Lucene search
+L

2775 matches found

BDU FSTEC
BDU FSTEC
•added 2024/09/13 12:00 a.m.•19 views

The vulnerability in Firefox ESR and Firefox web browsers relates to the insufficient elimination of certain elements in the request, allowing an attacker to access confidential data.

The vulnerability in web browsers Firefox ESR and Firefox is related to insufficient elimination of special elements in requests. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...

5.3CVSS5.9AI score0.01481EPSS
SaveExploits0References10Affected Software4
Microsoft KB
Microsoft KB
•added 2024/09/10 7:00 a.m.•69 views

September 10, 2024—KB5043087 (Security-only update)

None None...

9.8CVSS6.8AI score0.54486EPSS
SaveExploits3
Tenable Nessus
Tenable Nessus
•added 2024/09/07 12:00 a.m.•26 views

SUSE SLED15: MozillaFirefox / MozillaFirefox-branding-upstream / etc (SUSE-SU-2024:3157-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3157-1 advisory. - Update to Firefox Extended Support Release 128.2.0 ESR bsc1229821 - CVE-2024-8381: Type...

9.8CVSS6.6AI score0.04395EPSS
SaveExploits1References16
OpenVAS
OpenVAS
•added 2024/09/07 12:00 a.m.•41 views

openSUSE Security Advisory (SUSE-SU-2024:3157-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.7AI score0.04395EPSS
SaveExploits1References4
OSV
OSV
•added 2024/09/06 11:07 a.m.•14 views

OESA-2024-2120 mozjs78 security update

SpiderMonkey is the code-name for Mozilla Firefox's C++ implementation of JavaScript. It is intended to be embedded in other applications that provide host environments for JavaScript. Security Fixes: A mishandled security check when creating a WebSocket in a WebWorker caused the Content Security...

6.5CVSS8.5AI score0.00601EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2024/09/05 3:00 a.m.•12 views

SUSE CVE-2024-8385

A difference in the handling of StructFields and ArrayTypes in WASM could be used to trigger an exploitable type confusion vulnerability. This vulnerability affects Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2...

7.3CVSS6.4AI score0.00575EPSS
SaveExploits0References13
SUSE CVE
SUSE CVE
•added 2024/09/05 3:00 a.m.•12 views

SUSE CVE-2024-8386

If a site had been granted the permission to open popup windows, it could cause Select elements to appear on top of another site to perform a spoofing attack. This vulnerability affects Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2...

4.3CVSS6.2AI score0.00388EPSS
SaveExploits0References13
BDU FSTEC
BDU FSTEC
•added 2024/09/05 12:00 a.m.•7 views

The vulnerability of Firefox ESR and Firefox browsers, as well as the Thunderbird email client, stems from a type error during the search for the property name in the “with” block. This allows an attacker to execute arbitrary code.

The vulnerability of Firefox ESR and Firefox exists due to a type error in searching for property names within the “with” block. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

10CVSS8.2AI score0.04395EPSS
SaveExploits1References22Affected Software9
BDU FSTEC
BDU FSTEC
•added 2024/09/04 12:00 a.m.•13 views

The vulnerability in Mozilla Firefox, Mozilla Firefox ESR, and the email client Mozilla Thunderbird arises from copying buffers without checking the size of the input data. This allows an attacker to execute arbitrary code.

The vulnerabilities of Mozilla Firefox, Mozilla Firefox ESR, and the email client Mozilla Thunderbird involve copying buffers without checking the size of the input data. Exploiting these vulnerabilities allows a remote attacker to execute arbitrary code...

7.6CVSS7.3AI score0.0054EPSS
SaveExploits0References13Affected Software7
BDU FSTEC
BDU FSTEC
•added 2024/09/04 12:00 a.m.•11 views

The vulnerability in Mozilla Firefox, Mozilla Firefox ESR, and the Mozilla Thunderbird email client relates to improper handling of permissions, allowing attackers to increase their privileges.

The vulnerabilities of Mozilla Firefox, Mozilla Firefox ESR, and the email client Mozilla Thunderbird are related to a known race condition. Exploiting these vulnerabilities can allow a malicious actor to gain increased privileges remotely...

6.4CVSS6.5AI score0.0039EPSS
SaveExploits0References13Affected Software7
OSV
OSV
•added 2024/09/03 1:15 p.m.•9 views

DEBIAN-CVE-2024-8386

If a site had been granted the permission to open popup windows, it could cause Select elements to appear on top of another site to perform a spoofing attack. This vulnerability affects Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2...

6.1CVSS7.2AI score0.00388EPSS
SaveExploits0References1
Chainguard
Chainguard
•added 2024/09/03 1:15 p.m.•13 views

CVE-2024-8383 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

7.5CVSS7.8AI score0.00637EPSS
SaveExploits0
Chainguard
Chainguard
•added 2024/09/03 1:15 p.m.•12 views

CVE-2024-8386 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

6.1CVSS7AI score0.00388EPSS
SaveExploits0
CNNVD
CNNVD
•added 2024/09/03 12:00 a.m.•6 views

Mozilla Firefox和Mozilla Firefox ESR 安全漏洞

Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox the web browser.Mozilla Thunderbird is a suite of email client software separate from the Mozilla Application Suite. An information disclosure vulnerability exists in several Mozilla...

8.8CVSS8.2AI score0.00595EPSS
SaveExploits0References9
CNNVD
CNNVD
•added 2024/09/03 12:00 a.m.•5 views

Mozilla Firefox和Mozilla Firefox ESR 安全漏洞

Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. A security bypass vulnerability exists in Mozilla Firefox and Firefox ESR, which can be exploited by attackers to bypass security restrictions...

7.5CVSS8.7AI score0.00637EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
•added 2024/08/30 12:00 a.m.•11 views

The vulnerability in the WebAssembly component of Mozilla Firefox, Mozilla Firefox ESR, and the Mozilla Thunderbird email client allows a hacker to execute arbitrary code.

The vulnerability in the WebAssembly component of Mozilla Firefox, Mozilla Firefox ESR, and the Mozilla Thunderbird email client allows a hacker to execute arbitrary code...

10CVSS7.4AI score0.00616EPSS
SaveExploits0References27Affected Software8
BDU FSTEC
BDU FSTEC
•added 2024/08/26 12:00 a.m.•16 views

The vulnerability of the ANGLE library in Mozilla Firefox, Firefox ESR, and the Thunderbird email client allows attackers to disclose protected information.

The vulnerability of the ANGLE library in Mozilla Firefox, Firefox ESR, and the Thunderbird email client is related to the use of an uninitialized resource. Exploiting this vulnerability could allow an attacker to disclose protected information...

7.8CVSS7AI score0.0058EPSS
SaveExploits0References27Affected Software11
BDU FSTEC
BDU FSTEC
•added 2024/08/26 12:00 a.m.•13 views

The vulnerability of the NSS encryption component in Mozilla Firefox and Firefox ESR browsers allows attackers to gain access to protected information.

The vulnerability of the CKMCHACHA20 font set in Mozilla Firefox and Firefox ESR browsers is related to the possibility of buffer overflow in dynamic memory. Exploiting this vulnerability can allow a malicious actor to gain access to protected information through a call to PK11Encrypt...

7.8CVSS6.7AI score0.00437EPSS
SaveExploits0References17Affected Software6
BDU FSTEC
BDU FSTEC
•added 2024/08/19 12:00 a.m.•28 views

The vulnerability in the WebAssembly component of Mozilla Firefox, Mozilla Firefox ESR, and the Mozilla Thunderbird email client allows a hacker to execute arbitrary code.

The vulnerability of the WebAssembly component in Mozilla Firefox, Mozilla Firefox ESR, and the Mozilla Thunderbird email client is related to type mixing errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.8CVSS7.5AI score0.00638EPSS
SaveExploits0References15Affected Software6
Chainguard
Chainguard
•added 2024/08/06 1:15 p.m.•22 views

CVE-2024-7522 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

9.1CVSS7.4AI score0.00634EPSS
SaveExploits0
Rows per page
Query Builder