7089 matches found
Debian dla-3661 : firefox-esr - security update
The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3661 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3661-1 [email protected]...
Debian: Security Advisory (DSA-5561-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
DLA-3661-1 firefox-esr - security update
Bulletin has no description...
Mozilla Firefox ESR < 115.5.0
The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 115.5.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2023-50 advisory. - Memory safety bugs present in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4. Some of these bug...
DSA-5561-1 firefox-esr - security update
Bulletin has no description...
CVE-2023-6206
The black fade animation when exiting fullscreen is roughly the length of the anti-clickjacking delay on permission prompts. It was possible to use this fact to surprise users by luring them to click where the permission grant button would be about to appear. This vulnerability affects Firefox 12...
Memory corruption
Memory safety bugs present in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox 120, Firefox ESR...
CVE-2023-6207
Ownership mismanagement led to a use-after-free in ReadableByteStreams This vulnerability affects Firefox 120, Firefox ESR 115.5.0, and Thunderbird 115.5...
UBUNTU-CVE-2023-6205
It was possible to cause the use of a MessagePort after it had already been freed, which could potentially have led to an exploitable crash. This vulnerability affects Firefox 120, Firefox ESR 115.5.0, and Thunderbird 115.5...
UBUNTU-CVE-2023-6208
When using X11, text selected by the page using the Selection API was erroneously copied into the primary selection, a temporary storage not unlike the clipboard. This bug only affects Firefox on X11. Other systems are unaffected. This vulnerability affects Firefox 120, Firefox ESR 115.5.0, and...
CVE-2023-6212
CVE-2023-6212 parks memory safety bugs in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4, with evidence of memory corruption and potential to exploit for arbitrary code. The issue affects Firefox < 120, Firefox ESR < 115.5.0, and Thunderbird
CVE-2023-6209
Relative URLs starting with three slashes were incorrectly parsed, and a path-traversal "/../" part in the path could be used to override the specified host. This could contribute to security problems in web sites. This vulnerability affects Firefox 120, Firefox ESR 115.5.0, and Thunderbird 115.5...
KLA62089 Multiple vulnerabilities in Mozilla Firefox ESR
Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, spoof user interface, obtain sensitive information, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Out o...
The vulnerability of Mozilla Firefox, Mozilla Firefox ESR, and the Mozilla Thunderbird email client arises from improper external control of file names or paths, allowing attackers to compromise the confidentiality and integrity of protected information.
The vulnerabilities of Mozilla Firefox, Mozilla Firefox ESR, and the email client Mozilla Thunderbird are related to incorrect external management of file names or paths. Exploiting these vulnerabilities can allow an attacker to compromise the confidentiality and integrity of protected informatio...
The vulnerability in web browsers Firefox and Firefox ESR, related to writing beyond the buffer limit, allows attackers to access confidential data, compromise its integrity, and cause service interruptions.
The vulnerability in Firefox and Firefox ESR web browsers is related to writing beyond the buffer limit. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause service interruptions...
Rocky Linux 9 : thunderbird (RLSA-2023:0476)
The remote Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:0476 advisory. - An out of date library libusrsctp contained vulnerabilities that could potentially be exploited. This vulnerability affects Firefox...
Rocky Linux 8 : thunderbird (RLSA-2022:0129)
The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:0129 advisory. - It was possible to construct specific XSLT markup that would be able to bypass an iframe sandbox. This vulnerability affects Firefox ESR 91.5, Firefox...
Rocky Linux 8 : firefox (RLSA-2022:8554)
The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:8554 advisory. - Service Workers should not be able to infer information about opaque cross-origin responses; but timing information for cross-origin media combined wi...
Updated thunderbird packages fix security vulnerabilities
The updated packages fix security vulnerabilities: Queued up rendering could have allowed websites to clickjack. CVE-2023-5721 Address bar spoofing via bidirectional characters. CVE-2023-5732 Large WebGL draw could have led to a crash. CVE-2023-5724 WebExtensions could open arbitrary URLs...
Rocky Linux 8 : firefox (RLSA-2022:0510)
The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:0510 advisory. - If a user installed an extension of a particular type, the extension could have auto-updated itself and while doing so, bypass the prompt which grants...