6967 matches found
Moderate: xorg-x11-server security update
X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. Security Fixes: xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents CVE-2024-31080 xorg-x11-server:...
SUSE CVE-2024-4776
A file dialog shown while in full-screen mode could have resulted in the window remaining disabled. This vulnerability affects Firefox 126...
Important: Red Hat Security Advisory: varnish:6 security update
An update for the varnish:6 module is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, and Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions. Red Hat Product Security has rated thi...
GHSA-QM5V-PJ64-852J Passbolt Api Tabnabbing when opening URI with menu "Open URI in a new tab"
Description A user could create and share a resource with a malicious URI. When the victim opens with menu “Open URI in a new tab” function, the malicious page has access to the window.opener object. Impact of issue The newly opened malicious page can for example change the window.opener.location...
CVE-2024-35986
A vulnerability was found in the Linux kernel's phy: ti: tusb1210 driver, where unregistering a powersupply device while other code holds a reference to it causes a crash. This issue happens due to a dangling reference in the tusb1210getonline function after the power supply is removed and its...
CVE-2024-35986 phy: ti: tusb1210: Resolve charger-det crash if charger psy is unregistered
In the Linux kernel, the following vulnerability has been resolved: phy: ti: tusb1210: Resolve charger-det crash if charger psy is unregistered The powersupply frame-work is not really designed for there to be long living in kernel references to powersupply devices. Specifically unregistering a...
Mozilla: IndexedDB files retained in private browsing mode
A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as follows: If the browser.privatebrowsing.autostart preference is enabled, IndexedDB files were not properly deleted when the window was closed. This preference is disabled by default in Firefox...
Mozilla: IndexedDB files retained in private browsing mode
A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as follows: If the browser.privatebrowsing.autostart preference is enabled, IndexedDB files were not properly deleted when the window was closed. This preference is disabled by default in Firefox...
PT-2024-40435 · Packagist · Passbolt/Passbolt Api
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned, so the information is not available. Description: A user could create and share a resource with a malicious URI. When the victim opens the URI in a new tab using the "Open URI in a new tab"...
Windows DWM Disclosure
The vulnerability of the Windows DWM library in Windows operating systems is related to integer overflow. Exploiting this vulnerability can allow an attacker to disclose protected information...
SUSE CVE-2024-4767
If the browser.privatebrowsing.autostart preference is enabled, IndexedDB files were not properly deleted when the window was closed. This preference is disabled by default in Firefox. This vulnerability affects Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11...
OESA-2024-1597 xorg-x11-server-xwayland security update
Xwayland is an X server for running X clients under Wayland. %package devel Summary: Development package Requires: pkgconfig %description devel The development package provides the developmental files which are necessary for developing Wayland compositors using Xwayland. %prep %autosetup -n...
PT-2024-21887 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A data-race issue has been identified around sysctl netrom transport requested window size in the netrom component. Recommendations: At the moment, there is no information about a newe...
Mozilla: IndexedDB files retained in private browsing mode
A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as follows: If the browser.privatebrowsing.autostart preference is enabled, IndexedDB files were not properly deleted when the window was closed. This preference is disabled by default in Firefox...
Mozilla Firefox Security Bypass Vulnerability (CNVD-2024-23348)
Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security bypass vulnerability exists in Mozilla Firefox, which can be exploited by attackers to bypass security restrictions due to a window being disabled even after the file dialog box is displayed...
Windows DWM Privilege Escalation
The vulnerability of the Windows DWM library in Windows operating systems is related to the possibility of buffer overflow attacks. Exploiting this vulnerability can allow a malicious actor to gain elevated privileges remotely...
UBUNTU-CVE-2024-4776
A file dialog shown while in full-screen mode could have resulted in the window remaining disabled. This vulnerability affects Firefox 126...
CVE-2024-4776
A file dialog shown while in full-screen mode could have resulted in the window remaining disabled. This vulnerability affects Firefox 126...
