Filter
AND
Software
facebook hhvm
13
facebook thrift
8
facebook hermes
6
facebook fizz
3
facebook proxygen
3
facebook facebook
2
facebook facebook for woocommerce
2
facebook hiphop virtual machine
2
facebook mcrouter
2
facebook zstandard
2
facebook folly
1
facebook instagram
1
facebook katran
1
facebook meta spark studio
1
facebook mvfst
1
facebook parlai
1
facebook react-native
1
Apache Tomcat- Rapid Reset HTTP/2 vulnerability
First published (updated )
Facebook FizzAn improperly performed length calculation on a buffer in PlaintextRecordLayer could lead to an infi…
7.5
First published (updated )
Facebook ParlaiDeserialization of Untrusted Data in parlai
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Facebook HipHop Virtual MachineCode Injection, CRLF Injection
7.5
First published (updated )
Facebook HHVMThe Memcache::getextendedstats function can be used to trigger an out-of-bounds read. Exploiting thi…
8.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Facebook ProxygenInput Validation, Null Pointer Dereference
7.5
First published (updated )
go/github.com/facebook/fbthriftGolang Facebook Thrift servers would not error upon receiving messages declaring containers of sizes…
7.5
First published (updated )
Facebook McrouterIn Mcrouter prior to v0.41.0, the deprecated ASCII parser would allocate a buffer to a user-specifie…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Facebook McrouterIn Mcrouter prior to v0.41.0, a large struct input provided to the Carbon protocol reader could resu…
7.5
First published (updated )
Facebook ThriftJava Facebook Thrift servers would not error upon receiving messages declaring containers of sizes l…
7.5
First published (updated )
Facebook FizzA peer could send empty handshake fragments containing only padding which would be kept in memory un…
7.8
First published (updated )
Facebook ThriftC++ Facebook Thrift servers would not error upon receiving messages declaring containers of sizes la…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Facebook HHVMHHVM, when used with FastCGI, would bind by default to all available interfaces. This behavior could…
7.5
First published (updated )
Facebook ThriftLegacy C++ Facebook Thrift servers (using cpp instead of cpp2) would not error upon receiving messag…
7.5
First published (updated )
Facebook ThriftPython Facebook Thrift servers would not error upon receiving messages with containers of fields of …
7.5
First published (updated )
Facebook ThriftJava Facebook Thrift servers would not error upon receiving messages with containers of fields of un…
7.5
First published (updated )
Facebook ThriftC++ Facebook Thrift servers (using cpp2) would not error upon receiving messages with containers of …
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Facebook HHVMIn the crypt function, we attempt to null terminate a buffer using the size of the input salt withou…
7.5
First published (updated )
Facebook HermesAn out-of-bounds read/write vulnerability when executing lazily compiled inner generator functions i…
8.1
First published (updated )
Facebook React-nativeA regular expression denial of service (ReDoS) vulnerability in the validateBaseUrl function can cau…
7.5
First published (updated )
Facebook HermesAn out-of-bounds read in the JavaScript Interpreter in Facebook Hermes prior to commit 8cb935cd3b232…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.