SUSE SLES15 Security Update : MozillaFirefox (SUSE-SU-2022:1927-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1927-1 advisory. - A malicious website could have learned the size of a cross-origin resource that supported Range requests. This vulnerability...

Mozilla: Cross-Origin resource's length leaked

The Mozilla Foundation Security Advisory describes this flaw as: A malicious website that could have learned the size of a cross-origin resource that supported Range requests...

semver-regex security vulnerability

npm semver-regex is a regular expression used to match semver versions. semver-regex versions prior to 3.1.4 and versions 4.0.0 inclusive through 4.0.2 have a denial of service vulnerability that stems from not properly handling incoming error messages, which can be exploited to cause a denial of...

Mozilla: Cross-Origin resource's length leaked

The Mozilla Foundation Security Advisory describes this flaw as: A malicious website that could have learned the size of a cross-origin resource that supported Range requests...

Mozilla: Cross-Origin resource's length leaked

The Mozilla Foundation Security Advisory describes this flaw as: A malicious website that could have learned the size of a cross-origin resource that supported Range requests...

Mozilla: Cross-Origin resource's length leaked

The Mozilla Foundation Security Advisory describes this flaw as: A malicious website that could have learned the size of a cross-origin resource that supported Range requests...

Mozilla: Cross-Origin resource's length leaked

The Mozilla Foundation Security Advisory describes this flaw as: A malicious website that could have learned the size of a cross-origin resource that supported Range requests...

Mozilla: Cross-Origin resource's length leaked

The Mozilla Foundation Security Advisory describes this flaw as: A malicious website that could have learned the size of a cross-origin resource that supported Range requests...

Mozilla: Cross-Origin resource's length leaked

The Mozilla Foundation Security Advisory describes this flaw as: A malicious website that could have learned the size of a cross-origin resource that supported Range requests...

Information Disclosure

firefox is vulnerable to information disclosure. The vulnerability exists because a malicious website could have learned the size of a cross-origin resource that supported Range requests which allows an attacker to get access to sensitive information...

UBUNTU-CVE-2022-31736

A malicious website could have learned the size of a cross-origin resource that supported Range requests. This vulnerability affects Thunderbird 91.10, Firefox 101, and Firefox ESR 91.10...

CVE-2022-31736

A malicious website could have learned the size of a cross-origin resource that supported Range requests. This vulnerability affects Thunderbird 91.10, Firefox 101, and Firefox ESR 91.10...

CVE-2022-31005 Integer Overflow in Vapor's HTTP Range Request

Vapor is an HTTP web framework for Swift. Users of Vapor prior to version 4.60.3 with FileMiddleware enabled are vulnerable to an integer overflow vulnerability that can crash the application. Version 4.60.3 contains a patch for this issue. As a workaround, disable FileMiddleware and serve via a...

flipper-server (>=0.171.1, <=0.212.0), flipper-server-companion (>=0.171.0, <=0.212.0) +1 more potentially affected by unknown CVE via flipper-frontend-core (>=0.171.0, <=0.212.0)

flipper-frontend-core NPM version =0.171.0, =0.171.1, =0.171.0, =0.171.1, =0.212.0 Source cves: unknown CVE Source advisory: OSV:MAL-2022-3074...

PT-2022-20452 · Vapor · Vapor

Name of the Vulnerable Software and Affected Versions: Vapor versions prior to 4.60.3 Description: Vapor is an HTTP web framework for Swift. Users with FileMiddleware enabled are vulnerable to an integer overflow vulnerability that can crash the application. This issue can be triggered by invalid...

Chat Server input validation vulnerability

Chat Server is ramank775 individual developer's chat server based on microservices architecture, supporting high availability, high throughput, and horizontal scaling. An input validation error vulnerability exists in Chat Server versions 2.3.2 through 2.6.0, which stems from the application havi...

PT-2022-3600

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 101 Firefox ESR versions prior to 91.10 Thunderbird versions prior to 91.10 Description The issue is related to the implementation of the Cross-Origin Resource Sharing CORS mechanism in browsers, which allows a...

PT-2025-26085

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been identified where the ima get kexec buffer function does not check if the previous kernel's ima-kexec-buffer lies outside the addressable memo...

GHSA-G954-5HWP-PP24 Prototype Pollution in protobufjs

The package protobufjs is vulnerable to Prototype Pollution, which can allow an attacker to add/modify properties of the Object.prototype. Versions after and including 6.10.0 until 6.10.3 and after and including 6.11.0 until 6.11.3 are vulnerable. This vulnerability can occur in multiple ways: 1...

@agconnect/database (>=1.1.0, <=1.3.2), @ardenthq/sdk-egld (>=1.0.0, <=1.3.1) +124 more potentially affected by CVE-2022-25878 via protobufjs (>=6.10.0, <=6.10.2)

protobufjs NPM version =6.10.0, =1.1.0, =1.0.0, =3.0.0-next.36, =3.0.0-next.36, =3.0.0-next.36, =3.0.0-next.36, =0.0.0, =0.0.0-beta.20200917165907, =0.0.0-beta.20200724145337, =0.0.0-beta.20200724123546, =0.0.0-beta.20200724123546, =0.0.0-beta.20210111150545 and more Source cves: CVE-2022-25878...