Mozilla Firefox and Firefox ESR integer overflow vulnerability (CNVD-2018-25865)

Mozilla Firefox and Firefox ESR are both browser products developed by the Mozilla Foundation in the U.S. Firefox is an open source web browser; Firefox ESR is an extended support version of Firefox. A security vulnerability exists in Mozilla Firefox version 63 and Firefox ESR version 60.3. An...

Mozilla Firefox and Firefox ESR Memory Corruption Vulnerability (CNVD-2018-25863)

Mozilla Firefox and Firefox ESR are both browser products developed by the Mozilla Foundation in the U.S. Firefox is an open source web browser; Firefox ESR is an extended support version of Firefox. A security vulnerability exists in Mozilla Firefox version 63 and Firefox ESR version 60.3. An...

The vulnerability in the Firefox ESR web browser and Thunderbird email client, related to a potential integer overflow, allows an attacker to execute arbitrary code.

The vulnerability in the Firefox ESR web browser and Thunderbird email client is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

Mail.ru: XSS

Reflected XSS via URI in allods.mail.ru. allods.mail.ru belongs to extended scope...

(RHSA-2018:3805) Low: Red Hat Enterprise Linux 6.7 Extended Update Support One-Month Retirement Notice

In accordance with the Red Hat Enterprise Linux Errata Support Policy, Extended Update Support EUS for Red Hat Enterprise Linux 6.7 will be retired as of December 31, 2018, and active support will no longer be provided. Accordingly, Red Hat will no longer provide updated packages, including...

The vulnerability of Firefox ESR browsers relates to the execution of operations beyond the buffer in memory, which allows an attacker to trigger a service failure or execute arbitrary code.

The vulnerability of Firefox ESR is related to a flaw that causes reading beyond the allocated memory buffer during graphic operations. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...

CVE-2018-19478

In Artifex Ghostscript before 9.26, a carefully crafted PDF file can trigger an extremely long running computation when parsing the file. Mitigation Please refer to the "Mitigation" section of CVE-2018-16509 :...

KB5071812: Servicing stack update for Windows Server 2008 SP2: November 11, 2025

None None...

The vulnerability of the IndexedDB component in Firefox web browsers, Firefox ESR, and the Thunderbird email client allows a hacker to execute arbitrary code or cause the application to crash.

The vulnerability of IndexedDB in Firefox web browsers and Thunderbird email client relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause the application to crash remotely...

The vulnerability in Firefox web browsers, Firefox ESR, and the Thunderbird email client, related to the use of memory after it is freed, allows an attacker to execute arbitrary code or cause the application to crash.

The vulnerability in Firefox web browsers, Firefox ESR, and the Thunderbird email client is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause the application to crash remotely...

Mozilla: Integer overflow during Unicode conversion while loading JavaScript

A potential vulnerability was found in 32-bit builds where an integer overflow during the conversion of scripts to an internal UTF-16 representation could result in allocating a buffer too small for the conversion. This leads to a possible out-of-bounds write. Note: 64-bit builds are not vulnerab...

Mozilla: Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3

Mozilla developers and community members reported memory safety bugs present in Firefox 62 and Firefox ESR 60.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects...

glusterfs: Unsanitized file names in debug/io-stats translator can allow remote attackers to execute arbitrary code

It was found that glusterfs server does not properly sanitize file paths in the "trusted.io-stats-dump" extended attribute which is used by the "debug/io-stats" translator. An attacker can use this flaw to create files and execute arbitrary code. To exploit this, the attacker would require...

glusterfs: Unlimited file creation via "GF_XATTR_IOSTATS_DUMP_KEY" xattr allows for denial of service

A flaw was found in glusterfs server which allowed clients to create io-stats dumps on server node. A remote, authenticated attacker could use this flaw to create io-stats dump on a server without any limitation and utilizing all available inodes resulting in remote denial of service...

CVE-2018-18695

M2SOFT Report Designer Viewer 5.0 allows a Buffer Overflow with Extended Instruction Pointer EIP control via a crafted MRD file...

DEBIAN-CVE-2018-14660

A flaw was found in glusterfs server through versions 4.1.4 and 3.1.2 which allowed repeated usage of GFMETALOCKKEY xattr. A remote, authenticated attacker could use this flaw to create multiple locks for single inode by using setxattr repetitively resulting in memory exhaustion of glusterfs serv...

PT-2018-3936 · Red Hat +1 · Glusterfs +1

Name of the Vulnerable Software and Affected Versions: glusterfs versions 3.1.2 through 4.1.4 Description: A flaw in the glusterfs server allows repeated usage of the GF META LOCK KEY xattr, enabling a remote, authenticated attacker to create multiple locks for a single inode by using setxattr...

glusterfs: Buffer overflow in "features/locks" translator allows for denial of service

A buffer overflow was found in strncpy of the plgetxattr function. An authenticated attacker could remotely overflow the buffer by sending a buffer of larger length than the size of the key resulting in remote denial of service...

glusterfs: Repeat use of "GF_META_LOCK_KEY" xattr allows for memory exhaustion

A flaw was found in glusterfs server which allowed repeated usage of GFMETALOCKKEY xattr. A remote, authenticated attacker could use this flaw to create multiple locks for single inode by using setxattr repetitively resulting in memory exhaustion of glusterfs server node...

glusterfs: Unlimited file creation via "GF_XATTR_IOSTATS_DUMP_KEY" xattr allows for denial of service

A flaw was found in glusterfs server which allowed clients to create io-stats dumps on server node. A remote, authenticated attacker could use this flaw to create io-stats dump on a server without any limitation and utilizing all available inodes resulting in remote denial of service...