90 matches found
Slackware: Security Advisory (SSA:2023-325-02)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mozilla Firefox Security Advisory (MFSA2023-49) - Linux
The remote host is missing an update for Mozilla Firefox, announced via the advisory MFSA2023-49. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...
[slackware-security] mozilla-firefox
New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-firefox-115.5.0esr-i686-1slack15.0.txz: Upgraded. This update contains security fixes and improvements. Thanks to...
CVE-2023-6205
It was possible to cause the use of a MessagePort after it had already been freed, which could potentially have led to an exploitable crash. This vulnerability affects Firefox 120, Firefox ESR 115.5.0, and Thunderbird 115.5...
CVE-2023-6205
It was possible to cause the use of a MessagePort after it had already been freed, which could potentially have led to an exploitable crash. This vulnerability affects Firefox 120, Firefox ESR 115.5.0, and Thunderbird 115.5...
CVE-2023-6205
The connected sources corroborate CVE-2023-6205: a use-after-free involving MessagePort Entangled leads to an exploitable crash in Firefox and Thunderbird. Affected products include Firefox versions prior to 120 and Thunderbird prior to 115.5.0 (and ESR 115.5.0 lineage). The root cause is use-aft...
CVE-2023-6205
It was possible to cause the use of a MessagePort after it had already been freed, which could potentially have led to an exploitable crash. This vulnerability affects Firefox 120, Firefox ESR 115.5.0, and Thunderbird 115.5...
Mozilla Thunderbird < 115.5.0
The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 115.5.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2023-52 advisory. - On some systemsdepending on the graphics settings and driversit was possible to force an out-of-bounds...
Mozilla Firefox < 120.0
The version of Firefox installed on the remote macOS or Mac OS X host is prior to 120.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2023-49 advisory. - Memory safety bugs present in Firefox 119. Some of these bugs showed evidence of memory corruption and we...
Fedora 38 : firefox (2023-c908110b8a)
The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-c908110b8a advisory. - Updated to latest upstream 120.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessu...
Ubuntu 20.04 LTS : Linux kernel (GKE) vulnerabilities (USN-6205-1)
The remote Ubuntu 20.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-6205-1 advisory. Hangyu Hua discovered that the Flower classifier implementation in the Linux kernel contained an out-of- bounds write vulnerability. An attacker could use this to...
CVE-2020-6205
SAP NetWeaver AS ABAP Business Server Pages (Smart Forms) is affected across SAP BASIS versions 7.00–7.54 due to insufficient encoding of user-controlled inputs, enabling unauthenticated users to perform a Reflected Cross-Site Scripting (XSS) that can deface content, steal user credentials, imper...
CVE-2019-6205
CVE-2019-6205 is a local kernel memory corruption issue in Apple platforms where memory shared between processes could be unexpectedly modified due to insufficient lock state checking in the kernel vm_map handling. Affected products include iOS, macOS, and tvOS. Impact stated as memory corruption...
CVE-2019-6205
creationtimestamp| type| source ---|---|--- 2019-01-28 15:10:00+00:00| seen| MISP/5c4f1a2e-1300-4391-87cf-19c50a021402 2019-01-31 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46299...
CVE-2018-6205
In Max Secure Anti Virus 19.0.3.019,, the driver file MaxProtector32.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x220009...
CVE-2018-6205
The CVE-2018-6205 entry refers to Max Secure Anti Virus 19.0.3.019, where the driver MaxProtector32.sys contains an input-validation flaw in IOCTL 0x220009. This local-exploit can cause a denial of service (BSOD) or other unspecified impact. Public details in connected records confirm the root ca...
CVE-2018-6205
In Max Secure Anti Virus 19.0.3.019,, the driver file MaxProtector32.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x220009...