Mozilla: Cross-origin POST requests can be made with NPAPI plugins by following 308 redirects

POST requests made by NPAPI plugins, such as Flash, that receive a status 308 redirect response can bypass CORS requirements. This can allow an attacker to perform Cross-Site Request Forgery CSRF attacks. This vulnerability affects Firefox ESR 60.8, Firefox 68, and Thunderbird 60.8...

Mozilla: Caret character improperly escaped in origins

A vulnerability exists where the caret "^" character is improperly escaped constructing some URIs due to it being used as a separator, allowing for possible spoofing of origin attributes. This vulnerability affects Firefox ESR 60.8, Firefox 68, and Thunderbird 60.8...

Mozilla: Compartment mismatch with fetch API

A vulnerability where a JavaScript compartment mismatch can occur while working with the fetch API, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird 60.7, Firefox 67, and Firefox ESR 60.7...

Mozilla Firefox and Mozilla Firefox ESR XMLHttpRequest Memory Misreference Vulnerability

Mozilla Firefox and Mozilla Firefox ESR are both products of the Mozilla Foundation in the U.S. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. A security vulnerability exists in Mozilla Firefox versions prior to 67 and...

Mozilla Firefox and Mozilla Firefox ESR Type Obfuscation Vulnerability

Mozilla Firefox and Mozilla Firefox ESR are both products of the Mozilla Foundation in the U.S. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. A security vulnerability exists in Mozilla Firefox versions prior to 67 and...

Mozilla Firefox and Mozilla Firefox ESR Memory Corruption Vulnerability

Mozilla Firefox and Mozilla Firefox ESR are both products of the Mozilla Foundation in the U.S. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. A security vulnerability exists in Mozilla Firefox version 66 and Firefox ESR...

Mozilla Firefox and Mozilla Firefox ESR Memory Misreference Vulnerability

Mozilla Firefox and Mozilla Firefox ESR are both products of the Mozilla Foundation in the U.S. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. A security vulnerability exists in the chrome event handler in Mozilla Firefox...

Mozilla Firefox and Mozilla Firefox ESR Resource Management Error Vulnerability

Mozilla Firefox and Mozilla Firefox ESR are both products of the Mozilla Foundation in the U.S. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. A resource management error vulnerability exists in Mozilla Firefox versions pri...

Mozilla Firefox and Mozilla Firefox ESR Memory Leak Vulnerability

Mozilla Firefox and Mozilla Firefox ESR are both products of the Mozilla Foundation in the U.S. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. A security vulnerability exists in the Windows sandbox in Mozilla Firefox ESR...

The vulnerability of the Skia library used by web browsers Firefox, Firefox ESR, and the email processing program Thunderbird, related to integer overflow, allows attackers to cause service interruptions.

The vulnerability of the Skia library used in web browsers such as Firefox, Firefox ESR, and the email processing program Thunderbird is related to a numerical overflow vulnerability. Exploiting this vulnerability can allow an attacker to cause service interruptions...

Vulnerability of Firefox web browsers, Firefox ESR, and Thunderbird email client, related to a numerical overflow condition, allowing an attacker to perform write-offs beyond the buffer in memory.

The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird is related to a numerical overflow vulnerability. Exploiting this vulnerability allows an attacker to perform write-offs beyond the buffer in memory...

The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird, related to memory usage after deallocation, allows an attacker to execute arbitrary code or cause a service failure.

The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird relates to the use of memory after deallocation. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure...

The vulnerability of the Skia graphic library in web browsers such as Firefox, Firefox ESR, and the email client Thunderbird allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the Skia graphic library in web browsers such as Firefox, Firefox ESR, and the email client Thunderbird is related to buffer overflow in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a service failure...

DEBIAN-CVE-2017-7772

Heap-based Buffer Overflow in Graphite2 library in Firefox before 54 in lz4::decompress function...

The vulnerability of the __proto__ mutation function in the JIT-compiler of the Firefox ESR browser allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the proto mutation function in the JIT-compiler of the Firefox ESR browser is related to type confusion errors. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Mozilla Firefox and Firefox ESR IonMonkey JIT Compiler Type Obfuscation Vulnerability

Mozilla Firefox and Mozilla Firefox ESR are both products of the Mozilla Foundation in the U.S. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. A type confusion vulnerability exists in the IonMonkey JIT compiler in Mozilla...

Mozilla Firefox and Firefox ESR Command Execution Vulnerability (CNVD-2019-08525)

Mozilla Firefox and Firefox ESR are both products of the Mozilla Foundation in the U.S. Mozilla Firefox is an open source web browser.Firefox ESR is an extended support version of Firefox web browser. A security vulnerability exists in Mozilla Firefox versions prior to 66 and Firefox ESR versions...

Mozilla: Type-confusion in IonMonkey JIT compiler

A vulnerability where type-confusion in the IonMonkey just-in-time JIT compiler could potentially be used by malicious JavaScript to trigger a potentially exploitable crash. This vulnerability affects Thunderbird 60.6, Firefox ESR 60.6, and Firefox 66...

UBUNTU-CVE-2019-9793

A mechanism was discovered that removes some bounds checking for string, array, or typed array accesses if Spectre mitigations have been disabled. This vulnerability could allow an attacker to create an arbitrary value in compiled JavaScript, for which the range analysis will infer a fully...

Vulnerability in web browsers Firefox and Firefox ESR, as well as the email client Thunderbird, relates to the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird relates to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted web page...