Denial Of Service (DoS)

Firefox is vulnerable to use-after-free vulnerability. This occurs when manipulating the DOM during the resize event of an image element. This could result in a potentially exploitable crash when the freed elements are accessed if these elements have been freed due to lack of strong references...

Denial Of Service (DoS)

Firefox, Firefox ESR and Thunderbird are vulnerable to denial of service attacks. A remote unauthenticated attacker could exploit the vulnerable ARIA Attribute Handler component to manipulate accessible rich internet applications ARIA attributes within the DOM, causing buffer overflows resulting ...

Denial Of Service (DoS)

Mozilla Thunderbird is vulnerable to use-after-free vulnerability. This occurs when manipulating arrays of Accessible Rich Internet Applications ARIA elements within containers through the DOM resulting in a potentially exploitable crash...

Memory Corruption

Firefox is vulnerable to memory corruption attacks. This occurs during DOM manipulations of accessibility tree through script, the DOM tree can become out sync with the accessibility tree, crashing the application which results in denial of service...

Use After Free

Thunderbird, Firefox ESR, and Firefox are vulnerable to use-after-free vulnerability. Changing styles when manipulating DOM elements may cause the application to crash resulting in denial of service conditions. The affected component is Style Change Handler...

Denial Of Service (DoS)

firefox is vulnerable to use-after-free vulnerability. Manipulating DOM subtrees in the Editor may result in potentially exploitable crash...

Use-After-Free (UAF)

Firefox, Firefox ESR and Thunderbird are vulnerable to use-after-free vulnerability. Errors in the handling of node adoption while manipulating DOM events and removing audio elements could possibly result in a system crash...

Use-After-Free

Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...

Arbitrary Code Execution

Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...

Use-After-Free

Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...

RUSTSEC-2019-0001 Uncontrolled recursion leads to abort in HTML serialization

Affected versions of this crate did use recursion for serialization of HTML DOM trees. This allows an attacker to cause abort due to stack overflow by providing a pathologically nested input. The flaw was corrected by serializing the DOM tree iteratively instead...

Uncontrolled recursion leads to abort in HTML serialization

Affected versions of this crate did use recursion for serialization of HTML DOM trees. This allows an attacker to cause abort due to stack overflow by providing a pathologically nested input. The flaw was corrected by serializing the DOM tree iteratively instead...

CVE-2019-9790

A use-after-free vulnerability can occur when a raw pointer to a DOM element on a page is obtained using JavaScript and the element is then removed while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 60.6, Firefox ESR 60.6, and Firefox 66...

DEBIAN-CVE-2019-9790

A use-after-free vulnerability can occur when a raw pointer to a DOM element on a page is obtained using JavaScript and the element is then removed while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 60.6, Firefox ESR 60.6, and Firefox 66...

CVE-2019-9790

A use-after-free vulnerability can occur when a raw pointer to a DOM element on a page is obtained using JavaScript and the element is then removed while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 60.6, Firefox ESR 60.6, and Firefox 66...

Design/Logic Flaw

A use-after-free vulnerability can occur when a raw pointer to a DOM element on a page is obtained using JavaScript and the element is then removed while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 60.6, Firefox ESR 60.6, and Firefox 66...

CVE-2019-9790

A use-after-free vulnerability can occur when a raw pointer to a DOM element on a page is obtained using JavaScript and the element is then removed while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 60.6, Firefox ESR 60.6, and Firefox 66...

The vulnerability of Firefox and Firefox ESR browsers, related to the use of memory after it is freed, allows a hacker to trigger a service failure.

The vulnerability of Firefox and Firefox ESR browsers relates to the use of a pointer to a DOM element obtained through JavaScript the element is removed during use. Exploiting this vulnerability can allow an attacker acting locally to cause a service failure...

ZEIT: Reflected DOM-Based XSS On Due Lack Filter On Parameter ?next

Summary: Hello I found that the parameter next lacks filtering, allowing the attacker to exploit this vulnerability to redirect users to a malicious site + The Attacker Can Exploit this bug to redirect the user to Malcious Site + The attacker can execute JavaScript code in the user browser Becaus...

Authentication flaw

Duo Network Gateway 1.2.9 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authenticatio...