Lucene search
K

18 matches found

AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.3 views

Astra Linux - уязвимость в firefox

An attacker was able to insert an event handler into a privileged object, allowing arbitrary JavaScript execution in the parent process. Note: This vulnerability only affects Desktop Firefox; mobile versions of Firefox are not affected. This vulnerability applies to Firefox versions earlier than...

8.4CVSS7.4AI score0.01405EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/12 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2024-29944

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker was able to inject an event handler into a privileged object that would allow arbitrary JavaScript execution in the parent process. Note: This...

8.4CVSS8.4AI score0.01405EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2024/03/25 12:0 a.m.38 views

RHEL 8 : firefox (RHSA-2024:1489)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:1489 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...

8.8CVSS7.8AI score0.01767EPSS
Exploits4References23
SUSE CVE
SUSE CVE
added 2024/03/23 3:34 a.m.3 views

SUSE CVE-2024-29944

An attacker was able to inject an event handler into a privileged object that would allow arbitrary JavaScript execution in the parent process. Note: This vulnerability affects Desktop Firefox only, it does not affect mobile versions of Firefox. This vulnerability affects Firefox 124.0.1 and...

8.8CVSS8.6AI score0.01405EPSS
Exploits0References6
Tenable Nessus
Tenable Nessus
added 2024/03/23 12:0 a.m.29 views

Slackware Linux 15.0 / current mozilla-firefox Vulnerability (SSA:2024-083-01)

The version of mozilla-firefox installed on the remote host is prior to 115.9.1esr. It is, therefore, affected by a vulnerability as referenced in the SSA:2024-083-01 advisory. - An attacker was able to inject an event handler into a privileged object that would allow arbitrary JavaScript executi...

8.4CVSS8.5AI score0.01405EPSS
Exploits0References2
NVD
NVD
added 2024/03/22 1:15 p.m.16 views

CVE-2024-29944

An attacker was able to inject an event handler into a privileged object that would allow arbitrary JavaScript execution in the parent process. Note: This vulnerability affects Desktop Firefox only, it does not affect mobile versions of Firefox. This vulnerability affects Firefox 124.0.1 and...

8.4CVSS6.7AI score0.01405EPSS
Exploits0References5
OSV
OSV
added 2024/03/22 1:15 p.m.2 views

DEBIAN-CVE-2024-29944

An attacker was able to inject an event handler into a privileged object that would allow arbitrary JavaScript execution in the parent process. Note: This vulnerability affects Desktop Firefox only, it does not affect mobile versions of Firefox. This vulnerability affects Firefox 124.0.1 and...

8.4CVSS8.1AI score0.01405EPSS
Exploits0References1
OSV
OSV
added 2024/03/22 1:15 p.m.6 views

CVE-2024-29944

An attacker was able to inject an event handler into a privileged object that would allow arbitrary JavaScript execution in the parent process. Note: This vulnerability affects Desktop Firefox only, it does not affect mobile versions of Firefox. This vulnerability affects Firefox 124.0.1 and...

8.4CVSS7.6AI score
Exploits0References5
Vulnrichment
Vulnrichment
added 2024/03/22 12:55 p.m.17 views

CVE-2024-29944

An attacker was able to inject an event handler into a privileged object that would allow arbitrary JavaScript execution in the parent process. Note: This vulnerability affects Desktop Firefox only, it does not affect mobile versions of Firefox. This vulnerability affects Firefox 124.0.1 and...

5.8AI score0.01405EPSS
Exploits0References5
AlpineLinux
AlpineLinux
added 2024/03/22 12:55 p.m.34 views

CVE-2024-29944

An attacker was able to inject an event handler into a privileged object that would allow arbitrary JavaScript execution in the parent process. Note: This vulnerability affects Desktop Firefox only, it does not affect mobile versions of Firefox. This vulnerability affects Firefox 124.0.1 and...

8.4CVSS6.9AI score0.01405EPSS
Exploits0
OSV
OSV
added 2024/03/22 12:0 a.m.2 views

UBUNTU-CVE-2024-29944

An attacker was able to inject an event handler into a privileged object that would allow arbitrary JavaScript execution in the parent process. Note: This vulnerability affects Desktop Firefox only, it does not affect mobile versions of Firefox. This vulnerability affects Firefox 124.0.1 and...

8.4CVSS7.4AI score0.01405EPSS
Exploits0References6
Tenable Nessus
Tenable Nessus
added 2024/03/22 12:0 a.m.28 views

Mozilla Firefox < 124.0.1

The version of Firefox installed on the remote Windows host is prior to 124.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2024-15 advisory. - An attacker was able to inject an event handler into a privileged object that would allow arbitrary JavaScript...

9.8CVSS8.5AI score0.53858EPSS
Exploits2References3
UbuntuCve
UbuntuCve
added 2024/03/22 12:0 a.m.51 views

CVE-2024-29944

An attacker was able to inject an event handler into a privileged object that would allow arbitrary JavaScript execution in the parent process. Note: This vulnerability affects Desktop Firefox only, it does not affect mobile versions of Firefox. This vulnerability affects Firefox 124.0.1 and...

8.4CVSS7.4AI score0.01405EPSS
Exploits0References5
OpenVAS
OpenVAS
added 2021/11/16 12:0 a.m.7 views

Mozilla Firefox Security Advisory (MFSA2015-10) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

7.4AI score
Exploits0References7
The Hacker News
The Hacker News
added 2019/06/19 2:59 a.m.2 views

Firefox Releases Critical Patch Update to Stop Ongoing Zero-Day Attacks

Important Update 21 June 2019— Mozilla on Thursday released another update Firefox version 67.0.4 to patch a second zero-day vulnerability. If you use the Firefox web browser, you need to update it right now. Mozilla earlier today released Firefox 67.0.3 and Firefox ESR 60.7.1 versions to patch a...

8.8CVSS9AI score0.84291EPSS
Exploits7
Debian CVE
Debian CVE
added 2018/06/11 9:0 p.m.32 views

CVE-2016-5298

A mechanism where disruption of the loading of a new web page can cause the previous page's favicon and SSL indicator to not be reset when the new page is loaded. Note: this issue only affects Firefox for Android. Desktop Firefox is unaffected. This vulnerability affects Firefox 50...

6.5CVSS8.1AI score0.00639EPSS
Exploits1
CNVD
CNVD
added 2016/11/17 12:0 a.m.2 views

Mozilla Firefox is vulnerable

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. Mozilla Firefox has a security vulnerability. Allow SSL indicators may mislead users about the real URLs visited. Note: This issue only affects Firefox for Android. Desktop Firefox is not...

6.5CVSS8.4AI score0.00639EPSS
Exploits1References1
Mozilla
Mozilla
added 2015/02/05 12:0 a.m.51 views

Update OpenH264 plugin to version 1.3 — Mozilla

Mozilla and Cisco developers as well as security researcher Nils reported security and stability bugs affecting the OpenH264 plugin version 1.1. This plugin was available to Desktop Firefox 34 and 35 users as an on-demand download as needed. Security researchers Nils and Hanno Böck also reported...

6.9AI score
Exploits0References6Affected Software2
Rows per page
Query Builder