Lucene search
K

175 matches found

Debian CVE
Debian CVE
added 2018/06/11 9:0 p.m.25 views

CVE-2017-7807

A mechanism that uses AppCache to hijack a URL in a domain using fallback by serving the files from a sub-path on the domain. This has been addressed by requiring fallback files be inside the manifest directory. This vulnerability affects Thunderbird 52.3, Firefox ESR 52.3, and Firefox 55...

8.1CVSS9.3AI score0.00778EPSS
Exploits1
Cvelist
Cvelist
added 2018/06/11 9:0 p.m.17 views

CVE-2017-7807

A mechanism that uses AppCache to hijack a URL in a domain using fallback by serving the files from a sub-path on the domain. This has been addressed by requiring fallback files be inside the manifest directory. This vulnerability affects Thunderbird 52.3, Firefox ESR 52.3, and Firefox 55...

8AI score0.00778EPSS
Exploits1References11
CVE
CVE
added 2018/06/11 9:0 p.m.169 views

CVE-2017-7807

CVE-2017-7807 describes a domain URL hijack via AppCache fallback, resolved by requiring fallback files to be inside the manifest directory. Affected products include Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox

8.1CVSS7.8AI score0.00778EPSS
Exploits1References11Affected Software1
RedHat Linux
RedHat Linux
added 2017/08/24 6:45 a.m.1 views

Mozilla: Domain hijacking through appcache fallback (MFSA 2017-19)

A mechanism that uses AppCache to hijack a URL in a domain using fallback by serving the files from a sub-path on the domain. This has been addressed by requiring fallback files be inside the manifest directory. This vulnerability affects Thunderbird 52.3, Firefox ESR 52.3, and Firefox 55...

8.1CVSS7.2AI score0.00778EPSS
Exploits1References5
Mozilla
Mozilla
added 2017/08/18 12:0 a.m.508 views

Security vulnerabilities fixed in Thunderbird 52.3 — Mozilla

A use-after-free vulnerability can occur in WebSockets when the object holding the connection is freed before the disconnection operation is finished. This results in an exploitable crash. A use-after-free vulnerability can occur while re-computing layout for a marquee element during window...

9.8CVSS0.0852EPSS
Exploits8References16Affected Software1
Tenable Nessus
Tenable Nessus
added 2017/08/14 12:0 a.m.32 views

openSUSE Security Update : MozillaFirefox (openSUSE-2017-921)

This update to Mozilla Firefox 52.3esr fixes a number of security issues. The following vulnerabilities were advised upstream under MFSA 2017-19 boo1052829 : - CVE-2017-7798: XUL injection in the style editor in devtools - CVE-2017-7800: Use-after-free in WebSockets during disconnection -...

10CVSS7.4AI score0.0852EPSS
Exploits12References17
RedHat Linux
RedHat Linux
added 2017/08/10 11:20 p.m.3 views

Mozilla: Domain hijacking through appcache fallback (MFSA 2017-19)

A mechanism that uses AppCache to hijack a URL in a domain using fallback by serving the files from a sub-path on the domain. This has been addressed by requiring fallback files be inside the manifest directory. This vulnerability affects Thunderbird 52.3, Firefox ESR 52.3, and Firefox 55...

8.1CVSS7.2AI score0.00778EPSS
Exploits1References5
OSV
OSV
added 2017/08/10 12:0 a.m.0 views

UBUNTU-CVE-2017-7807

A mechanism that uses AppCache to hijack a URL in a domain using fallback by serving the files from a sub-path on the domain. This has been addressed by requiring fallback files be inside the manifest directory. This vulnerability affects Thunderbird 52.3, Firefox ESR 52.3, and Firefox 55...

8.1CVSS7.1AI score0.00778EPSS
Exploits1References4
UbuntuCve
UbuntuCve
added 2017/08/10 12:0 a.m.25 views

CVE-2017-7807

A mechanism that uses AppCache to hijack a URL in a domain using fallback by serving the files from a sub-path on the domain. This has been addressed by requiring fallback files be inside the manifest directory. This vulnerability affects Thunderbird 52.3, Firefox ESR 52.3, and Firefox 55...

8.1CVSS7AI score0.00778EPSS
Exploits1References3
RedhatCVE
RedhatCVE
added 2017/08/09 1:50 a.m.23 views

CVE-2017-7807

A mechanism that uses AppCache to hijack a URL in a domain using fallback by serving the files from a sub-path on the domain. This has been addressed by requiring fallback files be inside the manifest directory. This vulnerability affects Thunderbird 52.3, Firefox ESR 52.3, and Firefox 55...

8.1CVSS1.6AI score0.00778EPSS
Exploits1References2
Mozilla
Mozilla
added 2017/08/08 12:0 a.m.518 views

Security vulnerabilities fixed in Firefox ESR 52.3 — Mozilla

The Developer Tools feature suffers from a XUL injection vulnerability due to improper sanitization of the web page source code. In the worst case, this could allow arbitrary code execution when opening a malicious page with the style editor tool. A use-after-free vulnerability can occur in...

9.8CVSS9.7AI score0.0852EPSS
Exploits7References17Affected Software1
Tenable Nessus
Tenable Nessus
added 2015/12/18 12:0 a.m.46 views

openSUSE Security Update : Chromium (openSUSE-2015-912)

Chromium was updated to 47.0.2526.80 to fix security issues and bugs. The following vulnerabilities were fixed : - CVE-2015-6788: Type confusion in extensions - CVE-2015-6789: Use-after-free in Blink - CVE-2015-6790: Escaping issue in saved pages - CVE-2015-6791: Various fixes from internal audit...

10CVSS8.1AI score0.40209EPSS
Exploits6References30
CNVD
CNVD
added 2015/12/08 12:0 a.m.3 views

Google Chrome AppCache Memory Misreference Vulnerability

Google Chrome is a web browser developed by the American company Google Google. A memory misreference vulnerability exists in the AppCache implementation of Google Chrome versions prior to 47.0.2526.73. A remote attacker could exploit this vulnerability to cause a denial of service...

7.5CVSS8.9AI score0.01583EPSS
Exploits0References1
CNVD
CNVD
added 2015/12/08 12:0 a.m.1 views

Google Chrome AppCache Memory Misreference Vulnerability (CNVD-2015-07956)

Google Chrome is a web browser developed by the American company Google Google. A memory misreference vulnerability exists in the AppCache implementation of Google Chrome prior to version 47.0.2526.73. A remote attacker can exploit this vulnerability to cause a denial of service with renderer...

7.5CVSS8.8AI score0.01715EPSS
Exploits0References1
CNVD
CNVD
added 2015/12/08 12:0 a.m.2 views

Google Chrome memory misreference vulnerability (CNVD-2015-07955)

Google Chrome is a web browser developed by the American company Google Google. A memory misreference vulnerability exists in the content/browser/appcache/appcacheupdatejob.cc file in versions of Google Chrome prior to 47.0.2526.73. A remote attacker can exploit this vulnerability to execute...

10CVSS9.4AI score0.04707EPSS
Exploits0References1
NVD
NVD
added 2015/12/06 1:59 a.m.18 views

CVE-2015-6767

Use-after-free vulnerability in content/browser/appcache/appcachedispatcherhost.cc in the AppCache implementation in Google Chrome before 47.0.2526.73 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging incorrect pointer maintenance...

7.5CVSS9.7AI score0.01583EPSS
Exploits0References10
NVD
NVD
added 2015/12/06 1:59 a.m.12 views

CVE-2015-6766

Use-after-free vulnerability in the AppCache implementation in Google Chrome before 47.0.2526.73 allows remote attackers with renderer access to cause a denial of service or possibly have unspecified other impact by leveraging incorrect AppCacheUpdateJob behavior associated with duplicate cache...

7.5CVSS9.7AI score0.01715EPSS
Exploits0References10
NVD
NVD
added 2015/12/06 1:59 a.m.16 views

CVE-2015-6765

Use-after-free vulnerability in content/browser/appcache/appcacheupdatejob.cc in Google Chrome before 47.0.2526.73 allows remote attackers to execute arbitrary code or cause a denial of service by leveraging the mishandling of AppCache update jobs...

10CVSS9.6AI score0.04707EPSS
Exploits0References10
Prion
Prion
added 2015/12/06 1:59 a.m.19 views

Design/Logic Flaw

Use-after-free vulnerability in the AppCache implementation in Google Chrome before 47.0.2526.73 allows remote attackers with renderer access to cause a denial of service or possibly have unspecified other impact by leveraging incorrect AppCacheUpdateJob behavior associated with duplicate cache...

7.5CVSS7.5AI score0.01715EPSS
Exploits0References10Affected Software1
Prion
Prion
added 2015/12/06 1:59 a.m.19 views

Design/Logic Flaw

Use-after-free vulnerability in content/browser/appcache/appcachedispatcherhost.cc in the AppCache implementation in Google Chrome before 47.0.2526.73 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging incorrect pointer maintenance...

7.5CVSS7.5AI score0.01583EPSS
Exploits0References10Affected Software1
Rows per page
Query Builder