Port Blocking BYPASS

firefox is vulnerable to port blocking bypass. Ports that were written as an integer overflow above the bounds of a 16-bit integer could have bypassed port blocking restrictions when used in the Alt-Svc header...

PT-2021-2749

Name of the Vulnerable Software and Affected Versions: Firefox ESR versions prior to 78.10 Thunderbird versions prior to 78.10 Firefox versions prior to 88 Description: The issue exists due to insufficient input validation, allowing a remote attacker to bypass security restrictions. This can be...

Mozilla Firefox < 88.0

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 88.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2021-16 advisory. - Mozilla developers and community members Ryan VanderMeulen, Sean Feng, Tyson Smith, Julian Seward, Christian...

PT-2020-9590

Name of the Vulnerable Software and Affected Versions: Verifone MX900 series Pinpad Payment Terminals version 30251000 Description: The issue concerns Insecure Permissions, which can lead to arbitrary command injection and privilege escalation through svc netcontrol. Recommendations: For Verifone...

Information Disclosure

firefox is vulnerable to information disclosure. The HTTP Alternative Services header Alt-Svc can be used by a malicious site to scan all TCP ports of any host that the accessible to a user when web content is loaded...

PT-2020-2042

Name of the Vulnerable Software and Affected Versions Caldera versions prior to 2.6.5 Description The issue is related to the auth svc function in Caldera, which allows authentication bypass for REST API requests. This can be achieved by forging a "localhost" string in the HTTP Host header,...

Security update for MozillaFirefox (important)

openSUSE Security Update: Security update for MozillaFirefox Announcement ID: openSUSE-SU-2019:2251-1 Rating: important References: 1109465 1117473 1123482 1124525 1133810 1138688 1140868 1141322 1145665 1149292 1149293 1149294 1149295 1149296 1149297 1149298 1149299 1149302 1149303 1149304 11493...

PT-2019-14571

Name of the Vulnerable Software and Affected Versions Centreon versions prior to 19.04 Description The issue allows for SQL injection attacks. This is possible via the svc id parameter in the 'include/monitoring/status/Services/xml/makeXMLForOneService.php' file. Recommendations For Centreon...

kernel: nfs: use-after-free in svc_process_common()

A flaw was found in the Linux kernel's NFS41+ subsystem. NFS41+ shares mounted in different network namespaces at the same time can make bcsvcprocess use wrong back-channel IDs and cause a use-after-free vulnerability. Thus a malicious container user can cause a host kernel memory corruption and ...

PT-2019-6457

Name of the Vulnerable Software and Affected Versions Lustre file system versions prior to 2.12.3 Description The issue is related to an out-of-bounds read and panic in the ptlrpc module of the Lustre file system. This occurs due to the lack of validation for specific fields of packets sent by a...

CVE-2019-11728

The HTTP Alternative Services header, Alt-Svc, can be used by a malicious site to scan all TCP ports of any host that the accessible to a user when web content is loaded. This vulnerability affects Firefox 68...

CVE-2019-11728

The HTTP Alternative Services header, Alt-Svc, can be used by a malicious site to scan all TCP ports of any host that the accessible to a user when web content is loaded. This vulnerability affects Firefox 68...

CVE-2019-11728

The HTTP Alternative Services header, Alt-Svc, can be used by a malicious site to scan all TCP ports of any host that the accessible to a user when web content is loaded. This vulnerability affects Firefox 68...

CVE-2019-11728

The HTTP Alternative Services header, Alt-Svc, can be used by a malicious site to scan all TCP ports of any host that the accessible to a user when web content is loaded. This vulnerability affects Firefox 68...

CVE-2019-11728

CVE-2019-11728 affects Mozilla Firefox prior to 68. The issue arises from the Alt-Svc (HTTP Alt-Svc) header which a malicious site can leverage to scan all TCP ports of hosts reachable by a user when web content is loaded. Impact is limited to information exposure via port discovery; no explicit ...

CVE-2019-11728: Exposure of Resource to Wrong Sphere

The HTTP Alternative Services header, Alt-Svc, can be used by a malicious site to scan all TCP ports of any host that the accessible to a user when web content is loaded. This vulnerability affects Firefox 68...

Mozilla Firefox Input Validation Error Vulnerability (CNVD-2019-29579)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox versions prior to 68. A remote attacker can exploit this vulnerability to bypass security restrictions and scan all TCP ports on any host using the...

PT-2019-4550

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 68 Description The HTTP Alternative Services header, Alt-Svc, can be used by a malicious site to scan all TCP ports of any host that is accessible to a user when web content is loaded. This issue is related to...

CVE-2019-11728

The HTTP Alternative Services header, Alt-Svc, can be used by a malicious site to scan all TCP ports of any host that the accessible to a user when web content is loaded. This vulnerability affects Firefox 68...

UBUNTU-CVE-2019-11728

The HTTP Alternative Services header, Alt-Svc, can be used by a malicious site to scan all TCP ports of any host that the accessible to a user when web content is loaded. This vulnerability affects Firefox 68...