7348 matches found
The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird, related to memory usage after deallocation, allows an attacker to access confidential data, compromise its integrity, and cause service failures.
The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird relates to the use of memory after deallocation during the manipulation of video elements. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, an...
The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird, related to a stack overflow error in nrappkit, allows an attacker to access confidential data, compromise its integrity, and cause service interruptions.
The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird is related to a stack overflow error in the nrappkit library. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...
The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird, related to the inclusion of functionality from an unreliable controlling domain, allows a perpetrator to compromise data integrity.
The vulnerabilities in web browsers Firefox, Firefox ESR, and the email client Thunderbird are related to the inclusion of features from an unreliable management domain. Exploiting these vulnerabilities allows a remote attacker to compromise data integrity...
The vulnerability of the nsDocShell destructors in Firefox ESR and Firefox web browsers, as well as in the Thunderbird email client, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the nsDocShell destructors in Firefox ESR and Firefox web browsers, as well as in the Thunderbird email client, is related to the use of memory areas after they are freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its...
Unspecified Vulnerability in Mozilla Firefox ESR (CNVD-2020-26233)
Mozilla Firefox ESR is an extended support release of Firefox web browser from the Mozilla Foundation in the United States. An unspecified vulnerability exists in Mozilla Firefox ESR. An attacker could exploit the vulnerability to forge URLs...
SUSE-SU-2020:14337-1 Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 68.6.1 ESR MFSA 2020-11 bsc1168630 CVE-2020-6819 bmo1620818 Use-after-free while running the nsDocShell destructor CVE-2020-6820 bmo1626728 Use-after-free when handling a ReadableStream...
Mozilla Firefox and Firefox ESR Memory Misreference Vulnerability (CNVD-2020-21803)
Mozilla Firefox is a free, open-source browser for Windows, Linux, and MacOSX. firefox ESR refers to the Extended Support Release of Firefox, which was created by mozilla specifically for organizations that can't or don't want to upgrade their browser every six weeks. Mozilla Firefox and Firefox...
Mozilla Firefox and Firefox ESR Memory Misreference Vulnerability (CNVD-2020-21802)
Mozilla Firefox is a free, open-source browser for Windows, Linux, and MacOSX. firefox ESR refers to the Extended Support Release of Firefox, which was created by mozilla specifically for organizations that can't or don't want to upgrade their browser every six weeks. Mozilla Firefox and Firefox...
UBUNTU-CVE-2020-6820
Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild abusing this flaw. This vulnerability affects Thunderbird 68.7.0, Firefox 74.0.1, and Firefox ESR 68.6.1...
DEBIAN-CVE-2020-6807
When a device was changed while a stream was about to be destroyed, the stream-reinit task may have been executed after the stream was destroyed, causing a use-after-free and a potentially exploitable crash. This vulnerability affects Thunderbird 68.6, Firefox 74, Firefox ESR68.6, and Firefox ESR...
Security Bulletin: IBM Integration Bus affected by Apache Tomcat vulnerability CVE-2018-8034
Summary IBM Integration Bus ships Apache Tomcat which is susceptible to vulnerabilities which were reported and have been addressed Vulnerability Details CVEID: CVE-2018-8034 DESCRIPTION: Apache Tomcat could allow a remote attacker to bypass security restrictions, caused by a missing host name...
March 2020 -- What's New in Security, Part 1
Welcome to Akamai's March 2020 Release! This release offers a week of product updates, with each day highlighting continued innovations across a different area of Akamai's product portfolio: Monday and Tuesday feature two days of security updates. There's a lot going on in Akamai's security...
Mozilla: Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6
The Mozilla Foundation Security Advisory describes this flaw as: Mozilla developers and community members reported memory safety bugs present in Firefox 73 and Firefox ESR 68.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have...
Mozilla: Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6
The Mozilla Foundation Security Advisory describes this flaw as: Mozilla developers and community members reported memory safety bugs present in Firefox 73 and Firefox ESR 68.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have...
Mozilla: Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6
The Mozilla Foundation Security Advisory describes this flaw as: Mozilla developers and community members reported memory safety bugs present in Firefox 73 and Firefox ESR 68.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have...
Mozilla: Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6
The Mozilla Foundation Security Advisory describes this flaw as: Mozilla developers and community members reported memory safety bugs present in Firefox 73 and Firefox ESR 68.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have...
Mozilla Firefox and Firefox ESR Memory Security Error Vulnerability
Mozilla Firefox and Mozilla Firefox ESR are both products of the Mozilla Foundation in the U.S. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. Mozilla Firefox and Firefox ESR contain security vulnerabilities. An attacker ca...
Mozilla Firefox/Firefox ESR Command Injection Vulnerability
Mozilla Firefox is a free, open-source browser for Windows, Linux, and MacOSX. firefox ESR refers to the Extended Support Release of Firefox, which was created by mozilla specifically for organizations that can't or don't want to upgrade their browser every six weeks. A command injection...
CVE-2020-9044
XXE vulnerability exists in the Metasys family of product Web Services which has the potential to facilitate DoS attacks or harvesting of ASCII server files. This affects Johnson Controls' Metasys Application and Data Server ADS, ADS-Lite versions 10.1 and prior; Metasys Extended Application and...
