10577 matches found
Important: firefox security update
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 91.13.0 ESR. Security Fixes: Mozilla: Address bar spoofing via XSLT error handling CVE-2022-38472 Mozilla: Cross-origin XSLT Documents would have...
CVE-2022-38477
A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue of Mozilla developer Nika Layzell and the Mozilla Fuzzing Team, reporting memory safety bugs present in Firefox 103 and Firefox ESR 102.1. Some of these bugs showed evidence of memory corruption, and we...
Mozilla Firefox ESR < 102.2
The version of Firefox ESR installed on the remote Windows host is prior to 102.2. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2022-34 advisory. - Members the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 103, Firefox ESR 102.1, and Firefo...
Mozilla Firefox < 104.0
The version of Firefox installed on the remote macOS or Mac OS X host is prior to 104.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2022-33 advisory. - Members the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 103, Firefox ESR 102.1, and...
Security Vulnerabilities fixed in Thunderbird 91.13 — Mozilla
An attacker could have abused XSLT error handling to associate attacker-controlled content with another origin which was displayed in the address bar. This could have been used to fool the user into submitting data intended for the spoofed origin. A cross-origin iframe referencing an XSLT documen...
Mozilla Firefox ESR < 91.13
The version of Firefox ESR installed on the remote Windows host is prior to 91.13. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2022-35 advisory. - Members the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 103, Firefox ESR 102.1, and Firefo...
Mozilla Firefox ESR < 91.13
The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 91.13. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2022-35 advisory. - Members the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 103, Firefox ESR 102.1,...
Mozilla Thunderbird < 91.13
The version of Thunderbird installed on the remote Windows host is prior to 91.13. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2022-37 advisory. - Members the Mozilla Fuzzing Team reported memory safety bugs present in Thunderbird 102.1 and Thunderbird 91.12...
Slackware Linux 15.0 / current mozilla-thunderbird Multiple Vulnerabilities (SSA:2022-235-03)
The version of mozilla-thunderbird installed on the remote host is prior to 102.2.0 / 91.13.0. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-235-03 advisory. - An attacker could have abused XSLT error handling to associate attacker-controlled content with...
Mozilla Firefox < 104.0
The version of Firefox installed on the remote Windows host is prior to 104.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2022-33 advisory. - Members the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 103, Firefox ESR 102.1, and Firefox ES...
Uncovering a ChromeOS remote memory corruption vulnerability
Microsoft discovered a memory corruption vulnerability in a ChromeOS component that can be triggered remotely, allowing attackers to perform either a denial-of-service DoS or, in extreme cases, remote code execution RCE. Following our D-Bus blog post that focused on Linux, we searched for similar...
SUSE-SU-2022:2840-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP3 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-15393: CVE-2020-15393: Fixed a memory leak in usbtestdisconnect bnc1173514. - CVE-2020-36557: Fixed race condition between the VTDISALLOCATE ioctl...
CVE-2022-6083
freeciv modpack installer buffer overflow...
New Google Chrome Zero-Day Vulnerability Being Exploited in the Wild
Google on Tuesday rolled out patches for Chrome browser for desktops to contain an actively exploited high-severity zero-day flaw in the wild. Tracked as CVE-2022-2856, the issue has been described as a case of insufficient validation of untrusted input in Intents. Security researchers Ashley She...
CVE-2022-2833
Endless Infinite loop in Blender-thumnailing due to logical bugs...
CVE-2022-2833
Endless Infinite loop in Blender-thumnailing due to logical bugs...
DEBIAN-CVE-2022-2833
Endless Infinite loop in Blender-thumnailing due to logical bugs...
Design/Logic Flaw
Endless Infinite loop in Blender-thumnailing due to logical bugs...