40943 matches found
[SECURITY] Fedora 37 Update: firefox-118.0.1-7.fc37
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
SUSE-SU-2023:4016-1 Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: Security fixes: - CVE-2023-5217: Fixed a heap buffer overflow in libvpx. bsc1215814 - CVE-2023-5168: Out-of-bounds write in FilterNodeD2D1. bsc1215575 - CVE-2023-5169: Out-of-bounds write in PathOps. bsc1215575 - CVE-2023-5171:...
eClass Junior 4.0 SQL Injection
==================================================================================================================================== | Title : eClass Junior 4.0 Sql injection Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 69.032-bit | |...
Fedora: Security Advisory for thunderbird (FEDORA-2023-1f5f7b9b92)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Aicte India LMS 3.0 Cross Site Scripting
==================================================================================================================================== | Title : Aicte india LMS 3.0 XSS Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 69.032-bit | | Vendor :...
eClass IP 2.5 SQL Injection
==================================================================================================================================== | Title : eClass IP 2.5 Sql injection Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 69.032-bit | | Vend...
Chicv Management System Login 4.5.6 Insecure Direct Object Reference
==================================================================================================================================== | Title : Chicv Management System Login v4.5.6 IDOR Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 63.0....
Mozilla: Account deletion using the /v1/account/destroy API endpoint using account password without 2FA verification
The account deletion endpoint at POST /v1/account/destroy did not check for 2FA and did not require an authorization header. Therefore, an unauthenticated attacker who knew the password of a user could delete their account without the need for 2FA...
Mozilla Firefox Process Created Twice Release Vulnerability
Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox process creation suffers from a two-release vulnerability, which can be exploited by a remote attacker to submit a special Web request, tricking the user into parsing it, which can caus...
Mozilla Firefox ImageBitmap Post-Release Use Vulnerability
Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A post-release use vulnerability exists in Mozilla Firefox ImageBitmap on process shutdown, which can be exploited by a remote attacker to submit a special Web request, tricking the user into parsing i...
Mozilla Firefox Memory Misreference Vulnerability (CNVD-2023-75343)
Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. The Mozilla Firefox memory misreference vulnerability can be exploited by a remote attacker to submit a special Web request that induces the user to parse it, which can crash the application...
mojoPortal File Upload Vulnerability
mojoPortal is a cross-platform object-oriented web framework . A file upload vulnerability exists in mojoPortal, which can be exploited by a remote attacker to submit a special request that can upload malicious files and execute arbitrary code in the context of the application...
Fedora: Security Advisory for firefox (FEDORA-2023-97eea79acb)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mozilla Firefox Memory Corruption Vulnerability (CNVD-2023-74540)
Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from a memory corruption vulnerability that can be exploited by a remote attacker to submit a special Web request that can be tricked into being parsed by the user, which can...
RLSA-2023:4954 Important: thunderbird security update
Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.15.0. Security Fixes: Mozilla: Memory corruption in IPC CanvasTranslator CVE-2023-4573 Mozilla: Memory corruption in IPC ColorPickerShownCallback CVE-2023-4574 Mozilla: Memory corruption...
RLSA-2023:5201 Important: thunderbird security update
Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.15.1. Security Fixes: libwebp: Heap buffer overflow in WebP Codec CVE-2023-4863 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other...
RLSA-2023:4952 Important: firefox security update
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 102.15.0 ESR. Security Fixes: Mozilla: Memory corruption in IPC CanvasTranslator CVE-2023-4573 Mozilla: Memory corruption in IPC...
firefox security update
An update is available for firefox. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mozilla Firefox is an open-source web browser, designed for standards...