694 matches found
Linux Distros Unpatched Vulnerability : CVE-2024-1555
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When opening a website using the firefox:// protocol handler, SameSite cookies were not properly respected. This vulnerability affects Firefox 123. CVE-2024-155...
Linux Distros Unpatched Vulnerability : CVE-2019-11751
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Logging-related command line parameters are not properly sanitized when Firefox is launched by another program, such as when a user clicks on malicious links in...
Linux Distros Unpatched Vulnerability : CVE-2022-46879
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mozilla developers and community members Lukas Bernhard, Gabriele Svelto, Randell Jesup, and the Mozilla Fuzzing Team reported memory safety bugs present in...
Linux Distros Unpatched Vulnerability : CVE-2019-11729
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values being improperly sanitized before being copied into memory and used. This...
Linux Distros Unpatched Vulnerability : CVE-2024-4769
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When importing resources using Web Workers, error messages would distinguish the difference between application/javascript responses and non-script responses...
Linux Distros Unpatched Vulnerability : CVE-2025-3608
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A race condition existed in nsHttpTransaction that could have been exploited to cause memory corruption, potentially leading to an exploitable condition. This...
Linux Distros Unpatched Vulnerability : CVE-2019-9799
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient bounds checking of data during inter-process communication might allow a compromised content process to be able to read memory from the parent...
Linux Distros Unpatched Vulnerability : CVE-2022-46884
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A potential use-after-free vulnerability existed in SVG Images if the Refresh Driver was destroyed at an inopportune time. This could have lead to memory...
Linux Distros Unpatched Vulnerability : CVE-2023-6205
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - It was possible to cause the use of a MessagePort after it had already been freed, which could potentially have led to an exploitable crash. This vulnerability...
Linux Distros Unpatched Vulnerability : CVE-2024-1551
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Set-Cookie response headers were being incorrectly honored in multipart HTTP responses. If an attacker could control the Content-Type response header, as well a...
Linux Distros Unpatched Vulnerability : CVE-2018-12390
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mozilla developers and community members reported memory safety bugs present in Firefox 62 and Firefox ESR 60.2. Some of these bugs showed evidence of memory...
Linux Distros Unpatched Vulnerability : CVE-2020-26965
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Some websites have a feature Show Password where clicking a button will change a password field into a textbook field, revealing the typed password. If, when...
Linux Distros Unpatched Vulnerability : CVE-2019-17026
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion. We are aware of targeted attacks in the wild...
Linux Distros Unpatched Vulnerability : CVE-2021-23972
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - One phishing tactic on the web is to provide a link with HTTP Auth. For example 'https://[email protected]'. To mitigate this type of attack,...
Linux Distros Unpatched Vulnerability : CVE-2023-32205
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In multiple cases browser prompts could have been obscured by popups controlled by content. These could have led to potential user confusion and spoofing attack...
Linux Distros Unpatched Vulnerability : CVE-2017-7827
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory safety bugs were reported in Firefox 56. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of thes...
Linux Distros Unpatched Vulnerability : CVE-2022-34485
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mozilla developers Bryce Seager van Dyk and the Mozilla Fuzzing Team reported potential vulnerabilities present in Firefox 101. Some of these bugs showed eviden...
Linux Distros Unpatched Vulnerability : CVE-2024-5697
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A website was able to detect when a user took a screenshot of a page using the built-in Screenshot functionality in Firefox. This vulnerability affects Firefox...
Linux Distros Unpatched Vulnerability : CVE-2019-9798
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - On Android systems, Firefox can load a library from APITRACELIB, which is writable by all users and applications. This could allow malicious third party...
Linux Distros Unpatched Vulnerability : CVE-2023-5729
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A malicious web site can enter fullscreen mode while simultaneously triggering a WebAuthn prompt. This could have obscured the fullscreen notification and could...