Mozilla Firefox Security Vulnerability

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox version 119, which stems from a driver that may crash under certain circumstances for extremely large draw calls...

KLA61569 Multiple vulnerabilities in Mozilla Firefox ESR

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, cause denial of service, spoof user interface. Below is a complete list of vulnerabilities: 1. Information disclosure vulnerabilit...

Slackware Linux 15.0 / current mozilla-firefox Multiple Vulnerabilities (SSA:2023-297-01)

The version of mozilla-firefox installed on the remote host is prior to 115.4.0esr. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2023-297-01 advisory. - It was possible for certain browser prompts and dialogs to be activated or dismissed unintentionally by the...

KLA61570 Multiple vulnerabilities in Mozilla Thunderbird

Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, cause denial of service, spoof user interface. Below is a complete list of vulnerabilities: 1. Information disclosure vulnerabilit...

KLA61568 Multiple vulnerabilities in Mozilla Firefox

Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, cause denial of service, spoof user interface. Below is a complete list of vulnerabilities: 1. Information disclosure vulnerability ca...

Mozilla Firefox < 119.0

The version of Firefox installed on the remote Windows host is prior to 119.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2023-45 advisory. - Memory safety bugs present in Firefox 118. Some of these bugs showed evidence of memory corruption and we presume that...

Mozilla Thunderbird < 115.4.1

The version of Thunderbird installed on the remote Windows host is prior to 115.4.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2023-47 advisory. - Memory safety bugs present in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3. Some of these bugs showed...

Mozilla Firefox < 119.0

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 119.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2023-45 advisory. - Memory safety bugs present in Firefox 118. Some of these bugs showed evidence of memory corruption and we...

Security Vulnerabilities fixed in Firefox ESR 115.4 — Mozilla

It was possible for certain browser prompts and dialogs to be activated or dismissed unintentionally by the user due to an insufficient activation-delay. An attacker could have created a malicious link using bidirectional characters to spoof the location in the address bar when visited. Drivers a...

Security Vulnerabilities fixed in Firefox 119 — Mozilla

It was possible for certain browser prompts and dialogs to be activated or dismissed unintentionally by the user due to an insufficient activation-delay. Using iterative requests an attacker was able to learn the size of an opaque response, as well as the contents of a server-supplied Vary header...

Mozilla Firefox Security Advisory (MFSA2023-45) - Linux

The remote host is missing an update for Mozilla Firefox, announced via the advisory MFSA2023-45. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

Mozilla Firefox ESR < 115.4

The version of Firefox ESR installed on the remote Windows host is prior to 115.4. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2023-46 advisory. - Memory safety bugs present in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3. Some of these bugs showed...

Mozilla Thunderbird < 115.4

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 115.4. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2023-47 advisory. - It was possible for certain browser prompts and dialogs to be activated or dismissed unintentionally by...

Important: Red Hat Bug Fix Advisory: Updated rhel9/thunderbird-flatpak container image

An updated rhel9/thunderbird-flatpak container image is now available in the Red Hat container registry. Mozilla Thunderbird is a standalone mail and newsgroup client. Flatpak is a system for running graphical applications as containers. Installing an application as a Flatpak rather than as an...

Mozilla: RCE on worker host due to unsanitized "env" variable name in task definition on community-tc.services.mozilla.com

The task definition attempted to escape parameters passed to the podman command before running the container, but the custom shell.escape function was not applied to the environment variable name, allowing for command execution on the worker host. The community-tc.services.mozilla.com instance...

Mozilla: Subdomain takeover on one of the subdomain under mozaws.net

A dangling DNS record enabled subdomain takeover on a mozaws.net subdomain. Researchers exploited this to host content on the affected subdomain...

Mozilla: SQL Injection on prod.oidc-proxy.prod.webservices.mozgcp.net via invite_code parameter - Mozilla social inscription

A SQL injection vulnerability was found in the invitecode parameter on prod.oidc-proxy.prod.webservices.mozgcp.net during Mozilla social inscription. Adding quotes to the parameter revealed the issue. A time-based blind payload confirmed the vulnerability, allowing arbitrary SQL queries. This cou...

Mozilla Firefox Security Feature Issue Vulnerability (CNVD-2023-86126)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox has a security signature issue vulnerability that can be exploited by remote attackers to perform privilege escalation...

Mozilla NSS Security Vulnerability

NSS is an underlying cryptography library from the Mozilla Foundation. The library supports a variety of cryptographic algorithms, and the Firefox browser's TLS implementation is based on this library. A security vulnerability exists in Mozilla NSS, which arises when the numeric library for RSA...

Security Bulletin: IBM QRadar Network Packet Capture includes components with multiple known vulnerabilities

Summary The product includes multiple vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. IBM has addressed the relevant CVEs. Vulnerability Details CVEID:CVE-2023-38408 DESCRIPTION: OpenSSH could allow a remote attacker to execute arbitrary...