Filters
Software
facebook hhvm
40
facebook hermes
20
facebook thrift
9
facebook hiphop virtual machine
7
facebook proxygen
6
facebook facebook
4
facebook zstandard
4
facebook fizz
3
facebook folly
3
facebook facebook for woocommerce
2
facebook instagram
2
facebook mcrouter
2
facebook parlai
2
facebook photouploader
2
facebook react-dev-utils
2
facebook wangle
2
facebook buck
1
facebook facebook messenger
1
facebook facebook pages
1
facebook in-app action panel (iaap) program
1
facebook katran
1
facebook lexical
1
facebook messenger
1
facebook meta spark studio
1
facebook mvfst
1
facebook netconsd
1
facebook nuclide
1
facebook onavo
1
facebook react
1
facebook react-devtools
1
facebook react-native
1
facebook redex
1
facebook research apps
1
facebook snapchat data-interception kits
1
facebook tac plus
1
ZDNetHijacked Facebook Pages are pushing fake AI services to steal your data
First published (updated )
News
ZDNetThe RegisterMeta accused of snarfing people's Snapchat data via traffic decryption
First published (updated )
News
The RegisterFacebook Meta Spark StudioPrior to v176, when opening a new project Meta Spark Studio would execute scripts defined inside of …
7.8
EPSS
0.06%
First published (updated )
Facebook KatranKatran could disclose non-initialized kernel memory as part of an IP header. The issue was present f…
7.5
First published (updated )
npm/react-devtools-coreThe React Developer Tools extension registers a message listener with window.addEventListener('messa…
6.5
EPSS
0.05%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Apache Tomcat- Rapid Reset HTTP/2 vulnerability
First published (updated )
Facebook HermesAn error in Hermes' algorithm for copying objects properties prior to commit a00d237346894c6067a5949…
9.8
First published (updated )
Facebook HermesCVE-2023-25933
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Facebook HermesAn error in BigInt conversion to Number in Hermes prior to commit a6dcafe6ded8e61658b40f5699878cd19a…
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Facebook FizzThere is a vulnerability in the fizz library prior to v2023.01.30.00 where a CHECK failure can be tr…
7.5
First published (updated )
Facebook HHVMHHVM 4.172.0 and all prior versions use TLS 1.0 for secure connections when handling tls:// URLs in …
9.8
First published (updated )
Facebook RedexDexLoader function get_stringidx_fromdex() in Redex prior to commit 3b44c64 can load an out of bound…
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Facebook HermesAn out of bounds write in hermes, while handling large arrays, prior to commit 06eaec767e376bfdb883d…
9.8
First published (updated )
Facebook HermesAn integer conversion error in Hermes bytecode generation, prior to commit 6aa825e480d48127b480b08d1…
9.8
First published (updated )
Facebook HermesIt was possible to trigger an infinite recursion condition in the error handler when Hermes executed…
7.5
First published (updated )
Facebook InstagramInstagram iOS 106.0 and prior and Android 107.0.0.11 and prior user interface does not properly repr…
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Facebook MessengerThe Facebook Messenger app for iOS 227.0 and prior and Android 228.1.0.10.116 and prior user interfa…
6.5
First published (updated )
Facebook HermesBy passing invalid javascript code where await and yield were called upon non-async and non-generato…
9.8
First published (updated )
Facebook HermesA type confusion vulnerability could be triggered when resolving the "typeof" unary operator in Face…
9.8
First published (updated )
Facebook ParlaiDeserialization of Untrusted Data in parlai
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Facebook ParlaiDue to use of unsafe YAML deserialization logic, an attacker with the ability to modify local YAML c…
9.8
First published (updated )
Facebook React-nativeA regular expression denial of service (ReDoS) vulnerability in the validateBaseUrl function can cau…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Facebook MvfstA packet of death scenario is possible in mvfst via a specially crafted message during a QUIC sessio…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Facebook HHVMThe fb_unserialize function did not impose a depth limit for nested deserialization. That meant a ma…
7.5
First published (updated )
CVE-2021-24030The fbgames protocol handler registered as part of Facebook Gameroom does not properly quote argumen…
9.8
First published (updated )
Facebook HHVMIn the crypt function, we attempt to null terminate a buffer using the size of the input salt withou…
7.5
First published (updated )
Facebook HHVMIncorrect bounds calculations in substr_compare could lead to an out-of-bounds read when the second …
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Facebook HHVMxbuf_format_converter, used as part of exif_read_data, was appending a terminating null character to…
9.8
First published (updated )
Facebook HHVMIn-memory file operations (ie: using fopen on a data URI) did not properly restrict negative seeking…
7.5
First published (updated )
IBM Planning AnalyticsOS Command Injection, Command Injection
9.8
First published (updated )
Facebook ZstandardIn the Zstandard command-line utility prior to v1.4.1, output files were created with default permis…
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.