PT-2024-26487 · Wac · Wac

Name of the Vulnerable Software and Affected Versions: wac version 385e1 Description: A heap overflow issue was discovered in the load module function at /wac-asan/wa.c, allowing attackers to cause a Denial of Service DoS via a crafted wasm file. The load module function is vulnerable, and...

CVE-2024-35410

wac commit 385e1 was discovered to contain a heap overflow via the interpret function at /wac-asan/wa.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted wasm file...

CVE-2024-35418

CVE-2024-35418 affects the wac project (WebAssembly in C). A heap overflow in the setup_call function (wa.c) allows an attacker to cause a Denial of Service via a crafted wasm file. Impact: CVSS v3.1 base score 6.2 (Medium); vector LOCAL, no privileges, no user interaction; availability impact HI...

CVE-2024-25431

An issue in bytecodealliance wasm-micro-runtime before v.b3f728c and fixed in commit 06df58f allows a remote attacker to escalate privileges via a crafted file to the checkwasabicompatibility function...

PT-2024-26491 · Vmir · Vmir

Name of the Vulnerable Software and Affected Versions: vmir version e8117 Description: A heap buffer overflow issue was discovered in vmir via the wasm call function at /src/vmir wasm parser.c. This issue occurs due to a problem in the wasm call function, which can lead to a heap buffer overflow...

VMIR 安全漏洞

VMIR is a standalone library written in C by the individual developer Andreas Smas. A security vulnerability exists in VMIR version e8117, which stems from a heap buffer overflow in the wasmcall function...

CVE-2024-27532

wasm-micro-runtime aka WebAssembly Micro Runtime or WAMR 06df58f is vulnerable to NULL Pointer Dereference in function blocktypegetresulttypes...

PT-2024-26486 · Wac · Wac

Name of the Vulnerable Software and Affected Versions: wac version 385e1 Description: A heap overflow issue was discovered in the setup call function at /wac-asan/wa.c, allowing attackers to cause a Denial of Service DoS via a crafted wasm file. The issue is related to the setup call function...

CVE-2024-35419

wac commit 385e1 was discovered to contain a heap overflow via the loadmodule function at /wac-asan/wa.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted wasm file...

MAL-2024-10495 Malicious code in ansem-wasm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 11f7a5b4109593e20da5b0a2b685ab645dbec1691cf9b162bfe1ff3086cb81b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-51745

Wasmtime is a fast and secure runtime for WebAssembly. Wasmtime's filesystem sandbox implementation on Windows blocks access to special device filenames such as "COM1", "COM2", "LPT0", "LPT1", and so on, however it did not block access to the special device filenames which use superscript digits,...

CVE-2024-51745

Wasmtime on Windows had a sandbox bypass where filenames with superscript digits (e.g., COM¹, LPT⁰) were not blocked, allowing untrusted Wasm code with filesystem access to reach devices and peripherals via special device filenames. Affected software: Wasmtime’s Windows filesystem sandbox. Root c...

CVE-2024-51745

Wasmtime is a fast and secure runtime for WebAssembly. Wasmtime's filesystem sandbox implementation on Windows blocks access to special device filenames such as "COM1", "COM2", "LPT0", "LPT1", and so on, however it did not block access to the special device filenames which use superscript digits,...

Malicious code in import-wasm-static (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-9665 Malicious code in import-wasm-static (npm)

--- -= Per source details. Do not edit below this line.=-...

CentOS 7 : thunderbird (RHSA-2022:6710)

The remote CentOS Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:6710 advisory. - When receiving an HTML email that contained an iframe element, which used a srcdoc attribute to define the inner HTML document, remote objects...

RHEL 8 : thunderbird (RHSA-2024:6816)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:6816 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: thunderbird: 115.15/128.2 mozilla: Type confusion when lookin...

Important: Red Hat Security Advisory: thunderbird security update

An update for thunderbird is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.4 Telecommunications Update Service. Red Hat Product Security has rated this update ...

RLSA-2024:6684 Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: thunderbird: 115.15/128.2 mozilla: Type confusion when looking up a property name in a "with" block CVE-2024-8381 mozilla: Internal event interfaces were exposed to web content when browser EventHandler listener...

RHEL 9 : thunderbird (RHSA-2024:6720)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:6720 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: thunderbird: 115.15/128.2 mozilla: Type confusion when lookin...