Lucene search
+L

2616 matches found

Debian CVE
Debian CVE
added 2020/01/08 7:51 p.m.50 views

CVE-2019-11760

A fixed-size stack buffer could overflow in nrappkit when doing WebRTC signaling. This resulted in a potentially exploitable crash in some instances. This vulnerability affects Firefox 70, Thunderbird 68.2, and Firefox ESR 68.2...

8.8CVSS9.9AI score0.01371EPSS
SaveExploits0
Cvelist
Cvelist
added 2020/01/08 7:51 p.m.26 views

CVE-2019-11760

A fixed-size stack buffer could overflow in nrappkit when doing WebRTC signaling. This resulted in a potentially exploitable crash in some instances. This vulnerability affects Firefox 70, Thunderbird 68.2, and Firefox ESR 68.2...

8.7AI score0.01371EPSS
SaveExploits0References6
CVE
CVE
added 2020/01/08 7:51 p.m.289 views

CVE-2019-11760

CVE-2019-11760 describes a fixed-size stack buffer overflow in nrappkit during WebRTC signaling that could lead to a potentially exploitable crash. The vulnerability affects Firefox < 70, Thunderbird < 68.2, and Firefox ESR

8.8CVSS8.5AI score0.01371EPSS
SaveExploits0References6Affected Software3
Tenable Nessus
Tenable Nessus
added 2019/12/19 12:0 a.m.43 views

Amazon Linux 2 : thunderbird (ALAS-2019-1376)

Several memory safety bugs were discovered in Mozilla Firefox and Thunderbird. Memory corruption and arbitrary code execution are possible with these vulnerabilities. These bugs can be exploited over the network.CVE-2019-11764 A flaw was discovered in both Firefox and Thunderbird where 4 bytes of...

8.8CVSS8.6AI score0.06643EPSS
SaveExploits3References10
Mageia
Mageia
added 2019/12/08 6:12 p.m.53 views

Updated firefox packages fix security vulnerabilities

Updated firefox packages fix security vulnerabilities: Stack corruption due to incorrect number of arguments in WebRTC code. CVE-2019-13722 Buffer overflow in plain text serializer. CVE-2019-17005 Use-after-free in worker destruction. CVE-2019-17008 Updater temporary files accessible to...

8.8CVSS2.4AI score0.01976EPSS
SaveExploits3References3
OSV
OSV
added 2019/12/08 6:12 p.m.13 views

MGASA-2019-0376 Updated firefox packages fix security vulnerabilities

Updated firefox packages fix security vulnerabilities: Stack corruption due to incorrect number of arguments in WebRTC code. CVE-2019-13722 Buffer overflow in plain text serializer. CVE-2019-17005 Use-after-free in worker destruction. CVE-2019-17008 Updater temporary files accessible to...

8.8CVSS9AI score0.01976EPSS
SaveExploits3References4
OpenVAS
OpenVAS
added 2019/12/06 12:0 a.m.41 views

Mozilla Thunderbird Security Advisory (MFSA2019-38) - Windows

Mozilla Thunderbird is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:thunderbird";...

8.8CVSS8.2AI score0.02994EPSS
SaveExploits3References1
OpenVAS
OpenVAS
added 2019/12/04 12:0 a.m.30 views

Mozilla Firefox Security Advisories (MFSA2019-36, MFSA2019-37) - Mac OS X

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

8.8CVSS8.3AI score0.02994EPSS
SaveExploits4References1
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:0 a.m.10 views

The vulnerability of the WebRTC technology implementation in Google Chrome browser allows a hacker to execute arbitrary code.

The vulnerability of the WebRTC technology implemented in Google Chrome browsers arises from reading data beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created HTML page...

10CVSS8.4AI score0.05264EPSS
SaveExploits2References9Affected Software2
Mozilla
Mozilla
added 2019/12/03 12:0 a.m.96 views

Security Vulnerabilities fixed in - Firefox 71 — Mozilla

Improper refcounting of soft token session objects could cause a use-after-free and crash likely limited to a denial of service. When using nested workers, a use-after-free could occur during worker destruction. This resulted in a potentially exploitable crash. When setting a thread name on Windo...

8.8CVSS1.5AI score0.02994EPSS
SaveExploits1References11Affected Software1
Mozilla
Mozilla
added 2019/12/03 12:0 a.m.344 views

Security Vulnerabilities fixed in - Thunderbird 68.3 — Mozilla

When using nested workers, a use-after-free could occur during worker destruction. This resulted in a potentially exploitable crash. When setting a thread name on Windows in WebRTC, an incorrect number of arguments could have been supplied, leading to stack corruption and a potentially exploitabl...

8.8CVSS1.3AI score0.02994EPSS
SaveExploits3References8Affected Software1
NVD
NVD
added 2019/11/25 3:15 p.m.17 views

CVE-2019-13694

Use after free in WebRTC in Google Chrome prior to 77.0.3865.120 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS9AI score0.00914EPSS
SaveExploits0References2
OSV
OSV
added 2019/11/25 3:15 p.m.6 views

CVE-2019-13694

Use after free in WebRTC in Google Chrome prior to 77.0.3865.120 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS9.2AI score
SaveExploits0References2
OSV
OSV
added 2019/11/25 3:15 p.m.3 views

UBUNTU-CVE-2019-13694

Use after free in WebRTC in Google Chrome prior to 77.0.3865.120 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.2AI score0.00914EPSS
SaveExploits0References2
Prion
Prion
added 2019/11/25 3:15 p.m.18 views

Design/Logic Flaw

Use after free in WebRTC in Google Chrome prior to 77.0.3865.120 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

6.8CVSS8.8AI score0.00914EPSS
SaveExploits0References2Affected Software1
UbuntuCve
UbuntuCve
added 2019/11/25 3:15 p.m.23 views

CVE-2019-13694

Use after free in WebRTC in Google Chrome prior to 77.0.3865.120 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.1AI score0.00914EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2019/11/25 2:22 p.m.30 views

CVE-2019-13694

Use after free in WebRTC in Google Chrome prior to 77.0.3865.120 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.9AI score0.00914EPSS
SaveExploits0References2
CVE
CVE
added 2019/11/25 2:22 p.m.282 views

CVE-2019-13694

CVE-2019-13694: Use-after-free in WebRTC of Chromium/Google Chrome prior to 77.0.3865.120. Description and multiple advisories confirm a WebRTC use-after-free leading to potential remote code execution via a crafted HTML page. The fix is in Chromium 77.0.3865.120 (and related package updates in D...

8.8CVSS8.8AI score0.00914EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
added 2019/11/25 2:22 p.m.31 views

CVE-2019-13694

Use after free in WebRTC in Google Chrome prior to 77.0.3865.120 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS9.5AI score0.00914EPSS
SaveExploits0
Kaspersky
Kaspersky
added 2019/11/09 12:0 a.m.61 views

KLA11613 Multiple vulnerabilities in Mozilla Thunderbird

Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Incorrect temporary files access configuration of Mozilla...

8.8CVSS9.1AI score0.02994EPSS
SaveExploits3References3
Rows per page
Query Builder