Cross Site Scripting injection vulnerability in SANADATA SanaCMS 7.3

Cross-site scripting XSS vulnerability in /sanadata/seo/index.asp in SANADATA SanaCMS 7.3 allows remote attackers to inject arbitrary web script or HTML via the search parameter. Vendor HomePage: https://www.sanadata.com/ Version : 7.3 Dork : intext:"SANADATA | SanaCMS 7.3" Tested on:Firefox...

USN-3216-1: Firefox vulnerabilities

Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to bypass same origin restrictions, obtain sensitive information, spoof the addressbar, spoof the print dialog, cause a denial of...

Firefox Browser Extension Enumeration

Binary data winfirefoxbrowseraddons.nbin...

Mozilla: Data from Pocket server improperly sanitized before execution (MFSA 2016-94, MFSA 2016-95)

HTML tags received from the Pocket server will be processed without sanitization and any JavaScript code executed will be run in the "about:pocket-saved" unprivileged page, giving it access to Pocket's messaging API through HTML injection. This vulnerability affects Firefox ESR 45.6 and Firefox...

Mozilla Firefox Arbitrary Code Execution Vulnerability (CNVD-2016-12699)

Mozilla Firefox and Firefox ESR are both browser products developed by the Mozilla Foundation in the U.S. Firefox is an open source web browser; Firefox ESR is an extended support version of Firefox. A security vulnerability exists in Mozilla Firefox versions prior to 50.1 and Firefox ESR version...

Mozilla Firefox Security Bypass Vulnerability (CNVD-2016-12692)

Mozilla Firefox and Firefox ESR are both browser products developed by the Mozilla Foundation in the U.S. Firefox is an open source web browser; Firefox ESR is an extended support version of Firefox. A security vulnerability exists in Mozilla Firefox versions prior to 50.1 and Firefox ESR version...

Mozilla Firefox and Firefox ESR 'nsFrameManager::CaptureFrameState' function memory mis-reference vulnerability

Mozilla Firefox is an open source web browser; Firefox ESR is an extended support version of Firefox. A memory misreference vulnerability in the Mozilla Firefox and Firefox ESR 'nsFrameManager::CaptureFrameState' function allows remote attackers to construct a malicious WEB page that can be trick...

The vulnerability of the Firefox browser, which allows a hacker to gain access to local files

The vulnerability of Firefox browsers is related to an improper limitation during the “drag-and-drop” operation for the file:URL object. Exploiting this vulnerability can allow a remote attacker to gain access to local files through a specially crafted website...

Mozilla Firefox and Firefox ESR WebRTC socket thread memory misreference vulnerability

Mozilla Firefox is an open source web browser; Firefox ESR is an extended support version of Firefox. A memory misreference vulnerability exists in the WebRTC socket thread of Mozilla Firefox and Firefox, which can be exploited by a remote attacker to construct a malicious WEB page and trick the...

Mozilla Firefox Forgery Attack Vulnerability

Mozilla Firefox is an open source web browser; Mozilla Firefox fails to properly set the LINKABLE and URISAFEFORUNTRUSTEDCONTENT flags for about: URLs used by error pages, allowing remote attackers to exploit the vulnerability to build malicious WEB pages that can be tricked into parsing by users...

Mozilla Firefox and Firefox ESR 'CanonicalizeXPCOMParticipant' function memory misreference vulnerability

Mozilla Firefox is an open source web browser; Firefox ESR is an extended support version of Firefox. A memory misreference vulnerability exists in the 'CanonicalizeXPCOMParticipant' function in Mozilla Firefox and Firefox, which can be exploited by a remote attacker to construct a malicious WEB...

CVE-2016-2835

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 48.0 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via unknown vectors...

DSA-3640-1 firefox-esr - security update

Bulletin has no description...

The vulnerability of the Firefox ESR browser allows a remote attacker to execute arbitrary JavaScript code.

The vulnerability of the Firefox ESR browser allows a malicious actor to bypass access control policies and execute arbitrary JavaScript code with Chrome privileges, using frame relays...

The vulnerability of the Firefox browser, which allows a remote attacker to trigger a service failure

The vulnerability of Firefox’s browser in the webrtc::VPMContentAnalysis::Release function of the WebRTC component lies in the use of incompatible methods for releasing memory allocated for storing simple-type arrays. Exploiting this vulnerability allows a malicious actor to trigger a service...

Firefox ESR browser vulnerabilities that allow a malicious actor to trigger a service failure

The numerous vulnerabilities of the Firefox ESR browser allow a malicious actor to trigger a service failure memory corruption and unexpected application termination or execute arbitrary code...

Firefox browser vulnerabilities that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information

Multiple vulnerabilities in the Mozilla Firefox browser’s engine allow malicious actors to induce service failures memory errors and unexpected application termination or execute arbitrary code...

The vulnerability of Thunderbird software, which allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability in the browser engine of Mozilla Firefox, Firefox ESR, and Thunderbird allows malicious actors to trigger a service failure a memory error and an unexpected termination of the application or execute arbitrary code...

The vulnerability of Thunderbird software, which allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.

Multiple vulnerabilities in the browser engine of Mozilla Firefox and SeaMonkey allow malicious actors operating remotely to cause service failures memory errors and unexpected application exits, or execute arbitrary code...

The vulnerability of the Firefox browser, which allows a malicious actor to compromise the accessibility of protected information

The vulnerability in Mozilla Firefox allows malicious actors operating remotely to cause a service failure certificate processing failure using a specially crafted certificate. In this case, the UTF-8 character encoding is not used in the relevant context...