Node.js third-party modules: [@firebase/util] Prototype pollution

Module module name: @firebase/util version: 0.3.2 npm page: https://www.npmjs.com/package/@firebase/util Module Description NOTE: This is specifically tailored for Firebase JS SDK usage, if you are not a member of the Firebase team, please avoid using this package This is a wrapper of some...

Mozilla Firefox 'WebChannel.jsm' Same-Origin Policy Bypass Vulnerability

Mozilla Firefox is a popular open source WEB browser. Mozilla Firefox 'WebChannel.jsm' fails to properly handle message communication, allowing remote attackers to exploit the vulnerability to build malicious WEB pages and trick users into parsing them, which can be bypassed by a same-origin poli...

UBUNTU-CVE-2015-2718

The WebChannel.jsm module in Mozilla Firefox before 38.0 allows remote attackers to bypass the Same Origin Policy and obtain sensitive webchannel-response data via a crafted web site containing an IFRAME element referencing a different web site that is intended to read this data...

Firefox < 38.0 Multiple Vulnerabilities

The version of Firefox installed on the remote Windows host is prior to 38.0. It is, therefore, affected by the following vulnerabilities : - A privilege escalation vulnerability exists in the Inter-process Communications IPC implementation due to a failure to validate the identity of a listener...

mozilla -- multiple vulnerabilities

The Mozilla Project reports: MFSA-2015-46 Miscellaneous memory safety hazards rv:38.0 / rv:31.7 MFSA-2015-47 Buffer overflow parsing H.264 video with Linux Gstreamer MFSA-2015-48 Buffer overflow with SVG content and CSS MFSA-2015-49 Referrer policy ignored when links opened by middle-click and...