[SECURITY] Fedora 28 Update: firefox-61.0.1-1.fc28

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

Atlassian Confluence Design Vulnerability

Atlassian Confluence is a professional enterprise knowledge management and collaboration software from Atlassian Australia, which can also be used to build an enterprise WiKi. the software enables collaboration and knowledge sharing between team members. A security vulnerability exists in the...

The vulnerability of the Mozilla Firefox browser, related to the lack of protection for service data, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Mozilla Firefox browser is related to the lack of protection for service data. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

The vulnerability of the Mozilla Firefox browser, related to errors in the implementation of cookie storage mechanisms, allows a hacker to access cookies with the `HttpOnly` attribute.

The vulnerability of the Mozilla Firefox browser is related to errors in the implementation of cookie storage mechanisms. Exploiting this vulnerability can allow a malicious actor, operating remotely, to access cookies with the HttpOnly attribute through a crafted HTTP request...

The vulnerability of the Mozilla Firefox browser, related to an authentication error during HTTP requests, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Mozilla Firefox browser is related to an authentication error during HTTP requests. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

CentOS Update for firefox CESA-2018:2113 centos7

Check the version of firefox SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882918";...

The vulnerability of the WebAssembly component in Mozilla Firefox’s browser allows a hacker to trigger a service failure.

The vulnerability of the WebAssembly component in Mozilla Firefox’s browser is related to an error during the call of “shrinkElements” during subsequent memory garbage collection. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the Mozilla Firefox browser, related to a lack of mechanism for verifying the source, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Mozilla Firefox browser is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of Mozilla Firefox’s browser printing mechanism, which allows a perpetrator to gain unauthorized access to protected information

The vulnerability of the Mozilla Firefox browser’s printing mechanism is related to an incorrect definition of links before accessing the file during printing. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information using...

The vulnerability of Mozilla Firefox’s toolbars allows a hacker to gain unauthorized access to protected information.

The vulnerability of Mozilla Firefox’s developer tools is related to the use of files and directories accessible from external parties. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Critical: Red Hat Security Advisory: flash-plugin security update

An update for flash-plugin is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

CVE-2018-13389

The attachment resource in Atlassian Confluence before version 6.6.1 allows remote attackers to spoof web content in the Mozilla Firefox Browser through attachments that have a content-type of application/rdf+xml...

Code injection

The attachment resource in Atlassian Confluence before version 6.6.1 allows remote attackers to spoof web content in the Mozilla Firefox Browser through attachments that have a content-type of application/rdf+xml...

CVE-2018-13389

The attachment resource in Atlassian Confluence before version 6.6.1 allows remote attackers to spoof web content in the Mozilla Firefox Browser through attachments that have a content-type of application/rdf+xml...

CVE-2018-13389

CVE-2018-13389 affects Atlassian Confluence versions before 6.6.1. The vulnerability allows remote attackers to spoof web content in Mozilla Firefox by serving attachments with a content-type of application/rdf+xml, enabling content spoofing via the attachment resource. The Nessus entry and vendo...

Debian: Security Advisory (DLA-1406-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: A vulnerability in libvorbis affects PowerKVM

Summary PowerKVM is affected by a vulnerability in libvorbis. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2018-5146 DESCRIPTION: libvorbis, as used in Mozilla Firefox, could allow a remote attacker to execute arbitrary code on the system, caused by an out-of-bounds...

Subrion CMS 4.2.1 Cross Site Scripting

Exploit Title: Stored XSS at Subrion CMS 4.2.1 Date: 06.06.2018 Exploit Author: Ismail Tasdelen Vendor Homepage: https://intelliants.com/ Software : Subrion CMS Software Version : 4.2.1 Vulnerability : Stored XSS Open Redirect Payload : " Type: Webapps PoC Video :...

Memory Corruption Vulnerability in Multiple Mozilla Products

Mozilla Firefox, Firefox ESR, and Thunderbird are products developed by the Mozilla Foundation.Firefox is an open source web browser, and Firefox ESR is an extended support version of Firefox.Thunderbird is a standalone email client from the Mozilla Thunderbird is a separate email client software...

Multiple Mozilla products read across boundaries vulnerability (CNVD-2018-14973)

Mozilla Firefox, Firefox ESR, and Thunderbird are products developed by the Mozilla Foundation.Firefox is an open source web browser, and Firefox ESR is an extended support version of Firefox.Thunderbird is a standalone email client from the Mozilla Thunderbird is a separate email client software...