Information disclosure

An exploitable Information Disclosure vulnerability exists in the ACEManager EmbeddedAceGetTask.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. The EmbeddedAceTLGetTask.cgi executable is used to retrieve MSCII configuration values within the configuration manager of the AirLink ES450...

CVE-2018-4067

An exploitable information disclosure vulnerability exists in the ACEManager templateload.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A specially crafted HTTP request can cause a information leak, resulting in the disclosure of internal paths and files. An attacker can make an...

CVE-2018-4063

An exploitable remote code execution vulnerability exists in the upload.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A specially crafted HTTP request can upload a file, resulting in executable code being uploaded, and routable, to the webserver. An attacker can make an authenticat...

CVE-2018-4063

CVE-2018-4063 affects Sierra Wireless AirLink ES450 FW 4.9.3. The vulnerability is in the ACEManager/upload.cgi functionality and allows an authenticated user to upload a file that results in executable code being uploaded to the webserver, enabling remote code execution. This is a unrestricted f...

CVE-2018-4061

An exploitable command injection vulnerability exists in the ACEManager iplogging.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A specially crafted HTTP request can inject arbitrary commands, resulting in arbitrary command execution. An attacker can send an authenticated HTTP reque...

Denial Of Service (DoS)

Firefox, Firefox ESR and Thunderbird are vulnerable to denial of service attacks. A remote unauthenticated attacker could exploit the vulnerable Window Resizing component when re-computing layout for a "marquee" element during window resizing where the updated style object is freed while still in...

Denial Of Service (DoS)

Firefox is vulnerable to use-after-free vulnerability. This occurs when manipulating the DOM during the resize event of an image element. This could result in a potentially exploitable crash when the freed elements are accessed if these elements have been freed due to lack of strong references...

Denial Of Service (DoS)

Mozilla Firefox is vulnerable to use-after-free vulnerability. This occurs when manipulating ranges in selections with one node inside a native anonymous tree and one node outside of it resulting a potentially exploitable crash...

Out-of-bounds Write

Thunderbird, Firefox ESR, and Firefox are vulnerable to out-of-bounds write. ClearKeyDecryptor function can be exploited by a remote attacker to cause out-of-bounds write via decrypting some Clearkey-encrypted media content. This may lead to writing of arbitrary data within memory, resulting in a...

Buffer Overflow

Thunderbird, Firefox ESR, and Firefox are vulnerable to buffer overflow. An unauthenticated remote attacker could exploit the flaw in WebGL with the use of triggerable by web content, resulting in a potentially exploitable crash...

Denial Of Service (DoS)

firefox is vulnerable to use-after-free vulnerability. Manipulating DOM subtrees in the Editor may result in potentially exploitable crash...

Denial Of Service (DoS)

Mozilla Firefox is vulnerable to buffer overflow vulnerability. This is due to memory allocation issues when handling large amounts of incoming data resulting a potentially exploitable crash...

Use-After-Free

mozilla firefox is vulnerable to use-after-free vulnerability. This occurs during WebRTC session shutdown when DTLS objects in memory are freed while still actively in use resulting in a potentially exploitable crash...

Arbitrary Code Execution

mozilla firefox is vulnerable to Heap-based buffer overflow vulnerability. Remote attackers can execute arbitrary code via directional content in an SVG format graphics resulting in a potentially exploitable crash...

Use-After-Free

Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...

DHS Shortens Deadline For Gov Agencies to Fix Critical Flaws

A Department of Homeland Security DHS order now requires agencies to remediate critical vulnerabilities discovered on their systems in 15 days – cutting in half the previous deadline of 30 days. That’s according to a Tuesday binding directive, which is a compulsory order for federal, executive...

CVE-2019-9795

A vulnerability where type-confusion in the IonMonkey just-in-time JIT compiler could potentially be used by malicious JavaScript to trigger a potentially exploitable crash. This vulnerability affects Thunderbird 60.6, Firefox ESR 60.6, and Firefox 66...

CVE-2019-9792

The IonMonkey just-in-time JIT compiler can leak an internal JSOPTIMIZEDOUT magic value to the running script during a bailout. This magic value can then be used by JavaScript to achieve memory corruption, which results in a potentially exploitable crash. This vulnerability affects Thunderbird...

CVE-2019-9791

The type inference system allows the compilation of functions that can cause type confusions between arbitrary objects when compiled through the IonMonkey just-in-time JIT compiler and when the constructor function is entered through on-stack replacement OSR. This allows for possible arbitrary...

Design/Logic Flaw

A use-after-free vulnerability can occur while playing a sound notification in Thunderbird. The memory storing the sound data is immediately freed, although the sound is still being played asynchronously, leading to a potentially exploitable crash. This vulnerability affects Thunderbird 60.5...