6334 matches found
Ubuntu 18.04 LTS / 20.04 LTS : Firefox vulnerabilities (USN-5536-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5536-1 advisory. Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could...
Security Vulnerabilities fixed in Thunderbird 91.12 — Mozilla
When combining CSS properties for overflow and transform, the mouse cursor could interact with different coordinates than displayed. When visiting directory listings for chrome:// URLs as source text, some parameters were reflected...
CVE-2022-36319
When combining CSS properties for overflow and transform, the mouse cursor could interact with different coordinates than displayed. This vulnerability affects Firefox ESR 102.1, Firefox ESR 91.12, Firefox 103, Thunderbird 102.1, and Thunderbird 91.12...
Mozilla Firefox < 103.0
The version of Firefox installed on the remote Windows host is prior to 103.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2022-28 advisory. - Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 102. Some of these bugs...
Mozilla Firefox ESR < 91.12
The version of Firefox ESR installed on the remote Windows host is prior to 91.12. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2022-29 advisory. - When combining CSS properties for overflow and transform, the mouse cursor could interact with different coordinat...
UBUNTU-CVE-2022-36319
When combining CSS properties for overflow and transform, the mouse cursor could interact with different coordinates than displayed. This vulnerability affects Firefox ESR 102.1, Firefox ESR 91.12, Firefox 103, Thunderbird 102.1, and Thunderbird 91.12...
Mozilla Firefox Security Advisory (MFSA2022-28) - Linux
The remote host is missing an update for Mozilla Firefox, announced via the advisory MFSA2022-28. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...
co-rider.fr Cross Site Scripting vulnerability OBB-2816727
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Security Vulnerabilities fixed in Firefox ESR 91.12 — Mozilla
When combining CSS properties for overflow and transform, the mouse cursor could interact with different coordinates than displayed. When visiting directory listings for chrome:// URLs as source text, some parameters were reflected...
MAL-2022-1989 Malicious code in coinsquare-css (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50a18783474499132b73bc3c05d97b4fd5b61e9ab108b333a42d2b4707f7fa30 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in coinsquare-css (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50a18783474499132b73bc3c05d97b4fd5b61e9ab108b333a42d2b4707f7fa30 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Fedora: Security Advisory for golang-github-chris-ramon-douceur (FEDORA-2022-3969b64d4b)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora: Security Advisory for douceur (FEDORA-2022-3969b64d4b)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora: Security Advisory for golang-github-andybalholm-cascadia (FEDORA-2022-3969b64d4b)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 35 Update: golang-github-chris-ramon-douceur-0.2.0-5.20200910gitf346305.fc35
A simple CSS parser and inliner in Go...
[SECURITY] Fedora 35 Update: golang-github-andybalholm-cascadia-1.2.0-6.fc35
The Cascadia package implements CSS selectors for use with the parse trees produced by the html package...
[SECURITY] Fedora 35 Update: douceur-0.2.0-14.fc35
A simple CSS parser and inliner in Go...
Avoiding <img> layout shifts: aspect-ratio vs width & height attributes
By default, an takes up zero space until the browser loads enough of the image to know its dimensions: &origin=source&to=/c/senna-d1c8a036.jpg When you run the demo, you'll see the immediately. Then, after a few seconds, this paragraph and subsequent page content shifts downwards to make room for...
museojuansantamaria.go.cr Cross Site Scripting vulnerability OBB-2753774
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
The vulnerability of the Thunderbird email client and the Firefox ESR browser lies in a error during the processing of CSS style sheets accessible through internal URIs, such as “resource:”. This allows attackers to circumvent the implemented content security policies.
The vulnerability of the Thunderbird email client and the Firefox ESR browser is related to an error in processing CSS style sheets that are accessed through internal URIs, as “resource:”. Exploiting this vulnerability can allow a malicious actor to bypass implemented content security policies...