Lucene search
K

13 matches found

AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.4 views

Astra Linux - уязвимость в firefox, thunderbird

By displaying a form validation message in the correct location at the same time as a permission prompt such as for geolocation, the validation message could potentially obscure the prompt, allowing the user to be tricked into granting the permission. This vulnerability affects Firefox 94,...

4.3CVSS6.4AI score0.00339EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2021-24960

Malware in sbrugna...

4.3CVSS7.1AI score0.00339EPSS
Exploits0References24
Tenable Nessus
Tenable Nessus
added 2021/12/29 12:0 a.m.45 views

Debian DLA-2863-1 : firefox-esr - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2863 advisory. Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, information...

10CVSS7.7AI score0.01293EPSS
Exploits0References37
NVD
NVD
added 2021/12/08 10:15 p.m.22 views

CVE-2021-38508

By displaying a form validity message in the correct location at the same time as a permission prompt such as for geolocation, the validity message could have obscured the prompt, resulting in the user potentially being tricked into granting the permission. This vulnerability affects Firefox 94,...

4.3CVSS0.00339EPSS
Exploits0References10
OSV
OSV
added 2021/12/08 10:15 p.m.1 views

DEBIAN-CVE-2021-38508

By displaying a form validity message in the correct location at the same time as a permission prompt such as for geolocation, the validity message could have obscured the prompt, resulting in the user potentially being tricked into granting the permission. This vulnerability affects Firefox 94,...

4.3CVSS6.1AI score0.00339EPSS
Exploits0References1
OSV
OSV
added 2021/11/10 10:53 p.m.8 views

MGASA-2021-0506 Updated thunderbird packages fix security vulnerabilities

Updated thunderbird packages fix security vulnerabilities: The iframe sandbox rules were not correctly applied to XSLT stylesheets, allowing an iframe to bypass restrictions such as executing scripts or navigating the top-level frame CVE-2021-38503. When interacting with an HTML input element's...

10CVSS8.5AI score0.01293EPSS
Exploits0References4
Mageia
Mageia
added 2021/11/10 10:53 p.m.41 views

Updated firefox packages fix security vulnerability

The iframe sandbox rules were not correctly applied to XSLT stylesheets, allowing an iframe to bypass restrictions such as executing scripts or navigating the top-level frame CVE-2021-38503. When interacting with an HTML input element's file picker dialog with webkitdirectory set, a use-after-fre...

10CVSS9.6AI score0.01293EPSS
Exploits0References3
RedHat Linux
RedHat Linux
added 2021/11/10 10:37 a.m.2 views

Mozilla: Permission Prompt could be overlaid, resulting in user confusion and potential spoofing

By displaying a form validity message in the correct location at the same time as a permission prompt such as for geolocation, the validity message could have obscured the prompt, resulting in the user potentially being tricked into granting the permission. This vulnerability affects Firefox 94,...

4.3CVSS7.3AI score0.00339EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2021/11/05 12:0 a.m.45 views

Oracle Linux 8 : firefox (ELSA-2021-4123)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2021-4123 advisory. 91.3.0-1.0.1 - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 91.3.0-1 - Update to 91.3.0...

10CVSS7.4AI score0.01293EPSS
Exploits0References7
RedHat Linux
RedHat Linux
added 2021/11/03 7:52 p.m.1 views

Mozilla: Permission Prompt could be overlaid, resulting in user confusion and potential spoofing

By displaying a form validity message in the correct location at the same time as a permission prompt such as for geolocation, the validity message could have obscured the prompt, resulting in the user potentially being tricked into granting the permission. This vulnerability affects Firefox 94,...

4.3CVSS7.3AI score0.00339EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2021/11/03 1:10 a.m.31 views

CVE-2021-38508

By displaying a form validity message in the correct location at the same time as a permission prompt such as for geolocation, the validity message could have obscured the prompt, resulting in the user potentially being tricked into granting the permission. This vulnerability affects Firefox 94,...

6.1CVSS6.6AI score0.00339EPSS
Exploits0References3
OSV
OSV
added 2021/11/03 12:0 a.m.0 views

UBUNTU-CVE-2021-38508

By displaying a form validity message in the correct location at the same time as a permission prompt such as for geolocation, the validity message could have obscured the prompt, resulting in the user potentially being tricked into granting the permission. This vulnerability affects Firefox 94,...

4.3CVSS6.6AI score0.00339EPSS
Exploits0References7
UbuntuCve
UbuntuCve
added 2021/11/03 12:0 a.m.22 views

CVE-2021-38508

By displaying a form validity message in the correct location at the same time as a permission prompt such as for geolocation, the validity message could have obscured the prompt, resulting in the user potentially being tricked into granting the permission. This vulnerability affects Firefox 94,...

4.3CVSS6.8AI score0.00339EPSS
Exploits0References6
Rows per page
Query Builder