10675 matches found
CVE-2018-16072: Origin Validation Error
A missing origin check related to HLS manifests in Blink in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to bypass same origin policy via a crafted HTML page...
PT-2019-9258
Name of the Vulnerable Software and Affected Versions Aterm WF1200CR versions 1.1.1 and earlier Aterm WG1200CR versions 1.0.1 and earlier Description The issue allows an attacker on the same network segment to obtain information registered on the device via unspecified vectors. Recommendations Fo...
PT-2019-8699
Name of the Vulnerable Software and Affected Versions BN-SDWBP3 firmware versions 1.0.9 and earlier Description A buffer overflow issue allows an attacker on the same network segment to execute arbitrary code via unspecified vectors. Recommendations For BN-SDWBP3 firmware versions 1.0.9 and...
CVE-2018-18511
Cross-origin images can be read from a canvas element in violation of the same-origin policy using the transferFromImageBitmap method. Note: This only affects Firefox 65. Previous versions are unaffected.. This vulnerability affects Firefox 65.0.1...
UBUNTU-CVE-2018-18511
Cross-origin images can be read from a canvas element in violation of the same-origin policy using the transferFromImageBitmap method. Note: This only affects Firefox 65. Previous versions are unaffected.. This vulnerability affects Firefox 65.0.1...
PT-2018-3403
Name of the Vulnerable Software and Affected Versions: Firefox versions prior to 65.0.1 Thunderbird affected versions not specified Description: The issue is related to the TransferFromImageBitmap method, which allows for the reading of a canvas element, ignoring security policies. This can enabl...
Scientific Linux Security Update : firefox on SL7.x x86_64 (20181217)
This update upgrades Firefox to version 60.4.0 ESR. Security Fixes : - Mozilla: Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4 CVE-2018-12405 - Mozilla: Memory corruption in Angle CVE-2018-17466 - Mozilla: Use-after-free with select element CVE-2018-18492 - Mozilla: Buffer overflow i...
CentOS 7 : firefox (CESA-2018:3833)
An update for firefox is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
Scientific Linux Security Update : firefox on SL6.x i386/x86_64 (20181217)
This update upgrades Firefox to version 60.4.0 ESR. Security Fixes : - Mozilla: Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4 CVE-2018-12405 - Mozilla: Memory corruption in Angle CVE-2018-17466 - Mozilla: Use-after-free with select element CVE-2018-18492 - Mozilla: Buffer overflow i...
CentOS Update for firefox CESA-2018:3833 centos7
The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CentOS Update for firefox CESA-2018:3831 centos6
The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE SLED12 / SLES12 Security Update : MozillaFirefox, mozilla-nspr / mozilla-nss (SUSE-SU-2018:4236-1)
This update for MozillaFirefox, mozilla-nss and mozilla-nspr fixes the following issues : Issues fixed in MozillaFirefox : Update to Firefox ESR 60.4 bsc1119105 CVE-2018-17466: Fixed a buffer overflow and out-of-bounds read in ANGLE library with TextureStorage11 CVE-2018-18492: Fixed a...
PT-2018-2576
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 72.0.3626.81 Description The issue is related to insufficient origin validation in the IndexedDB component of Google Chrome, which can be exploited by a remote attacker who has compromised the renderer process...
firefox security update
CentOS Errata and Security Advisory CESA-2018:3833 An update for firefox is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
firefox security update
CentOS Errata and Security Advisory CESA-2018:3831 An update for firefox is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
Security vulnerabilities fixed in Thunderbird 60.4 — Mozilla
A buffer overflow and out-of-bounds read can occur in TextureStorage11 within the ANGLE graphics library, used for WebGL content. This results in a potentially exploitable crash. A use-after-free vulnerability can occur after deleting a selection element due to a weak reference to the select...
CVE-2018-17195
The template upload API endpoint accepted requests from different domain when sent in conjunction with ARP spoofing + man in the middle MiTM attack, resulting in a CSRF attack. The required attack vector is complex, requiring a scenario with client certificate authentication, same subnet access,...
RHEL 7 : firefox (RHSA-2018:3833)
The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2018:3833 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...
RHEL 6 : firefox (RHSA-2018:3831)
The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2018:3831 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...
Mozilla: Same-origin policy violation using location attribute and performance.getEntries to steal cross-origin URLs
A same-origin policy violation allowing the theft of cross-origin URL entries when using the Javascript location property to cause a redirection to another site using performance.getEntries. This is a same-origin policy violation and could allow for data theft. This vulnerability affects...