March 28, 2022—KB5011563 (OS Build 22000.593) Preview

None None...

focus-balkans.org Improper Access Control vulnerability OBB-2444218

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SUSE-FU-2022:0868-1 Feature update for tcl and tk

This feature update for tcl and tk fixes the following issues: Update tcl and tk to version 8.6.12 jscSLE-21016, jscSLE-23284: - Move tcl.macros to /usr/lib/rpm/macros.d bsc1185662 - Use FAT LTO objects in order to provide proper static library bsc1138797 - Fix a bug in itcl that was affecting...

ROS-20220309-02

The vulnerability in the XSLT parameter of Mozilla Firefox and Focus browsers is related to memory usage after its freeing. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code A vulnerability in the WebGPU 3D graphics processing and computing softwa...

Debian DLA-2933-1 : firefox-esr - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2933 advisory. Two security issues have been found in the Mozilla Firefox web browser, which result in the execution of arbitrary code. For Debian 9 stretch, these problems have...

CVE-2022-26485

Removing an XSLT parameter during processing could have lead to an exploitable use-after-free. We have had reports of attacks in the wild abusing this flaw. This vulnerability affects Firefox 97.0.2, Firefox ESR 91.6.1, Firefox for Android 97.3.0, Thunderbird 91.6.2, and Focus 97.3.0...

UBUNTU-CVE-2022-26485

Removing an XSLT parameter during processing could have lead to an exploitable use-after-free. We have had reports of attacks in the wild abusing this flaw. This vulnerability affects Firefox 97.0.2, Firefox ESR 91.6.1, Firefox for Android 97.3.0, Thunderbird 91.6.2, and Focus 97.3.0...

UBUNTU-CVE-2022-26486

An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape. We have had reports of attacks in the wild abusing this flaw. This vulnerability affects Firefox 97.0.2, Firefox ESR 91.6.1, Firefox for Android 97.3.0, Thunderbird 91.6.2, and Focus...

CVE-2022-26486

An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape. We have had reports of attacks in the wild abusing this flaw. This vulnerability affects Firefox 97.0.2, Firefox ESR 91.6.1, Firefox for Android 97.3.0, Thunderbird 91.6.2, and Focus...

The vulnerability of the software interface for processing 3D graphics and computing with the WebGPU browser of Mozilla Firefox and Focus allows a perpetrator to execute arbitrary code.

The vulnerability of the software interface for processing 3D graphics and computing WebGPU by Mozilla Firefox and Focus relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

The vulnerability of the XSLT parameter in Mozilla Firefox and Focus browsers allows attackers to execute arbitrary code.

The vulnerability of the XSLT parameter in Mozilla Firefox and Focus browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

PT-2022-1782 · Mozilla +10 · Firefox +14

Name of the Vulnerable Software and Affected Versions: Firefox versions prior to 97.0.2 Firefox ESR versions prior to 91.6.1 Firefox for Android versions prior to 97.3.0 Thunderbird versions prior to 91.6.2 Focus versions prior to 97.3.0 Description: The issue is related to the use of memory afte...

CVE-2021-38130

A potential Information leakage vulnerability has been identified in versions of Micro Focus Voltage SecureMail Mail Relay prior to 7.3.0.1. The vulnerability could be exploited to create an information leakage attack...

CVE-2021-38130

A potential Information leakage vulnerability has been identified in versions of Micro Focus Voltage SecureMail Mail Relay prior to 7.3.0.1. The vulnerability could be exploited to create an information leakage attack...

Information disclosure

A potential Information leakage vulnerability has been identified in versions of Micro Focus Voltage SecureMail Mail Relay prior to 7.3.0.1. The vulnerability could be exploited to create an information leakage attack...

CVE-2021-38130

A potential Information leakage vulnerability has been identified in versions of Micro Focus Voltage SecureMail Mail Relay prior to 7.3.0.1. The vulnerability could be exploited to create an information leakage attack...

CVE-2021-38130

Voltage SecureMail Mail Relay prior to 7.3.0.1 is affected by an information leakage vulnerability (described as a business logic bypass in the Mail Relay component). Impact is information disclosure; remediation is to upgrade to version 7.3.0.1 or later. A workaround is to restrict access to the...

PT-2022-10694 · Micro Focus · Micro Focus Voltage Securemail Mail Relay +1

Name of the Vulnerable Software and Affected Versions: Micro Focus Voltage SecureMail Mail Relay versions prior to 7.3.0.1 Description: A potential information leakage issue has been identified. This could be exploited to create an information leakage attack. The issue is related to a business...

CVE-2021-44406

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. GetAutoFocus param is not object. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44404

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. GetZoomFocus param is not object. An attacker can send an HTTP request to trigger this vulnerability...