Filter
AND
Software
facebook hhvm
13
facebook thrift
8
facebook hermes
6
facebook fizz
3
facebook proxygen
3
facebook
2
facebook facebook for woocommerce
2
facebook hiphop virtual machine
2
facebook mcrouter
2
facebook zstandard
2
facebook folly
1
facebook instagram
1
facebook katran
1
facebook meta spark studio
1
facebook mvfst
1
facebook parlai
1
facebook react-native
1
Apache Tomcat- Rapid Reset HTTP/2 vulnerability
First published (updated )
Facebook FizzThere is a vulnerability in the fizz library prior to v2023.01.30.00 where a CHECK failure can be tr…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Facebook FizzAn improperly performed length calculation on a buffer in PlaintextRecordLayer could lead to an infi…
7.5
First published (updated )
Facebook ParlaiDeserialization of Untrusted Data in parlai
8.8
First published (updated )
Facebook HipHop Virtual MachineCode Injection, CRLF Injection
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Facebook HHVMThe Memcache::getextendedstats function can be used to trigger an out-of-bounds read. Exploiting thi…
8.1
First published (updated )
Facebook ProxygenInput Validation, Null Pointer Dereference
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
go/github.com/facebook/fbthriftGolang Facebook Thrift servers would not error upon receiving messages declaring containers of sizes…
7.5
First published (updated )
Facebook McrouterIn Mcrouter prior to v0.41.0, the deprecated ASCII parser would allocate a buffer to a user-specifie…
7.5
First published (updated )
Facebook McrouterIn Mcrouter prior to v0.41.0, a large struct input provided to the Carbon protocol reader could resu…
7.5
First published (updated )
Facebook ThriftJava Facebook Thrift servers would not error upon receiving messages declaring containers of sizes l…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Facebook FizzA peer could send empty handshake fragments containing only padding which would be kept in memory un…
7.8
First published (updated )
Facebook ThriftC++ Facebook Thrift servers would not error upon receiving messages declaring containers of sizes la…
7.5
First published (updated )
Facebook HHVMHHVM, when used with FastCGI, would bind by default to all available interfaces. This behavior could…
7.5
First published (updated )
Facebook ThriftLegacy C++ Facebook Thrift servers (using cpp instead of cpp2) would not error upon receiving messag…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Facebook ThriftPython Facebook Thrift servers would not error upon receiving messages with containers of fields of …
7.5
First published (updated )
Facebook ThriftJava Facebook Thrift servers would not error upon receiving messages with containers of fields of un…
7.5
First published (updated )
Facebook ThriftC++ Facebook Thrift servers (using cpp2) would not error upon receiving messages with containers of …
7.5
First published (updated )
Facebook HHVMIn the crypt function, we attempt to null terminate a buffer using the size of the input salt withou…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.