Mozilla: Missing throttling on external protocol launch dialog

The Mozilla Foundation Security Advisory describes this flaw as: Malicious websites could have tricked users into accepting launching a program to handle an external URL protocol...

PT-2022-1400

Name of the Vulnerable Software and Affected Versions Firefox ESR versions 91.4 and earlier Firefox versions 95 and earlier Thunderbird versions 91.4 and earlier Description The issue is related to the incorrect handling of user data, allowing a remote attacker to perform a spoofing attack when...

CVE-2008-5043

Multiple cross-site scripting XSS vulnerabilities in the web-based interface in IBM Metrica Service Assurance Framework allow remote authenticated users to inject arbitrary web script or HTML via 1 the elementid parameter in a generatedreportresults action to the ReportTree program, 2 the jnlpnam...