Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox prior to version 92, which stems from the fact that if a domain name contains RTL characters, it causes the domain to be rendered on the right side of...

Mozilla Firefox 资源管理错误漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in versions prior to Mozilla Firefox 95, which stems from graphical objects not being properly protected when entering and exiting full-screen mode, resulting in memory...

OPENSUSE-SU-2022:10219-1 Security update for opera

This update for opera fixes the following issues: Update to 93.0.4585.11 - CHR-9051 Update chromium on desktop-stable-107-4585 to 107.0.5304.88 - DNA-95965 Add support for more UD TLDs - DNA-102960 Replace messengers icons - DNA-102964 Crash at -FramedBrowserWindow sendEvent: - DNA-103125...

CVE-2022-40698

creationtimestamp| type| source ---|---|--- 2022-11-19 02:43:42+00:00| seen| https://t.me/cibsecurity/53196...

The vulnerability of the Cisco Discovery Protocol implementation in the microsoftware of Cisco Analog Telephone Adapter (ATA) series 190 devices allows a perpetrator to cause a service failure.

The vulnerability of the Cisco Discovery Protocol implementation in microprogrammed software for Cisco Analog Telephone Adapter ATA devices of the 190 series is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause servi...

PT-2022-10492 · Unknown · Ccure 9000

Name of the Vulnerable Software and Affected Versions: CCURE 9000 versions prior to 2.90 Description: The issue allows a CCURE Portal user to enumerate user accounts under certain circumstances. Recommendations: For CCURE 9000 versions prior to 2.90, update to a version later than 2.90 to resolve...

Horner Automation Cscape 缓冲区错误漏洞

Horner Automation Cscape is a suite of programming software for industrial control system development from Horner Automation. A buffer error vulnerability exists in Horner Automation Cscape 9.90 SP 7 and prior versions, which arises from failure to properly validate user-supplied data, and allows...

Malicious code in internallib_v199 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b392ff5b77259a428780d2bb24529596a239226553a8ece97f4c9158fcf2fdcd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-35962 Crafted link in Zulip message can cause disclosure of credentials

Zulip is an open source team chat and Zulip Mobile is an app for iOS and Andriod users. In Zulip Mobile through version 27.189, a crafted link in a message sent by an authenticated user could lead to credential disclosure if a user follows the link. A patch was released in version 27.190...

UPX 数字错误漏洞

UPX is a portable and extensible executable compression program. A security vulnerability exists in UPX version 3.96, which stems from a floating-point exception issue found in the PackLinuxElf64::invertptdynamic function of the plxelf.cpp file, which can be triggered by an attacker with a crafte...

Mozilla: Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11

The Mozilla Foundation Security Advisory describes this flaw as: The Mozilla Fuzzing Team reporting potential vulnerabilities present in Firefox 101 and Firefox ESR 91.10. Some of these bugs showed evidence of memory corruption, and we presume that with enough effort, some of these could have bee...

CVE-2021-42890

creationtimestamp| type| source ---|---|--- 2022-06-03 18:26:38+00:00| seen| https://t.me/cibsecurity/43819...

Mozilla: Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10

The Mozilla Foundation Security Advisory describes this flaw as: Mozilla developers Andrew McCreight, Nicolas B. Pierron, and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 100 and Firefox ESR 91.9. Some of these bugs showed evidence of memory corruption and we presume th...

Mozilla Thunderbird 信息泄露漏洞

Mozilla Thunderbird is the United States Mozilla Foundation's set of independent from the Mozilla Application Suite e-mail client software. The program supports IMAP and POP mail protocols as well as the HTML mail format. An information disclosure vulnerability exists in Mozilla Thunderbird...

Horner Automation Cscape 缓冲区错误漏洞

Horner Automation Cscape is a suite of programming software for industrial control system development from Horner Automation. A buffer error vulnerability exists in Horner Automation Cscape version 9.90 SP5, which stems from a faulty boundary condition. A remote attacker could create a specially...

Mozilla: Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9

The Mozilla Foundation Security Advisory describes this flaw as: Mozilla developers Andrew McCreight, Gabriele Svelto, Tom Ritter and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 99 and Firefox ESR 91.8. Some of these bugs showed evidence of memory corruption and we...

DEBIAN-CVE-2022-30067

GIMP 2.10.30 and 2.99.10 are vulnerable to Buffer Overflow. Through a crafted XCF file, the program will allocate for a huge amount of memory, resulting in insufficient memory or program crash...

CVE-2022-29017

creationtimestamp| type| source ---|---|--- 2022-05-16 18:26:37+00:00| seen| https://t.me/cibsecurity/42744...

CVE-2022-29747

creationtimestamp| type| source ---|---|--- 2022-05-12 18:36:00+00:00| seen| https://t.me/cibsecurity/42484...

UBUNTU-CVE-2022-29918

Mozilla developers Gabriele Svelto, Randell Jesup and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 99. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This...