oxide project records
5 published records for vendor oxide project.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 4
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer1
- CWE-20 Improper Input Validation1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
5 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2016-1578No exploit | Use-after-free vulnerability in Oxide allows remote attackers to cause a denial of service (application crash) or execute arbitrary code viacanonical · ubuntu linux | Critical9.8 | — | 3.0% | May 13, 2016 |
36Monitor | CVE-2015-1332No exploit | The oxide::JavaScriptDialogManager function in oxide-qt before 1.9.1 as packaged in Ubuntu 15.04 and Ubuntu 14.04 allows remote attackers tocanonical · ubuntu linux · CWE-119 | High8.8 | — | 2.5% | Jul 25, 2017 |
31Monitor | CVE-2015-1317No exploit | Use-after-free vulnerability in Oxide before 1.5.6 and 1.6.x before 1.6.1 allows remote attackers to cause a denial of service (crash) or pocanonical · ubuntu linux | High7.5 | — | 2.9% | Apr 8, 2015 |
30Monitor | CVE-2016-1586No exploit | A malicious webview could install long-lived unload handlers that re-use an incognito BrowserContext that is queued for destruction in versioxide project · oxide · CWE-20 | High7.5 | — | 0.6% | Apr 22, 2019 |
28Monitor | CVE-2015-1321No exploit | Use-after-free vulnerability in the file picker implementation in Oxide before 1.6.5 allows remote attackers to cause a denial of service (ccanonical · ubuntu linux | Medium6.8 | — | 1.9% | Apr 29, 2015 |
- CVE-2016-157840Plan
Use-after-free vulnerability in Oxide allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via
CriticalCVSS 9.8No exploitEPSS 3%canonical · ubuntu linuxMay 13, 2016
- CVE-2015-133236Monitor
The oxide::JavaScriptDialogManager function in oxide-qt before 1.9.1 as packaged in Ubuntu 15.04 and Ubuntu 14.04 allows remote attackers to
HighCVSS 8.8No exploitEPSS 2%canonical · ubuntu linuxJul 25, 2017
- CVE-2015-131731Monitor
Use-after-free vulnerability in Oxide before 1.5.6 and 1.6.x before 1.6.1 allows remote attackers to cause a denial of service (crash) or po
HighCVSS 7.5No exploitEPSS 2%canonical · ubuntu linuxApr 8, 2015
- CVE-2016-158630Monitor
A malicious webview could install long-lived unload handlers that re-use an incognito BrowserContext that is queued for destruction in versi
HighCVSS 7.5No exploitEPSS 0%oxide project · oxideApr 22, 2019
- CVE-2015-132128Monitor
Use-after-free vulnerability in the file picker implementation in Oxide before 1.6.5 allows remote attackers to cause a denial of service (c
MediumCVSS 6.8No exploitEPSS 1%canonical · ubuntu linuxApr 29, 2015