CVE List

Id CVE No. Status Description Phase Votes Comments Actions
81765  CVE-2015-4488  Candidate  Use-after-free vulnerability in the StyleAnimationValue class in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 allows remote attackers to have an unspecified impact by leveraging a StyleAnimationValue::operator self assignment.  Assigned (20150610)  None (candidate not yet proposed)    View
88797  CVE-2016-1978  Candidate  Use-after-free vulnerability in the ssl3_HandleECDHServerKeyExchange function in Mozilla Network Security Services (NSS) before 3.21, as used in Mozilla Firefox before 44.0, allows remote attackers to cause a denial of service or possibly have unspecified other impact by making an SSL (1) DHE or (2) ECDHE handshake at a time of high memory consumption.  Assigned (20160120)  None (candidate not yet proposed)    View
81393  CVE-2015-4116  Candidate  Use-after-free vulnerability in the spl_ptr_heap_insert function in ext/spl/spl_heap.c in PHP before 5.5.27 and 5.6.x before 5.6.11 allows remote attackers to execute arbitrary code by triggering a failed SplMinHeap::compare operation.  Assigned (20150528)  None (candidate not yet proposed)    View
44809  CVE-2010-2225  Candidate  Use-after-free vulnerability in the SplObjectStorage unserializer in PHP 5.2.x and 5.3.x through 5.3.2 allows remote attackers to execute arbitrary code or obtain sensitive information via serialized data, related to the PHP unserialize function.  Assigned (20100609)  None (candidate not yet proposed)    View
84109  CVE-2015-6832  Candidate  Use-after-free vulnerability in the SPL unserialize implementation in ext/spl/spl_array.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 allows remote attackers to execute arbitrary code via crafted serialized data that triggers misuse of an array field.  Assigned (20150908)  None (candidate not yet proposed)    View

Page 621 of 20943, showing 5 records out of 104715 total, starting on record 3101, ending on 3105

Actions