CVE-2017-5409

The CVE-2017-5409 issue affects Mozilla Firefox on Windows (Firefox ESR <45.8 and Firefox

CVE-2017-5454

A mechanism to bypass file system access protections in the sandbox to use the file picker to access different files than those selected in the file picker through the use of relative paths. This allows for read only access to the local file system. This vulnerability affects Thunderbird 52.1,...

CVE-2017-7768

CVE-2017-7768: Local privilege issue where an unprivileged user can read 32 bytes from any local file via Mozilla Maintenance Service by convincing it to read a status file from the Windows updater. Affected: Firefox ESR < 52.2 and Firefox

CVE-2016-5295

This vulnerability allows an attacker to use the Mozilla Maintenance Service to escalate privilege by having the Maintenance Service invoke the Mozilla Updater to run malicious local files. This vulnerability requires local system access and is a variant of MFSA2013-44. Note: this issue only...

CVE-2017-7768

The Mozilla Maintenance Service can be invoked by an unprivileged user to read 32 bytes of any arbitrary file on the local system by convincing the service that it is reading a status file provided by the Mozilla Windows Updater. The Mozilla Maintenance Service executes with privileged access,...

CVE-2017-5409

The Mozilla Windows updater can be called by a non-privileged user to delete an arbitrary local file by passing a special path to the callback parameter through the Mozilla Maintenance Service, which has privileged access. Note: This attack requires local system access and only affects Windows...

CVE-2017-5456

A mechanism to bypass file system access protections in the sandbox using the file system request constructor through an IPC message. This allows for read and write access to the local file system. This vulnerability affects Firefox ESR 52.1 and Firefox 53...

CVE-2017-7766

An attack using manipulation of "updater.ini" contents, used by the Mozilla Windows Updater, and privilege escalation through the Mozilla Maintenance Service to allow for arbitrary file execution and deletion by the Maintenance Service, which has privileged access. Note: This attack requires loca...

CVE-2016-5295

This vulnerability allows an attacker to use the Mozilla Maintenance Service to escalate privilege by having the Maintenance Service invoke the Mozilla Updater to run malicious local files. This vulnerability requires local system access and is a variant of MFSA2013-44. Note: this issue only...

Microsoft Windows Hello Face Authentication Bypass Vulnerability

Microsoft Windows Hello Face is an enterprise-grade authentication mechanism that uses a camera specifically configured for near-IR imaging to authenticate and unlock Windows devices and your Microsoft Passport. A security bypass vulnerability exists in Microsoft face authentication. An attacker...

Serverxxx Directory Traversal Vulnerability

serverxxx is a static file server. A directory traversal vulnerability exists in serverxxx. An attacker can gain access to the file system by placing a '... /' sequence in a URL to gain access to the file system...

dmmcquay.lab6 Directory Traversal Vulnerability

dmmcquay.lab6 is a REST server. A directory traversal vulnerability exists in dmmcquay.lab6. An attacker can exploit this vulnerability by placing ". /" in the URL to access the file system...

jn_jj_server Directory Traversal Vulnerability

jnjjserver is a static file server. A directory traversal vulnerability exists in jnjjserver. An attacker can exploit this vulnerability by placing "... /" in a URL to access the file system...

hcbserver directory traversal vulnerability

hcbserver is a static file server. A directory traversal vulnerability exists in hcbserver. An attacker can exploit this vulnerability by placing "... /" in a URL to access the file system...

getcityapi.yoehoehne Directory Traversal Vulnerability

getcityapi.yoehoehne is a web server. A directory traversal vulnerability exists in getcityapi.yoehoehne. An attacker can exploit this vulnerability by placing a '... /' sequence in a URL to gain access to the file system...

Serverabc Directory Traversal Vulnerability

serverabc is a static file server. A directory traversal vulnerability exists in serverabc. An attacker can exploit this vulnerability by placing a '... /' sequence in a URL to gain access to the file system...

dcdcdcdcdcdc Directory Traversal Vulnerability

dcdcdcdcdc is a static file server. A directory traversal vulnerability exists in dcdcdcdcdc. An attacker can exploit this vulnerability by placing ". /" in a URL to access the file system...

caolilinode directory traversal vulnerability

caolilinode is a file server. A directory traversal vulnerability exists in caolilinode. An attacker can exploit this vulnerability to gain access to the file system by placing a '... /' sequence in a URL to gain access to the file system...

looppake directory traversal vulnerability

looppake is a simple http server. A directory traversal vulnerability exists in looppake. An attacker can exploit this vulnerability by placing "... /" in the URL to access the file system...

myprolyz Directory Traversal Vulnerability

myprolyz is a static file server. A directory traversal vulnerability exists in myprolyz. An attacker can exploit this vulnerability to gain access to the file system by placing a '... /' sequence in a URL to gain access to the file system...