CVE search results

61 – 70 of 99 results

Detailed view

Sort by:

CVE-2014-7931

Medium priority

Some fixes available 18 of 31

factory.cc in Google V8, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted JavaScript code that triggers...

4 affected packages

chromium-browser, libv8, libv8-3.14, oxide-qt

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
chromium-browser	—	—	—	Fixed
libv8	—	—	—	Not in release
libv8-3.14	—	—	—	Ignored
oxide-qt	—	—	—	Not in release

CVE-2014-7928

Medium priority

Some fixes available 18 of 29

hydrogen.cc in Google V8, as used Google Chrome before 40.0.2214.91, does not properly handle arrays with holes, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other...

3 affected packages

chromium-browser, libv8-3.14, oxide-qt

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
chromium-browser	—	—	—	Fixed
libv8-3.14	—	—	—	Ignored
oxide-qt	—	—	—	Not in release

CVE-2014-7192

Medium priority

Vulnerable

Eval injection vulnerability in index.js in the syntax-error package before 1.1.1 for Node.js 0.10.x, as used in IBM Rational Application Developer and other products, allows remote attackers to execute arbitrary code via a crafted file.

1 affected package

libv8-3.14

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
libv8-3.14	Not in release	Not in release	Not in release	Vulnerable

CVE-2014-7967

Medium priority

Some fixes available 18 of 31

Multiple unspecified vulnerabilities in Google V8 before 3.28.71.15, as used in Google Chrome before 38.0.2125.101, allow attackers to cause a denial of service or possibly have other impact via unknown vectors.

4 affected packages

chromium-browser, libv8, libv8-3.14, oxide-qt

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
chromium-browser	—	—	—	Fixed
libv8	—	—	—	Not in release
libv8-3.14	—	—	—	Ignored
oxide-qt	—	—	—	Not in release

CVE-2014-3200

Medium priority

Some fixes available 18 of 31

Multiple unspecified vulnerabilities in Google Chrome before 38.0.2125.101 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.

4 affected packages

chromium-browser, libv8, libv8-3.14, oxide-qt

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
chromium-browser	—	—	—	Fixed
libv8	—	—	—	Not in release
libv8-3.14	—	—	—	Ignored
oxide-qt	—	—	—	Not in release

CVE-2014-3199

Medium priority

Some fixes available 18 of 31

The wrap function in bindings/core/v8/custom/V8EventCustom.cpp in the V8 bindings in Blink, as used in Google Chrome before 38.0.2125.101, has an erroneous fallback outcome for wrapper-selection failures, which allows remote...

4 affected packages

chromium-browser, libv8, libv8-3.14, oxide-qt

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
chromium-browser	—	—	—	Fixed
libv8	—	—	—	Not in release
libv8-3.14	—	—	—	Ignored
oxide-qt	—	—	—	Not in release

CVE-2014-3195

Medium priority

Some fixes available 18 of 31

Google V8, as used in Google Chrome before 38.0.2125.101, does not properly track JavaScript heap-memory allocations as allocations of uninitialized memory and does not properly concatenate arrays of...

4 affected packages

chromium-browser, libv8, libv8-3.14, oxide-qt

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
chromium-browser	—	—	—	Fixed
libv8	—	—	—	Not in release
libv8-3.14	—	—	—	Ignored
oxide-qt	—	—	—	Not in release

CVE-2014-3188

Medium priority

Some fixes available 18 of 31

Google Chrome before 38.0.2125.101 and Chrome OS before 38.0.2125.101 do not properly handle the interaction of IPC and Google V8, which allows remote attackers to execute arbitrary code via vectors involving JSON data, related to...

4 affected packages

chromium-browser, libv8, libv8-3.14, oxide-qt

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
chromium-browser	—	—	—	Fixed
libv8	—	—	—	Not in release
libv8-3.14	—	—	—	Ignored
oxide-qt	—	—	—	Not in release

CVE-2014-5256

Medium priority

Ignored

Node.js 0.8 before 0.8.28 and 0.10 before 0.10.30 does not consider the possibility of recursive processing that triggers V8 garbage collection in conjunction with a V8 interrupt, which allows remote attackers to cause a denial of...

2 affected packages

libv8, libv8-3.14

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
libv8	—	—	—	Not in release
libv8-3.14	—	—	—	Ignored

CVE-2014-3152

Medium priority

Some fixes available 19 of 35

Integer underflow in the LCodeGen::PrepareKeyedOperand function in arm/lithium-codegen-arm.cc in Google V8 before 3.25.28.16, as used in Google Chrome before 35.0.1916.114, allows remote attackers to cause a denial of service or...

5 affected packages

chromium-browser, libv8, libv8-3.14, oxide-qt, qtjsbackend-opensource-src

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
chromium-browser	—	—	—	Fixed
libv8	—	—	—	Not in release
libv8-3.14	—	—	—	Ignored
oxide-qt	—	—	—	Not in release
qtjsbackend-opensource-src	—	—	—	Not in release

Export to JSON

Results by page:

Search CVE reports