Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
facebook vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2013-2703
Cross-site request forgery (CSRF) vulnerability in the Facebook Members plugin prior to 5.0.5 for WordPress allows remote malicious users to hijack the authentication of administrators for requests that modify this plugin's settings.
Crunchify Facebook Members
Crunchify Facebook Members 4.5.3
Crunchify Facebook Members 4.6
Crunchify Facebook Members 4.6.1
Crunchify Facebook Members 4.7
Crunchify Facebook Members 5.0
Crunchify Facebook Members 5.0.1
Crunchify Facebook Members 5.0.2
Crunchify Facebook Members 5.0.3
9.8
CVSSv3
CVE-2019-3570
Call to the scrypt_enc() function in HHVM can lead to heap corruption by using specifically crafted parameters (N, r and p). This happens if the parameters are configurable by an attacker for instance by providing the output of scrypt_enc() in a context where Hack/PHP code would ...
Facebook Hiphop Virtual Machine 4.2.0
Facebook Hiphop Virtual Machine 4.1.0
Facebook Hiphop Virtual Machine
Facebook Hiphop Virtual Machine 4.3.0
Facebook Hiphop Virtual Machine 4.4.0
Facebook Hiphop Virtual Machine 4.5.0
Facebook Hiphop Virtual Machine 4.6.0
Facebook Hiphop Virtual Machine 4.7.0
Facebook Hiphop Virtual Machine 4.8.0
7.5
CVSSv3
CVE-2018-6335
A Malformed h2 frame can cause 'std::out_of_range' exception when parsing priority meta data. This behavior can lead to denial-of-service. This affects all supported versions of HHVM (3.25.2, 3.24.6, and 3.21.10 and below) when using the proxygen server to handle HTTP2 ...
Facebook Hhvm
Facebook Hhvm 3.24.6
Facebook Hhvm 3.25.2
9.8
CVSSv3
CVE-2022-36937
HHVM 4.172.0 and all prior versions use TLS 1.0 for secure connections when handling tls:// URLs in the stream extension. TLS1.0 has numerous published vulnerabilities and is deprecated. HHVM 4.153.4, 4.168.2, 4.169.2, 4.170.2, 4.171.1, 4.172.1, 4.173.0 replaces TLS1.0 with TLS1....
Facebook Hhvm 4.172.0
Facebook Hhvm 4.171.0
Facebook Hhvm
8.1
CVSSv3
CVE-2021-24217
The run_action function of the Facebook for WordPress plugin prior to 3.0.0 deserializes user supplied data making it possible for PHP objects to be supplied creating an Object Injection vulnerability. There was also a useable magic method in the plugin that could be used to achi...
Facebook Facebook
8.8
CVSSv3
CVE-2021-24218
The wp_ajax_save_fbe_settings and wp_ajax_delete_fbe_settings AJAX actions of the Facebook for WordPress plugin prior to 3.0.4 were vulnerable to CSRF due to a lack of nonce protection. The settings in the saveFbeSettings function had no sanitization allowing for script tags to b...
Facebook Facebook
7.5
CVSSv3
CVE-2021-24029
A packet of death scenario is possible in mvfst via a specially crafted message during a QUIC session, which causes a crash via a failed assertion. Per QUIC specification, this particular message should be treated as a connection error. This issue affects mvfst versions prior to ...
Facebook Proxygen
Facebook Mvfst
8.8
CVSSv3
CVE-2019-15840
The facebook-for-woocommerce plugin prior to 1.9.14 for WordPress has CSRF.
Facebook Facebook For Woocommerce
8.8
CVSSv3
CVE-2019-15841
The facebook-for-woocommerce plugin prior to 1.9.15 for WordPress has CSRF via ajax_woo_infobanner_post_click, ajax_woo_infobanner_post_xout, or ajax_fb_toggle_visibility.
Facebook Facebook For Woocommerce
7.5
CVSSv3
CVE-2018-6337
folly::secureRandom will re-use a buffer between parent and child processes when fork() is called. That will result in multiple forked children producing repeat (or similar) results. This affects HHVM 3.26 before 3.26.3 and the folly library between v2017.12.11.00 and v2018.08.09...
Facebook Folly
Facebook Hhvm
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-30065
CVE-2024-5843
CVE-2024-30080
code execution
CVE-2024-4577
CVE-2024-26169
wireless
remote code execution
CVE-2024-36103
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
NEXT »