Mozilla: Arbitrary FTP command execution on FTP servers using an encoded URL

When a user clicked on an FTP URL containing encoded newline characters %0A and %0D, the newlines would have been interpreted as such and allowed arbitrary commands to be sent to the FTP server. This vulnerability affects Firefox ESR 78.10, Thunderbird 78.10, and Firefox 88...

[SECURITY] Fedora 32 Update: firefox-88.0-4.fc32

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

Fedora: Security Advisory for firefox (FEDORA-2021-d8b1386945)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 8 : firefox (RHSA-2021:1360)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:1360 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...

[SECURITY] Fedora 34 Update: firefox-88.0-1.fc34

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

Debian: Security Advisory (DLA-2633-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2021:1307-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: - Firefox was updated to 78.10.0 ESR bsc1184960 CVE-2021-23994: Out of bound write due to lazy initialization CVE-2021-23995: Use-after-free in Responsive Design Mode CVE-2021-23998: Secure Lock icon could have been spoofed CVE-2021-23961...

Debian: Security Advisory (DSA-4895-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-4895-1 : firefox-esr - security update

Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, information disclosure, privilege escalation or spoofing. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

[SECURITY] Fedora 33 Update: firefox-88.0-1.fc33

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

Mozilla Firefox Permission License and Access Control Issues Vulnerability (CNVD-2021-49133)

Mozilla Firefox is an open source web browser. A security vulnerability exists in Mozilla Firefox, which can be exploited by remote attackers using test code to enable session history manipulation...

Data Forgery Problem Vulnerability in Multiple Mozilla Products (CNVD-2021-49136)

Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser.Mozilla Thunderbird is a suite of email client software separate from the Mozilla Application Suite. A security vulnerability exists in several Mozilla products, which can be...

Parameter Injection Vulnerability in Multiple Mozilla Products

Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser.Mozilla Thunderbird is a suite of email client software separate from the Mozilla Application Suite. A security vulnerability exists in several Mozilla products, which can be...

Mozilla Firefox Denial of Service Vulnerability (CNVD-2021-39257)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from a denial of service vulnerability, which can be exploited by remote attackers to cause the browser to crash...

Mozilla Firefox Cross-Site Scripting Vulnerability (CNVD-2021-49131)

Mozilla Firefox is an open source web browser. Mozilla Firefox suffers from a cross-site scripting vulnerability that could be exploited by an attacker to steal a victim's cookie-based authentication credentials...

Mozilla Firefox Spoofing Vulnerability (CNVD-2021-49137)

Mozilla Firefox is an open source web browser. A spoofing vulnerability exists in Mozilla Firefox, which can be exploited by remote attackers to conduct spoofing attacks...

Buffer overflow vulnerability in multiple Mozilla products (CNVD-2021-49139)

Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser.Mozilla Thunderbird is a suite of email client software separate from the Mozilla Application Suite. A buffer overflow vulnerability exists in several Mozilla products. An...

Mozilla Firefox Resource Management Error Vulnerability (CNVD-2021-36258)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from a resource management error vulnerability that can be exploited by an attacker to create a specially crafted web page, trick a victim into visiting the page, and execute...

Mozilla Firefox Buffer Overflow Vulnerability (CNVD-2021-36259)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from a buffer overflow vulnerability that originates from a boundary error when processing web content. A remote attacker could exploit this vulnerability to execute arbitrary...

Elevation of Privilege Vulnerability in Multiple Mozilla Products (CNVD-2021-49135)

Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser.Mozilla Thunderbird is a suite of email client software separate from the Mozilla Application Suite. An elevation of privilege vulnerability exists in multiple Mozilla products,...