Lucene search
+L

798 matches found

BDU FSTEC
BDU FSTEC
added 2020/02/17 12:00 a.m.9 views

The vulnerability of the FTP file transfer protocol in Firefox browsers allows attackers to compromise data integrity.

The vulnerability of the FTP file transfer protocol in Firefox is related to an initialization error in the modal notification that can be triggered when the page is reloaded. Exploiting this vulnerability allows a remote attacker to compromise data integrity...

4.3CVSS6.7AI score0.00863EPSS
SaveExploits1References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2020/02/17 12:00 a.m.9 views

The vulnerability of Firefox browser, related to the lack of protection for service data, allows attackers to gain access to confidential information.

The vulnerability of Firefox browsers is related to the lack of protection for service data. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...

7.8CVSS7.5AI score0.00807EPSS
SaveExploits0References5Affected Software3
BDU FSTEC
BDU FSTEC
added 2020/02/17 12:00 a.m.9 views

The vulnerability of Firefox browser, related to incorrect application installation when pressing the ALT + a keys on the keyboard, allows the attacker to compromise data integrity.

The vulnerability of Firefox browsers is related to the incorrect installation of extensions when pressing the ALT + a keys on the keyboard. This allows extensions to be installed without user confirmation. Exploiting this vulnerability can enable an attacker to compromise data integrity remotely...

7.1CVSS7AI score0.00828EPSS
SaveExploits0References5Affected Software3
BDU FSTEC
BDU FSTEC
added 2020/02/17 12:00 a.m.10 views

Vulnerability of the window.global component in the Firefox browser: This component allows a hacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the window.global component in the Firefox browser is related to an error in the Object.getOwnPropertyNameswindow method. This error allows for bypassing the isolated programming environment. Exploiting this vulnerability can enable a remote attacker to gain access to...

8.3CVSS7.7AI score0.01573EPSS
SaveExploits0References5Affected Software3
BDU FSTEC
BDU FSTEC
added 2020/02/17 12:00 a.m.14 views

The vulnerability of the Firefox browser’s WebRTC extension, which allows a perpetrator to compromise data integrity

The vulnerability of the Firefox browser’s WebRTC extension is related to a display-related error in the origin domain. Exploiting this vulnerability could allow an attacker to compromise the integrity of data...

5.3CVSS6.8AI score0.00457EPSS
SaveExploits0References5Affected Software3
BDU FSTEC
BDU FSTEC
added 2020/02/17 12:00 a.m.11 views

The vulnerability of Firefox browser, related to the lack of protection for service data, allows attackers to gain access to confidential information.

The vulnerability of Firefox browsers is related to the lack of protection for service data. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...

7.8CVSS7.5AI score0.01032EPSS
SaveExploits0References5Affected Software3
BDU FSTEC
BDU FSTEC
added 2020/02/17 12:00 a.m.17 views

The vulnerability of Firefox browser, related to the execution of operations beyond the buffer in memory, allows attackers to gain access to confidential data.

The vulnerability of the Firefox browser is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...

7.8CVSS7.9AI score0.01029EPSS
SaveExploits0References5Affected Software3
BDU FSTEC
BDU FSTEC
added 2020/02/17 12:00 a.m.14 views

The vulnerability of Firefox browser, related to the lack of measures taken to protect the structure of web pages, allows attackers to compromise data integrity.

The vulnerability of Firefox browsers is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to compromise the integrity of data...

6.1CVSS7AI score0.01085EPSS
SaveExploits0References5Affected Software3
BDU FSTEC
BDU FSTEC
added 2020/02/17 12:00 a.m.10 views

The vulnerability of the webcal resource identifier in the Firefox browser, related to the lack of protective measures for the website structure, allows attackers to compromise data integrity.

The vulnerability of the webcal resource identifier in the Firefox browser is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the data...

6.1CVSS7AI score0.00822EPSS
SaveExploits0References5Affected Software3
BDU FSTEC
BDU FSTEC
added 2020/02/17 12:00 a.m.58 views

The vulnerability of Firefox browser, related to an error in displaying the domain name in the address bar, allows attackers to compromise data integrity.

The vulnerability of Firefox browsers is related to an error in the display of the domain name in the address bar. Exploiting this vulnerability can allow a remote attacker to compromise the integrity of data...

6.5CVSS7.2AI score0.00828EPSS
SaveExploits0References5Affected Software3
ThreatPost
ThreatPost
added 2020/02/12 7:14 p.m.93 views

Mozilla Firefox 73 Browser Update Fixes High-Severity RCE Bugs

Mozilla has launched the latest version of its Firefox browser, which knocks out high-severity security flaws that leave systems open to attack by a remote adversary. The patched version of Mozilla’s browser, launched on Tuesday, is Firefox 73 and Firefox ESR 68.5. The Firefox ESR browser is its...

6.8CVSS9.9AI score0.05272EPSS
SaveExploits1References12
BDU FSTEC
BDU FSTEC
added 2020/01/20 12:00 a.m.8 views

The vulnerability of the IonMonkey JIT-compiler for Firefox and Firefox ESR browsers lies in the access to resources through incompatible types. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the IonMonkey JavaScript compiler for Firefox and Firefox ESR browsers is related to a data type conversion error. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service interruptions through a...

10CVSS8AI score0.46589EPSS
SaveExploits7References8Affected Software4
RedHat Linux
RedHat Linux
added 2020/01/13 2:52 p.m.12 views

Mozilla: CSS sanitization does not escape HTML tags

When pasting a style tag from the clipboard into a rich text editor, the CSS sanitizer does not escape and characters. Because the resulting string is pasted directly into the text node of the element this does not result in a direct injection into the webpage; however, if a webpage subsequently...

6.1CVSS7.3AI score0.01988EPSS
SaveExploits0References5
CNVD
CNVD
added 2020/01/08 12:00 a.m.7 views

Mozilla Firefox and Mozilla Firefox ESR Cross-Site Scripting Vulnerability (CNVD-2020-01175)

Mozilla Firefox and Mozilla Firefox ESR are both products of the Mozilla Foundation in the U.S. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. A cross-site scripting vulnerability exists in Mozilla Firefox ESR versions prio...

6.1CVSS8.4AI score0.01988EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/01/08 12:00 a.m.6 views

Mozilla Firefox Security Bypass Vulnerability (CNVD-2020-02975)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox prior to version 72, which stems from the program not applying content security policies to the XSL stylesheets of XML documents. An attacker could us...

6.5CVSS8.8AI score0.01145EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/01/08 12:00 a.m.8 views

Mozilla Firefox and Mozilla Firefox ESR Memory Misreference Vulnerability (CNVD-2020-02150)

Mozilla Firefox and Mozilla Firefox ESR are both products of the Mozilla Foundation in the U.S. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. A security vulnerability exists in Mozilla Firefox version 71 and Mozilla Firefo...

8.8CVSS9.2AI score0.02455EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:00 a.m.7 views

The vulnerability of the Firefox browser arises from an operation that goes beyond the buffer in memory, allowing a hacker to execute arbitrary code.

The vulnerability of the Firefox browser arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.3AI score0.01745EPSS
SaveExploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:00 a.m.8 views

The vulnerability of Firefox browsers arises from the lack of a warning about mixed content when the favicon of a web page is loaded via HTTP. This allows attackers to perform spoofing attacks.

The vulnerability of Firefox browsers arises from the lack of a warning about mixed content when the favicon of a web page is loaded via HTTP. Exploiting this vulnerability allows a remote attacker to perform spoofing attacks...

5.3CVSS6.9AI score0.02107EPSS
SaveExploits0References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:00 a.m.11 views

The vulnerability of the Firefox browser’s API component, which allows a hacker to replace the user interface

The vulnerability of the Firefox browser’s API is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to replace the user interface using a specially crafted title parameter...

5CVSS6.7AI score0.01451EPSS
SaveExploits0References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:00 a.m.8 views

The vulnerability of the Skia library used by browsers such as Firefox ESR, Firefox, and Google Chrome allows a malicious actor to write arbitrary files to the device’s file system.

The vulnerability of the Skia library used by browsers such as Firefox ESR, Firefox, and Google Chrome relates to writing beyond the buffer boundaries of memory. Exploiting this vulnerability allows a malicious actor to write arbitrary files into the device’s file system remotely...

10CVSS8AI score0.08735EPSS
SaveExploits2References13Affected Software4
Rows per page
Query Builder