Security Bulletin: Vulnerability in SSLv3 affects IBM System Storage Tape Controller 3592 Model C07 (CVE-2014-3566)

Summary SSLv3 contains a vulnerability that has been referred to as the Padding Oracle On Downgraded Legacy Encryption POODLE attack. SSLv3 is enabled in IBM System Storage Tape Controller 3592 Model C07. Vulnerability Details CVE ID: CVE-2014-3566 DESCRIPTION: Product could allow a remote attack...

firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to use-after-free in the Disability Access APIs component...

firefox: thunderbird: Information disclosure in the Framework component in DevTools

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the Framework component in DevTools...

firefox: thunderbird: Mitigation bypass in the PDF Viewer component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the PDF Viewer component...

firefox: thunderbird: Site isolation issue in the Graphics: WebRender component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Site isolation issue in the Graphics: WebRender component...

firefox: thunderbird: Information disclosure in the Storage: IndexedDB component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the Storage: IndexedDB component...

Mozilla Pollbot - Open Redirect Detection

Mozilla Pollbot contains an open redirect vulnerability. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. !/usr/bin/env python3 -- coding: utf-8 -- """Mozilla Pollbot contains an open redirect...

RHEL 10 : firefox (RHSA-2026:47101)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:47101 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox:...

CVE-2026-16400

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the DOM: Security component...

CVE-2026-14241

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Memory safety bugs present in Firefox 152.0.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run...

[SECURITY] Fedora 44 Update: firefox-153.0-3.fc44

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

OPENSUSE-SU-2026:11359-1 MozillaThunderbird-140.13.0-1.1 on GA media

These are all security issues fixed in the MozillaThunderbird-140.13.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11358-1 MozillaFirefox-153.0-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-153.0-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-16391

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the Storage: IndexedDB component...

CVE-2026-16396

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in WebExtensions...

CVE-2026-15718

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw...

[slackware-security] mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-thunderbird-140.13.0esr-i686-1slack15.0.txz: Upgraded. This release contains security fixes and improvements. For...

Mozilla Firefox ESR buffer overflow vulnerability (CNVD-2026-31197)

Mozilla Firefox ESR is an extended support version of Firefox a web browser open-sourced by the Mozilla Foundation. Mozilla Firefox ESR has a buffer overflow vulnerability. This vulnerability stems from a memory security flaw; attackers can exploit this vulnerability to cause memory corruption,...

Slackware Linux 15.0 / current mozilla-thunderbird Multiple Vulnerabilities (SSA:2026-204-01)

The version of mozilla-thunderbird installed on the remote host is prior to 140.13.0esr. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2026-204-01 advisory. New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues...

CVE-2026-13078

Summary of technical details (CVE-2026-13078) : The vulnerability affects MongoDB Server where the server-side MozJS scripting engine unconditionally registers a module loading hook. This hook allows JavaScript executed via the server to read arbitrary files from the host filesystem using the mon...