784 matches found
The vulnerability of the Skia library in browsers such as Firefox ESR, Firefox, and the email client Thunderbird allows a hacker to execute arbitrary code.
The vulnerability of the Skia library used by Firefox ESR, Firefox, and the Thunderbird email client is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability in the Firefox ESR web console and JavaScript debugger allows a malicious individual to gain unauthorized access to protected information.
The vulnerability in the web console and the JavaScript debugger of the Firefox ESR browser is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
UBUNTU-CVE-2019-11740
Mozilla developers and community members reported memory safety bugs present in Firefox 68, Firefox ESR 68, and Firefox 60.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This...
The vulnerability of the document.domain component in browsers such as Firefox ESR, Firefox, and the Thunderbird email client allows a hacker to perform a cross-site scripting attack.
The vulnerability of the document.domain component in browsers such as Firefox ESR, Firefox, and the Thunderbird email client exists due to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to perform cross-site scripting attacks...
Mozilla Firefox Cross-Site Scripting Vulnerability (CNVD-2019-29581)
Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A cross-site scripting vulnerability exists in Mozilla Firefox versions prior to 68. The vulnerability stems from a lack of proper validation of client-side data by the web application. An attacker can...
Mozilla Firefox and Firefox ESR Sandbox Bypass Vulnerability
Mozilla Firefox and Mozilla Firefox ESR are both products of the Mozilla Foundation in the U.S. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. A security vulnerability exists in Mozilla Firefox versions prior to 68 and...
Mozilla: Cross-origin POST requests can be made with NPAPI plugins by following 308 redirects
POST requests made by NPAPI plugins, such as Flash, that receive a status 308 redirect response can bypass CORS requirements. This can allow an attacker to perform Cross-Site Request Forgery CSRF attacks. This vulnerability affects Firefox ESR 60.8, Firefox 68, and Thunderbird 60.8...
Mozilla: Caret character improperly escaped in origins
A vulnerability exists where the caret "^" character is improperly escaped constructing some URIs due to it being used as a separator, allowing for possible spoofing of origin attributes. This vulnerability affects Firefox ESR 60.8, Firefox 68, and Thunderbird 60.8...
Mozilla: Compartment mismatch with fetch API
A vulnerability where a JavaScript compartment mismatch can occur while working with the fetch API, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird 60.7, Firefox 67, and Firefox ESR 60.7...
Mozilla Firefox and Mozilla Firefox ESR Resource Management Error Vulnerability
Mozilla Firefox and Mozilla Firefox ESR are both products of the Mozilla Foundation in the U.S. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. A resource management error vulnerability exists in Mozilla Firefox versions pri...
Mozilla Firefox and Mozilla Firefox ESR Memory Misreference Vulnerability
Mozilla Firefox and Mozilla Firefox ESR are both products of the Mozilla Foundation in the U.S. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. A security vulnerability exists in the chrome event handler in Mozilla Firefox...
Mozilla Firefox and Mozilla Firefox ESR XMLHttpRequest Memory Misreference Vulnerability
Mozilla Firefox and Mozilla Firefox ESR are both products of the Mozilla Foundation in the U.S. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. A security vulnerability exists in Mozilla Firefox versions prior to 67 and...
Mozilla Firefox and Mozilla Firefox ESR Memory Leak Vulnerability
Mozilla Firefox and Mozilla Firefox ESR are both products of the Mozilla Foundation in the U.S. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. A security vulnerability exists in the Windows sandbox in Mozilla Firefox ESR...
Mozilla Firefox and Mozilla Firefox ESR Type Obfuscation Vulnerability
Mozilla Firefox and Mozilla Firefox ESR are both products of the Mozilla Foundation in the U.S. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. A security vulnerability exists in Mozilla Firefox versions prior to 67 and...
Mozilla Firefox and Mozilla Firefox ESR Memory Corruption Vulnerability
Mozilla Firefox and Mozilla Firefox ESR are both products of the Mozilla Foundation in the U.S. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. A security vulnerability exists in Mozilla Firefox version 66 and Firefox ESR...
The vulnerability of the Skia library used by web browsers Firefox, Firefox ESR, and the email processing program Thunderbird, related to integer overflow, allows attackers to cause service interruptions.
The vulnerability of the Skia library used in web browsers such as Firefox, Firefox ESR, and the email processing program Thunderbird is related to a numerical overflow vulnerability. Exploiting this vulnerability can allow an attacker to cause service interruptions...
The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird, related to memory usage after deallocation, allows an attacker to execute arbitrary code or cause a service failure.
The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird relates to the use of memory after deallocation. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure...
Vulnerability of Firefox web browsers, Firefox ESR, and Thunderbird email client, related to a numerical overflow condition, allowing an attacker to perform write-offs beyond the buffer in memory.
The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird is related to a numerical overflow vulnerability. Exploiting this vulnerability allows an attacker to perform write-offs beyond the buffer in memory...
The vulnerability of the Skia graphic library in web browsers such as Firefox, Firefox ESR, and the email client Thunderbird allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the Skia graphic library in web browsers such as Firefox, Firefox ESR, and the email client Thunderbird is related to buffer overflow in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a service failure...