Mozilla Firefox Security Update (MFSA2024-18) - Windows

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-firefox-115.10.0esr-i686-1slack15.0.txz: Upgraded. This update contains security fixes and improvements. For more...

CVE-2024-3854

In some code patterns the JIT incorrectly optimized switch statements and generated code with out-of-bounds-reads. This vulnerability affects Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10...

CVE-2024-3854 vulnerabilities

Vulnerabilities for packages: firefox-esr...

CVE-2024-3854

In some code patterns the JIT incorrectly optimized switch statements and generated code with out-of-bounds-reads. This vulnerability affects Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10...

Mozilla Firefox ESR < 115.10

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 115.10. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2024-19 advisory. - The executable file warning was not presented when downloading .xrm-ms files. Note: This issue only...

KLA65639 Multiple vulnerabilities in Mozilla Firefox

Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to cause denial of service, perform cross-site scripting attack, spoof user interface, bypass security restrictions, execute arbitrary code, obtain sensitive information. Below is a complete...

CVE-2023-3854

creationtimestamp| type| source ---|---|--- 2023-07-24 02:25:37+00:00| seen| https://t.me/cibsecurity/67132...

CVE-2023-3854 phpscriptpoint BloodBank POST Parameter search sql injection

A vulnerability classified as critical has been found in phpscriptpoint BloodBank 1.1. Affected is an unknown function of the file /search of the component POST Parameter Handler. The manipulation of the argument country/city/bloodgroupid leads to sql injection. It is possible to launch the attac...

CVE-2023-3854

CVE-2023-3854 affects phpscriptpoint BloodBank 1.1. The vulnerability is an SQL injection in the /search endpoint’s POST Parameter Handler, where manipulating the country, city, or blood_group_id arguments enables remote exploitation. Multiple sources corroborate the issue but do not provide a fi...

Ubuntu: Security Advisory (USN-6063-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-6063-1: Ceph vulnerabilities

Mark Kirkwood discovered that Ceph incorrectly handled certain key lengths. An attacker could possibly use this issue to create non-random encryption keys. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. CVE-2021-3979 It was discovered that Ceph incorrectly handled the volumes...

CVE-2022-3854

creationtimestamp| type| source ---|---|--- 2023-03-07 02:13:36+00:00| seen| https://t.me/cibsecurity/59543 2025-03-08 04:34:11+00:00| seen| Telegram/QQKGpWYwFd5k5Dn30pIbUkgJV-hMsnxy-YJov4VGGuI5IgX...

CVE-2022-3854

A flaw was found in Ceph, relating to the URL processing on RGW backends. An attacker can exploit the URL processing by providing a null URL to crash the RGW, causing a denial of service...

CVE-2022-3854

CVE-2022-3854: Ceph vulnerability in RGW URL processing allows an attacker to crash RGW by sending a null URL, causing DoS. Multiple connected docs corroborate the issue across Ceph deployments (RGW backend URL handling). Remediation is to upgrade Ceph to versions containing the fix (per SUSE RHC...

CVE-2022-3854

A flaw was found in Ceph, relating to the URL processing on RGW backends. An attacker can exploit the URL processing by providing a null URL to crash the RGW, causing a denial of service...

CVE-2022-3854

A flaw was found in Ceph, relating to the URL processing on RGW backends. An attacker can exploit the URL processing by providing a null URL to crash the RGW, causing a denial of service...

CVE-2021-3854

creationtimestamp| type| source ---|---|--- 2023-03-02 14:34:10+00:00| seen| https://t.me/cibsecurity/59315 2025-03-05 21:35:07+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6628...

CVE-2021-3854 SQLi in Glox Technology's Useroam Hotspot

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Glox Technology Useroam Hotspot allows SQL Injection. This issue affects Useroam Hotspot: before 5.1.0.15...

CVE-2021-3854

CVE-2021-3854 concerns Glox Technology’s Useroam Hotspot, affected versions before 5.1.0.15. The vulnerability is due to improper neutralization of special elements in SQL commands, enabling SQL injection. The CVSSv3.1 base score is 9.8 (CRITICAL) with network access, low attack complexity, no pr...