Lucene search
+L

322 matches found

AlmaLinux
AlmaLinux
added 2024/10/02 12:00 a.m.27 views

Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox: 115.16/128.3 ESR firefox: thunderbird: Memory safety bugs fixed in Firefox 131, Firefox ESR 115.16, Firefox ESR 128.3, Thunderbird 131, and Thunderbird 128.3...

9.8CVSS7.9AI score0.00739EPSS
SaveExploits0References12
RedhatCVE
RedhatCVE
added 2024/10/01 7:10 p.m.18 views

CVE-2024-9392

The Mozilla Foundation's Security Advisory: A compromised content process could allow for the arbitrary loading of cross-origin pages...

7.6CVSS6.9AI score0.00535EPSS
SaveExploits0References7
NVD
NVD
added 2024/10/01 4:15 p.m.25 views

CVE-2024-9392

A compromised content process could have allowed for the arbitrary loading of cross-origin pages. This vulnerability affects Firefox 131, Firefox ESR 128.3, Firefox ESR 115.16, Thunderbird 128.3, and Thunderbird 131...

9.8CVSS0.00535EPSS
SaveExploits0References9
OSV
OSV
added 2024/10/01 4:15 p.m.4 views

DEBIAN-CVE-2024-9392

A compromised content process could have allowed for the arbitrary loading of cross-origin pages. This vulnerability affects Firefox 131, Firefox ESR 128.3, Firefox ESR 115.16, Thunderbird 128.3, and Thunderbird 131...

9.8CVSS8.4AI score0.00535EPSS
SaveExploits0References1
CVE
CVE
added 2024/10/01 3:13 p.m.354 views

CVE-2024-9392

CVE-2024-9392 impacts Firefox and Thunderbird before version 131 (and ESR before 128.3/115.16) where a compromised content process could bypass site isolation and load cross-origin content. This could enable cross-origin access to PDF/JSON via multipart responses and, in some cases, broader arbit...

9.8CVSS6.3AI score0.00535EPSS
SaveExploits0References9Affected Software2
Debian CVE
Debian CVE
added 2024/10/01 3:13 p.m.22 views

CVE-2024-9392

A compromised content process could have allowed for the arbitrary loading of cross-origin pages. This vulnerability affects Firefox 131, Firefox ESR 128.3, Firefox ESR 115.16, Thunderbird 128.3, and Thunderbird 131...

9.8CVSS8.4AI score0.00535EPSS
SaveExploits0
CNNVD
CNNVD
added 2024/10/01 12:00 a.m.7 views

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox that stems from a compromised content process that could allow arbitrary loading of cross-origin pages. No details of the vulnerability are provided a...

9.8CVSS8.8AI score0.00535EPSS
SaveExploits0References10
Veracode
Veracode
added 2024/02/03 3:03 a.m.25 views

Improper Handling Of Parameters

firefox is vulnerable to Improper Handling Of Parameters. The vulnerability is due to a compromised content process, which could update the document URI, enabling an attacker to set an arbitrary URI in the address bar or history...

4.3CVSS6.6AI score0.00368EPSS
SaveExploits0References3Affected Software1
SUSE CVE
SUSE CVE
added 2024/01/28 2:42 a.m.6 views

SUSE CVE-2024-0748

A compromised content process could have updated the document URI. This could have allowed an attacker to set an arbitrary URI in the address bar or history. This vulnerability affects Firefox 122...

4.3CVSS8.5AI score0.00368EPSS
SaveExploits0References4
CNVD
CNVD
added 2024/01/26 12:00 a.m.65 views

Mozilla Firefox Security Bypass Vulnerability (CNVD-2024-10442)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from a security bypass vulnerability caused by an error related to a corrupted content process. An attacker can exploit the vulnerability to modify document URIs...

4.3CVSS6.9AI score0.00368EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2024/01/25 6:11 p.m.30 views

CVE-2024-0748

A vulnerability was found in Firefox due to a compromised content process updating the document URI. This flaw allows an attacker to set an arbitrary URI in the address bar or history...

4.3CVSS6.7AI score0.00368EPSS
SaveExploits0References5
OSV
OSV
added 2024/01/23 2:15 p.m.6 views

CVE-2024-0748

A compromised content process could have updated the document URI. This could have allowed an attacker to set an arbitrary URI in the address bar or history. This vulnerability affects Firefox 122...

4.3CVSS7.4AI score0.00368EPSS
SaveExploits0References2
NVD
NVD
added 2024/01/23 2:15 p.m.24 views

CVE-2024-0748

A compromised content process could have updated the document URI. This could have allowed an attacker to set an arbitrary URI in the address bar or history. This vulnerability affects Firefox 122...

4.3CVSS5.6AI score0.00368EPSS
SaveExploits0References2
OSV
OSV
added 2024/01/23 2:15 p.m.7 views

UBUNTU-CVE-2024-0748

A compromised content process could have updated the document URI. This could have allowed an attacker to set an arbitrary URI in the address bar or history. This vulnerability affects Firefox 122...

4.3CVSS7.4AI score0.00368EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2024/01/23 1:48 p.m.37 views

CVE-2024-0748

A compromised content process could have updated the document URI. This could have allowed an attacker to set an arbitrary URI in the address bar or history. This vulnerability affects Firefox 122...

5.8AI score0.00368EPSS
SaveExploits0References2
CVE
CVE
added 2024/01/23 1:48 p.m.145 views

CVE-2024-0748

CVE-2024-0748 concerns Mozilla Firefox where a compromised content process could update the document URI, enabling an attacker to set an arbitrary URI in the address bar or history. The issue affects Firefox versions earlier than 122 and is addressed by Mozilla in MFSA2024-01, which notes fixes i...

4.3CVSS5.3AI score0.00368EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2024/01/23 12:00 a.m.9 views

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from a security bypass vulnerability caused by an error related to a corrupted content process. An attacker can exploit the vulnerability to modify document URIs...

4.3CVSS8.7AI score0.00368EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2024/01/23 12:00 a.m.29 views

CVE-2024-0748

A compromised content process could have updated the document URI. This could have allowed an attacker to set an arbitrary URI in the address bar or history. This vulnerability affects Firefox 122...

4.3CVSS6.4AI score0.00368EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2024/01/02 9:03 a.m.9 views

Mozilla: Potential sandbox escape due to <code>VideoBridge</code> lack of texture validation

The Mozilla Foundation Security Advisory describes this flaw as: The VideoBridge allowed any content process to use textures produced by remote decoders. This could be abused to escape the sandbox...

6.5CVSS7.3AI score0.00958EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2024/01/02 8:32 a.m.9 views

Mozilla: Potential sandbox escape due to <code>VideoBridge</code> lack of texture validation

The Mozilla Foundation Security Advisory describes this flaw as: The VideoBridge allowed any content process to use textures produced by remote decoders. This could be abused to escape the sandbox...

6.5CVSS7.3AI score0.00958EPSS
SaveExploits0References6
Rows per page
Query Builder