Поиск уязвимостей
Количество 19
Количество 19
ALT-PU-2016-2380
ALT-PU-2016-2380: package `node` update to version 6.9.1-alt1
CVE-2016-5172
The parser in Google V8, as used in Google Chrome before 53.0.2785.113, mishandles scopes, which allows remote attackers to obtain sensitive information from arbitrary memory locations via crafted JavaScript code.
CVE-2016-5172
The parser in Google V8, as used in Google Chrome before 53.0.2785.113, mishandles scopes, which allows remote attackers to obtain sensitive information from arbitrary memory locations via crafted JavaScript code.
CVE-2016-5172
The parser in Google V8, as used in Google Chrome before 53.0.2785.113, mishandles scopes, which allows remote attackers to obtain sensitive information from arbitrary memory locations via crafted JavaScript code.
CVE-2016-5172
The parser in Google V8, as used in Google Chrome before 53.0.2785.113 ...
CVE-2018-1000168
nghttp2 version >= 1.10.0 and nghttp2 <= v1.31.0 contains an Improper Input Validation CWE-20 vulnerability in ALTSVC frame handling that can result in segmentation fault leading to denial of service. This attack appears to be exploitable via network client. This vulnerability appears to have been fixed in >= 1.31.1.
CVE-2018-1000168
nghttp2 version >= 1.10.0 and nghttp2 <= v1.31.0 contains an Improper Input Validation CWE-20 vulnerability in ALTSVC frame handling that can result in segmentation fault leading to denial of service. This attack appears to be exploitable via network client. This vulnerability appears to have been fixed in >= 1.31.1.
CVE-2018-1000168
nghttp2 version >= 1.10.0 and nghttp2 <= v1.31.0 contains an Improper Input Validation CWE-20 vulnerability in ALTSVC frame handling that can result in segmentation fault leading to denial of service. This attack appears to be exploitable via network client. This vulnerability appears to have been fixed in >= 1.31.1.
CVE-2018-1000168
nghttp2 version >= 1.10.0 and nghttp2 <= v1.31.0 contains an Improper Input Validation CWE-20 vulnerability in ALTSVC frame handling that can result in segmentation fault leading to denial of service. This attack appears to be exploitable via network client. This vulnerability appears to have been fixed in >= 1.31.1.
CVE-2018-1000168
nghttp2 version >= 1.10.0 and nghttp2 <= v1.31.0 contains an Improper ...
GHSA-9g2q-xpx4-5592
The parser in Google V8, as used in Google Chrome before 53.0.2785.113, mishandles scopes, which allows remote attackers to obtain sensitive information from arbitrary memory locations via crafted JavaScript code.
GHSA-q6fc-wp2r-hvq3
nghttp2 version >= 1.10.0 and nghttp2 <= v1.31.0 contains an Improper Input Validation CWE-20 vulnerability in ALTSVC frame handling that can result in segmentation fault leading to denial of service. This attack appears to be exploitable via network client. This vulnerability appears to have been fixed in >= 1.31.1.
ALT-PU-2018-2455
ALT-PU-2018-2455: package `libnghttp2` update to version 1.34.0-alt1
openSUSE-SU-2018:1963-1
Security update for nodejs8
SUSE-SU-2018:1918-1
Security update for nodejs8
SUSE-SU-2021:0932-1
Security update for nghttp2
ALT-PU-2018-1961
ALT-PU-2018-1961: package `node` update to version 8.11.3-alt1
SUSE-SU-2019:14246-1
Security update for Mozilla Firefox
ALT-PU-2016-2194
ALT-PU-2016-2194: package `chromium` update to version 54.0.2840.59-alt2
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2016-2380 ALT-PU-2016-2380: package `node` update to version 6.9.1-alt1 | CVSS3: 7.5 | почти 10 лет назад | |
 | CVE-2016-5172 The parser in Google V8, as used in Google Chrome before 53.0.2785.113, mishandles scopes, which allows remote attackers to obtain sensitive information from arbitrary memory locations via crafted JavaScript code. | CVSS3: 6.5 | 2% Низкий | около 10 лет назад |
 | CVE-2016-5172 The parser in Google V8, as used in Google Chrome before 53.0.2785.113, mishandles scopes, which allows remote attackers to obtain sensitive information from arbitrary memory locations via crafted JavaScript code. | CVSS3: 6.5 | 2% Низкий | около 10 лет назад |
 | CVE-2016-5172 The parser in Google V8, as used in Google Chrome before 53.0.2785.113, mishandles scopes, which allows remote attackers to obtain sensitive information from arbitrary memory locations via crafted JavaScript code. | CVSS3: 6.5 | 2% Низкий | около 10 лет назад |
| CVE-2016-5172 The parser in Google V8, as used in Google Chrome before 53.0.2785.113 ... | CVSS3: 6.5 | 2% Низкий | около 10 лет назад |
| CVE-2018-1000168 nghttp2 version >= 1.10.0 and nghttp2 <= v1.31.0 contains an Improper Input Validation CWE-20 vulnerability in ALTSVC frame handling that can result in segmentation fault leading to denial of service. This attack appears to be exploitable via network client. This vulnerability appears to have been fixed in >= 1.31.1. | CVSS3: 7.5 | 11% Средний | больше 8 лет назад |
| CVE-2018-1000168 nghttp2 version >= 1.10.0 and nghttp2 <= v1.31.0 contains an Improper Input Validation CWE-20 vulnerability in ALTSVC frame handling that can result in segmentation fault leading to denial of service. This attack appears to be exploitable via network client. This vulnerability appears to have been fixed in >= 1.31.1. | CVSS3: 5.9 | 11% Средний | больше 8 лет назад |
| CVE-2018-1000168 nghttp2 version >= 1.10.0 and nghttp2 <= v1.31.0 contains an Improper Input Validation CWE-20 vulnerability in ALTSVC frame handling that can result in segmentation fault leading to denial of service. This attack appears to be exploitable via network client. This vulnerability appears to have been fixed in >= 1.31.1. | CVSS3: 7.5 | 11% Средний | больше 8 лет назад |
 | CVE-2018-1000168 nghttp2 version >= 1.10.0 and nghttp2 <= v1.31.0 contains an Improper Input Validation CWE-20 vulnerability in ALTSVC frame handling that can result in segmentation fault leading to denial of service. This attack appears to be exploitable via network client. This vulnerability appears to have been fixed in >= 1.31.1. | CVSS3: 7.5 | 11% Средний | больше 5 лет назад |
| CVE-2018-1000168 nghttp2 version >= 1.10.0 and nghttp2 <= v1.31.0 contains an Improper ... | CVSS3: 7.5 | 11% Средний | больше 8 лет назад |
| GHSA-9g2q-xpx4-5592 The parser in Google V8, as used in Google Chrome before 53.0.2785.113, mishandles scopes, which allows remote attackers to obtain sensitive information from arbitrary memory locations via crafted JavaScript code. | CVSS3: 6.5 | 2% Низкий | больше 4 лет назад |
| GHSA-q6fc-wp2r-hvq3 nghttp2 version >= 1.10.0 and nghttp2 <= v1.31.0 contains an Improper Input Validation CWE-20 vulnerability in ALTSVC frame handling that can result in segmentation fault leading to denial of service. This attack appears to be exploitable via network client. This vulnerability appears to have been fixed in >= 1.31.1. | CVSS3: 7.5 | 11% Средний | больше 4 лет назад |
| ALT-PU-2018-2455 ALT-PU-2018-2455: package `libnghttp2` update to version 1.34.0-alt1 | CVSS3: 7.5 | 11% Средний | около 8 лет назад |
 | openSUSE-SU-2018:1963-1 Security update for nodejs8 | больше 8 лет назад | ||
| SUSE-SU-2018:1918-1 Security update for nodejs8 | больше 8 лет назад | ||
| SUSE-SU-2021:0932-1 Security update for nghttp2 | больше 5 лет назад | ||
| ALT-PU-2018-1961 ALT-PU-2018-1961: package `node` update to version 8.11.3-alt1 | CVSS3: 7.5 | больше 8 лет назад | |
| SUSE-SU-2019:14246-1 Security update for Mozilla Firefox | почти 7 лет назад | ||
| ALT-PU-2016-2194 ALT-PU-2016-2194: package `chromium` update to version 54.0.2840.59-alt2 | CVSS3: 9.8 | около 10 лет назад |
Уязвимостей на страницу