Lucene search
+L

6769 matches found

osv_oesa
osv_oesa
•added 2025/08/22 11:09 a.m.•20 views

OESA-2025-2065 ansible security update

\ Security Fixes: A flaw was found in Ansible Engine affecting Ansible Engine versions 2.7.x before 2.7.17 and 2.8.x before 2.8.11 and 2.9.x before 2.9.7 as well as Ansible Tower before and including versions 3.4.5 and 3.5.5 and 3.6.3 when using modules which decrypts vault files such as assemble...

5.5CVSS6.4AI score0.00364EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/08/21 11:59 a.m.•17 views

CVE-2025-9179

A flaw was found in Thunderbird and Firefox. The Mozilla Foundation's Security Advisory describes the following issue: An attacker is able to perform memory corruption in the GMP process which process encrypted media. This process is also heavily sandboxed, but represents slightly different...

9.8CVSS8.3AI score0.00612EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
•added 2025/08/20 11:33 p.m.•13 views

SUSE CVE-2025-9179

An attacker was able to perform memory corruption in the GMP process which processes encrypted media. This process is also heavily sandboxed, but represents slightly different privileges from the content process. This vulnerability was fixed in Firefox 142, Firefox ESR 115.27, Firefox ESR 128.14,...

7.5CVSS8.4AI score0.00612EPSS
SaveExploits0References11
Qualys Blog
Qualys Blog
•added 2025/08/20 3:00 p.m.•28 views

How Agentic AI Helps with Adaptive Cloud Risk Assessment with Agent Vikram

In fast-moving cloud environments like AWS, security teams face an uncomfortable truth: not every EC2 instance is being scanned, existing tools don’t work across a diverse environment that includes long-lived and ephemeral assets, and visibility is never complete. Qualys research found that over...

6.8AI score
SaveExploits0
osv_debian
osv_debian
•added 2025/08/19 9:15 p.m.•9 views

DEBIAN-CVE-2025-9179

An attacker was able to perform memory corruption in the GMP process which processes encrypted media. This process is also heavily sandboxed, but represents slightly different privileges from the content process. This vulnerability was fixed in Firefox 142, Firefox ESR 115.27, Firefox ESR 128.14,...

9.8CVSS8.4AI score0.00612EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
•added 2025/08/19 9:15 p.m.•16 views

CVE-2025-9179

An attacker was able to perform memory corruption in the GMP process which processes encrypted media. This process is also heavily sandboxed, but represents slightly different privileges from the content process. This vulnerability affects Firefox 142, Firefox ESR 115.27, Firefox ESR 128.14,...

9.8CVSS8.3AI score0.00612EPSS
SaveExploits0References10
osv_cve
osv_cve
•added 2025/08/19 9:15 p.m.•13 views

CVE-2025-9179

An attacker was able to perform memory corruption in the GMP process which processes encrypted media. This process is also heavily sandboxed, but represents slightly different privileges from the content process. This vulnerability affects Firefox 142, Firefox ESR 115.27, Firefox ESR 128.14,...

9.8CVSS8.3AI score0.00612EPSS
SaveExploits0References10
osv_ubuntu
osv_ubuntu
•added 2025/08/19 9:15 p.m.•47 views

UBUNTU-CVE-2025-9179

An attacker was able to perform memory corruption in the GMP process which processes encrypted media. This process is also heavily sandboxed, but represents slightly different privileges from the content process. This vulnerability was fixed in Firefox 142, Firefox ESR 115.27, Firefox ESR 128.14,...

9.8CVSS8.4AI score0.00612EPSS
SaveExploits0References14
Vulnrichment
Vulnrichment
•added 2025/08/19 8:33 p.m.•8 views

CVE-2025-9179 Sandbox escape due to invalid pointer in the Audio/Video: GMP component

An attacker was able to perform memory corruption in the GMP process which processes encrypted media. This process is also heavily sandboxed, but represents slightly different privileges from the content process. This vulnerability was fixed in Firefox 142, Firefox ESR 115.27, Firefox ESR 128.14,...

8.4AI score0.00612EPSS
SaveExploits0References8
CVE
CVE
•added 2025/08/19 8:33 p.m.•177 views

CVE-2025-9179

Mozilla Firefox and Thunderbird are affected by a memory corruption vulnerability in the GMP process , which handles encrypted media. Although this process is heavily sandboxed, it operates with different privileges than the content process. Exploitation of this vulnerability may allow for a sand...

9.8CVSS8.4AI score0.00612EPSS
SaveExploits0References10Affected Software2
attackerkb
attackerkb
•added 2025/08/19 8:33 p.m.•37 views

CVE-2025-9179

An attacker was able to perform memory corruption in the GMP process which processes encrypted media. This process is also heavily sandboxed, but represents slightly different privileges from the content process. This vulnerability was fixed in Firefox 142, Firefox ESR 115.27, Firefox ESR 128.14,...

9.8CVSS8.5AI score0.00612EPSS
SaveExploits0References9
Debian CVE
Debian CVE
•added 2025/08/19 8:33 p.m.•16 views

CVE-2025-9179

An attacker was able to perform memory corruption in the GMP process which processes encrypted media. This process is also heavily sandboxed, but represents slightly different privileges from the content process. This vulnerability was fixed in Firefox 142, Firefox ESR 115.27, Firefox ESR 128.14,...

9.8CVSS8.4AI score0.00612EPSS
SaveExploits0
Cvelist
Cvelist
•added 2025/08/19 8:33 p.m.•48 views

CVE-2025-9179 Sandbox escape due to invalid pointer in the Audio/Video: GMP component

An attacker was able to perform memory corruption in the GMP process which processes encrypted media. This process is also heavily sandboxed, but represents slightly different privileges from the content process. This vulnerability was fixed in Firefox 142, Firefox ESR 115.27, Firefox ESR 128.14,...

0.00612EPSS
SaveExploits0References8
The Hacker News
The Hacker News
•added 2025/08/19 11:24 a.m.•30 views

U.K. Government Drops Apple Encryption Backdoor Order After U.S. Civil Liberties Pushback

The U.K. government has apparently abandoned its plans to force Apple to weaken encryption protections and include a backdoor that would have enabled access to the protected data of U.S. citizens. U.S. Director of National Intelligence DNI Tulsi Gabbard, in a statement posted on X, said the U.S...

6.7AI score
SaveExploits0
Hacker One
Hacker One
•added 2025/08/19 11:17 a.m.•34 views

Nextcloud: Files drop share links for end-to-end encrypted folders allowed to drop files into other folders of the share owner

Files drop share links for end-to-end encrypted folders allowed to drop files into other folders of the share owner...

3.5CVSS5.8AI score0.00203EPSS
SaveExploits0
Mend
Mend
•added 2025/08/19 9:16 a.m.•9 views

CVE-2014-4179

Versions of "yar" prior to 2.2.0 are affected by a denial of service vulnerability related to an invalid encrypted session cookie value. When an invalid encryped session cookie value is provided, the process will crash...

8.7CVSS5.9AI score0.02591EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/08/19 12:00 a.m.•20 views

PT-2025-33866

Name of the Vulnerable Software and Affected Versions: Firefox versions prior to 142 Firefox ESR versions prior to 115.27 Firefox ESR versions prior to 128.14 Firefox ESR versions prior to 140.2 Thunderbird versions prior to 142 Thunderbird versions prior to 128.14 Thunderbird versions prior to...

10CVSS8.4AI score0.00612EPSS
SaveExploits0
Mozilla
Mozilla
•added 2025/08/19 12:00 a.m.•35 views

Security Vulnerabilities fixed in Firefox ESR 115.27 — Mozilla

An attacker was able to perform memory corruption in the GMP process which processes encrypted media. This process is also heavily sandboxed, but represents slightly different privileges from the content process. Same-origin policy bypass in the Graphics: Canvas2D component. Memory safety bugs...

9.8CVSS7.4AI score0.00612EPSS
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
•added 2025/08/19 12:00 a.m.•13 views

Mozilla Firefox ESR < 115.27

The version of Firefox ESR installed on the remote Windows host is prior to 115.27. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-65 advisory. - Memory safety bugs present in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1,...

9.8CVSS7.9AI score0.00612EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2025/08/19 12:00 a.m.•8 views

Mozilla Firefox ESR < 128.14

The version of Firefox ESR installed on the remote Windows host is prior to 128.14. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-66 advisory. - Memory safety bugs present in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1,...

9.8CVSS7.9AI score0.00612EPSS
SaveExploits0References5
Rows per page
Query Builder