2018 matches found
CVE-2024-29069: Externally Controlled Reference to a Resource in Another Sphere
In snapd versions prior to 2.62, snapd failed to properly check the destination of symbolic links when extracting a snap. The snap format is a squashfs file-system image and so can contain symbolic links and other file types. Various file entries within the snap squashfs image such as icons and...
CVE-2024-6608
It was possible to move the cursor using pointerlock from an iframe. This allowed moving the cursor outside of the viewport and the Firefox window. This vulnerability affects Firefox 128 and Thunderbird 128...
CVE-2024-6601
A race condition could lead to a cross-origin container obtaining permissions of the top-level origin. This vulnerability affects Firefox 128, Firefox ESR 115.13, Thunderbird 115.13, and Thunderbird 128...
CVE-2024-6612
CSP violations generated links in the console tab of the developer tools, pointing to the violating resource. This caused a DNS prefetch which leaked that a CSP violation happened. This vulnerability affects Firefox 128 and Thunderbird 128...
CVE-2024-6604
Memory safety bugs present in Firefox 127, Firefox ESR 115.12, and Thunderbird 115.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox 128, Firefox ESR...
Malicious code in cra-template-snap (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-4999 Malicious code in cra-template-snap (PyPI)
--- -= Per source details. Do not edit below this line.=-...
CVE-2023-6198
Use of Hard-coded Credentials vulnerability in Baicells Snap Router BaiCEBMI on EP3011 User Passwords modules allows unauthorized access to the device...
CVE-2023-6198 Hard Coded Credential
Use of Hard-coded Credentials vulnerability in Baicells Snap Router BaiCEBMI on EP3011 User Passwords modules allows unauthorized access to the device...
CVE-2023-6198
The CVE-2023-6198 entry describes a Hard-coded Credential vulnerability in Baicells Snap Router BaiCE_BMI on EP3011 (User Passwords modules). The issue enables unauthorized access to the device due to hard-coded credentials used by the appliance, as summarized in multiple sources (NVD/Red Hat/CVE...
CVE-2023-6198 Hard Coded Credential
Use of Hard-coded Credentials vulnerability in Baicells Snap Router BaiCEBMI on EP3011 User Passwords modules allows unauthorized access to the device...
Baicells Snap Router Security Vulnerability
Baicells Snap Router is a series of routers from Baicells USA. A security vulnerability exists in Baicells Snap Router BaiCEBMI EP3011, which stems from a hard-coded credentials vulnerability in the application that allows unauthorized access to the device...
PT-2024-14898
Name of the Vulnerable Software and Affected Versions Baicells Snap Router BaiCE BMI on EP3011 affected versions not specified Description The issue concerns the use of hard-coded credentials in the User Passwords modules, allowing unauthorized access to the device. This could potentially lead to...
CVE-2023-6198: Use of Hard-coded Credentials
Use of Hard-coded Credentials vulnerability in Baicells Snap Router BaiCEBMI on EP3011 User Passwords modules allows unauthorized access to the device...
CVE-2024-6291
Use after free in Swiftshader in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
CVE-2020-27352
When generating the systemd service units for the docker snap and other similar snaps, snapd does not specify Delegate=yes - as a result systemd will move processes from the containers created and managed by these snaps into the cgroup of the main daemon within the snap itself when reloading syst...
CVE-2020-27352
When generating the systemd service units for the docker snap and other similar snaps, snapd does not specify Delegate=yes - as a result systemd will move processes from the containers created and managed by these snaps into the cgroup of the main daemon within the snap itself when reloading syst...
CVE-2020-27352
When generating the systemd service units for the docker snap and other similar snaps, snapd does not specify Delegate=yes - as a result systemd will move processes from the containers created and managed by these snaps into the cgroup of the main daemon within the snap itself when reloading syst...
CVE-2020-27352: Improper Privilege Management
When generating the systemd service units for the docker snap and other similar snaps, snapd does not specify Delegate=yes - as a result systemd will move processes from the containers created and managed by these snaps into the cgroup of the main daemon within the snap itself when reloading syst...