Lucene search
+L

209 matches found

OSV
OSV
added 2024/04/18 12:0 a.m.41 views

ALSA-2024:1908 Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 115.10.0 ESR. Security Fixes: GetBoundName in the JIT returned the wrong object CVE-2024-3852 Out-of-bounds-read after mis-optimized switch...

8.8CVSS7.8AI score0.00847EPSS
SaveExploits2References16
Tenable Nessus
Tenable Nessus
added 2024/04/18 12:0 a.m.30 views

RHEL 8 : firefox (RHSA-2024:1912)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:1912 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...

8.8CVSS7.5AI score0.00847EPSS
SaveExploits2References17
Tenable Nessus
Tenable Nessus
added 2024/04/18 12:0 a.m.24 views

RHEL 8 : firefox (RHSA-2024:1909)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:1909 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...

8.8CVSS7.5AI score0.00847EPSS
SaveExploits2References17
Debian
Debian
added 2024/04/17 5:20 p.m.34 views

[SECURITY] [DSA 5663-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5663-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 17, 2024 https://www.debian.org/security/faq -...

8.8CVSS8.4AI score0.00847EPSS
SaveExploits2
OpenVAS
OpenVAS
added 2024/04/17 12:0 a.m.22 views

Mozilla Firefox ESR Security Update (MFSA2024-19) - Mac OS X

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

8.8CVSS7.3AI score0.00847EPSS
SaveExploits2References1
OpenVAS
OpenVAS
added 2024/04/17 12:0 a.m.25 views

Mozilla Firefox Security Update (MFSA2024-18) - Windows

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

9.8CVSS7.4AI score0.00857EPSS
SaveExploits1References1
OpenVAS
OpenVAS
added 2024/04/17 12:0 a.m.22 views

Mozilla Firefox ESR Security Update (MFSA2024-19) - Windows

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

9.8CVSS7.3AI score0.00847EPSS
SaveExploits2References1
Slackware Linux
Slackware Linux
added 2024/04/16 6:53 p.m.43 views

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-firefox-115.10.0esr-i686-1slack15.0.txz: Upgraded. This update contains security fixes and improvements. For more...

9.8CVSS6.6AI score0.00847EPSS
SaveExploits2
OSV
OSV
added 2024/04/16 4:15 p.m.9 views

CVE-2024-3864

Memory safety bug present in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9. This bug showed evidence of memory corruption and we presume that with enough effort this could have been exploited to run arbitrary code. This vulnerability affects Firefox 125, Firefox ESR 115.10, and Thunderbir...

8.1CVSS8.6AI score
SaveExploits0References6
Chainguard
Chainguard
added 2024/04/16 4:15 p.m.31 views

CVE-2024-3864 vulnerabilities

Vulnerabilities for packages: firefox-esr...

8.1CVSS6.8AI score0.00847EPSS
SaveExploits1
OSV
OSV
added 2024/04/16 4:15 p.m.1 views

UBUNTU-CVE-2024-3864

Memory safety bug present in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9. This bug showed evidence of memory corruption and we presume that with enough effort this could have been exploited to run arbitrary code. This vulnerability affects Firefox 125, Firefox ESR 115.10, and Thunderbir...

8.1CVSS7.4AI score0.00847EPSS
SaveExploits1References6
Cvelist
Cvelist
added 2024/04/16 3:14 p.m.20 views

CVE-2024-3864

Memory safety bug present in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9. This bug showed evidence of memory corruption and we presume that with enough effort this could have been exploited to run arbitrary code. This vulnerability affects Firefox 125, Firefox ESR 115.10, and Thunderbir...

6.6AI score0.00847EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
added 2024/04/16 3:14 p.m.18 views

CVE-2024-3864

Memory safety bug present in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9. This bug showed evidence of memory corruption and we presume that with enough effort this could have been exploited to run arbitrary code. This vulnerability affects Firefox 125, Firefox ESR 115.10, and Thunderbir...

6.9AI score0.00847EPSS
SaveExploits1References6
CVE
CVE
added 2024/04/16 3:14 p.m.464 views

CVE-2024-3864

CVE-2024-3864 is a memory-safety vulnerability in Mozilla Firefox and Thunderbird. It affects Firefox <125, Firefox ESR <115.10, and Thunderbird

8.1CVSS6.5AI score0.00847EPSS
SaveExploits1References6Affected Software2
Kaspersky
Kaspersky
added 2024/04/16 12:0 a.m.35 views

KLA65639 Multiple vulnerabilities in Mozilla Firefox

Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to cause denial of service, perform cross-site scripting attack, spoof user interface, bypass security restrictions, execute arbitrary code, obtain sensitive information. Below is a complete...

9.8CVSS10AI score0.00857EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2024/04/16 12:0 a.m.33 views

Mozilla Firefox ESR < 115.10

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 115.10. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2024-19 advisory. - The executable file warning was not presented when downloading .xrm-ms files. Note: This issue only...

9.8CVSS7.5AI score0.00847EPSS
SaveExploits2References10
Tenable Nessus
Tenable Nessus
added 2024/01/17 12:0 a.m.27 views

Hitachi Energy Relion 670, 650 and SAM600-IO Series Insufficient Verification of Data Authenticity (CVE-2022-3864)

A vulnerability exists in the Relion update package signature validation. A tampered update package could cause the IED to restart. After restart the device is back to normal operation. An attacker could exploit the vulnerability by first gaining access to the system with security privileges and...

4.5CVSS5.3AI score0.00353EPSS
SaveExploits0References3
Circl
Circl
added 2024/01/04 11:31 a.m.10 views

CVE-2022-3864

creationtimestamp| type| source ---|---|--- 2024-01-04 11:31:20+00:00| seen| https://t.me/ctinow/162907 2024-01-05 01:32:40+00:00| seen| https://t.me/cibsecurity/74399...

4.5CVSS4.6AI score0.00353EPSS
SaveExploits0References2
CVE
CVE
added 2024/01/04 9:31 a.m.59 views

CVE-2022-3864

The CVE-2022-3864 issue affects Hitachi Energy Relion updates: an insufficient verification of data authenticity in the update package signature validation allows tampered updates to restart IEDs, triggering a temporary Denial of Service. Affected Relion/Relion 670, 650, and SAM600-IO series prod...

4.5CVSS4.6AI score0.00353EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/01/04 9:31 a.m.48 views

CVE-2022-3864

A vulnerability exists in the Relion update package signature validation. A tampered update package could cause the IED to restart. After restart the device is back to normal operation. An attacker could exploit the vulnerability by first gaining access to the system with security privileges and...

4.5CVSS4.9AI score0.00353EPSS
SaveExploits0References1
Rows per page
Query Builder