sil kayıtları
sil üreticisine ait 28 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 3
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer20
- CWE-125 Out-of-bounds Read3
- CWE-19 Data Processing Errors2
- CWE-476 NULL Pointer Dereference1
- CWE-787 Out-of-bounds Write1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
28 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
41Planlayın | CVE-2017-7778İstismar yok | A number of security vulnerabilities in the Graphite 2 library including out-of-bounds reads, buffer overflow reads and writes, and the use mozilla · firefox · CWE-119 | Kritik9,8 | — | %5,2 | 11 Haz 2018 |
37İzleyin | CVE-2016-1522İstismar yok | Code.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, does not consider remozilla · firefox · CWE-119 | Yüksek8,8 | — | %8,3 | 12 Şub 2016 |
36İzleyin | CVE-2016-2799İstismar yok | Heap-based buffer overflow in the graphite2::Slot::setAttr function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Fmozilla · firefox · CWE-119 | Yüksek8,8 | — | %4,9 | 13 Mar 2016 |
36İzleyin | CVE-2016-1521İstismar yok | The directrun function in directmachine.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x mozilla · firefox · CWE-119 | Yüksek8,8 | — | %4,1 | 12 Şub 2016 |
36İzleyin | CVE-2016-2796İstismar yok | Heap-based buffer overflow in the graphite2::vm::Machine::Code::Code function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before mozilla · firefox · CWE-119 | Yüksek8,8 | — | %3,9 | 13 Mar 2016 |
36İzleyin | CVE-2016-2794İstismar yok | The graphite2::TtfUtil::CmapSubtable12NextCodepoint function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox mozilla · firefox · CWE-119 | Yüksek8,8 | — | %3,5 | 13 Mar 2016 |
36İzleyin | CVE-2016-1977İstismar yok | The Machine::Code::decoder::analysis::set_ref function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38mozilla · firefox · CWE-119 | Yüksek8,8 | — | %2,9 | 13 Mar 2016 |
36İzleyin | CVE-2016-2797İstismar yok | The graphite2::TtfUtil::CmapSubtable12Lookup function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.mozilla · firefox · CWE-119 | Yüksek8,8 | — | %2,7 | 13 Mar 2016 |
36İzleyin | CVE-2016-2793İstismar yok | CachedCmap.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers mozilla · firefox · CWE-119 | Yüksek8,8 | — | %2,7 | 13 Mar 2016 |
36İzleyin | CVE-2017-5436İstismar yok | An out-of-bounds write in the Graphite 2 library triggered with a maliciously crafted Graphite font.debian · debian linux · CWE-787 | Yüksek8,8 | — | %2,4 | 11 Haz 2018 |
36İzleyin | CVE-2016-2798İstismar yok | The graphite2::GlyphCache::Loader::Loader function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x bmozilla · firefox · CWE-119 | Yüksek8,8 | — | %2,3 | 13 Mar 2016 |
36İzleyin | CVE-2016-2790İstismar yok | The graphite2::TtfUtil::GetTableInfo function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x beforemozilla · firefox · CWE-19 | Yüksek8,8 | — | %2,3 | 13 Mar 2016 |
36İzleyin | CVE-2016-2791İstismar yok | The graphite2::GlyphCache::glyph function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.mozilla · firefox · CWE-119 | Yüksek8,8 | — | %2,3 | 13 Mar 2016 |
36İzleyin | CVE-2016-2792İstismar yok | The graphite2::Slot::getAttr function in Slot.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x bemozilla · firefox · CWE-119 | Yüksek8,8 | — | %2,3 | 13 Mar 2016 |
36İzleyin | CVE-2016-2795İstismar yok | The graphite2::FileFace::get_table_fn function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x beformozilla · firefox · CWE-19 | Yüksek8,8 | — | %2,3 | 13 Mar 2016 |
36İzleyin | CVE-2016-2800İstismar yok | The graphite2::Slot::getAttr function in Slot.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x bemozilla · firefox · CWE-119 | Yüksek8,8 | — | %2,3 | 13 Mar 2016 |
36İzleyin | CVE-2016-2801İstismar yok | The graphite2::TtfUtil::CmapSubtable12Lookup function in TtfUtil.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and mozilla · firefox · CWE-119 | Yüksek8,8 | — | %2,3 | 13 Mar 2016 |
36İzleyin | CVE-2016-2802İstismar yok | The graphite2::TtfUtil::CmapSubtable4NextCodepoint function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox Emozilla · firefox · CWE-119 | Yüksek8,8 | — | %2,3 | 13 Mar 2016 |
36İzleyin | CVE-2018-7999İstismar yok | In libgraphite2 in graphite2 1.3.11, a NULL pointer dereference vulnerability was found in Segment.cpp during a dumbRendering operation, whisil · graphite2 · CWE-476 | Yüksek8,8 | — | %2,2 | 9 Mar 2018 |
36İzleyin | CVE-2017-7774İstismar yok | Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Silf::readGraphite function.sil · graphite2 · CWE-125 | Kritik9,1 | — | %1,4 | 15 Nis 2019 |
35İzleyin | CVE-2016-1969İstismar yok | The setAttr function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.6.1, allows remote atmozilla · firefox · CWE-119 | Yüksek8,8 | — | %1,7 | 13 Mar 2016 |
35İzleyin | CVE-2017-7772İstismar yok | Heap-based Buffer Overflow in Graphite2 library in Firefox before 54 in lz4::decompress function.mozilla · firefox · CWE-119 | Yüksek8,8 | — | %1,4 | 12 Nis 2019 |
35İzleyin | CVE-2017-7773İstismar yok | Heap-based Buffer Overflow write in Graphite2 library in Firefox before 54 in lz4::decompress src/Decompressor.mozilla · firefox · CWE-119 | Yüksek8,8 | — | %1,4 | 15 Nis 2019 |
35İzleyin | CVE-2017-7777İstismar yok | Use of uninitialized memory in Graphite2 library in Firefox before 54 in graphite2::GlyphCache::Loader::read_glyph function.mozilla · firefox · CWE-119 | Yüksek8,8 | — | %1,2 | 15 Nis 2019 |
33İzleyin | CVE-2017-7776İstismar yok | Heap-based Buffer Overflow read in Graphite2 library in Firefox before 54 in graphite2::Silf::getClassGlyph.sil · graphite2 · CWE-125 | Yüksek8,1 | — | %2,8 | 15 Nis 2019 |
- CVE-2017-777841Planlayın
A number of security vulnerabilities in the Graphite 2 library including out-of-bounds reads, buffer overflow reads and writes, and the use
KritikCVSS 9,8İstismar yokEPSS %5mozilla · firefox11 Haz 2018
- CVE-2016-152237İzleyin
Code.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, does not consider re
YüksekCVSS 8,8İstismar yokEPSS %8mozilla · firefox12 Şub 2016
- CVE-2016-279936İzleyin
Heap-based buffer overflow in the graphite2::Slot::setAttr function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and F
YüksekCVSS 8,8İstismar yokEPSS %5mozilla · firefox13 Mar 2016
- CVE-2016-152136İzleyin
The directrun function in directmachine.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x
YüksekCVSS 8,8İstismar yokEPSS %4mozilla · firefox12 Şub 2016
- CVE-2016-279636İzleyin
Heap-based buffer overflow in the graphite2::vm::Machine::Code::Code function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before
YüksekCVSS 8,8İstismar yokEPSS %4mozilla · firefox13 Mar 2016
- CVE-2016-279436İzleyin
The graphite2::TtfUtil::CmapSubtable12NextCodepoint function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox
YüksekCVSS 8,8İstismar yokEPSS %3mozilla · firefox13 Mar 2016
- CVE-2016-197736İzleyin
The Machine::Code::decoder::analysis::set_ref function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38
YüksekCVSS 8,8İstismar yokEPSS %3mozilla · firefox13 Mar 2016
- CVE-2016-279736İzleyin
The graphite2::TtfUtil::CmapSubtable12Lookup function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.
YüksekCVSS 8,8İstismar yokEPSS %3mozilla · firefox13 Mar 2016
- CVE-2016-279336İzleyin
CachedCmap.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers
YüksekCVSS 8,8İstismar yokEPSS %3mozilla · firefox13 Mar 2016
- CVE-2017-543636İzleyin
An out-of-bounds write in the Graphite 2 library triggered with a maliciously crafted Graphite font.
YüksekCVSS 8,8İstismar yokEPSS %2debian · debian linux11 Haz 2018
- CVE-2016-279836İzleyin
The graphite2::GlyphCache::Loader::Loader function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x b
YüksekCVSS 8,8İstismar yokEPSS %2mozilla · firefox13 Mar 2016
- CVE-2016-279036İzleyin
The graphite2::TtfUtil::GetTableInfo function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before
YüksekCVSS 8,8İstismar yokEPSS %2mozilla · firefox13 Mar 2016
- CVE-2016-279136İzleyin
The graphite2::GlyphCache::glyph function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.
YüksekCVSS 8,8İstismar yokEPSS %2mozilla · firefox13 Mar 2016
- CVE-2016-279236İzleyin
The graphite2::Slot::getAttr function in Slot.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x be
YüksekCVSS 8,8İstismar yokEPSS %2mozilla · firefox13 Mar 2016
- CVE-2016-279536İzleyin
The graphite2::FileFace::get_table_fn function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x befor
YüksekCVSS 8,8İstismar yokEPSS %2mozilla · firefox13 Mar 2016
- CVE-2016-280036İzleyin
The graphite2::Slot::getAttr function in Slot.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x be
YüksekCVSS 8,8İstismar yokEPSS %2mozilla · firefox13 Mar 2016
- CVE-2016-280136İzleyin
The graphite2::TtfUtil::CmapSubtable12Lookup function in TtfUtil.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and
YüksekCVSS 8,8İstismar yokEPSS %2mozilla · firefox13 Mar 2016
- CVE-2016-280236İzleyin
The graphite2::TtfUtil::CmapSubtable4NextCodepoint function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox E
YüksekCVSS 8,8İstismar yokEPSS %2mozilla · firefox13 Mar 2016
- CVE-2018-799936İzleyin
In libgraphite2 in graphite2 1.3.11, a NULL pointer dereference vulnerability was found in Segment.cpp during a dumbRendering operation, whi
YüksekCVSS 8,8İstismar yokEPSS %2sil · graphite29 Mar 2018
- CVE-2017-777436İzleyin
Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Silf::readGraphite function.
KritikCVSS 9,1İstismar yokEPSS %1sil · graphite215 Nis 2019
- CVE-2016-196935İzleyin
The setAttr function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.6.1, allows remote at
YüksekCVSS 8,8İstismar yokEPSS %2mozilla · firefox13 Mar 2016
- CVE-2017-777235İzleyin
Heap-based Buffer Overflow in Graphite2 library in Firefox before 54 in lz4::decompress function.
YüksekCVSS 8,8İstismar yokEPSS %1mozilla · firefox12 Nis 2019
- CVE-2017-777335İzleyin
Heap-based Buffer Overflow write in Graphite2 library in Firefox before 54 in lz4::decompress src/Decompressor.
YüksekCVSS 8,8İstismar yokEPSS %1mozilla · firefox15 Nis 2019
- CVE-2017-777735İzleyin
Use of uninitialized memory in Graphite2 library in Firefox before 54 in graphite2::GlyphCache::Loader::read_glyph function.
YüksekCVSS 8,8İstismar yokEPSS %1mozilla · firefox15 Nis 2019
- CVE-2017-777633İzleyin
Heap-based Buffer Overflow read in Graphite2 library in Firefox before 54 in graphite2::Silf::getClassGlyph.
YüksekCVSS 8,1İstismar yokEPSS %3sil · graphite215 Nis 2019