28 matches found
EUVD-2017-16796
Malware in sbrugna...
EUVD-2017-14502
Malware in sbrugna...
EUVD-2018-4337
Malware in sbrugna...
EUVD-2017-16731
Malware in sbrugna...
EUVD-2025-22362
Malicious code in bioql PyPI...
EUVD-2025-7438
Malicious code in bioql PyPI...
EUVD-2025-1965
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2025-8028
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Red Hat Enterprise Linux - firefox: thunderbird: Large branch table could lead to truncated instruction Ubuntu Linux - On arm64, a WASM brtable instruction with...
Linux Distros Unpatched Vulnerability : CVE-2024-7525
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - It was possible for a web extension with minimal permissions to create a StreamFilter which could be used to read and modify the response body of requests on an...
Linux Distros Unpatched Vulnerability : CVE-2025-8027
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Red Hat Enterprise Linux - firefox: thunderbird: JavaScript engine only wrote partial return value to stack Ubuntu Linux - On 64-bit platforms IonMonkey-JIT onl...
CVE-2025-8036
Thunderbird cached CORS preflight responses across IP address changes. This allowed circumventing CORS with DNS rebinding. This vulnerability was fixed in Firefox 141, Firefox ESR 140.1, Thunderbird 141, and Thunderbird 140.1...
CVE-2025-8033
The JavaScript engine in Mozilla Firefox and Thunderbird contains a vulnerability where it fails to correctly handle closed generators. This flaw allows an attacker to resume these generators, leading to a nullptr dereference . Affected versions include Firefox < 141, Firefox ESR < 115.26, ...
CVE-2025-8039
Mozilla Firefox , Firefox ESR , and the Thunderbird email client are affected by an information disclosure vulnerability where search terms persist in the URL bar even after navigating away from the search page. This exposure can allow an attacker to compromise the confidentiality and integrity o...
CVE-2025-8030
Insufficient escaping in the "Copy as cURL" feature in Mozilla Firefox and Thunderbird could be used to trick users into executing unexpected code. This vulnerability affects Firefox versions prior to 141, Firefox ESR versions prior to 128.13 and 140.1, and Thunderbird versions prior to 141, 128....
CVE-2025-6424
A use-after-free in FontFaceSet resulted in a potentially exploitable crash. This vulnerability affects Firefox 140, Firefox ESR 115.25, Firefox ESR 128.12, Thunderbird 140, and Thunderbird 128.12...
CVE-2025-6430
Mozilla Firefox , Firefox ESR , and Thunderbird are vulnerable to a cross-site scripting (XSS) attack due to the HTTP Header Handler component incorrectly ignoring the Content-Disposition header when a file is included via an embed or object tag. This flaw allows a remote attacker to perform ...
CVE-2025-6424
A use-after-free vulnerability exists in the FontFaceSet interface of Mozilla products, specifically affecting Firefox , Firefox ESR , and Thunderbird . This memory error can be exploited by an attacker to trigger a service failure (denial of service). The vulnerability has been addressed in Fire...
CVE-2025-5262
A double-free could have occurred in vpxcodecencinitmulti after a failed allocation when initializing the encoder for WebRTC. This could have caused memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird 139 and Thunderbird 128.11...
CVE-2025-4918
An attacker was able to perform an out-of-bounds read or write on a JavaScript Promise object. This vulnerability affects Firefox 138.0.4, Firefox ESR 128.10.1, Firefox ESR 115.23.1, Thunderbird 128.10.2, and Thunderbird 138.0.2...