Mozilla: Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6, and Thunderbird 115.6

The Mozilla Foundation Security Advisory describes this flaw as: Memory safety bugs present in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run...

CVE-2023-42886

creationtimestamp| type| source ---|---|--- 2024-01-02 08:07:01+00:00| seen| https://t.me/ctinow/161549...

PT-2024-13744 · Cesanta · Mjs

Name of the Vulnerable Software and Affected Versions: Cesanta mjs version 2.20.0 Description: An issue in Cesanta mjs allows a remote attacker to cause a denial of service via the mjs op json parse function in the msj.c file. Recommendations: For Cesanta mjs version 2.20.0, consider disabling th...

Cesanta MJS 安全漏洞

Cesanta MJS is an embedded JavaScript engine for C/C++ from Cesanta Ireland. A denial of service vulnerability exists in Cesanta MJS version 2.20.0, which is caused by a flaw in the mjs+0x4ec508 component. An attacker could exploit this vulnerability to cause a denial of service...

CVE-2020-25835

creationtimestamp| type| source ---|---|--- 2024-01-01 08:26:41+00:00| seen| https://t.me/ctinow/161225...

CVE-2023-25054

creationtimestamp| type| source ---|---|--- 2023-12-29 10:26:35+00:00| seen| https://t.me/ctinow/160399 2023-12-30 01:35:45+00:00| seen| https://t.me/cibsecurity/73914...

GHSA-F5VV-HCGF-XVXQ

creationtimestamp| type| source ---|---|--- 2023-12-29 08:53:18+00:00| seen| https://t.me/arpsyndicate/2217...

CVE-2022-36399

creationtimestamp| type| source ---|---|--- 2023-12-28 23:26:35+00:00| seen| https://t.me/ctinow/160241 2023-12-31 03:46:14+00:00| seen| https://t.me/arpsyndicate/2288 2024-01-20 15:17:13+00:00| seen| https://t.me/ctinow/170649...

GHSA-RQXC-9P8H-XQGQ

creationtimestamp| type| source ---|---|--- 2023-12-27 16:17:08+00:00| seen| https://t.me/ctinow/159672...

PT-2023-8450 · Ilias · Ilias

Name of the Vulnerable Software and Affected Versions: ILIAS versions prior to 7.23 ILIAS versions 8 prior to 8.3 Description: The issue is related to the incorrect implementation of the sequence of actions in the ILIAS learning management system. It allows a remote attacker to execute arbitrary...

CVE-2023-33088

creationtimestamp| type| source ---|---|--- 2023-12-23 16:52:06+00:00| seen| https://t.me/ctinow/158862...

CVE-2022-4957

creationtimestamp| type| source ---|---|--- 2023-12-22 09:22:15+00:00| seen| https://t.me/ctinow/158263...

CVE-2023-7058

creationtimestamp| type| source ---|---|--- 2023-12-22 06:32:17+00:00| seen| https://t.me/ctinow/158200 2024-01-14 15:12:06+00:00| seen| https://t.me/ctinow/168047 2025-04-17 20:58:11+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12344...

CVE-2023-48810

creationtimestamp| type| source ---|---|--- 2023-12-21 14:42:42+00:00| seen| https://t.me/ctinow/157719...

CVE-2023-6857

When resolving a symlink, a race may occur where the buffer passed to readlink may actually be smaller than necessary. This bug only affects Firefox on Unix-based operating systems Android, Linux, MacOS. Windows is unaffected. This vulnerability affects Firefox ESR 115.6, Thunderbird 115.6, and...

Mozilla Firefox Security Vulnerability

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox, which stems from a security flaw in the ShutdownObserver function. Affected products and versions: Firefox ESR before 115.6, Thunderbird before 115.6...

Bosch IP cameras security breach

Bosch IP cameras are network cameras from Bosch, Germany. A security vulnerability exists in Bosch IP cameras that could allow a user with administrative privileges to run arbitrary commands on the camera's operating system. The following products and versions are affected: Bosch Camera CPP13...

USN-6546-2 libreoffice vulnerabilities

USN-6546-1 fixed vulnerabilities in LibreOffice. This update provides the corresponding updates for Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. Original advisory details: Reginaldo Silva discovered that LibreOffice incorrectly handled filenames when passing embedded videos to GStreamer. If a user were...

Adobe Prelude Buffer Error Vulnerability

Adobe Prelude is a set of video footage editing editing tools of the United States Odooby Adobe. The product is capable of editing, sequencing and annotating video footage. A buffer error vulnerability exists in Adobe Prelude version 22.6 and prior versions, which stems from being affected by an...

PT-2023-27804 · Enterprisedb · Enterprisedb Postgres Advanced Server

Name of the Vulnerable Software and Affected Versions: EnterpriseDB Postgres Advanced Server EPAS versions prior to 11.21.32 EnterpriseDB Postgres Advanced Server EPAS versions 12.x prior to 12.16.20 EnterpriseDB Postgres Advanced Server EPAS versions 13.x prior to 13.12.16 EnterpriseDB Postgres...