2873 matches found
Security Vulnerabilities fixed in Firefox ESR 115.29 — Mozilla
A compromised web process was able to trigger out of bounds reads and writes in a more privileged process using manipulated WebGL textures. A compromised web process using malicious IPC messages could have caused the privileged browser process to reveal blocks of its memory to the compromised...
Security Vulnerabilities fixed in Firefox 144 — Mozilla
Use-after-free in MediaTrackGraphImpl::GetInstance A compromised web process was able to trigger out of bounds reads and writes in a more privileged process using manipulated WebGL textures. A compromised web process using malicious IPC messages could have caused the privileged browser process to...
Mozilla Firefox ESR < 140.4
The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 140.4. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-83 advisory. - Memory safety bugs present in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143...
Mozilla Firefox ESR < 140.4
The version of Firefox ESR installed on the remote Windows host is prior to 140.4. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-83 advisory. - Memory safety bugs present in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143. Some of...
Mozilla Firefox ESR < 115.29
The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 115.29. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-82 advisory. - Memory safety bugs present in Firefox ESR 115.28, Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143...
PT-2025-41899
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 144 Firefox ESR versions prior to 115.29 Firefox ESR versions prior to 140.4 Thunderbird versions prior to 144 Thunderbird versions prior to 140.4 Description A flaw existed that allowed modification of JavaScript...
XML Injection
io.minio:minio is vulnerable to XML Injection. The vulnerability is due to automatic substitution of XML tag values containing system property or environment variable references during processing, which allows an attacker to craft malicious XML input that exposes sensitive information such as...
Remote Code Execution
org.springframework.cloud, spring-cloud-gateway-server is vulnerable to Remote Code Execution. The vulnerability is due to exposed actuator endpoints evaluating user-controlled input via the GatewayEvaluationContext, allowing attackers to modify Spring Environment properties when the actuator...
Malicious code in nf-iso-properties (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3931e1fe9c0a20bbdeb1e532f664f5e95b84b7c831342802db5c9d74795d0c6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview kn-nf-iso-properties-kn1 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
EUVD-2025-33592
Malicious code in nf-iso-properties npm...
EUVD-2025-33593
Malicious code in kn-nf-iso-properties-kn1 npm...
Malicious code in kn-nf-iso-properties-kn1 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e349cd8ee6d112ba517b1bff5224e8112499adc0c166697081b2f94290edd1c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview nf-iso-properties is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
MAL-2025-48294 Malicious code in nf-iso-properties (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3931e1fe9c0a20bbdeb1e532f664f5e95b84b7c831342802db5c9d74795d0c6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-48293 Malicious code in kn-nf-iso-properties-kn1 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e349cd8ee6d112ba517b1bff5224e8112499adc0c166697081b2f94290edd1c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
EUVD-2014-3141
Malware in sbrugna...
EUVD-2012-0978
Malware in sbrugna...