336 matches found
The vulnerability of the Mozilla Firefox browser for Android, related to errors in the USSD code handler, allows a perpetrator to execute arbitrary codes.
The vulnerability of the Mozilla Firefox browser for Android is related to errors in the USSD code handler. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands using a specially crafted link...
The vulnerability of the Mozilla Firefox browser for Android arises from improper data cleaning during the processing of URL addresses obtained from QR codes. This allows attackers to execute XSS attacks.
The vulnerability of the Mozilla Firefox browser for Android is related to improper data cleaning during the processing of URL addresses scanned from QR codes. Exploiting this vulnerability allows an attacker to perform XSS attacks remotely...
The vulnerability of the Mozilla Firefox browser for Android, related to resource management errors, allows a hacker to cause a service failure and disclose sensitive information.
The vulnerability of the Mozilla Firefox browser for Android is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service failures and expose sensitive information...
The vulnerability of the Mozilla Firefox browser for Android exists due to the lack of measures taken to protect the structure of web pages. This allows attackers to carry out XSS attacks.
The vulnerability of Mozilla Firefox browser on Android exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks using a specially created link...
UBUNTU-CVE-2022-1529
An attacker could have sent a message to the parent process where the contents were used to double-index into a JavaScript object, leading to prototype pollution and ultimately attacker-controlled JavaScript executing in the privileged parent process. This vulnerability affects Firefox ESR 91.9.1...
The vulnerability of the HSTS mechanism in Firefox browsers for Android allows attackers to compromise data integrity.
The vulnerability of the HSTS mechanism in Firefox browsers for Android is related to errors in saving HSTS settings. Exploiting this vulnerability can allow a remote attacker to compromise data integrity...
Input Validation Error
firefox is vulnerable to input validation error. The vulnerability exists due to lack of URL restrictions when scanning QR codes allowing navigation to some URLs that do not point to web content. This bug only affects Firefox for Android. Other operating systems are unaffected...
Mozilla Firefox 安全漏洞
Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from a security vulnerability that stems from the fact that when a QR code is scanned, Firefox for Android will allow navigation to URLs that do not point to web content...
CVE-2021-43544
When receiving a URL through a SEND intent, Firefox would have searched for the text, but subsequent usages of the address bar might have caused the URL to load unintentionally, which could lead to XSS and spoofing attacks. This bug only affects Firefox for Android. Other operating systems are...
CVE-2021-43530
A Universal XSS vulnerability was present in Firefox for Android resulting from improper sanitization when processing a URL scanned from a QR code. This bug only affects Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox 94...
CVE-2021-29973
Password autofill was enabled without user interaction on insecure websites on Firefox for Android. This was corrected to require user interaction with the page before a user's password would be entered by the browser's autofill functionality This bug only affects Firefox for Android. Other...
CVE-2021-29971
If a user had granted a permission to a webpage and saved that grant, any webpage running on the same host - irrespective of scheme or port - would be granted that permission. This bug only affects Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox 90...
UBUNTU-CVE-2021-29973
Password autofill was enabled without user interaction on insecure websites on Firefox for Android. This was corrected to require user interaction with the page before a user's password would be entered by the browser's autofill functionality This bug only affects Firefox for Android. Other...
Mozilla Firefox 安全漏洞
Mozilla Firefox is an open source Web browser from the Mozilla Foundation in the U.S. A permission permission and access control issue vulnerability exists in Mozilla Firefox, which stems from enabling password autofill on insecure websites on Firefox for Android without user interaction. An...
CVE-2021-29965
A malicious website that causes an HTTP Authentication dialog to be spawned could trick the built-in password manager to suggest passwords for the currently active website instead of the website that triggered the dialog. This bug only affects Firefox for Android. Other operating systems are...
CVE-2021-29944
Lack of escaping allowed HTML injection when a webpage was viewed in Reader View. While a Content Security Policy prevents direct code execution, HTML injection is still possible. Note: This issue only affected Firefox for Android. Other operating systems are unaffected.. This vulnerability affec...
CVE-2021-29965
A malicious website that causes an HTTP Authentication dialog to be spawned could trick the built-in password manager to suggest passwords for the currently active website instead of the website that triggered the dialog. This bug only affects Firefox for Android. Other operating systems are...
UBUNTU-CVE-2021-29965
A malicious website that causes an HTTP Authentication dialog to be spawned could trick the built-in password manager to suggest passwords for the currently active website instead of the website that triggered the dialog. This bug only affects Firefox for Android. Other operating systems are...
UBUNTU-CVE-2021-29963
Address bar search suggestions in private browsing mode were re-using session data from normal mode. This bug only affects Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox 89...
CVE-2021-23977
Firefox for Android suffered from a time-of-check-time-of-use vulnerability that allowed a malicious application to read sensitive data from application directories. Note: This issue is only affected Firefox for Android. Other operating systems are unaffected. This vulnerability affects Firefox 8...