Lucene search
+L
AlpinelinuxRecent

13934 matches found

AlpineLinux
AlpineLinux
•added 2022/12/22 12:00 a.m.•32 views

CVE-2022-45406

If an out-of-memory condition occurred when creating a JavaScript global, a JavaScript realm may be deleted while references to it lived on in a BaseShape. This could lead to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox ESR 102.5, Thunderbird 102.5,...

9.8CVSS9.4AI score0.01061EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/22 12:00 a.m.•29 views

CVE-2022-45412

When resolving a symlink such as file:///proc/self/fd/1, an error message may be produced where the symlink was resolved to a string containing unitialized memory in the buffer. This bug only affects Thunderbird on Unix-based operated systems Android, Linux, MacOS. Windows is unaffected.. This...

8.8CVSS8.8AI score0.00789EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/22 12:00 a.m.•30 views

CVE-2022-46882

A use-after-free in WebGL extensions could have led to a potentially exploitable crash. This vulnerability affects Firefox 107, Firefox ESR 102.6, and Thunderbird 102.6...

9.8CVSS9.3AI score0.00921EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/22 12:00 a.m.•33 views

CVE-2022-46871

An out of date library libusrsctp contained vulnerabilities that could potentially be exploited. This vulnerability affects Firefox 108...

8.8CVSS8.9AI score0.00892EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/22 12:00 a.m.•71 views

CVE-2020-15685

During the plaintext phase of the STARTTLS connection setup, protocol commands could have been injected and evaluated within the encrypted session. This vulnerability affects Thunderbird 78.7...

8.8CVSS8.7AI score0.00848EPSS
SaveExploits1
AlpineLinux
AlpineLinux
•added 2022/12/22 12:00 a.m.•97 views

CVE-2021-4126

When receiving an OpenPGP/MIME signed email message that contains an additional outer MIME message layer, for example a message footer added by a mailing list gateway, Thunderbird only considered the inner signed message for the signature validity. This gave the false impression that the addition...

6.5CVSS7.7AI score0.00432EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/22 12:00 a.m.•55 views

CVE-2022-29913

The parent process would not properly check whether the Speech Synthesis feature is enabled, when receiving instructions from a child process. This vulnerability affects Thunderbird 91.9...

6.5CVSS7.7AI score0.00428EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/22 12:00 a.m.•30 views

CVE-2022-45409

The garbage collector could have been aborted in several states and zones and GCRuntime::finishCollection may not have been called, leading to a use-after-free and potentially exploitable crash. This vulnerability affects Firefox ESR 102.5, Thunderbird 102.5, and Firefox 107...

8.8CVSS9.2AI score0.00779EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/22 12:00 a.m.•51 views

CVE-2022-46877

By confusing the browser, the fullscreen notification could have been delayed or suppressed, resulting in potential user confusion or spoofing attacks. This vulnerability affects Firefox 108...

4.3CVSS6.7AI score0.00699EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/22 12:00 a.m.•91 views

CVE-2022-22736

If Firefox was installed to a world-writable directory, a local privilege escalation could occur when Firefox searched the current directory for system libraries. However the install directory is not world-writable by default.This bug only affects Firefox for Windows in a non-default installation...

7CVSS7.6AI score0.00244EPSS
SaveExploits1
AlpineLinux
AlpineLinux
•added 2022/12/22 12:00 a.m.•53 views

CVE-2022-22737

Constructing audio sinks could have lead to a race condition when playing audio files and closing windows. This could have lead to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox ESR 91.5, Firefox 96, and Thunderbird 91.5...

7.5CVSS8.3AI score0.0075EPSS
SaveExploits1
AlpineLinux
AlpineLinux
•added 2022/12/22 12:00 a.m.•80 views

CVE-2022-22752

Mozilla developers Christian Holler and Jason Kratzer reported memory safety bugs present in Firefox 95. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox...

8.8CVSS9.7AI score0.00521EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/22 12:00 a.m.•82 views

CVE-2022-26383

When resizing a popup after requesting fullscreen access, the popup would not display the fullscreen notification. This vulnerability affects Firefox 98, Firefox ESR 91.7, and Thunderbird 91.7...

4.3CVSS6.5AI score0.00655EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/22 12:00 a.m.•53 views

CVE-2022-28282

By using a link with rel="localization" a use-after-free could have been triggered by destroying an object during JavaScript execution and then referencing the object through a freed pointer, leading to a potential exploitable crash. This vulnerability affects Thunderbird 91.8, Firefox 99, and...

6.5CVSS7.5AI score0.02012EPSS
SaveExploits1
AlpineLinux
AlpineLinux
•added 2022/12/22 12:00 a.m.•58 views

CVE-2022-29916

Firefox behaved slightly differently for already known resources when loading CSS resources involving CSS variables. This could have been used to probe the browser history. This vulnerability affects Thunderbird 91.9, Firefox ESR 91.9, and Firefox 100...

6.5CVSS7.8AI score0.00723EPSS
SaveExploits1
AlpineLinux
AlpineLinux
•added 2022/12/22 12:00 a.m.•65 views

CVE-2022-1529

An attacker could have sent a message to the parent process where the contents were used to double-index into a JavaScript object, leading to prototype pollution and ultimately attacker-controlled JavaScript executing in the privileged parent process. This vulnerability affects Firefox ESR 91.9.1...

8.8CVSS8.1AI score0.17103EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/22 12:00 a.m.•76 views

CVE-2022-1802

If an attacker was able to corrupt the methods of an Array object in JavaScript via prototype pollution, they could have achieved execution of attacker-controlled JavaScript code in a privileged context. This vulnerability affects Firefox ESR 91.9.1, Firefox 100.0.2, Firefox for Android 100.3.0,...

8.8CVSS8.2AI score0.26709EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/22 12:00 a.m.•63 views

CVE-2022-31738

When exiting fullscreen mode, an iframe could have confused the browser about the current state of fullscreen, resulting in potential user confusion or spoofing attacks. This vulnerability affects Thunderbird 91.10, Firefox 101, and Firefox ESR 91.10...

6.5CVSS7.7AI score0.00584EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/22 12:00 a.m.•62 views

CVE-2022-31740

On arm64, WASM code could have resulted in incorrect assembly generation leading to a register allocation problem, and a potentially exploitable crash. This vulnerability affects Thunderbird 91.10, Firefox 101, and Firefox ESR 91.10...

8.8CVSS9.2AI score0.00651EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/22 12:00 a.m.•47 views

CVE-2022-31744

An attacker could have injected CSS into stylesheets accessible via internal URIs, such as resource:, and in doing so bypass a page's Content Security Policy. This vulnerability affects Firefox ESR 91.11, Thunderbird 102, Thunderbird 91.11, and Firefox 101...

6.5CVSS7.6AI score0.0058EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/22 12:00 a.m.•35 views

CVE-2022-34481

In the nsTArrayImpl::ReplaceElementsAt function, an integer overflow could have occurred when the number of elements to replace was too large for the container. This vulnerability affects Firefox 102, Firefox ESR 91.11, Thunderbird 102, and Thunderbird 91.11...

8.8CVSS9AI score0.00783EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/22 12:00 a.m.•39 views

CVE-2022-36319

When combining CSS properties for overflow and transform, the mouse cursor could interact with different coordinates than displayed. This vulnerability affects Firefox ESR 102.1, Firefox ESR 91.12, Firefox 103, Thunderbird 102.1, and Thunderbird 91.12...

7.5CVSS7.9AI score0.00694EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/20 6:50 p.m.•105 views

CVE-2022-23537

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. Buffer overread is possible when parsing a specially crafted STUN message with unknown attribute. The vulnerability affects...

9.8CVSS8AI score0.01026EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/20 12:00 a.m.•52 views

CVE-2022-47629

Libksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser...

9.8CVSS9.9AI score0.0155EPSS
SaveExploits2
AlpineLinux
AlpineLinux
•added 2022/12/18 12:00 a.m.•86 views

CVE-2022-4603

A vulnerability classified as problematic has been found in ppp. Affected is the function dumpppp of the file pppdump/pppdump.c of the component pppdump. The manipulation of the argument spkt.buf/rpkt.buf leads to improper validation of array index. The real existence of this vulnerability is sti...

6.5CVSS5.8AI score0.00821EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/17 12:00 a.m.•47 views

CVE-2022-4584

A vulnerability was found in Axiomatic Bento4 up to 1.6.0-639. It has been rated as critical. Affected by this issue is some unknown functionality of the component mp42aac. The manipulation leads to heap-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to...

8.8CVSS7.5AI score0.01022EPSS
SaveExploits1References4
AlpineLinux
AlpineLinux
•added 2022/12/15 7:15 p.m.•101 views

CVE-2022-23526

Helm is a tool for managing Charts, pre-configured Kubernetes resources. Versions prior to 3.10.3 are subject to NULL Pointer Dereference in thechartutil package that can cause a segmentation violation. The chartutil package contains a parser that loads a JSON Schema validation file. For example,...

7.5CVSS1.2AI score0.00818EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/15 7:15 p.m.•107 views

CVE-2022-23525

Helm is a tool for managing Charts, pre-configured Kubernetes resources. Versions prior to 3.10.3 are subject to NULL Pointer Dereference in the repopackage. The repo package contains a handler that processes the index file of a repository. For example, the Helm client adds references to chart...

7.5CVSS1.6AI score0.00818EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/15 7:15 p.m.•133 views

CVE-2022-23524

Helm is a tool for managing Charts, pre-configured Kubernetes resources. Versions prior to 3.10.3 are subject to Uncontrolled Resource Consumption, resulting in Denial of Service. Input to functions in the strvals package can cause a stack overflow. In Go, a stack overflow cannot be recovered fro...

7.5CVSS3.6AI score0.0076EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/14 12:00 a.m.•142 views

CVE-2022-4438

Use after free in Blink Frames in Google Chrome prior to 108.0.5359.124 allowed a remote attacker who convinced the user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS9AI score0.00651EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/14 12:00 a.m.•132 views

CVE-2022-4437

Use after free in Mojo IPC in Google Chrome prior to 108.0.5359.124 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS9AI score0.00651EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/14 12:00 a.m.•43 views

CVE-2022-46341

A vulnerability was found in X.Org. This security flaw occurs because the handler for the XIPassiveUngrab request accesses out-of-bounds memory when invoked with a high keycode or button code. This issue can lead to local privileges elevation on systems where the X server is running privileged an...

8.8CVSS9.1AI score0.02516EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/14 12:00 a.m.•38 views

CVE-2022-46343

A vulnerability was found in X.Org. This security flaw occurs because the handler for the ScreenSaverSetAttributes request may write to memory after it has been freed. This issue can lead to local privileges elevation on systems where the X server is running privileged and remote code execution f...

8.8CVSS9.2AI score0.02367EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/14 12:00 a.m.•37 views

CVE-2022-46344

A vulnerability was found in X.Org. This security flaw occurs because the handler for the XIChangeProperty request has a length-validation issues, resulting in out-of-bounds memory reads and potential information disclosure. This issue can lead to local privileges elevation on systems where the X...

8.8CVSS8.9AI score0.02685EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/14 12:00 a.m.•36 views

CVE-2022-4283

A vulnerability was found in X.Org. This security flaw occurs because the XkbCopyNames function left a dangling pointer to freed memory, resulting in out-of-bounds memory access on subsequent XkbGetKbdByName requests.. This issue can lead to local privileges elevation on systems where the X serve...

7.8CVSS8.7AI score0.00958EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/14 12:00 a.m.•61 views

CVE-2022-46340

A vulnerability was found in X.Org. This security flaw occurs becuase the swap handler for the XTestFakeInput request of the XTest extension may corrupt the stack if GenericEvents with lengths larger than 32 bytes are sent through a the XTestFakeInput request. This issue can lead to local...

8.8CVSS9.1AI score0.02484EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/14 12:00 a.m.•42 views

CVE-2022-46342

A vulnerability was found in X.Org. This security flaw occurs because the handler for the XvdiSelectVideoNotify request may write to memory after it has been freed. This issue can lead to local privileges elevation on systems where the X se...

8.8CVSS8.9AI score0.01303EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/13 3:43 p.m.•75 views

CVE-2022-3996

If an X.509 certificate contains a malformed policy constraint and policy processing is enabled, then a write lock will be taken twice recursively. On some operating systems most widely: Windows this results in a denial of service when the affected process hangs. Policy processing being enabled o...

7.5CVSS7.1AI score0.0123EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/13 12:00 a.m.•145 views

CVE-2022-41089

.NET Framework Remote Code Execution Vulnerability...

7.8CVSS8AI score0.0113EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/12 6:15 a.m.•71 views

CVE-2022-46908

SQLite through 3.40.0, when relying on --safe for execution of an untrusted CLI script, does not properly implement the azProhibitedFunctions protection mechanism, and instead allows UDF functions such as WRITEFILE...

7.3CVSS2.6AI score0.00425EPSS
SaveExploits1
AlpineLinux
AlpineLinux
•added 2022/12/12 1:49 a.m.•77 views

CVE-2022-43516

A Firewall Rule which allows all incoming TCP connections to all programs from any source and to all ports is created in Windows Firewall after Zabbix agent installation MSI...

9.8CVSS2.6AI score0.00913EPSS
SaveExploits1
AlpineLinux
AlpineLinux
•added 2022/12/10 12:00 a.m.•143 views

CVE-2022-4398

Integer Overflow or Wraparound in GitHub repository radareorg/radare2 prior to 5.8.0...

7.8CVSS6.8AI score0.00341EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/10 12:00 a.m.•105 views

CVE-2022-45145

egg-compile.scm in CHICKEN 5.x before 5.3.1 allows arbitrary OS command execution during package installation via escape characters in a .egg file...

9.8CVSS9.8AI score0.01321EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/09 5:51 p.m.•115 views

CVE-2022-23477

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol RDP. xrdp v0.9.21 contain a buffer over flow in audinsendopen function. There are no known workarounds for this issue. Users are advised to upgrade...

9.8CVSS9.5AI score0.00894EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/09 5:51 p.m.•97 views

CVE-2022-23484

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol RDP. xrdp v0.9.21 contain a Integer Overflow in xrdpmmprocessrailupdatewindowtext function. There are no known workarounds for this issue. Users are advised to upgrade...

9.8CVSS8.9AI score0.00764EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/09 5:50 p.m.•133 views

CVE-2022-23483

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol RDP. xrdp v0.9.21 contain a Out of Bound Read in libxrdpsendtochannel function. There are no known workarounds for this issue. Users are advised to upgrade...

9.1CVSS8.5AI score0.00867EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/09 5:50 p.m.•103 views

CVE-2022-23482

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol RDP. xrdp v0.9.21 contain a Out of Bound Read in xrdpsecprocessmcsdataCSCORE function. There are no known workarounds for this issue. Users are advised to upgrade...

9.1CVSS6.5AI score0.00769EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/09 5:50 p.m.•93 views

CVE-2022-23481

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol RDP. xrdp v0.9.21 contain a Out of Bound Read in xrdpcapsprocessconfirmactive function. There are no known workarounds for this issue. Users are advised to upgrade...

9.1CVSS6.5AI score0.00769EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/09 5:50 p.m.•122 views

CVE-2022-23480

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol RDP. xrdp v0.9.21 contain a buffer over flow in devredirprocclientdevlistannouncereq function. There are no known workarounds for this issue. Users are advised to upgrade...

9.8CVSS9.5AI score0.00894EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/09 5:49 p.m.•95 views

CVE-2022-23479

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol RDP. xrdp v0.9.21 contain a buffer over flow in xrdpmmchandatain function. There are no known workarounds for this issue. Users are advised to upgrade...

9.8CVSS9.5AI score0.00894EPSS
SaveExploits0
Total number of security vulnerabilities13934