Lucene search
+L

336 matches found

BDU FSTEC
BDU FSTEC
added 2022/10/06 12:0 a.m.8 views

The vulnerability of the Mozilla Firefox browser for Android, related to errors in the USSD code handler, allows a perpetrator to execute arbitrary codes.

The vulnerability of the Mozilla Firefox browser for Android is related to errors in the USSD code handler. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands using a specially crafted link...

6.4CVSS8.1AI score0.00364EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/09/30 12:0 a.m.10 views

The vulnerability of the Mozilla Firefox browser for Android arises from improper data cleaning during the processing of URL addresses obtained from QR codes. This allows attackers to execute XSS attacks.

The vulnerability of the Mozilla Firefox browser for Android is related to improper data cleaning during the processing of URL addresses scanned from QR codes. Exploiting this vulnerability allows an attacker to perform XSS attacks remotely...

6.4CVSS6.2AI score0.01392EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/09/16 12:0 a.m.11 views

The vulnerability of the Mozilla Firefox browser for Android, related to resource management errors, allows a hacker to cause a service failure and disclose sensitive information.

The vulnerability of the Mozilla Firefox browser for Android is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service failures and expose sensitive information...

7.8CVSS7AI score0.00685EPSS
SaveExploits0References5Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/09/16 12:0 a.m.9 views

The vulnerability of the Mozilla Firefox browser for Android exists due to the lack of measures taken to protect the structure of web pages. This allows attackers to carry out XSS attacks.

The vulnerability of Mozilla Firefox browser on Android exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks using a specially created link...

6.4CVSS6.3AI score0.00647EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2022/05/23 12:0 a.m.9 views

UBUNTU-CVE-2022-1529

An attacker could have sent a message to the parent process where the contents were used to double-index into a JavaScript object, leading to prototype pollution and ultimately attacker-controlled JavaScript executing in the privileged parent process. This vulnerability affects Firefox ESR 91.9.1...

8.8CVSS7.3AI score0.17103EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2022/05/12 12:0 a.m.12 views

The vulnerability of the HSTS mechanism in Firefox browsers for Android allows attackers to compromise data integrity.

The vulnerability of the HSTS mechanism in Firefox browsers for Android is related to errors in saving HSTS settings. Exploiting this vulnerability can allow a remote attacker to compromise data integrity...

7.8CVSS5.5AI score0.00357EPSS
SaveExploits1References3Affected Software1
Veracode
Veracode
added 2022/02/14 9:50 a.m.24 views

Input Validation Error

firefox is vulnerable to input validation error. The vulnerability exists due to lack of URL restrictions when scanning QR codes allowing navigation to some URLs that do not point to web content. This bug only affects Firefox for Android. Other operating systems are unaffected...

4.3CVSS2.9AI score0.0042EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
added 2022/01/11 12:0 a.m.11 views

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from a security vulnerability that stems from the fact that when a QR code is scanned, Firefox for Android will allow navigation to URLs that do not point to web content...

4.3CVSS7.4AI score0.0042EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2021/12/08 10:15 p.m.2 views

CVE-2021-43544

When receiving a URL through a SEND intent, Firefox would have searched for the text, but subsequent usages of the address bar might have caused the URL to load unintentionally, which could lead to XSS and spoofing attacks. This bug only affects Firefox for Android. Other operating systems are...

6.1CVSS6.7AI score0.0051EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2021/12/08 10:15 p.m.11 views

CVE-2021-43530

A Universal XSS vulnerability was present in Firefox for Android resulting from improper sanitization when processing a URL scanned from a QR code. This bug only affects Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox 94...

6.1CVSS6.4AI score0.01392EPSS
SaveExploits1References3
OSV
OSV
added 2021/08/05 8:15 p.m.4 views

CVE-2021-29973

Password autofill was enabled without user interaction on insecure websites on Firefox for Android. This was corrected to require user interaction with the page before a user's password would be entered by the browser's autofill functionality This bug only affects Firefox for Android. Other...

8.8CVSS7.4AI score0.00812EPSS
SaveExploits0References2
AlpineLinux
AlpineLinux
added 2021/08/05 8:15 p.m.57 views

CVE-2021-29971

If a user had granted a permission to a webpage and saved that grant, any webpage running on the same host - irrespective of scheme or port - would be granted that permission. This bug only affects Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox 90...

9.8CVSS8.4AI score0.01022EPSS
SaveExploits0
OSV
OSV
added 2021/08/05 8:15 p.m.5 views

UBUNTU-CVE-2021-29973

Password autofill was enabled without user interaction on insecure websites on Firefox for Android. This was corrected to require user interaction with the page before a user's password would be entered by the browser's autofill functionality This bug only affects Firefox for Android. Other...

8.8CVSS7.3AI score0.00812EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/07/13 12:0 a.m.8 views

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source Web browser from the Mozilla Foundation in the U.S. A permission permission and access control issue vulnerability exists in Mozilla Firefox, which stems from enabling password autofill on insecure websites on Firefox for Android without user interaction. An...

8.8CVSS5.7AI score0.00812EPSS
SaveExploits0References5
OSV
OSV
added 2021/06/24 2:15 p.m.5 views

CVE-2021-29965

A malicious website that causes an HTTP Authentication dialog to be spawned could trick the built-in password manager to suggest passwords for the currently active website instead of the website that triggered the dialog. This bug only affects Firefox for Android. Other operating systems are...

5.3CVSS7.4AI score0.00737EPSS
SaveExploits0References2
OSV
OSV
added 2021/06/24 2:15 p.m.3 views

CVE-2021-29944

Lack of escaping allowed HTML injection when a webpage was viewed in Reader View. While a Content Security Policy prevents direct code execution, HTML injection is still possible. Note: This issue only affected Firefox for Android. Other operating systems are unaffected.. This vulnerability affec...

6.1CVSS7.4AI score0.00702EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/06/24 2:15 p.m.3 views

CVE-2021-29965

A malicious website that causes an HTTP Authentication dialog to be spawned could trick the built-in password manager to suggest passwords for the currently active website instead of the website that triggered the dialog. This bug only affects Firefox for Android. Other operating systems are...

5.3CVSS6.5AI score0.00737EPSS
SaveExploits0References3
OSV
OSV
added 2021/06/24 2:15 p.m.5 views

UBUNTU-CVE-2021-29965

A malicious website that causes an HTTP Authentication dialog to be spawned could trick the built-in password manager to suggest passwords for the currently active website instead of the website that triggered the dialog. This bug only affects Firefox for Android. Other operating systems are...

5.3CVSS6.4AI score0.00737EPSS
SaveExploits0References3
OSV
OSV
added 2021/06/24 2:15 p.m.3 views

UBUNTU-CVE-2021-29963

Address bar search suggestions in private browsing mode were re-using session data from normal mode. This bug only affects Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox 89...

4.3CVSS7.3AI score0.00331EPSS
SaveExploits0References3
OSV
OSV
added 2021/02/26 3:15 a.m.6 views

CVE-2021-23977

Firefox for Android suffered from a time-of-check-time-of-use vulnerability that allowed a malicious application to read sensitive data from application directories. Note: This issue is only affected Firefox for Android. Other operating systems are unaffected. This vulnerability affects Firefox 8...

5.3CVSS6.9AI score0.00874EPSS
SaveExploits0References3
Rows per page
Query Builder