Lucene search
+L

222 matches found

UbuntuCve
UbuntuCve
added 2020/07/09 3:15 p.m.38 views

CVE-2020-12404

For native-to-JS bridging the app requires a unique token to be passed that ensures non-app code can't call the bridging functions. That token could leak when used for downloading files. This vulnerability affects Firefox for iOS 26...

4.3CVSS5.9AI score0.00784EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2020/07/09 2:44 p.m.69 views

CVE-2020-12404

For native-to-JS bridging the app requires a unique token to be passed that ensures non-app code can't call the bridging functions. That token could leak when used for downloading files. This vulnerability affects Firefox for iOS 26...

4.3CVSS4.1AI score0.00784EPSS
SaveExploits0
Cvelist
Cvelist
added 2020/07/09 2:44 p.m.39 views

CVE-2020-12404

For native-to-JS bridging the app requires a unique token to be passed that ensures non-app code can't call the bridging functions. That token could leak when used for downloading files. This vulnerability affects Firefox for iOS 26...

4.1AI score0.00784EPSS
SaveExploits0References2
CVE
CVE
added 2020/07/09 2:44 p.m.71 views

CVE-2020-12404

Summary of CVE-2020-12404 (Firefox iOS): The vulnerability arises in the native-to-JS bridge where a unique token is required to call bridging functions. The token could leak during file download, potentially enabling non-app code to access bridging functionality. Affected product: Firefox for iO...

4.3CVSS4.1AI score0.00784EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
added 2020/06/02 12:00 a.m.10 views

Mozilla Firefox Information Disclosure Vulnerability (CNVD-2020-41083)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in previous versions of Mozilla Firefox 26 for iOS-based platforms. An attacker could exploit the vulnerability to obtain a security token used for bridging...

4.3CVSS6.5AI score0.00784EPSS
SaveExploits0References1
Mozilla
Mozilla
added 2020/05/30 12:00 a.m.138 views

Security Vulnerabilities fixed in Firefox for iOS 26 — Mozilla

For native-to-JS bridging the app requires a unique token to be passed that ensures non-app code can't call the bridging functions. That token could leak when used for downloading files...

4.3CVSS2.6AI score0.00784EPSS
SaveExploits0References1Affected Software1
UbuntuCve
UbuntuCve
added 2020/05/26 6:15 p.m.34 views

CVE-2020-6830

For native-to-JS bridging, the app requires a unique token to be passed that ensures non-app code can't call the bridging functions. That token was being used for JS-to-native also, but it isn't needed in this case, and its usage was also leaking this token. This vulnerability affects Firefox for...

7.5CVSS7.1AI score0.00903EPSS
SaveExploits0References3
Prion
Prion
added 2020/05/26 6:15 p.m.26 views

Code injection

For native-to-JS bridging, the app requires a unique token to be passed that ensures non-app code can't call the bridging functions. That token was being used for JS-to-native also, but it isn't needed in this case, and its usage was also leaking this token. This vulnerability affects Firefox for...

5CVSS7AI score0.00903EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2020/05/26 5:06 p.m.35 views

CVE-2020-6830

For native-to-JS bridging, the app requires a unique token to be passed that ensures non-app code can't call the bridging functions. That token was being used for JS-to-native also, but it isn't needed in this case, and its usage was also leaking this token. This vulnerability affects Firefox for...

7AI score0.00903EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2020/05/26 5:06 p.m.50 views

CVE-2020-6830

For native-to-JS bridging, the app requires a unique token to be passed that ensures non-app code can't call the bridging functions. That token was being used for JS-to-native also, but it isn't needed in this case, and its usage was also leaking this token. This vulnerability affects Firefox for...

7.5CVSS7AI score0.00903EPSS
SaveExploits0
RedHat Linux
RedHat Linux
added 2020/05/26 3:15 p.m.61 views

Moderate: Red Hat Security Advisory: openvswitch2.11 security, bug fix and enhancement update

An update for openvswitch2.11 is now available for Fast Datapath for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

6.7CVSS6.8AI score0.00378EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2020/05/26 2:39 p.m.77 views

Moderate: Red Hat Security Advisory: openvswitch2.11 security, bug fix and enhancement update

An update for openvswitch2.11 is now available for Fast Datapath for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

6.7CVSS6.8AI score0.00378EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2020/05/26 2:33 p.m.63 views

Important: Red Hat Security Advisory: openvswitch2.13 security, bug fix and enhancement update

An update for openvswitch2.13 is now available for Fast Datapath for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

7.7CVSS6.8AI score0.02213EPSS
SaveExploits0References8
Mozilla
Mozilla
added 2020/05/01 12:00 a.m.38 views

Security Vulnerabilities fixed in Firefox for iOS 25 — Mozilla

For native-to-JS bridging, the app requires a unique token to be passed that ensures non-app code can't call the bridging functions. That token was being used for JS-to-native also, but it isn't needed in this case, and its usage was also leaking this token...

7.5CVSS1.7AI score0.00903EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2020/04/08 8:15 p.m.11 views

CVE-2020-1625

The kernel memory usage represented as "temp" via 'show system virtual-memory' may constantly increase when Integrated Routing and Bridging IRB is configured with multiple underlay physical interfaces, and one interface flaps. This memory leak can affect running daemons processes, leading to an...

6.5CVSS6.6AI score0.0081EPSS
SaveExploits1References1
Prion
Prion
added 2020/04/08 8:15 p.m.28 views

Memory corruption

The kernel memory usage represented as "temp" via 'show system virtual-memory' may constantly increase when Integrated Routing and Bridging IRB is configured with multiple underlay physical interfaces, and one interface flaps. This memory leak can affect running daemons processes, leading to an...

3.3CVSS6.3AI score0.0081EPSS
SaveExploits1References1Affected Software1
OpenVAS
OpenVAS
added 2020/01/23 12:00 a.m.46 views

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2018-1256)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.2CVSS7.2AI score0.00448EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2020/01/22 4:05 a.m.47 views

Moderate: Red Hat Security Advisory: openvswitch2.12 security and bug fix update

An update for openvswitch2.12 is now available for Fast Datapath for RHEL 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

7.5CVSS7.1AI score0.02815EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2020/01/22 4:04 a.m.38 views

Moderate: Red Hat Security Advisory: openvswitch2.11 security and bug fix update

An update for openvswitch2.11 is now available for Fast Datapath for RHEL 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

7.5CVSS7.1AI score0.02815EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
added 2020/01/22 12:00 a.m.37 views

RHEL 7 : openvswitch2.12 (RHSA-2020:0168)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:0168 advisory. Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote per-flow control of traffic. Security Fixe...

7.5CVSS7.2AI score0.02815EPSS
SaveExploits0References6
Rows per page
Query Builder