7513 matches found
In specific HSTS configurations an attacker could have bypassed HSTS on a subdomain. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunderbird < 115.7.
...
ext4: avoid journaling sb update on error if journal is destroying
...
Memory corruption in the networking stack could have led to a potentially exploitable crash. This vulnerability affects Firefox < 125, Firefox ESR < 115.12, and Thunderbird < 115.12.
...
Updated aide packages fix vulnerabilities
Improper output neutralization potential AIDE detection bypass. CVE-2025-54389 Null pointer dereference after reading incorrectly encoded xattr attributes from database local DoS. CVE-2025-54409...
Important: Red Hat Security Advisory: aide security update
An update for aide is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...
aide: improper output neutralization enables bypassing
A flaw was found in AIDE. This flaw allows an attacker to craft a malicious filename by including terminal escape sequences to hide the addition or removal of the file from the report and tamper with the log output. A local user may exploit this to bypass AIDE's detection of malicious files...
aide: improper output neutralization enables bypassing
A flaw was found in AIDE. This flaw allows an attacker to craft a malicious filename by including terminal escape sequences to hide the addition or removal of the file from the report and tamper with the log output. A local user may exploit this to bypass AIDE's detection of malicious files...
aide: improper output neutralization enables bypassing
A flaw was found in AIDE. This flaw allows an attacker to craft a malicious filename by including terminal escape sequences to hide the addition or removal of the file from the report and tamper with the log output. A local user may exploit this to bypass AIDE's detection of malicious files...
aide: improper output neutralization enables bypassing
A flaw was found in AIDE. This flaw allows an attacker to craft a malicious filename by including terminal escape sequences to hide the addition or removal of the file from the report and tamper with the log output. A local user may exploit this to bypass AIDE's detection of malicious files...
[SECURITY] Fedora 41 Update: docker-buildx-0.27.0-1.fc41
Docker CLI plugin for extended build capabilities with BuildKit...
Linux Distros Unpatched Vulnerability : CVE-2023-4130
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix wrong next length validation of ea buffer in smb2setea There are multiple...
The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird lies in the absence of a “Secure” flag in HTTPS session cookie files. This allows attackers to compromise the privacy and integrity of the protected information.
The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird lies in the absence of a “Secure” flag in the HTTPS session cookie files. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality and integrity of the protected information...
The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the disclosure of information through debugging registration files, allowing an intruder to gain unauthorized access to protected information.
The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird involve the exploitation of registration files for debugging purposes. Exploiting these vulnerabilities allows a malicious actor to gain unauthorized access to protected information from a remote location...
The vulnerability in Mozilla Firefox, Mozilla Firefox ESR, and the email client Mozilla Thunderbird arises from performing operations beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.
The vulnerabilities of Mozilla Firefox, Mozilla Firefox ESR, and the email client Mozilla Thunderbird are related to the execution of operations beyond the buffer boundaries in memory. Exploiting these vulnerabilities allows a remote attacker to execute arbitrary code...
The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to improper code generation management, allowing an attacker to execute arbitrary code.
The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to improper code generation. Exploiting these vulnerabilities allows a remote attacker to execute arbitrary code...
The vulnerabilities of Mozilla Firefox and the Thunderbird email client, related to information representation errors in the user interface, allow attackers to cause service failures.
The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to information representation errors in the user interface. Exploiting these vulnerabilities can allow a malicious actor to cause service failures remotely...
SUSE SLED15: MozillaFirefox / MozillaFirefox-branding-upstream / etc (SUSE-SU-2025:03008-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03008-1 advisory. - Firefox Extended Support Release 140.2.0 ESR MFSA 2025-67 bsc1248162 CVE-2025-9179 bmo1979527...
The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird, related to the use of a zero pointer, allows attackers to compromise the confidentiality of protected information.
The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to the use of a null pointer dereferencing. Exploiting these vulnerabilities can allow an attacker to compromise the confidentiality of protected information from a remote location...
SUSE SLES12: MozillaFirefox / MozillaFirefox-devel / etc (SUSE-SU-2025:03009-1)
The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03009-1 advisory. - Firefox Extended Support Release 140.2.0 ESR MFSA 2025-67 bsc1248162 CVE-2025-9179 bmo1979527: Sandbox escape due to invalid pointer in the...
Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token
Summary If users log in to Coder via OIDC, and the OpenID Identity Provider does not return a refresh token, then Coder may allow their web session to continue beyond the expiration of the token returned by the OpenID Identity Provider. Details When a user logs in via OIDC, Coder stores the OIDC...