UBUNTU-CVE-2017-5391

Special "about:" pages used by web content, such as RSS feeds, can load privileged "about:" pages in an iframe. If a content-injection bug were found in one of those pages this could allow for potential privilege escalation. This vulnerability affects Firefox 51...

Fidelix FX-20 Series Controllers Directory Traversal Vulnerability

Fidelix FX-20 series controllers are FX-20 series building controller products from Fidelix Finland. A directory traversal vulnerability exists in Fidelix FX-20 series controllers versions prior to 11.50.19, which arises from the program failing to adequately filter user-submitted input. An...

Mozilla: Use-after-free while manipulating DOM events and audio elements (MFSA 2016-94, MFSA 2016-95)

Use-after-free while manipulating DOM events and removing audio elements due to errors in the handling of node adoption. This vulnerability affects Firefox 50.1, Firefox ESR 45.6, and Thunderbird 45.6...

Mozilla Firefox Security Bypass Vulnerability (CNVD-2016-12692)

Mozilla Firefox and Firefox ESR are both browser products developed by the Mozilla Foundation in the U.S. Firefox is an open source web browser; Firefox ESR is an extended support version of Firefox. A security vulnerability exists in Mozilla Firefox versions prior to 50.1 and Firefox ESR version...

Mozilla Firefox add-ons SDK cross-site scripting vulnerability

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. A cross-site scripting vulnerability exists in versions of Mozilla Firefox prior to 50.1. An attacker can exploit the vulnerability to steal cookie-based authentication...

CVE-2016-9211

A vulnerability in TCP port management in Cisco ONS 15454 Series Multiservice Provisioning Platforms could allow an unauthenticated, remote attacker to cause the controller card to unexpectedly reload. More Information: CSCuw26032. Known Affected Releases: 10.51...

UBUNTU-CVE-2016-9898

Use-after-free resulting in potentially exploitable crash when manipulating DOM subtrees in the Editor. This vulnerability affects Firefox 50.1, Firefox ESR 45.6, and Thunderbird 45.6...

UBUNTU-CVE-2016-9896

Use-after-free while manipulating the "navigator" object within WebVR. Note: WebVR is not currently enabled by default. This vulnerability affects Firefox 50.1...

chromium-browser: universal xss in blink

Blink in Google Chrome prior to 55.0.2883.75 for Linux, Windows and Mac, incorrectly handles deferred page loads, which allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page...

Google Chrome PDFium File Download Bypass Vulnerability

Google Chrome is the United States Google Google company developed a Web browser. PDFium is one of the open source PDF rendering engine. A security vulnerability exists in PDFium in versions of Google Chrome prior to 55.0.2883.75. An attacker can exploit this vulnerability to obtain sensitive...

UBUNTU-CVE-2016-9073

WebExtensions can bypass security checks to load privileged URLs and potentially escape the WebExtension sandbox. This vulnerability affects Firefox 50...

Mozilla Firefox Denial of Service Vulnerability (CNVD-2016-11418)

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. A denial of service vulnerability exists in versions of Mozilla Firefox prior to 50. An attacker can exploit this vulnerability to cause a denial of service crash with a malicious URL...

Mozilla Firefox Memory Misreference Vulnerability (CNVD-2016-11415)

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. A memory misreference vulnerability exists in the 'nsINode::ReplaceOrInsertBefore' function in versions of Mozilla Firefox prior to 50. An attacker could exploit this vulnerability to cause a...

Mozilla Firefox elevation of privilege vulnerability (CNVD-2016-11412)

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. A privilege extraction vulnerability exists in the Mozilla Maintenance Service in versions of Mozilla Firefox prior to 50 on Windows-based platforms. An attacker can exploit this vulnerability ...

Mozilla Firefox Timing Attack Vulnerability

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. A timing attack vulnerability exists in the Canvas filter in versions of Mozilla Firefox prior to 50. An attacker can exploit this vulnerability to conduct timing attacks...

UBUNTU-CVE-2016-9076

An issue where a "" dropdown menu can be used to cover location bar content, resulting in potential spoofing attacks. This attack requires e10s to be enabled in order to function. This vulnerability affects Firefox 50...

Mozilla Firefox Memory Misreference Vulnerability (CNVD-2016-11417)

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. A memory misreference vulnerability exists in the 'nsINode::ReplaceOrInsertBefore' function in versions of Mozilla Firefox prior to 50. An attacker could exploit this vulnerability to cause a...

UBUNTU-CVE-2016-9070

A maliciously crafted page loaded to the sidebar through a bookmark can reference a privileged chrome window and engage in limited JavaScript operations violating cross-origin protections. This vulnerability affects Firefox 50...

UBUNTU-CVE-2016-5292

During URL parsing, a maliciously crafted URL can cause a potentially exploitable crash. This vulnerability affects Firefox 50...

Mozilla Firefox Denial of Service Vulnerability (CNVD-2016-11416)

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. A denial of service vulnerability exists in the 'nsRefreshDriver' function in versions of Mozilla Firefox prior to 50. An attacker can exploit this vulnerability to cause a denial of service...