Lucene search
+L

2619 matches found

OSV
OSV
added 2021/11/02 9:15 p.m.8 views

CVE-2021-37979

heap buffer overflow in WebRTC in Google Chrome prior to 94.0.4606.81 allowed a remote attacker who convinced a user to browse to a malicious website to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS9.3AI score
SaveExploits0References5
Prion
Prion
added 2021/11/02 9:15 p.m.32 views

Heap overflow

heap buffer overflow in WebRTC in Google Chrome prior to 94.0.4606.81 allowed a remote attacker who convinced a user to browse to a malicious website to potentially exploit heap corruption via a crafted HTML page...

6.8CVSS8.6AI score0.01711EPSS
SaveExploits1References5Affected Software3
AlpineLinux
AlpineLinux
added 2021/11/02 8:25 p.m.87 views

CVE-2021-37979

heap buffer overflow in WebRTC in Google Chrome prior to 94.0.4606.81 allowed a remote attacker who convinced a user to browse to a malicious website to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.9AI score0.01711EPSS
SaveExploits1
Cvelist
Cvelist
added 2021/11/02 8:25 p.m.43 views

CVE-2021-37979

heap buffer overflow in WebRTC in Google Chrome prior to 94.0.4606.81 allowed a remote attacker who convinced a user to browse to a malicious website to potentially exploit heap corruption via a crafted HTML page...

8.9AI score0.01711EPSS
SaveExploits1References5
Debian CVE
Debian CVE
added 2021/11/02 8:25 p.m.55 views

CVE-2021-37979

heap buffer overflow in WebRTC in Google Chrome prior to 94.0.4606.81 allowed a remote attacker who convinced a user to browse to a malicious website to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.6AI score0.01711EPSS
SaveExploits1
CVE
CVE
added 2021/11/02 8:25 p.m.200 views

CVE-2021-37979

CVE-2021-37979 is a Chrome/Chromium-related vulnerability describing a heap buffer overflow in the WebRTC component of the Chromium engine (before version 94.0.4606.81). The issue could allow a remote attacker to trigger heap corruption by convincing a user to visit a malicious page containing cr...

8.8CVSS7.8AI score0.01711EPSS
SaveExploits1References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/10/27 12:00 a.m.15 views

The vulnerability of the WebRTC component in the Google Chrome web browser, related to the use of memory after it is freed, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the WebRTC component in the Google Chrome web browser is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service interruptions through a specially create...

8.8CVSS7.6AI score0.01102EPSS
SaveExploits1References11Affected Software5
Tenable Nessus
Tenable Nessus
added 2021/10/27 12:00 a.m.37 views

NewStart CGSL CORE 5.05 / MAIN 5.05 : firefox Multiple Vulnerabilities (NS-SA-2021-0178)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has firefox packages installed that are affected by multiple vulnerabilities: - Use after free in WebRTC in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted SCTP...

8.8CVSS7.7AI score0.01556EPSS
SaveExploits0References21
Tenable Nessus
Tenable Nessus
added 2021/10/27 12:00 a.m.23 views

NewStart CGSL CORE 5.04 / MAIN 5.04 : thunderbird Multiple Vulnerabilities (NS-SA-2021-0101)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has thunderbird packages installed that are affected by multiple vulnerabilities: - A texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the buffer used to unpack it, resulting in memory...

8.8CVSS8.2AI score0.01404EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
added 2021/10/27 12:00 a.m.30 views

NewStart CGSL CORE 5.05 / MAIN 5.05 : firefox Multiple Vulnerabilities (NS-SA-2021-0154)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has firefox packages installed that are affected by multiple vulnerabilities: - In non-standard configurations, a JPEG image created by JavaScript could have caused an internal variable to overflow, resulting in an out of bound...

9.8CVSS8.4AI score0.42327EPSS
SaveExploits5References65
Tenable Nessus
Tenable Nessus
added 2021/10/27 12:00 a.m.21 views

NewStart CGSL CORE 5.04 / MAIN 5.04 : firefox Multiple Vulnerabilities (NS-SA-2021-0102)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has firefox packages installed that are affected by multiple vulnerabilities: - A texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the buffer used to unpack it, resulting in memory...

8.8CVSS8.2AI score0.01404EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
added 2021/10/27 12:00 a.m.216 views

NewStart CGSL CORE 5.05 / MAIN 5.05 : thunderbird Multiple Vulnerabilities (NS-SA-2021-0177)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has thunderbird packages installed that are affected by multiple vulnerabilities: - Use after free in WebRTC in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted...

8.8CVSS7.7AI score0.01556EPSS
SaveExploits1References23
zdt
zdt
added 2021/10/26 12:00 a.m.472 views

FreeSWITCH 1.10.6 SRTP Packet Denial Of Service Vulnerability

FreeSWITCH susceptible to Denial of Service via invalid SRTP packets - Fixed versions: v1.10.7 - Enable Security Advisory: https://github.com/EnableSecurity/advisories/tree/master/ES2021-09-freeswitch-srtp-dos - Vendor Security Advisory:...

7.5CVSS0.2AI score0.02521EPSS
SaveExploits3
Cvelist
Cvelist
added 2021/10/25 10:05 p.m.29 views

CVE-2021-41105 FreeSWITCH susceptible to Denial of Service via invalid SRTP packets

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. When handling SRTP calls, FreeSWITCH prior to version 1.10.7 is susceptible to a DoS where calls can be terminated...

7.5CVSS7.8AI score0.02521EPSS
SaveExploits3References3
AlpineLinux
AlpineLinux
added 2021/10/25 10:05 p.m.76 views

CVE-2021-41105

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. When handling SRTP calls, FreeSWITCH prior to version 1.10.7 is susceptible to a DoS where calls can be terminated...

7.5CVSS7.5AI score0.02521EPSS
SaveExploits3
Packet Storm
Packet Storm
added 2021/10/25 12:00 a.m.490 views

FreeSWITCH 1.10.6 SRTP Packet Denial Of Service

FreeSWITCH susceptible to Denial of Service via invalid SRTP packets - Fixed versions: v1.10.7 - Enable Security Advisory: https://github.com/EnableSecurity/advisories/tree/master/ES2021-09-freeswitch-srtp-dos - Vendor Security Advisory:...

0.02521EPSS
SaveExploits3
Positive Technologies
Positive Technologies
added 2021/10/25 12:00 a.m.12 views

PT-2021-23092 · Unknown +1 · Freeswitch +1

Name of the Vulnerable Software and Affected Versions: FreeSWITCH versions prior to 1.10.7 Description: The issue allows remote attackers to terminate calls by flooding a media port handling SRTP traffic with specially crafted SRTP packets, leading to denial of service. This can be done...

8.6CVSS6.2AI score0.03636EPSS
SaveExploits19References28
Kaspersky
Kaspersky
added 2021/10/21 12:00 a.m.51 views

KLA12334 Multiple vulnerabilities in Opera

Multiple vulnerabilities were found in Opera. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Use after free in Garbage Collection can be exploited to cause denial of service or execute arbitrary...

8.8CVSS9.6AI score0.01711EPSS
SaveExploits1References4
Veracode
Veracode
added 2021/10/20 2:39 a.m.46 views

Denial Of Service (DoS)

qt5-qtwebengine is vulnerable to denial of service. The vulnerability exists due to a Heap buffer overflow in WebRTC...

8.8CVSS2.3AI score0.01711EPSS
SaveExploits1References8Affected Software3
OPENSUSE Linux
OPENSUSE Linux
added 2021/10/12 12:00 a.m.59 views

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2021:1350-1 Rating: important References: 1190765 1191166 1191204 1191463 Cross-References: CVE-2021-37956 CVE-2021-37957 CVE-2021-37958 CVE-2021-37959 CVE-2021-37960 CVE-2021-37961 CVE-2021-37962 CVE-2021-37963...

9.6CVSS9.2AI score0.34887EPSS
SaveExploits5References4
Rows per page
Query Builder