ROS-2-2236

2.2236 Vulnerability in Mozilla Thunderbird email client CVE-2021-29970, CVE-2021-30547, CVE-2021-29976, CVE-2021-29969. 1. Vulnerability Description: CVE-2021-29970 Vulnerability in Mozilla Thunderbird email client, related to HTML content processing error. Exploitation of the vulnerability coul...

ROS-2-2158

2.2158 Mozilla Firefox browser vulnerability CVE-2021-29970, CVE-2021-29976 1. Vulnerability description: CVE-2021-29970 A vulnerability in the Mozilla Firefox browser, is related to a release error in accessibility functions when processing HTML content. Exploitation of the vulnerability could...

ROS-2-864

2.864 Vulnerability in Mozilla Thunderbird email client CVE-2021-29970, CVE-2021-30547, CVE-2021-29976, CVE-2021-29969. 1. Vulnerability Description: CVE-2021-29970 Vulnerability in Mozilla Thunderbird email client, related to HTML content processing error. Exploitation of the vulnerability could...

ROS-2-1402

2.1402 Vulnerability in Mozilla Thunderbird email client CVE-2021-29970, CVE-2021-30547, CVE-2021-29976, CVE-2021-29969. 1. Vulnerability Description: CVE-2021-29970 Vulnerability in Mozilla Thunderbird email client, related to HTML content processing error. Exploitation of the vulnerability coul...

ROS-2-1400

2.1400 Vulnerability in Mozilla Thunderbird email client CVE-2021-29970, CVE-2021-30547, CVE-2021-29976, CVE-2021-29969. 1. Vulnerability Description: CVE-2021-29970 Vulnerability in Mozilla Thunderbird email client, related to HTML content processing error. Exploitation of the vulnerability coul...

ROS-2-700

2.700 Vulnerability in Mozilla Thunderbird email client CVE-2021-29970, CVE-2021-30547, CVE-2021-29976, CVE-2021-29969. 1. Vulnerability Description: CVE-2021-29970 Vulnerability in Mozilla Thunderbird email client, related to HTML content processing error. Exploitation of the vulnerability could...

ROS-2-1792

2.1792 Vulnerability in Mozilla Thunderbird email client CVE-2021-29970, CVE-2021-30547, CVE-2021-29976, CVE-2021-29969. 1. Vulnerability Description: CVE-2021-29970 Vulnerability in Mozilla Thunderbird email client, related to HTML content processing error. Exploitation of the vulnerability coul...

Mozilla Firefox 缓冲区错误漏洞

Mozilla Firefox is an open source Web browser from the Mozilla Foundation, U.S. A memory corruption vulnerability exists in version 91 of Mozilla Firefox, which stems from a boundary error when the product processes HTML content. A remote attacker could use the vulnerability to trick a victim int...

Mozilla Thunderbird 资源管理错误漏洞

Mozilla Thunderbird is the United States Mozilla Foundation's set of independent from the Mozilla Application Suite e-mail client software. The software supports the IMAP and POP mail protocols as well as the HTML mail format. Mozilla Thunderbird suffers from a Resource Management Error...

PT-2021-4671 · Microsoft · Windows Scripting Engine +2

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Scripting Engine affected versions not specified Description: The issue is related to a memory corruption vulnerability in the Scripting Engine, which can be exploited by an attacker to execute arbitrary code or cause a deni...

Apple iOS 资源管理错误漏洞

Apple iOS is an operating system developed by Apple Inc. for mobile devices. Apple iOS suffers from a resource management error vulnerability that originates from a boundary error when processing HTML content in the WebKit component. An attacker could exploit this vulnerability to execute arbitra...

Remote Code Execution (RCE)

chromium is vulnerable to remote code execution. The vulnerability exists due to a boundary error when processing untrusted HTML content in Autofill...

Vulnerability in the library for processing and transforming HTML/XML code fragments: The Ruby loofah library has a vulnerability related to the lack of protection for website structure. This allows attackers to compromise data integrity.

The vulnerability in the library for processing and transforming HTML/XML code fragments in Ruby Loofah is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to compromise the integrity of data...

Arbitrary Code Execution

thunderbird/firefox is vulnerable to arbitrary code execution. Several flaws were found in the processing of malformed HTML content. Malicious HTML content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird...

Hardcoded credentials

Failure to correctly handle null bytes when processing HTML entities resulted in Firefox incorrectly parsing these entities. This could have led to HTML comment text being treated as HTML which could have led to XSS in a web application under certain conditions. It could have also led to HTML...

Mozilla Firefox Buffer Overflow Vulnerability (CNVD-2020-01182)

Mozilla Firefox Firefox is a free, open source browser for Windows, Linux and MacOSX platforms. A buffer overflow vulnerability exists in Mozilla Firefox versions prior to 71. The vulnerability stems from a boundary error when processing HTML content. A remote attacker could exploit this...

Microsoft Edge Spoofing Vulnerability (CNVD-2019-02771)

Microsoft Windows 10 and others are operating systems released by Microsoft Corporation USA.Edge is one of the default browsers that comes with the system. A spoofing vulnerability exists in Microsoft Edge that stems from the program's failure to properly process HTML content. A remote attacker c...

Google Chrome Blink ImageBitmap Integer Overflow (CVE-2016-5182)

A heap overflow vulnerability exists in Google Chrome Blink. The vulnerability is due to an integer overflow in a function while processing an HTML file. A remote, unauthenticated attacker can exploit this vulnerability by enticing a user to open a specially crafted HTML file, potentially leading...

dzzoffice information title of the stored XSS vulnerability

0x01 vulnerability profile dzzoffice stored XSs one comfortably the background can be hit cookie 0x02 vulnerability details The point of the desktop information new In the information header of the inserted code may trigger a call to the xss platform insert 只要用户访问就可以打到他cookie了 0x03 solution...

libxml2: CPU exhaustion when processing specially crafted XML input

A denial of service flaw was found in libxml2. A remote attacker could provide a specially crafted XML or HTML file that, when processed by an application using libxml2, would cause that application to use an excessive amount of CPU...