793 matches found
Astra Linux – Vulnerability in Firefox
DoS attack due to integer overflow in the Graphics:WebGPU component. This vulnerability has been fixed in Firefox 150 and Thunderbird 150...
Astra Linux – Vulnerability in Firefox and Thunderbird
Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10...
Astra Linux – Vulnerability in Firefox
Invalid pointer in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 150 and Thunderbird 150...
Astra Linux – Vulnerability in Firefox and Thunderbird
Privilege escalation in the Debugger component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10...
Astra Linux – Vulnerability in Firefox
Another issue with the JavaScript Engine component. This vulnerability has been fixed in Firefox 150 and Thunderbird 150...
Astra Linux – Vulnerability in Firefox
Another issue in networking: the DNS component. This vulnerability has been fixed in Firefox 150 and Thunderbird 150...
Astra Linux – Vulnerability in Firefox, Thunderbird
Uninitialized memory in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10...
Astra Linux – Vulnerability in Firefox and Thunderbird
Information disclosure in the Form Autofill component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10...
Astra Linux – Vulnerability in Firefox
Mitigation bypass in the DOM: PostMessage component. This vulnerability was fixed in Firefox 150 and Thunderbird 150...
Astra Linux – Vulnerability in Firefox and Thunderbird
Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10...
Astra Linux – Vulnerability in Firefox, Thunderbird
DOM spoofing issue: Core & HTML component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10...
Astra Linux – Vulnerability in Firefox
DoS attacks in the Audio/Video: Playback component. This vulnerability has been fixed in Firefox 150 and Thunderbird 150...
Astra Linux – Vulnerability in Firefox, Thunderbird
Another issue in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10...
Astra Linux – Vulnerability in Firefox
Incorrect boundary conditions, integer overflow in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 150 and Thunderbird 150...
Astra Linux – Vulnerability in Firefox, Thunderbird
Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 150, Thunderbird 150, Firefox ESR 140.10.1, Thunderbird 140.10.1, and Firefox ESR 115.35.2...
Astra Linux – Vulnerability in Firefox, Thunderbird
Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10...
Astra Linux – Vulnerability in Firefox
Bypass of mitigation mechanisms in the Networking:Cookies component. This vulnerability has been fixed in Firefox 150 and Thunderbird 150...
GHSA-X3G7-QRWC-F6C5 Ember has unneutralized terminal escape/control sequences from Caddy logs injected into the operator's TUI
Summary Ember's interactive TUI renders fields taken from the monitored Caddy server's access logs — most notably the request URI — straight to the operator's terminal without neutralising terminal escape or control sequences CWE-150. Those log fields are populated from arbitrary, unauthenticated...
Ember has unneutralized terminal escape/control sequences from Caddy logs injected into the operator's TUI
Summary Ember's interactive TUI renders fields taken from the monitored Caddy server's access logs — most notably the request URI — straight to the operator's terminal without neutralising terminal escape or control sequences CWE-150. Those log fields are populated from arbitrary, unauthenticated...
