Lucene search
+L

10594 matches found

OSV
OSV
added 2021/10/12 9:06 a.m.9 views

OPENSUSE-SU-2021:3338-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 kernel was updated. The following security bugs were fixed: - CVE-2020-3702: Fixed a bug which could be triggered with specifically timed and handcrafted traffic and cause internal errors in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a...

7.9CVSS7.4AI score0.01736EPSS
SaveExploits2References67
Tenable Nessus
Tenable Nessus
added 2021/10/12 12:00 a.m.41 views

RHEL 8 : firefox (RHSA-2021:3756)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:3756 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...

9.8CVSS7.9AI score0.01923EPSS
SaveExploits0References14
Tenable Nessus
Tenable Nessus
added 2021/10/12 12:00 a.m.36 views

RHEL 8 : firefox (RHSA-2021:3757)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:3757 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...

9.8CVSS7.9AI score0.01923EPSS
SaveExploits0References14
OPENSUSE Linux
OPENSUSE Linux
added 2021/10/12 12:00 a.m.62 views

Security update for the Linux Kernel (important)

openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2021:3338-1 Rating: important References: 1065729 1148868 1152489 1154353 1159886 1167773 1170774 1171688 1173746 1174003 1176447 1176940 1177028 1178134 1184439 1184804 1185302 1185550 1185677 1185726...

7.5CVSS7AI score0.01736EPSS
SaveExploits2References60
Tenable Nessus
Tenable Nessus
added 2021/10/12 12:00 a.m.43 views

SUSE SLES15: MozillaFirefox / MozillaFirefox-branding-SLE / MozillaFirefox-devel / etc (SUSE-SU-2021:3331-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3331-1 advisory. This update contains the Firefox Extended Support Release 91.2.0 ESR. Firefox Extended Support Release 91.2.0 ESR Fixed: Various...

9.8CVSS6.8AI score0.01923EPSS
SaveExploits7References47
Tenable Nessus
Tenable Nessus
added 2021/10/12 12:00 a.m.60 views

RHEL 8 : firefox (RHSA-2021:3755)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:3755 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...

9.8CVSS7.9AI score0.01923EPSS
SaveExploits0References14
RedHat Linux
RedHat Linux
added 2021/10/11 8:22 a.m.10 views

Mozilla: Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2

Mozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox 93, Thunderbi...

8.8CVSS7.5AI score0.01048EPSS
SaveExploits0References4
AlmaLinux
AlmaLinux
added 2021/10/11 7:50 a.m.35 views

Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 91.2.0 ESR. Security Fixes: Mozilla: Use-after-free in MessageTask CVE-2021-38496 Mozilla: Memory safety bugs fixed in Firefox 93, Firefox ESR...

6.8CVSS1.3AI score0.01923EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2021/10/11 12:00 a.m.40 views

Debian DLA-2782-1 : firefox-esr - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2782 advisory. Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code. For Debian 9 stretc...

8.8CVSS8.7AI score0.01645EPSS
SaveExploits0References7
Kitploit
Kitploit
added 2021/10/10 8:30 p.m.124 views

FUSE - A Penetration Testing Tool For Finding File Upload Bugs

FUSE is a penetration testing system designed to identify Unrestricted Executable File Upload UEFU vulnerabilities. The details of the testing strategy is in our paper, "FUSE: Finding File Upload Bugs via Penetration Testing", which appeared in NDSS 2020. To see how to configure and execute FUSE,...

8.8CVSS5.7AI score0.64261EPSS
SaveExploits18References8
Veracode
Veracode
added 2021/10/06 3:12 a.m.42 views

Remote Code Execution (RCE)

mozjs78 is vulnerable to remote code execution. The vulnerability exists due to a memory safety bugs within the browser engine...

8.8CVSS3.5AI score0.01273EPSS
SaveExploits0References11Affected Software8
Mozilla
Mozilla
added 2021/10/05 12:00 a.m.56 views

Security Vulnerabilities fixed in Firefox ESR 78.15 — Mozilla

During operations on MessageTasks, a task may have been removed while it was still scheduled, resulting in memory corruption and a potentially exploitable crash. Mozilla developers and community members Andreas Pehrson and Christian Holler reported memory safety bugs present in Firefox 92 and...

8.8CVSS2.1AI score0.01645EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2021/10/05 12:00 a.m.34 views

Mozilla Firefox ESR < 78.15

The version of Firefox ESR installed on the remote Windows host is prior to 78.15. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2021-44 advisory. - Mozilla developers and community members Andreas Pehrson and Christian Holler reported memory safety bugs present ...

8.8CVSS8.7AI score0.01645EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2021/10/05 12:00 a.m.29 views

SUSE: Security Advisory (SUSE-SU-2021:3282-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8AI score0.13427EPSS
SaveExploits1References7
OSV
OSV
added 2021/10/04 10:05 a.m.14 views

OPENSUSE-SU-2021:1330-1 Security update for opera

This update for opera fixes the following issues: Opera was updated to version 79.0.4143.50 - CHR-8571 Update chromium on desktop-stable-93-4143 to 93.0.4577.82 - DNA-94104 ContinueShoppingOnEbayBrowserTest.ShouldDisplayOffers TilesStartingWithMostActiveOnes fails - DNA-94894 Rich Hint Agent API...

9.6CVSS7.1AI score0.6319EPSS
SaveExploits4References10
Openbugbounty
Openbugbounty
added 2021/10/03 9:33 a.m.38 views

All Vulnerabilities for cbinsights.com Patched via Open Bug Bounty

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| cbinsights.com ---|--- Open Bug Bounty...

6.3AI score
SaveExploits0
OSV
OSV
added 2021/10/01 4:15 p.m.18 views

CVE-2021-40924

Cross-site scripting XSS vulnerability in install/index.php in bugs 1.8 and below version allows remote attackers to inject arbitrary web script or HTML via the firstname parameter...

6.1CVSS6AI score
SaveExploits0References2
OSV
OSV
added 2021/10/01 4:15 p.m.14 views

CVE-2021-40922

Cross-site scripting XSS vulnerability in install/index.php in bugs 1.8 and below version allows remote attackers to inject arbitrary web script or HTML via the lastname parameter...

6.1CVSS6AI score
SaveExploits0References2
NVD
NVD
added 2021/10/01 4:15 p.m.26 views

CVE-2021-40923

Cross-site scripting XSS vulnerability in install/index.php in bugs 1.8 and below version allows remote attackers to inject arbitrary web script or HTML via the email parameter...

6.1CVSS0.00845EPSS
SaveExploits1References2
NVD
NVD
added 2021/10/01 4:15 p.m.24 views

CVE-2021-40922

Cross-site scripting XSS vulnerability in install/index.php in bugs 1.8 and below version allows remote attackers to inject arbitrary web script or HTML via the lastname parameter...

6.1CVSS0.00845EPSS
SaveExploits1References2
Rows per page
Query Builder