6931 matches found
Amazon Linux 2023 : ecs-init (ALAS2023-2024-480)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2024-480 advisory. The HTTP/1 client does not fully validate the contents of the Host header. A maliciously crafted Host header can inject additional headers or entire requests. With fix, the HTTP/1 client now...
WordPress Plugin WP VR Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...
Medium: ecs-init
Issue Overview: Text nodes not in the HTML namespace are incorrectly literally rendered, causing text which should be escaped to not be. This could lead to an XSS attack. CVE-2023-3978 Affected Packages: ecs-init Issue Correction: Run dnf update ecs-init --releasever 2023.3.20240108 to update you...
Mozilla: Use-after-free in <code>nsDNSService</code>
The Mozilla Foundation Security Advisory describes this flaw as: A use-after-free was identified in the nsDNSService::Init. This issue appears to manifest rarely during start-up...
Mozilla: Use-after-free in <code>nsDNSService</code>
The Mozilla Foundation Security Advisory describes this flaw as: A use-after-free was identified in the nsDNSService::Init. This issue appears to manifest rarely during start-up...
Mozilla: Use-after-free in <code>nsDNSService</code>
The Mozilla Foundation Security Advisory describes this flaw as: A use-after-free was identified in the nsDNSService::Init. This issue appears to manifest rarely during start-up...
Mozilla: Use-after-free in <code>nsDNSService</code>
The Mozilla Foundation Security Advisory describes this flaw as: A use-after-free was identified in the nsDNSService::Init. This issue appears to manifest rarely during start-up...
Mozilla: Use-after-free in <code>nsDNSService</code>
The Mozilla Foundation Security Advisory describes this flaw as: A use-after-free was identified in the nsDNSService::Init. This issue appears to manifest rarely during start-up...
Mozilla: Use-after-free in <code>nsDNSService</code>
The Mozilla Foundation Security Advisory describes this flaw as: A use-after-free was identified in the nsDNSService::Init. This issue appears to manifest rarely during start-up...
Mozilla: Use-after-free in <code>nsDNSService</code>
The Mozilla Foundation Security Advisory describes this flaw as: A use-after-free was identified in the nsDNSService::Init. This issue appears to manifest rarely during start-up...
Mozilla: Use-after-free in <code>nsDNSService</code>
The Mozilla Foundation Security Advisory describes this flaw as: A use-after-free was identified in the nsDNSService::Init. This issue appears to manifest rarely during start-up...
Mozilla: Use-after-free in <code>nsDNSService</code>
The Mozilla Foundation Security Advisory describes this flaw as: A use-after-free was identified in the nsDNSService::Init. This issue appears to manifest rarely during start-up...
Mozilla: Use-after-free in <code>nsDNSService</code>
The Mozilla Foundation Security Advisory describes this flaw as: A use-after-free was identified in the nsDNSService::Init. This issue appears to manifest rarely during start-up...
Use After Free
Firefox is vulnerable to Use After Free. The vulnerability is caused due to a flaw in function nsDNSService::Init which appears to manifest rarely during start-up. This can lead to compromising Confidentiality, Integrity and Availability of the system...
Mozilla Firefox ESR DNS Service Buffer Overflow
The vulnerability of the nsDNSService::Init function in Mozilla Firefox ESR browsers and Thunderbird email client is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protect...
CVE-2023-7025
A vulnerability was found in KylinSoft hedron-domain-hook up to 3.8.0.12-0k0.5. It has been declared as critical. This vulnerability affects the function initkcm of the component DBus Handler. The manipulation leads to improper access controls. Attacking locally is a requirement. The exploit has...
Debian DSA-5582-1 : thunderbird - security update
The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5582 advisory. - The signature of a digitally signed S/MIME email message may optionally specify the signature creation date and time. If present, Thunderbird did not compa...
KylinSoft hedron-domain-hook Access Control Error Vulnerability
KylinSoft hedron-domain-hook is a component of China's KylinSoft KylinSoft. An access control error vulnerability exists in KylinSoft hedron-domain-hook 3.8.0.12-0k0.5 and prior versions, which stems from a security issue in the initkcm function of the component DBus Handler that results in...
