4988 matches found
CVE-2023-29548
A wrong lowering instruction in the ARM64 Ion compiler resulted in a wrong optimization result. This vulnerability affects Firefox 112, Focus for Android 112, Firefox ESR 102.10, Firefox for Android 112, and Thunderbird 102.10...
The vulnerabilities of Mozilla Firefox, Focus for Android, Mozilla Firefox ESR, and the email client Thunderbird involve improper handling of file names that end with .desktop. This allows attackers to bypass security restrictions and execute arbitrary commands.
The vulnerability in Mozilla Firefox, Focus for Android, Mozilla Firefox ESR, and the email client Thunderbird is related to incorrect handling of file names that end with .desktop. Exploiting this vulnerability allows a remote attacker to bypass security restrictions and execute arbitrary comman...
The vulnerabilities of Mozilla Firefox, Focus for Android, Mozilla Firefox ESR, and the email client Thunderbird are related to improper processing of the Content-Disposition header directive. This allows attackers to bypass security restrictions and download arbitrary files.
The vulnerabilities of Mozilla Firefox, Focus for Android, Mozilla Firefox ESR, and the email client Thunderbird are related to improper processing of the Content-Disposition header directive. Exploiting these vulnerabilities allows a remote attacker to bypass security restrictions and download...
The vulnerabilities of Mozilla Firefox, Focus for Android, Mozilla Firefox ESR, and the email client Thunderbird involve operations beyond the buffer boundaries in memory. This allows attackers to cause system failures or execute arbitrary code.
The vulnerabilities of Mozilla Firefox, Focus for Android, Mozilla Firefox ESR, and the email client Thunderbird are related to the issue of operations going beyond the buffer in memory when processing HTML content. Exploiting these vulnerabilities can allow a malicious actor to cause service...
The vulnerabilities of Mozilla Firefox, Focus for Android, Mozilla Firefox ESR, and the email client Thunderbird involve insufficient protection of sensitive data, allowing attackers to gain unauthorized access to protected information.
The vulnerabilities of Mozilla Firefox, Focus for Android, Mozilla Firefox ESR, and the email client Thunderbird are related to insufficient protection of sensitive data during the processing of save file requests via the “Save Link As” dialog box. Exploiting these vulnerabilities can allow an...
The vulnerabilities of Mozilla Firefox, Focus for Android, Mozilla Firefox ESR, and the email client Thunderbird are related to the use of incorrect instructions for lowering the compiler in the ARM64 Ion environment. This allows attackers to gain unauthorized access to protected information.
The vulnerabilities of Mozilla Firefox, Focus for Android, Mozilla Firefox ESR, and the email client Thunderbird are related to the use of incorrect instructions for lowering the compiler in the ARM64 Ion environment. Exploiting these vulnerabilities can allow an attacker to gain unauthorized...
The vulnerability of the Garbage Collector component in Mozilla Firefox, Focus for Android, Mozilla Firefox ESR, and the email client Thunderbird allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the Garbage Collector component in Mozilla Firefox, Focus for Android, Mozilla Firefox ESR, and the email client Thunderbird is related to the execution of operations outside the buffer in memory during garbage collection. Exploiting this vulnerability allows an attacker to...
The vulnerabilities of Mozilla Firefox, Focus for Android, Mozilla Firefox ESR, and the email client Thunderbird involve allowing an unauthorized pointer to be freed, enabling a hacker to execute arbitrary code or cause a service failure.
The vulnerabilities of Mozilla Firefox, Focus for Android, Mozilla Firefox ESR, and the email client Thunderbird are related to the exploitation of an invalid pointer. Exploiting these vulnerabilities allows a remote attacker to execute arbitrary code or cause service interruptions...
The vulnerability in the Mozilla Maintenance service affects browsers such as Mozilla Firefox, Focus for Android, Mozilla Firefox ESR, and the email client Thunderbird. This vulnerability allows an attacker to gain access to read, modify, or delete data.
The vulnerability in the Mozilla Maintenance service affects the Mozilla Firefox browser, Focus for Android, Mozilla Firefox ESR, and the email client Thunderbird. It relates to deficiencies in access control during the verification of update signatures. Exploiting this vulnerability could allow ...
The vulnerability in the `window.open` method of Mozilla Firefox, Focus for Android, Mozilla Firefox ESR, and the email client Thunderbird allows a hacker to conceal full-screen notifications and perform spoofing attacks.
The vulnerability of the window.open method in Mozilla Firefox, Focus for Android, Mozilla Firefox ESR, and the email client Thunderbird is related to information representation errors in the user interface. Exploiting this vulnerability can allow an attacker to conceal full-screen notifications...
New phishing-as-a-service tool “Greatness” already seen in the wild
A previously unreported phishing-as-a-service PaaS offering named "Greatness" has been used in several phishing campaigns since at least mid-2022. Greatness incorporates features seen in some of the most advanced PaaS offerings, such as multi-factor authentication MFA bypass, IP filtering and...
5 Key Focus Areas for Cloud Computing Strategies
...
Amazon Linux 2 : thunderbird (ALAS-2023-2028)
The version of thunderbird installed on the remote host is prior to 102.10.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2028 advisory. 2024-01-03: CVE-2023-1999 was added to this advisory. The Mozilla Foundation describes this issue as follows:OCSP...
SUSE CVE-2023-29535
Following a Garbage Collector compaction, weak maps may have been accessed before they were correctly traced. This resulted in memory corruption and a potentially exploitable crash. This vulnerability affects Firefox 112, Focus for Android 112, Firefox ESR 102.10, Firefox for Android 112, and...
SUSE CVE-2023-29539
When handling the filename directive in the Content-Disposition header, the filename would be truncated if the filename contained a NULL character. This could have led to reflected file download attacks potentially tricking users to install malware. This vulnerability affects Firefox 112, Focus f...
SUSE CVE-2023-29541
Firefox did not properly handle downloads of files ending in .desktop, which can be interpreted to run attacker-controlled commands. This bug only affects Firefox for Linux on certain Distributions. Other operating systems are unaffected, and Mozilla is unable to enumerate all affected Linux...
SUSE CVE-2023-29548
A wrong lowering instruction in the ARM64 Ion compiler resulted in a wrong optimization result. This vulnerability affects Firefox 112, Focus for Android 112, Firefox ESR 102.10, Firefox for Android 112, and Thunderbird 102.10...
SUSE CVE-2023-29550
Memory safety bugs present in Firefox 111 and Firefox ESR 102.9. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox 112, Focus for Android 112, Firefox ESR...
CVE-2023-29550
Memory safety bugs present in Firefox 111 and Firefox ESR 102.9. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox 112, Focus for Android 112, Firefox ESR...
CVE-2023-29539
When handling the filename directive in the Content-Disposition header, the filename would be truncated if the filename contained a NULL character. This could have led to reflected file download attacks potentially tricking users to install malware. This vulnerability affects Firefox 112, Focus f...