Lucene search
K

22 matches found

Tenable Nessus
Tenable Nessus
added 2025/08/15 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2023-6870

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Applications which spawn a Toast notification in a background thread may have obscured fullscreen notifications displayed by Firefox. This issue only affects...

4.3CVSS7AI score0.00603EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/23 4:57 a.m.6 views

CVE-2023-6870

Applications which spawn a Toast notification in a background thread may have obscured fullscreen notifications displayed by Firefox. This issue only affects Android versions of Firefox and Firefox Focus. This vulnerability affects Firefox 121...

4.3CVSS5.8AI score0.00603EPSS
Exploits0
OSV
OSV
added 2025/02/04 2:15 p.m.0 views

UBUNTU-CVE-2025-1019

The z-order of the browser windows could be manipulated to hide the fullscreen notification. This could potentially be leveraged to perform a spoofing attack. This vulnerability was fixed in Firefox 135 and Thunderbird 135...

4.3CVSS5.8AI score0.00288EPSS
Exploits0References8
OSV
OSV
added 2024/08/06 1:15 p.m.0 views

UBUNTU-CVE-2024-7518

Select options could obscure the fullscreen notification dialog. This could be used by a malicious site to perform a spoofing attack. This vulnerability affects Firefox 129, Firefox ESR 128.1, and Thunderbird 128.1...

6.5CVSS6.8AI score0.00318EPSS
Exploits0References8
SUSE CVE
SUSE CVE
added 2024/05/18 2:48 a.m.1 views

SUSE CVE-2024-4766

Different techniques existed to obscure the fullscreen notification in Firefox for Android. These could have led to potential user confusion and spoofing attacks. This bug only affects Firefox for Android. Other versions of Firefox are unaffected. This vulnerability affects Firefox 126...

3.1CVSS8.4AI score0.00333EPSS
Exploits0References4
OSV
OSV
added 2024/05/14 6:15 p.m.1 views

CVE-2024-4766

Different techniques existed to obscure the fullscreen notification in Firefox for Android. These could have led to potential user confusion and spoofing attacks. This bug only affects Firefox for Android. Other versions of Firefox are unaffected. This vulnerability affects Firefox 126...

4.3CVSS5.8AI score0.00333EPSS
Exploits0References3
Prion
Prion
added 2023/12/19 2:15 p.m.20 views

Design/Logic Flaw

Applications which spawn a Toast notification in a background thread may have obscured fullscreen notifications displayed by Firefox. This issue only affects Android versions of Firefox and Firefox Focus. This vulnerability affects Firefox 121...

4.3CVSS6.4AI score0.00603EPSS
Exploits0References3Affected Software1
Debian CVE
Debian CVE
added 2023/12/19 1:38 p.m.38 views

CVE-2023-6870

Applications which spawn a Toast notification in a background thread may have obscured fullscreen notifications displayed by Firefox. This issue only affects Android versions of Firefox and Firefox Focus. This vulnerability affects Firefox 121...

4.3CVSS7AI score0.00603EPSS
Exploits0
OpenVAS
OpenVAS
added 2023/10/27 12:0 a.m.19 views

SUSE: Security Advisory (SUSE-SU-2023:4212-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.1AI score0.00831EPSS
Exploits0References4
Veracode
Veracode
added 2023/08/06 10:4 p.m.22 views

Unsafe Reflection

thunderbird is vulnerable to Unsafe Reflection. This results in possible spoofing attacks since the website obscures fullscreen notifications using a URL scheme handled by an external program...

6.5CVSS6.7AI score0.00417EPSS
Exploits0References9Affected Software3
OpenVAS
OpenVAS
added 2023/07/06 12:0 a.m.16 views

Ubuntu: Security Advisory (USN-6201-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.9AI score0.00758EPSS
Exploits1References2
OSV
OSV
added 2023/07/05 10:15 a.m.1 views

CVE-2023-37204

A website could have obscured the fullscreen notification by using an option element by introducing lag via an expensive computational function. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox 115...

6.5CVSS7.4AI score
Exploits0References3
OSV
OSV
added 2023/07/05 9:15 a.m.3 views

CVE-2023-37207

A website could have obscured the fullscreen notification by using a URL with a scheme handled by an external program, such as a mailto URL. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox 115, Firefox ESR 102.13, and Thunderbird 102.13...

6.5CVSS7.9AI score
Exploits0References8
ATTACKERKB
ATTACKERKB
added 2023/06/02 5:15 p.m.1 views

CVE-2023-28159

The fullscreen notification could have been hidden on Firefox for Android by using download popups, resulting in potential user confusion or spoofing attacks. This bug only affects Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox 111...

4.3CVSS6.5AI score0.0025EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2023/06/02 12:0 a.m.10 views

CVE-2023-29533

A website could have obscured the fullscreen notification by using a combination of window.open, fullscreen requests, window.name assignments, and setInterval calls. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox 112, Focus for Android 112,...

6AI score0.00144EPSS
Exploits0References5
Ubuntu
Ubuntu
added 2023/04/12 6:47 a.m.60 views

USN-6010-1: Firefox vulnerabilities

Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary code. CVE-2023-29537, CVE-2023-29540,...

8.8CVSS7.8AI score0.00442EPSS
Exploits0
RedHat Linux
RedHat Linux
added 2023/02/20 8:31 a.m.2 views

Mozilla: Fullscreen notification not shown in Firefox Focus

The Mozilla Foundation Security Advisory describes this flaw as: A lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing browser chrome. This bug only affects Firefox Focus. Other versions of Firefox are unaffected...

7.5CVSS7.3AI score0.00084EPSS
Exploits0References6
Ubuntu
Ubuntu
added 2023/02/06 3:58 a.m.97 views

USN-5824-1: Thunderbird vulnerabilities

Multiple security issues were discovered in Thunderbird. If a user were tricked into opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information, bypass security restrictions, cross-site tracing,...

9.8CVSS8.2AI score0.00786EPSS
Exploits0
OSV
OSV
added 2023/01/10 6:37 a.m.1 views

USN-5782-3 firefox regressions

USN-5782-1 fixed vulnerabilities in Firefox. The update introduced several minor regressions. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that Firefox was using an out-of-date libusrsctp library. An attacker could possibly use th...

6.1AI score
Exploits0References2
Ubuntu
Ubuntu
added 2023/01/05 1:30 p.m.64 views

USN-5782-2: Firefox regressions

USN-5782-1 fixed vulnerabilities in Firefox. The update introduced several minor regressions. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that Firefox was using an out-of-date libusrsctp library. An attacker could possibly use th...

8.3AI score
Exploits0References1
Rows per page
Query Builder