Oracle Linux 9 : firefox (ELSA-2022-5767)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2022-5767 advisory. 91.12.0-2.0.1 - Removed Upstream references 91.12.0-1 - Update to 91.12.0 build1 Tenable has extracted the preceding description block directly from th...

Oracle Linux 8 : thunderbird (ELSA-2022-5774)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2022-5774 advisory. 91.12.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 91.12.0-1 - Update to 91.12.0 build1 Tenable has...

Oracle Linux 9 : thunderbird (ELSA-2022-5778)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2022-5778 advisory. 91.12.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Reference oracle-indexhtml within Requires...

Mozilla: Mouse Position spoofing with CSS transforms

The Mozilla Foundation Security Advisory describes this flaw as: When combining CSS properties for overflow and transform, the mouse cursor could interact with different coordinates than displayed...

Mozilla Thunderbird < 102.1

The version of Thunderbird installed on the remote Windows host is prior to 102.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2022-32 advisory. - Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Thunderbird 102. Some of...

Oracle Linux 7 : thunderbird (ELSA-2022-5773)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2022-5773 advisory. 91.12.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build 91.12.0-1 - Update to...

Debian DSA-5195-1 : thunderbird - security update

The remote Debian 10 / 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5195 advisory. Multiple security issues were discovered in Thunderbird, which could result in spoofing. For the oldstable distribution buster, these problems have been fixe...

[SECURITY] Fedora 36 Update: golang-github-hashicorp-memdb-1.3.0-6.fc36

The Memdb package implements a simple in-memory database built on immutable radix trees. The database provides Atomicity, Consistency and Isolation from ACID. Being that it is in-memory, it does not provide durability. The database is instantiated with a schema that specifies the tables and indic...

MGASA-2022-0271 Updated firefox packages fix security vulnerability

When visiting directory listings for chrome:// URLs as source text, some parameters were reflected CVE-2022-36318. When combining CSS properties for overflow and transform, the mouse cursor could interact with different coordinates than displayed CVE-2022-36319...

The vulnerability of the JSON Schema application for checking and testing JSON files lies in the lack of adequate control over the modification of dynamically defined object properties, allowing a perpetrator to execute arbitrary code.

The vulnerability of the JSON Schema-based application for checking and testing JSON files is related to insufficient control over the modification of dynamically defined object properties during JSON file processing. Exploiting this vulnerability could allow a malicious actor, operating remotely...

Mozilla Thunderbird < 91.12

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 91.12. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2022-31 advisory. - When combining CSS properties for overflow and transform, the mouse cursor could interact with different...

Mozilla Thunderbird < 91.12

The version of Thunderbird installed on the remote Windows host is prior to 91.12. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2022-31 advisory. - When combining CSS properties for overflow and transform, the mouse cursor could interact with different coordinat...

CVE-2022-36319

The Mozilla Foundation Security Advisory describes this flaw as: When combining CSS properties for overflow and transform, the mouse cursor could interact with different coordinates than displayed...

GHSA-5XP2-7QFC-FWGC Jenkins Compuware zAdviser API Plugin vulnerable to protection mechanism failure

Jenkins Compuware zAdviser API Plugin defines a controller/agent message that retrieves Java system properties. Compuware zAdviser API Plugin 1.0.3 and earlier does not restrict execution of the controller/agent message to agents. This allows attackers able to control agent processes to retrieve...

Jenkins Compuware zAdviser API Plugin vulnerable to protection mechanism failure

Jenkins Compuware zAdviser API Plugin defines a controller/agent message that retrieves Java system properties. Compuware zAdviser API Plugin 1.0.3 and earlier does not restrict execution of the controller/agent message to agents. This allows attackers able to control agent processes to retrieve...

Security Vulnerabilities fixed in Thunderbird 102.1 — Mozilla

When combining CSS properties for overflow and transform, the mouse cursor could interact with different coordinates than displayed. When visiting directory listings for chrome:// URLs as source text, some parameters were reflected. When opening a Windows shortcut from the local filesystem, an...

Ubuntu 18.04 LTS / 20.04 LTS : Firefox vulnerabilities (USN-5536-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5536-1 advisory. Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could...

CVE-2022-36900

Jenkins Compuware zAdviser API Plugin 1.0.3 and earlier does not restrict execution of a controller/agent message to agents, allowing attackers able to control agent processes to retrieve Java system properties...

CVE-2022-36900

Jenkins Compuware zAdviser API Plugin 1.0.3 and earlier does not restrict execution of a controller/agent message to agents, allowing attackers able to control agent processes to retrieve Java system properties...

CVE-2022-36899

Jenkins Compuware ISPW Operations Plugin 1.0.8 and earlier does not restrict execution of a controller/agent message to agents, allowing attackers able to control agent processes to retrieve Java system properties...