7448 matches found
Debian DSA-4639-1 : firefox-esr - security update
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4639. The text...
ICSA-20-072-01_ABB eSOMS
1. EXECUTIVE SUMMARY CVSS v3 7.6 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: ABB Equipment: eSOMS Vulnerabilities: Use of Web Browser Cache Containing Sensitive Information, Improper Restriction of Rendered UI Layers or Frames, Improper Neutralization of HTTP Headers for...
[SECURITY] [DLA 2140-1] firefox-esr security update
Package : firefox-esr Version : 68.6.0esr-1deb8u1 CVE ID : CVE-2019-20503 CVE-2020-6805 CVE-2020-6806 CVE-2020-6807 CVE-2020-6811 CVE-2020-6812 CVE-2020-6814 Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary...
Mozilla Firefox ESR < 68.6
The version of Firefox ESR installed on the remote Windows host is prior to 68.6. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2020-09 advisory. - Mozilla developers and community members Byron Campen, Jason Kratzer, and Christian Holler reported memory safety...
Firefox Bug Opens iPhone AirPods to Third-Party Snooping
Five high-severity bugs were fixed in the Firefox web browser with the release of version 74 by the Mozilla Foundation on Tuesday. In addition, Mozilla reported a quirky moderate-severity flaw that allows hackers to target iPhone users and collect data tied to connected AirPods, if in use. In...
Firefox Bug Opens iPhone AirPods to Third-Party Snooping
Five high-severity bugs were fixed in the Firefox web browser with the release of version 74 by the Mozilla Foundation on Tuesday. In addition, Mozilla reported a quirky moderate-severity flaw that allows hackers to target iPhone users and collect data tied to connected AirPods, if in use. In...
[SECURITY] Fedora 32 Update: firefox-74.0-1.nss.fc32
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
CVE-2020-4082
The HCL Connections 5.5 help system is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim's Web browser within the security context of the hosting...
Cross site scripting
The HCL Connections 5.5 help system is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim's Web browser within the security context of the hosting...
CVE-2020-4082
The HCL Connections 5.5 help system is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim's Web browser within the security context of the hosting...
Google Chrome < 80.0.3987.132 Vulnerability
The version of Google Chrome installed on the remote Windows host is prior to 80.0.3987.132. It is, therefore, affected by a vulnerability as referenced in the 202003stable-channel-update-for-desktop advisory. - Insufficient policy enforcement in media in Google Chrome prior to 80.0.3987.132...
CVE-2020-6800
Mozilla developers and community members reported memory safety bugs present in Firefox 72 and Firefox ESR 68.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. In general, these flaws...
[SECURITY] Fedora 30 Update: firefox-73.0.1-1.fc30
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
Google Chrome < 80.0.3987.122 Multiple Vulnerabilities
The version of Google Chrome installed on the remote Windows host is prior to 80.0.3987.122. It is, therefore, affected by multiple vulnerabilities as referenced in the 202002stable-channel-update-for-desktop24 advisory. - Type confusion in V8 in Google Chrome prior to 80.0.3987.122 allowed a...
[SECURITY] Fedora 31 Update: firefox-73.0.1-1.fc31
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
Google Chrome < 80.0.3987.116 Multiple Vulnerabilities
The version of Google Chrome installed on the remote Windows host is prior to 80.0.3987.116. It is, therefore, affected by multiple vulnerabilities as referenced in the 202002stable-channel-update-for-desktop18 advisory. - Use after free in speech in Google Chrome prior to 80.0.3987.116 allowed a...
CentOS 7 : firefox (RHSA-2020:0520)
The remote CentOS Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:0520 advisory. - A content process could have modified shared memory relating to crash reporting information, crash itself, and cause an out-of-bound write. This coul...
Ubuntu 18.04 LTS : WebKitGTK+ vulnerabilities (USN-4281-1)
The remote Ubuntu 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4281-1 advisory. A large number of security issues were discovered in the WebKitGTK+ Web and JavaScript engines. If a user were tricked into viewing a malicious website, ...
Important: Red Hat Security Advisory: firefox security update
An update for firefox is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...