Lucene search
+L

8678 matches found

Mend
Mend
•added 2015/04/01 9:00 p.m.•3 views

CVE-2015-1233

Google Chrome before 41.0.2272.118 does not properly handle the interaction of IPC, the Gamepad API, and Google V8, which allows remote attackers to execute arbitrary code via unspecified vectors...

7.5CVSS0.05304EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
•added 2015/04/01 12:00 a.m.•2 views

PT-2015-1053

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 41.0.2272.118 Opera affected versions not specified Description The issue arises from incorrect interaction between IPC components, Gamepad API, and Google V8. This allows a remote attacker to execute arbitrary...

7.5CVSS0.05304EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/04/01 12:00 a.m.•6 views

CVE-2015-1233: Undefined Security Weakness

Google Chrome before 41.0.2272.118 does not properly handle the interaction of IPC, the Gamepad API, and Google V8, which allows remote attackers to execute arbitrary code via unspecified vectors...

7.5CVSS6.5AI score0.05304EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2015/03/30 12:00 a.m.•53 views

Mandriva Linux Security Advisory : nodejs (MDVSA-2015:142)

Updated nodejs package fixes security vulnerabilities : A memory corruption vulnerability, which results in a denial-of-service, was identified in the versions of V8 that ship with Node.js 0.8 and 0.10. In certain circumstances, a particularly deep recursive workload that may trigger a GC and...

7.5CVSS7.2AI score0.05677EPSS
SaveExploits2References3
UbuntuCve
UbuntuCve
•added 2015/03/18 10:59 p.m.•31 views

CVE-2015-1077

WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other CVEs listed in...

6.8CVSS7.6AI score0.0269EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2015/03/18 10:59 p.m.•32 views

CVE-2015-1072

WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other CVEs listed in...

6.8CVSS7.6AI score0.0269EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2015/03/18 10:59 p.m.•25 views

CVE-2015-1070

WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other CVEs listed in...

6.8CVSS7.6AI score0.0269EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2015/03/18 10:59 p.m.•37 views

CVE-2015-1075

WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other CVEs listed in...

6.8CVSS7.6AI score0.02142EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2015/03/18 12:00 a.m.•33 views

CVE-2015-1081

WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other CVEs listed in...

6.8CVSS7.5AI score0.03016EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2015/03/17 12:00 a.m.•109 views

openSUSE: Security Advisory for Security (openSUSE-SU-2015:0505-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8.5AI score0.01295EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2015/03/17 12:00 a.m.•32 views

Fedora 20 : libuv-0.10.34-1.fc20 / nodejs-0.10.36-3.fc20 / v8-3.14.5.10-17.fc20 (2015-2310)

nodejs - tls: re-add 1024-bit SSL certs removed by f9456a2 Chris Dickinson - timers: don't close interval timers when unrefd Julien Gilli - timers: don't mutate unref list while iterating it Julien Gilli - childprocess: check execFile args is an array Sam Roberts - childprocess: check fork args i...

10CVSS8AI score0.03242EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2015/03/17 12:00 a.m.•41 views

openSUSE Security Update : chromium (openSUSE-2015-228)

Chromium was updated to 41.0.2272.76 bnc920825 Security fixes : - CVE-2015-1212: Out-of-bounds write in media - CVE-2015-1213: Out-of-bounds write in skia filters - CVE-2015-1214: Out-of-bounds write in skia filters - CVE-2015-1215: Out-of-bounds write in skia filters - CVE-2015-1216:...

7.5CVSS8.3AI score0.02452EPSS
SaveExploits0References21
OPENSUSE Linux
OPENSUSE Linux
•added 2015/03/16 4:05 p.m.•44 views

Security update to Chromium 41.0.2272.76 (important)

Chromium was updated to 41.0.2272.76 bnc920825 Security fixes: CVE-2015-1212: Out-of-bounds write in media CVE-2015-1213: Out-of-bounds write in skia filters CVE-2015-1214: Out-of-bounds write in skia filters CVE-2015-1215: Out-of-bounds write in skia filters CVE-2015-1216: Use-after-free in v8...

7.5CVSS3.6AI score0.02452EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2015/03/14 12:00 a.m.•39 views

Fedora Update for v8 FEDORA-2015-2310

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS4.9AI score0.01757EPSS
SaveExploits0References2
Fedora
Fedora
•added 2015/03/13 4:56 p.m.•88 views

[SECURITY] Fedora 20 Update: v8-3.14.5.10-17.fc20

V8 is Google's open source JavaScript engine. V8 is written in C++ and is u sed in Google Chrome, the open source browser from Google. V8 implements ECMASc ript as specified in ECMA-262, 3rd edition...

10CVSS1.5AI score0.03242EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2015/03/11 12:00 a.m.•58 views

Ubuntu 14.04 LTS : Oxide vulnerabilities (USN-2521-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2521-1 advisory. Several out-of-bounds write bugs were discovered in Skia. If a user were tricked in to opening a specially crafted website, an attacker could potentially...

7.5CVSS8.8AI score0.02452EPSS
SaveExploits0References19
OpenVAS
OpenVAS
•added 2015/03/11 12:00 a.m.•54 views

Ubuntu: Security Advisory (USN-2521-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7AI score0.02452EPSS
SaveExploits0References2
Ubuntu
Ubuntu
•added 2015/03/10 3:28 p.m.•86 views

USN-2521-1: Oxide vulnerabilities

Several out-of-bounds write bugs were discovered in Skia. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service via application crash or execute arbitrary code with the privileges of the user invoking the program...

7.5CVSS8.7AI score0.02452EPSS
SaveExploits0
NVD
NVD
•added 2015/03/09 12:59 a.m.•38 views

CVE-2015-2238

Multiple unspecified vulnerabilities in Google V8 before 4.1.0.21, as used in Google Chrome before 41.0.2272.76, allow attackers to cause a denial of service or possibly have other impact via unknown vectors...

7.5CVSS7AI score0.00637EPSS
SaveExploits0References2
NVD
NVD
•added 2015/03/09 12:59 a.m.•15 views

CVE-2015-1217

The V8LazyEventListener::prepareListenerObject function in bindings/core/v8/V8LazyEventListener.cpp in the V8 bindings in Blink, as used in Google Chrome before 41.0.2272.76, does not properly compile listeners, which allows remote attackers to cause a denial of service or possibly have unspecifi...

7.5CVSS7.1AI score0.0206EPSS
SaveExploits0References9
Rows per page
Query Builder