. Below is a complete list of vulnerabilities: 1. Implementation vulnerability in Input can...

9.6CVSS9.5AI score0.01315EPSS
SaveExploits25References3
Tenable Nessus
Tenable Nessus
added 2022/04/20 12:00 a.m.45 views

openSUSE 15 Security Update : chromium (openSUSE-SU-2022:0114-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2022:0114-1 advisory. - Type Confusion in V8. CVE-2022-1364 Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported...

8.8CVSS8.7AI score0.1372EPSS
SaveExploits2References4
OPENSUSE Linux
OPENSUSE Linux
added 2022/04/19 12:00 a.m.56 views

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2022:0114-1 Rating: important References: 1198509 Cross-References: CVE-2022-1364 Affected Products: openSUSE Backports SLE-15-SP3 An update that fixes one vulnerability is now available. Description: This update...

8.8CVSS9.2AI score0.1372EPSS
SaveExploits2References1
OpenVAS
OpenVAS
added 2022/04/19 12:00 a.m.30 views

Google Chrome Security Update (stable-channel-update-for-desktop_14-2022-04) - Linux

Google Chrome is prone to type confusion vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome";...

8.8CVSS9.5AI score0.1372EPSS
SaveExploits2References3
OpenVAS
OpenVAS
added 2022/04/19 12:00 a.m.24 views

Google Chrome Security Update (stable-channel-update-for-desktop_14-2022-04) - Windows

Google Chrome is prone to type confusion vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome";...

8.8CVSS9.5AI score0.1372EPSS
SaveExploits2References3
Tenable Nessus
Tenable Nessus
added 2022/04/19 12:00 a.m.55 views

Debian DSA-5121-1 : chromium - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5121 advisory. - Type confusion in V8 Turbofan in Google Chrome prior to 100.0.4896.127 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.7AI score0.1372EPSS
SaveExploits2References5
hivepro
hivepro
added 2022/04/17 9:38 p.m.71 views

Google Chrome issues an emergency update to address the third zero-day of year 2022

THREAT LEVEL: Red. For a detailed advisory, download the pdf file here A zero-day vulnerability has been discovered in Google Chrome versions prior to 100.0.4896.127. A type of confusion vulnerability tracked as CVE-2022-1364, is said to be exploited in the wild. This vulnerability affects the V8...

1.9AI score0.1372EPSS
SaveExploits2
Rows per page
Query Builder