3315 matches found
CVE-2020-6809
When a Web Extension had the all-urls permission and made a fetch request with a mode set to 'same-origin', it was possible for the Web Extension to read local files. This vulnerability affects Firefox 74...
Design/Logic Flaw
When a Web Extension had the all-urls permission and made a fetch request with a mode set to 'same-origin', it was possible for the Web Extension to read local files. This vulnerability affects Firefox 74...
CVE-2020-6809
When a Web Extension had the all-urls permission and made a fetch request with a mode set to 'same-origin', it was possible for the Web Extension to read local files. This vulnerability affects Firefox 74...
CVE-2020-6809
When a Web Extension had the all-urls permission and made a fetch request with a mode set to 'same-origin', it was possible for the Web Extension to read local files. This vulnerability affects Firefox 74...
CVE-2020-6809
When a Web Extension had the all-urls permission and made a fetch request with a mode set to 'same-origin', it was possible for the Web Extension to read local files. This vulnerability affects Firefox 74...
CVE-2019-18576
Dell EMC XtremIO XMS versions prior to 6.3.0 contain an information disclosure vulnerability where OS users’ passwords are logged in local files. Malicious local users with access to the log files may use the exposed passwords to gain access to XtremIO with the privileges of the compromised user...
Information disclosure
Dell EMC XtremIO XMS versions prior to 6.3.0 contain an information disclosure vulnerability where OS users’ passwords are logged in local files. Malicious local users with access to the log files may use the exposed passwords to gain access to XtremIO with the privileges of the compromised user...
USN-4299-1 firefox vulnerabilities
Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, spoof the URL or other browser chrome, obtain sensitive information, bypass Content Security Policy CSP...
Mozilla Firefox Information Disclosure Vulnerability (CNVD-2020-16693)
Mozilla Firefox Firefox is a free, open source browser for Windows, Linux and MacOSX platforms. An information disclosure vulnerability exists in Mozilla Firefox versions prior to 74. The vulnerability can be exploited to read local files via a fetch request from a web extension with all-urls...
UBUNTU-CVE-2020-6809
When a Web Extension had the all-urls permission and made a fetch request with a mode set to 'same-origin', it was possible for the Web Extension to read local files. This vulnerability affects Firefox 74...
PT-2020-19237
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 74 Description A issue exists where a Web Extension with the all-urls permission can read local files when making a fetch request with a mode set to 'same-origin'. Recommendations For versions prior to 74, update to...
KLA11691 Multiple vulnerabilities in Mozilla Firefox
Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to inject malicious code, cause denial of service, obtain sensitive information, execute arbitrary code, read local files. Below is a complete list of vulnerabilities: 1. ‘Copy as cURL’ featu...
CVE-2013-4582
Removed by vendor...
PT-2020-6682
Name of the Vulnerable Software and Affected Versions WhatsApp Desktop versions prior to 0.3.9309 WhatsApp for iPhone versions prior to 2.20.10 Description The issue is related to a lack of protection in the web page structure, allowing for cross-site scripting attacks. Exploiting this issue...
CVE-2015-5072
The BIRT Engine servlet in the AR System Mid Tier component before 9.0 SP1 for BMC Remedy AR System Server allows remote authenticated users to "navigate" to arbitrary local files via the imageid parameter...
Code injection
The BIRT Engine servlet in the AR System Mid Tier component before 9.0 SP1 for BMC Remedy AR System Server allows remote authenticated users to "navigate" to arbitrary local files via the imageid parameter...
CVE-2015-5072
The BIRT Engine servlet in the AR System Mid Tier component before 9.0 SP1 for BMC Remedy AR System Server allows remote authenticated users to "navigate" to arbitrary local files via the imageid parameter...
PT-2020-7853
Name of the Vulnerable Software and Affected Versions: BMC Remedy AR System Server versions prior to 9.0 SP1 Description: The issue allows remote authenticated users to access arbitrary local files. This is achieved by manipulating the imageid parameter in the BIRT Engine servlet, part of the AR...
Simplifile RecordFusion Information Disclosure Vulnerability
Simplifile RecordFusion is an electronic records service system from Simplifile, Inc. in the United States. A security vulnerability exists in Simplifile RecordFusion 2019-11-25 and prior versions. A remote attacker can exploit logger/logs?/... / or logger/hist?/... / URI to access local files...