KLA12497 Multiple vulnerabilities in Mozilla Firefox ESR

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, spoof user interface. Below is a complete list of vulnerabilities: 1. Out of bounds memory read vulnerability in JIT Codegen Extensions...

EcoStruxure EV Charging Expert 安全漏洞

EcoStruxure EV Charging Expert is an electric vehicle charging infrastructure load management, access management and supervision solution from Schneider-electric, France. A security vulnerability exists in EcoStruxure EV Charging Expert, which stems from CWE-1021 An improper restriction in the...

Mozilla: Spoofing following page navigation with data: protocol and modal alerts (MFSA 2017-19)

On pages containing an iframe, the "data:" protocol can be used to create a modal alert that will render over arbitrary domains following page navigation, spoofing of the origin of the modal alert from the iframe content. This vulnerability affects Thunderbird 52.3, Firefox ESR 52.3, and Firefox ...

PT-2010-3395 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 4 Description: The issue concerns the WebKit component in Apple iOS, which fails to enforce proper boundary restrictions on content displayed by an IFRAME element. This allows remote attackers to spoof the user...

PT-2008-5525 · Apple · Ios +2

Name of the Vulnerable Software and Affected Versions: Safari in Apple iPhone OS versions 2.0 through 2.1 Safari in Apple iPhone OS for iPod touch versions 2.1 Description: The issue allows remote attackers to spoof a user interface via a crafted HTML document because Safari does not restrict an...

Mozilla Suite: Multiple vulnerabilities

Background The Mozilla Suite is an all-in-one Internet application suite including a web browser, an advanced e-mail and newsgroup client, IRC client and HTML editor. Description The following vulnerabilities were found and fixed in the Mozilla Suite: "mozbugra4" and "shutdown" discovered that th...