40836 matches found
Mozilla Firefox Security Vulnerability
Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox prior to version 120, which stems from the presence of a memory security error...
KLA62070 Multiple vulnerabilities in Mozilla Firefox
Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to spoof user interface, execute arbitrary code, cause denial of service, obtain sensitive information, bypass security restrictions. Below is a complete list of vulnerabilities: 1. A spoofin...
Mozilla: Exposure of account recovery hint by querying by user email
The account recovery hint was exposed by querying the API with a user email. This allowed obtaining the hint and could enable phishing attacks...
Mozilla: Remote code execution and exfiltration of secret tokens by poisoning the mozilla/fxa CI build cache
Remote code execution and data exfiltration were possible by poisoning a cache used in a CI build process. A proof of concept demonstrated the ability to exfiltrate sensitive data by re-uploading a modified cache artifact. The vulnerability required access to the source code repository to be...
The vulnerability of Mozilla Firefox, Mozilla Firefox ESR, and the Mozilla Thunderbird email client arises from improper external control of file names or paths, allowing attackers to compromise the confidentiality and integrity of protected information.
The vulnerabilities of Mozilla Firefox, Mozilla Firefox ESR, and the email client Mozilla Thunderbird are related to incorrect external management of file names or paths. Exploiting these vulnerabilities can allow an attacker to compromise the confidentiality and integrity of protected informatio...
firefox security update
An update is available for firefox. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mozilla Firefox is an open-source web browser, designed for standards...
RLSA-2023:6188 Important: firefox security update
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 115.4.0 ESR. Security Fixes: Mozilla: Queued up rendering could have allowed websites to clickjack CVE-2023-5721 Mozilla: Memory safety bugs fixe...
The Privacy Disaster of Modern Smart Cars
Article based on a Mozilla report...
The vulnerability of the Mozilla Firefox browser, related to insufficient warnings about dangerous actions, allows a hacker to execute arbitrary code.
The vulnerability of the Mozilla Firefox browser is related to insufficient warnings about dangerous actions. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability in Mozilla Firefox’s Brazzer relates to insufficient warnings about dangerous actions, allowing a violator to execute arbitrary code.
The vulnerability of Mozilla Firefox’s Brazzer is related to insufficient warnings about dangerous actions. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Fedora: Security Advisory (FEDORA-2023-107939d153)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE-SU-2023:4302-1 Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: - Updated to version 115.4.1: - CVE-2023-5721: Fixed a potential clickjack via queued up rendering. - CVE-2023-5732: Fixed an address bar spoofing via bidirectional characters - CVE-2023-5724: Fixed a crash due to a large WebGL draw. ...
Fedora: Security Advisory for thunderbird (FEDORA-2023-126cffa741)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Important: Red Hat Security Advisory: thunderbird security update
An update for thunderbird is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...
Mozilla: Queued up rendering could have allowed websites to clickjack
A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as follows: Certain browser prompts and dialogs could be activated or dismissed unintentionally by the user due to an insufficient activation delay...
Mozilla: Improper object tracking during GC in the JavaScript engine could have led to a crash.
The Mozilla Foundation Security Advisory describes this flaw as: During garbage collection extra operations were performed on a object that should not be. This could have led to a potentially exploitable crash...
Mozilla: Large WebGL draw could have led to a crash
The Mozilla Foundation Security Advisory describes this flaw as: Drivers are not always robust to extremely large draw calls and in some cases this scenario could have led to a crash...
Important: Red Hat Security Advisory: thunderbird security update
An update for thunderbird is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...
Mozilla: Address bar spoofing via bidirectional characters
The Mozilla Foundation Security Advisory describes this flaw as: An attacker could have created a malicious link using bidirectional characters to spoof the location in the address bar when visited...
Mozilla: Queued up rendering could have allowed websites to clickjack
A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as follows: Certain browser prompts and dialogs could be activated or dismissed unintentionally by the user due to an insufficient activation delay...