32 matches found
CVE-2020-7760
This CVE-2020-7760 affects CodeMirror prior to 5.58.2 (and org.apache.marmotta.webjars:codemirror) with a ReDOs vulnerability in a JavaScript mode regex (sub-pattern (s|/. ?/) ). IBM’s bulletin confirms the same issue and notes watsonx.data is affected (version 2.2.1) and that remediation is to u...
CVE-2017-7760
The Mozilla Windows updater modifies some files to be updated by reading the original file and applying changes to it. The location of the original file can be altered by a malicious user by passing a special path to the callback parameter through the Mozilla Maintenance Service, allowing the...
CVE-2017-7760
The Mozilla Windows updater modifies some files to be updated by reading the original file and applying changes to it. The location of the original file can be altered by a malicious user by passing a special path to the callback parameter through the Mozilla Maintenance Service, allowing the...
CVE-2017-7760
CVE-2017-7760 affects Mozilla Firefox/Firefox ESR on Windows via the Mozilla Windows Updater and Maintenance Service. The vulnerability stems from the updater reading the original file and applying changes, with a malicious actor able to pass a crafted path to the callback parameter, enabling man...
CVE-2018-7760
Affected products: Schneider Electric Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200. Vulnerability: authorization bypass in CGI functions of the embedded web server, allowing remote attackers to bypass authentication. Root cause: authentication mechanism weaknesses in CGI handlin...
Updated iceape packages fix security vulnerabilities
Updated iceape packages include security fixes from upstream Seamonkey and Firefox: Multiple flaws were found in the way Iceape 2.48 processes various types of web content, where loading a web page containing malicious content could cause Iceape to crash, execute arbitrary code, or disclose...
openSUSE Security Update : Mozilla based packages (openSUSE-2017-712)
This update for Mozilla Firefox, Thunderbird, and NSS fixes the following issues : Mozilla Firefox was updated to 52.2esr boo1043960 MFSA 2017-16 : - CVE-2017-5472 bmo1365602 Use-after-free using destroyed node when regenerating trees - CVE-2017-7749 bmo1355039 Use-after-free during docshell...
CVE-2016-7760
CVE-2016-7760 entry rejected/not used; it does not represent an active vulnerability.
CVE-2015-5881
CVE-2015-5881 entry is rejected/not used and does not represent an active vulnerability.
CVE-2015-7760
CVE-2015-7760 affects Apple macOS X prior to 10.11. The vulnerability is in libxpc within launchd, which does not restrict process creation for network connections, enabling a remote attacker to cause a denial of service through repeated SSH connections. The description notes this is a distinct i...
CVE-2014-7760
The CVE-2014-7760 entry concerns the Android Health assistance service (net.nttcloud.ft.karada) app version 2.4.1, which does not verify X.509 certificates when connecting to SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information via crafted certifi...