Lucene search
+L

1718 matches found

BDU FSTEC
BDU FSTEC
•added 2021/01/13 12:00 a.m.•15 views

Firefox Thunderbird Memory Use After Release DoS

The vulnerabilities of Firefox, Firefox ESR, and the email client Thunderbird are related to the use of memory after deallocation. Exploiting these vulnerabilities can allow a remote attacker to cause service interruptions...

10CVSS7.5AI score0.02776EPSS
SaveExploits1References17Affected Software10
BDU FSTEC
BDU FSTEC
•added 2021/01/13 12:00 a.m.•15 views

Firefox Thunderbird Use After Free DoS

The vulnerabilities of Firefox browsers, Firefox ESR, and the email client Thunderbird are related to the use of after-release components. Exploiting these vulnerabilities can allow a malicious actor to cause service interruptions using a specially created malware script...

10CVSS7.8AI score0.02937EPSS
SaveExploits1References18Affected Software10
BDU FSTEC
BDU FSTEC
•added 2021/01/13 12:00 a.m.•10 views

Firefox Thunderbird Buffer Overflow

The vulnerability of Firefox browsers, Firefox ESR, and the email client Thunderbird is related to the issue of operations going beyond the buffer in memory when manipulating the DOM tree. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created...

10CVSS8.5AI score0.0256EPSS
SaveExploits0References17Affected Software10
osv_suse
osv_suse
•added 2021/01/12 12:22 p.m.•13 views

SUSE-SU-2021:0080-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 78.6.1 ESR Fixed: Critical security issue MFSA 2021-01 bsc1180623 CVE-2020-16044 Use-after-free write when handling a malicious COOKIE-ECHO SCTP chunk...

8.8CVSS8.7AI score0.01304EPSS
SaveExploits0References3
osv_suse
osv_suse
•added 2021/01/12 9:45 a.m.•8 views

SUSE-SU-2021:14595-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 78.6.1 ESR Fixed: Critical security issue MFSA 2021-01 bsc1180623 CVE-2020-16044 Use-after-free write when handling a malicious COOKIE-ECHO SCTP chunk...

8.8CVSS8.7AI score0.01304EPSS
SaveExploits0References3
osv_suse
osv_suse
•added 2021/01/12 7:32 a.m.•10 views

SUSE-SU-2021:0072-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 78.6.1 ESR Fixed: Critical security issue MFSA 2021-01 bsc1180623 CVE-2020-16044 Use-after-free write when handling a malicious COOKIE-ECHO SCTP chunk...

8.8CVSS8.7AI score0.01304EPSS
SaveExploits0References3
osv_debian
osv_debian
•added 2021/01/07 2:15 p.m.•4 views

DEBIAN-CVE-2020-35113

Mozilla developers reported memory safety bugs present in Firefox 83 and Firefox ESR 78.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox 84, Thunderbi...

8.8CVSS8.6AI score0.01572EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2020/12/28 12:00 a.m.•9 views

Firefox browsers DoS

The vulnerabilities of Firefox browsers, Firefox ESR, and the email client Thunderbird are related to insufficient validation of input data. Exploiting these vulnerabilities can allow a malicious actor to cause service failures remotely...

7.8CVSS7.5AI score0.02513EPSS
SaveExploits0References13Affected Software9
BDU FSTEC
BDU FSTEC
•added 2020/12/28 12:00 a.m.•10 views

HTTP/2 DoS

The vulnerability in the implementation of HTTP/2 technology in Firefox browsers, Firefox ESR, and the Thunderbird email client is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

10CVSS7.9AI score0.03021EPSS
SaveExploits1References18Affected Software10
BDU FSTEC
BDU FSTEC
•added 2020/12/23 12:00 a.m.•10 views

Firefox Thunderbird Buffer Overflow

The vulnerability of Firefox browsers, Firefox ESR, and the email client Thunderbird is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.5AI score0.03443EPSS
SaveExploits0References15Affected Software10
osv_opensuse
osv_opensuse
•added 2020/12/22 12:04 p.m.•9 views

OPENSUSE-SU-2020:2315-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 78.5.0 ESR bsc1178824 CVE-2020-26951: Parsing mismatches could confuse and bypass security sanitizer for chrome privileged code CVE-2020-16012: Variable time processing of cross-origin images during...

9.6CVSS7.3AI score0.63894EPSS
SaveExploits3References14
BDU FSTEC
BDU FSTEC
•added 2020/12/22 12:00 a.m.•9 views

Firefox Thunderbird Memory Use After Release DoS

The vulnerabilities of the Firefox browser, Firefox ESR, and the Thunderbird email client are related to the use of memory after deallocation. Exploiting these vulnerabilities can allow a remote attacker to cause service interruptions...

10CVSS7.8AI score0.02937EPSS
SaveExploits1References18Affected Software10
RedHat Linux
RedHat Linux
•added 2020/12/21 12:33 p.m.•11 views

Mozilla: Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6

The Mozilla Foundation Security Advisory describes this flaw as: Mozilla developer reported memory safety bugs present in Firefox 83 and Firefox ESR 78.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run...

8.8CVSS7.5AI score0.01572EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2020/12/17 4:24 p.m.•10 views

Mozilla: Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6

The Mozilla Foundation Security Advisory describes this flaw as: Mozilla developer reported memory safety bugs present in Firefox 83 and Firefox ESR 78.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run...

8.8CVSS7.5AI score0.01572EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2020/12/16 7:55 a.m.•12 views

Mozilla: Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6

The Mozilla Foundation Security Advisory describes this flaw as: Mozilla developer reported memory safety bugs present in Firefox 83 and Firefox ESR 78.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run...

8.8CVSS7.5AI score0.01572EPSS
SaveExploits0References5
osv_debian
osv_debian
•added 2020/12/09 1:15 a.m.•13 views

DEBIAN-CVE-2020-26950

In certain circumstances, the MCallGetProperty opcode can be emitted with unmet assumptions resulting in an exploitable use-after-free condition. This vulnerability affects Firefox 82.0.3, Firefox ESR 78.4.1, and Thunderbird 78.4.2...

8.8CVSS8AI score0.42327EPSS
SaveExploits4References1
RedHat Linux
RedHat Linux
•added 2020/11/30 7:50 p.m.•17 views

Mozilla: XSS through paste (manual and clipboard API)

In some cases, removing HTML elements during sanitization would keep existing SVG event handlers and therefore lead to XSS. This vulnerability affects Firefox 83, Firefox ESR 78.5, and Thunderbird 78.5...

6.1CVSS7.3AI score0.01233EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2020/11/30 10:40 a.m.•13 views

Mozilla: Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5

Mozilla developers reported memory safety bugs present in Firefox 82 and Firefox ESR 78.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox 83, Firefox E...

9.3CVSS7.5AI score0.01514EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2020/11/30 10:40 a.m.•12 views

Mozilla: XSS through paste (manual and clipboard API)

In some cases, removing HTML elements during sanitization would keep existing SVG event handlers and therefore lead to XSS. This vulnerability affects Firefox 83, Firefox ESR 78.5, and Thunderbird 78.5...

6.1CVSS7.3AI score0.01233EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2020/11/30 9:04 a.m.•12 views

Mozilla: XSS through paste (manual and clipboard API)

In some cases, removing HTML elements during sanitization would keep existing SVG event handlers and therefore lead to XSS. This vulnerability affects Firefox 83, Firefox ESR 78.5, and Thunderbird 78.5...

6.1CVSS7.3AI score0.01233EPSS
SaveExploits0References5
Rows per page
Query Builder