Lucene search
+L
AlpinelinuxRecent

13932 matches found

AlpineLinux
AlpineLinux
•added 2022/12/22 12:00 a.m.•112 views

CVE-2022-36316

When using the Performance API, an attacker was able to notice subtle differences between PerformanceEntries and thus learn whether the target URL had been subject to a redirect. This vulnerability affects Firefox 103...

6.1CVSS7AI score0.00318EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/22 12:00 a.m.•91 views

CVE-2022-22736

If Firefox was installed to a world-writable directory, a local privilege escalation could occur when Firefox searched the current directory for system libraries. However the install directory is not world-writable by default.This bug only affects Firefox for Windows in a non-default installation...

7CVSS7.6AI score0.00244EPSS
SaveExploits1
AlpineLinux
AlpineLinux
•added 2022/12/22 12:00 a.m.•53 views

CVE-2022-22737

Constructing audio sinks could have lead to a race condition when playing audio files and closing windows. This could have lead to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox ESR 91.5, Firefox 96, and Thunderbird 91.5...

7.5CVSS8.3AI score0.0075EPSS
SaveExploits1
AlpineLinux
AlpineLinux
•added 2022/12/22 12:00 a.m.•50 views

CVE-2022-22741

When resizing a popup while requesting fullscreen access, the popup would have become unable to leave fullscreen mode. This vulnerability affects Firefox ESR 91.5, Firefox 96, and Thunderbird 91.5...

7.5CVSS8AI score0.00652EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/22 12:00 a.m.•56 views

CVE-2022-22742

When inserting text while in edit mode, some characters might have lead to out-of-bounds memory access causing a potentially exploitable crash. This vulnerability affects Firefox ESR 91.5, Firefox 96, and Thunderbird 91.5...

6.5CVSS7.7AI score0.00796EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/22 12:00 a.m.•58 views

CVE-2022-22745

Securitypolicyviolation events could have leaked cross-origin information for frame-ancestors violations. This vulnerability affects Firefox ESR 91.5, Firefox 96, and Thunderbird 91.5...

6.5CVSS7.5AI score0.00646EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/22 12:00 a.m.•66 views

CVE-2022-22751

Mozilla developers Calixte Denizet, Kershaw Chang, Christian Holler, Jason Kratzer, Gabriele Svelto, Tyson Smith, Simon Giesecke, and Steve Fink reported memory safety bugs present in Firefox 95 and Firefox ESR 91.4. Some of these bugs showed evidence of memory corruption and we presume that with...

8.8CVSS9.9AI score0.0087EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/22 12:00 a.m.•80 views

CVE-2022-22752

Mozilla developers Christian Holler and Jason Kratzer reported memory safety bugs present in Firefox 95. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox...

8.8CVSS9.7AI score0.00521EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/22 12:00 a.m.•99 views

CVE-2022-22762

Under certain circumstances, a JavaScript alert or prompt could have been shown while another website was displayed underneath it. This could have been abused to trick the user. This bug only affects Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox ...

4.3CVSS6AI score0.0037EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/22 12:00 a.m.•61 views

CVE-2022-28289

Mozilla developers and community members Nika Layzell, Andrew McCreight, Gabriele Svelto, and the Mozilla Fuzzing Team reported memory safety bugs present in Thunderbird 91.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have...

8.8CVSS8.7AI score0.00697EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/22 12:00 a.m.•58 views

CVE-2022-29916

Firefox behaved slightly differently for already known resources when loading CSS resources involving CSS variables. This could have been used to probe the browser history. This vulnerability affects Thunderbird 91.9, Firefox ESR 91.9, and Firefox 100...

6.5CVSS7.8AI score0.00723EPSS
SaveExploits1
AlpineLinux
AlpineLinux
•added 2022/12/22 12:00 a.m.•65 views

CVE-2022-1529

An attacker could have sent a message to the parent process where the contents were used to double-index into a JavaScript object, leading to prototype pollution and ultimately attacker-controlled JavaScript executing in the privileged parent process. This vulnerability affects Firefox ESR 91.9.1...

8.8CVSS8.1AI score0.17103EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/22 12:00 a.m.•76 views

CVE-2022-1802

If an attacker was able to corrupt the methods of an Array object in JavaScript via prototype pollution, they could have achieved execution of attacker-controlled JavaScript code in a privileged context. This vulnerability affects Firefox ESR 91.9.1, Firefox 100.0.2, Firefox for Android 100.3.0,...

8.8CVSS8.2AI score0.26709EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/22 12:00 a.m.•53 views

CVE-2022-31737

A malicious webpage could have caused an out-of-bounds write in WebGL, leading to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird 91.10, Firefox 101, and Firefox ESR 91.10...

9.8CVSS9.7AI score0.00814EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/22 12:00 a.m.•62 views

CVE-2022-31740

On arm64, WASM code could have resulted in incorrect assembly generation leading to a register allocation problem, and a potentially exploitable crash. This vulnerability affects Thunderbird 91.10, Firefox 101, and Firefox ESR 91.10...

8.8CVSS9.2AI score0.00651EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/22 12:00 a.m.•47 views

CVE-2022-31744

An attacker could have injected CSS into stylesheets accessible via internal URIs, such as resource:, and in doing so bypass a page's Content Security Policy. This vulnerability affects Firefox ESR 91.11, Thunderbird 102, Thunderbird 91.11, and Firefox 101...

6.5CVSS7.6AI score0.0058EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/22 12:00 a.m.•70 views

CVE-2022-34472

If there was a PAC URL set and the server that hosts the PAC was not reachable, OCSP requests would have been blocked, resulting in incorrect error pages being shown. This vulnerability affects Firefox 102, Firefox ESR 91.11, Thunderbird 102, and Thunderbird 91.11...

4.3CVSS6.8AI score0.0058EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/22 12:00 a.m.•51 views

CVE-2022-34479

A malicious website that could create a popup could have resized the popup to overlay the address bar with its own content, resulting in potential user confusion or spoofing attacks. This bug only affects Thunderbird for Linux. Other operating systems are unaffected.. This vulnerability affects...

6.5CVSS7.5AI score0.00744EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/22 12:00 a.m.•96 views

CVE-2022-36317

When visiting a website with an overly long URL, the user interface would start to hang. Due to session restore, this could lead to a permanent Denial of Service.This bug only affects Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox 103...

6.5CVSS6.1AI score0.00467EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/22 12:00 a.m.•57 views

CVE-2022-28286

Due to a layout change, iframe contents could have been rendered outside of its border. This could have led to user confusion or spoofing attacks. This vulnerability affects Thunderbird 91.8, Firefox 99, and Firefox ESR 91.8...

5.4CVSS6.7AI score0.00561EPSS
SaveExploits1
AlpineLinux
AlpineLinux
•added 2022/12/20 6:50 p.m.•105 views

CVE-2022-23537

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. Buffer overread is possible when parsing a specially crafted STUN message with unknown attribute. The vulnerability affects...

9.8CVSS8AI score0.01026EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/20 12:00 a.m.•52 views

CVE-2022-47629

Libksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser...

9.8CVSS9.9AI score0.0155EPSS
SaveExploits2
AlpineLinux
AlpineLinux
•added 2022/12/18 12:00 a.m.•86 views

CVE-2022-4603

A vulnerability classified as problematic has been found in ppp. Affected is the function dumpppp of the file pppdump/pppdump.c of the component pppdump. The manipulation of the argument spkt.buf/rpkt.buf leads to improper validation of array index. The real existence of this vulnerability is sti...

6.5CVSS5.8AI score0.00821EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/17 12:00 a.m.•47 views

CVE-2022-4584

A vulnerability was found in Axiomatic Bento4 up to 1.6.0-639. It has been rated as critical. Affected by this issue is some unknown functionality of the component mp42aac. The manipulation leads to heap-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to...

8.8CVSS7.5AI score0.01022EPSS
SaveExploits1References4
AlpineLinux
AlpineLinux
•added 2022/12/15 7:15 p.m.•101 views

CVE-2022-23526

Helm is a tool for managing Charts, pre-configured Kubernetes resources. Versions prior to 3.10.3 are subject to NULL Pointer Dereference in thechartutil package that can cause a segmentation violation. The chartutil package contains a parser that loads a JSON Schema validation file. For example,...

7.5CVSS1.2AI score0.00818EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/15 7:15 p.m.•107 views

CVE-2022-23525

Helm is a tool for managing Charts, pre-configured Kubernetes resources. Versions prior to 3.10.3 are subject to NULL Pointer Dereference in the repopackage. The repo package contains a handler that processes the index file of a repository. For example, the Helm client adds references to chart...

7.5CVSS1.6AI score0.00818EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/15 7:15 p.m.•133 views

CVE-2022-23524

Helm is a tool for managing Charts, pre-configured Kubernetes resources. Versions prior to 3.10.3 are subject to Uncontrolled Resource Consumption, resulting in Denial of Service. Input to functions in the strvals package can cause a stack overflow. In Go, a stack overflow cannot be recovered fro...

7.5CVSS3.6AI score0.0076EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/14 12:00 a.m.•37 views

CVE-2022-46344

A vulnerability was found in X.Org. This security flaw occurs because the handler for the XIChangeProperty request has a length-validation issues, resulting in out-of-bounds memory reads and potential information disclosure. This issue can lead to local privileges elevation on systems where the X...

8.8CVSS8.9AI score0.02685EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/14 12:00 a.m.•142 views

CVE-2022-4438

Use after free in Blink Frames in Google Chrome prior to 108.0.5359.124 allowed a remote attacker who convinced the user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS9AI score0.00651EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/14 12:00 a.m.•132 views

CVE-2022-4437

Use after free in Mojo IPC in Google Chrome prior to 108.0.5359.124 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS9AI score0.00651EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/14 12:00 a.m.•43 views

CVE-2022-46341

A vulnerability was found in X.Org. This security flaw occurs because the handler for the XIPassiveUngrab request accesses out-of-bounds memory when invoked with a high keycode or button code. This issue can lead to local privileges elevation on systems where the X server is running privileged an...

8.8CVSS9.1AI score0.02516EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/14 12:00 a.m.•38 views

CVE-2022-46343

A vulnerability was found in X.Org. This security flaw occurs because the handler for the ScreenSaverSetAttributes request may write to memory after it has been freed. This issue can lead to local privileges elevation on systems where the X server is running privileged and remote code execution f...

8.8CVSS9.2AI score0.02367EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/14 12:00 a.m.•36 views

CVE-2022-4283

A vulnerability was found in X.Org. This security flaw occurs because the XkbCopyNames function left a dangling pointer to freed memory, resulting in out-of-bounds memory access on subsequent XkbGetKbdByName requests.. This issue can lead to local privileges elevation on systems where the X serve...

7.8CVSS8.7AI score0.00958EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/14 12:00 a.m.•61 views

CVE-2022-46340

A vulnerability was found in X.Org. This security flaw occurs becuase the swap handler for the XTestFakeInput request of the XTest extension may corrupt the stack if GenericEvents with lengths larger than 32 bytes are sent through a the XTestFakeInput request. This issue can lead to local...

8.8CVSS9.1AI score0.02484EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/14 12:00 a.m.•42 views

CVE-2022-46342

A vulnerability was found in X.Org. This security flaw occurs because the handler for the XvdiSelectVideoNotify request may write to memory after it has been freed. This issue can lead to local privileges elevation on systems where the X se...

8.8CVSS8.9AI score0.01303EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/13 3:43 p.m.•75 views

CVE-2022-3996

If an X.509 certificate contains a malformed policy constraint and policy processing is enabled, then a write lock will be taken twice recursively. On some operating systems most widely: Windows this results in a denial of service when the affected process hangs. Policy processing being enabled o...

7.5CVSS7.1AI score0.0123EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/13 12:00 a.m.•145 views

CVE-2022-41089

.NET Framework Remote Code Execution Vulnerability...

7.8CVSS8AI score0.0113EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/12 6:15 a.m.•71 views

CVE-2022-46908

SQLite through 3.40.0, when relying on --safe for execution of an untrusted CLI script, does not properly implement the azProhibitedFunctions protection mechanism, and instead allows UDF functions such as WRITEFILE...

7.3CVSS2.6AI score0.00425EPSS
SaveExploits1
AlpineLinux
AlpineLinux
•added 2022/12/12 1:49 a.m.•77 views

CVE-2022-43516

A Firewall Rule which allows all incoming TCP connections to all programs from any source and to all ports is created in Windows Firewall after Zabbix agent installation MSI...

9.8CVSS2.6AI score0.00913EPSS
SaveExploits1
AlpineLinux
AlpineLinux
•added 2022/12/10 12:00 a.m.•143 views

CVE-2022-4398

Integer Overflow or Wraparound in GitHub repository radareorg/radare2 prior to 5.8.0...

7.8CVSS6.8AI score0.00341EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/10 12:00 a.m.•105 views

CVE-2022-45145

egg-compile.scm in CHICKEN 5.x before 5.3.1 allows arbitrary OS command execution during package installation via escape characters in a .egg file...

9.8CVSS9.8AI score0.01321EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/09 5:51 p.m.•115 views

CVE-2022-23477

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol RDP. xrdp v0.9.21 contain a buffer over flow in audinsendopen function. There are no known workarounds for this issue. Users are advised to upgrade...

9.8CVSS9.5AI score0.00894EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/09 5:51 p.m.•97 views

CVE-2022-23484

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol RDP. xrdp v0.9.21 contain a Integer Overflow in xrdpmmprocessrailupdatewindowtext function. There are no known workarounds for this issue. Users are advised to upgrade...

9.8CVSS8.9AI score0.00764EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/09 5:50 p.m.•133 views

CVE-2022-23483

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol RDP. xrdp v0.9.21 contain a Out of Bound Read in libxrdpsendtochannel function. There are no known workarounds for this issue. Users are advised to upgrade...

9.1CVSS8.5AI score0.00867EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/09 5:50 p.m.•103 views

CVE-2022-23482

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol RDP. xrdp v0.9.21 contain a Out of Bound Read in xrdpsecprocessmcsdataCSCORE function. There are no known workarounds for this issue. Users are advised to upgrade...

9.1CVSS6.5AI score0.00769EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/09 5:50 p.m.•93 views

CVE-2022-23481

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol RDP. xrdp v0.9.21 contain a Out of Bound Read in xrdpcapsprocessconfirmactive function. There are no known workarounds for this issue. Users are advised to upgrade...

9.1CVSS6.5AI score0.00769EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/09 5:50 p.m.•122 views

CVE-2022-23480

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol RDP. xrdp v0.9.21 contain a buffer over flow in devredirprocclientdevlistannouncereq function. There are no known workarounds for this issue. Users are advised to upgrade...

9.8CVSS9.5AI score0.00894EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/09 5:49 p.m.•95 views

CVE-2022-23479

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol RDP. xrdp v0.9.21 contain a buffer over flow in xrdpmmchandatain function. There are no known workarounds for this issue. Users are advised to upgrade...

9.8CVSS9.5AI score0.00894EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/09 5:49 p.m.•122 views

CVE-2022-23478

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol RDP. xrdp v0.9.21 contain a Out of Bound Write in xrdpmmtransprocessdrdynvcchannelopen function. There are no known workarounds for this issue. Users are advised to upgrade...

9.8CVSS9.3AI score0.00843EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/09 5:49 p.m.•90 views

CVE-2022-23468

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol RDP. xrdp v0.9.21 contain a buffer over flow in xrdploginwndcreate function. There are no known workarounds for this issue. Users are advised to upgrade...

9.8CVSS8AI score0.00804EPSS
SaveExploits0
Total number of security vulnerabilities13932