KLA48839 Multiple vulnerabilities in Mozilla Firefox

Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to spoof user interface, execute arbitrary code, cause denial of service, obtain sensitive information, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Security ...

CVE-2022-29547

The CVE-2022-29547 entry concerns MediaWiki’s CreateRedirect extension before 2022-04-14, where the extension fails to verify a user’s permission to edit the target page. This leads to unauthorised (or blocked) users being able to edit pages. Documented details indicate the issue stems from impro...

CVE-2021-29547

CVE-2021-29547 affects TensorFlow QuantizedBatchNormWithGlobalNormalization. The issue is a heap/out-of-bounds vulnerability caused by inputs being allowed to be empty; when any input is empty, flat()(0) accesses data outside of bounds, enabling a segfault/denial of service. Patches were applied ...