RHEL 10 : firefox (RHSA-2025:21281)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2025:21281 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox:...

CVE-2025-13017

Same-origin policy bypass in the DOM: Notifications component. This vulnerability affects Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5...

CVE-2025-13017

Same-origin policy bypass in the DOM: Notifications component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5...

CVE-2025-13017

Same-origin policy bypass in the DOM: Notifications component. This vulnerability affects Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5...

UBUNTU-CVE-2025-13017

Same-origin policy bypass in the DOM: Notifications component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5...

CVE-2025-13017 Same-origin policy bypass in the DOM: Notifications component

Same-origin policy bypass in the DOM: Notifications component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5...

CVE-2025-13017: Permissive Cross-domain Policy with Untrusted Domains

Same-origin policy bypass in the DOM: Notifications component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5...

Astra Linux – Vulnerability in Thunderbird

Bypass of mitigation mechanisms in the DOM: Notifications component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

EUVD-2017-16020

Malware in sbrugna...

CVE-2024-30931

Stored Cross Site Scripting vulnerability in Emby Media Server Emby Media Server 4.8.3.0 allows a remote attacker to escalate privileges via the notifications.html component...

PT-2024-23681 · Emby · Emby Media Server

Name of the Vulnerable Software and Affected Versions: Emby Media Server version 4.8.3.0 Description: A Stored Cross Site Scripting issue allows a remote attacker to escalate privileges via the notifications.html component. Recommendations: For Emby Media Server version 4.8.3.0, consider disablin...

The vulnerability of the Notifications component of the Google Chrome browser, which allows a violator to access confidential information

The vulnerability of the Notifications component in the Google Chrome browser is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to confidential information...

Cloud Foundry 日志信息泄露漏洞

Cloud Foundry is a suite of open source Platform-as-a-Service PaaS cloud computing platforms from the U.S.-based Cloud Foundry Foundation. The product provides features such as container scheduling, continuous delivery, and automated service deployment. A security vulnerability exists in Cloud...

Google Chrome Resource Management Error Vulnerability (CNVD-2021-34711)

Google Chrome is a web browser from Google, an American company. A resource management error vulnerability previously existed in Google Chrome version 90.0.4430.212. The vulnerability stems from a "Use Security After Free Use" issue found in the program's "Notifications" component. No details of...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, an American company. A resource management error vulnerability previously existed in Google Chrome version 90.0.4430.212. The vulnerability stems from a "Use Security After Free Use" issue found in the program's "Notifications" component. No details of...

CVE-2017-7058

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. The issue involves the "Notifications" component. It allows physically proximate attackers to read unintended notifications on the lock screen...

CVE-2017-7058

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. The issue involves the "Notifications" component. It allows physically proximate attackers to read unintended notifications on the lock screen...

CVE-2017-6982

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. The issue involves the "Notifications" component. It allows attackers to cause a denial of service via a crafted app...

Code injection

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. The issue involves the "Notifications" component. It allows attackers to cause a denial of service via a crafted app...

PT-2017-17440

Name of the Vulnerable Software and Affected Versions iOS versions prior to 10.3.2 Description The issue involves the Notifications component and allows attackers to cause a denial of service via a crafted app. Recommendations For iOS versions prior to 10.3.2, update to version 10.3.2 or later to...