7428 matches found
Important: Red Hat Security Advisory: firefox security update
An update for firefox is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
RLSA-2022:5469 Important: firefox security update
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 91.11 ESR. Security Fixes: Mozilla: CSP sandbox header without allow-scripts can be bypassed via retargeted javascript: URI CVE-2022-34468 Mozill...
firefox security update
An update is available for firefox. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mozilla Firefox is an open-source web browser, designed for standards...
[SECURITY] Fedora 36 Update: firefox-102.0-1.fc36
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
[SECURITY] Fedora 36 Update: chromium-102.0.5005.115-1.fc36
Chromium is an open-source web browser, powered by WebKit Blink...
Fedora: Security Advisory for chromium (FEDORA-2022-7416607232)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Mozilla Firefox Resource Management Error Vulnerability (CNVD-2023-06510)
Mozilla Firefox is an open source web browser from the Mozilla Foundation. Mozilla Firefox is vulnerable to a resource management error, which is caused by a confusion in the program's instructions for freeing memory. An attacker could exploit the vulnerability to cause the program to crash,...
Mozilla Firefox integer overflow vulnerability (CNVD-2023-75351)
Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from an integer overflow vulnerability that stems from improper validation of input data in the application's nsTArrayImpl::ReplaceElementsAt function, which can be exploited to...
Fedora: Security Advisory for firefox (FEDORA-2022-59e474cd5c)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability (CNVD-2022-57203)
An elevation of privilege vulnerability exists in Microsoft Edge Chromium-based, a Web browser that ships with post-Windows 10 versions of Microsoft Corporation USA. The vulnerability stems from a failure to properly program a call to a high-level native procedure. An attacker could exploit this...
IBM Jazz Team Server HTML注入漏洞
IBM Jazz Team Server is an application server from IBM Corporation. provides base services that enable a group of tools to work together as a single logical server and includes any number of Jazz Team Server Extensions that provide tool-specific functionality.An HTML injection vulnerability exist...
Mozilla Firefox 输入验证错误漏洞
Mozilla Firefox is an open source web browser from the Mozilla Foundation. Mozilla Firefox suffers from an input validation error vulnerability that arises from the browser handling redirects when accepting redirect headers from external protocols...
CVE-2021-20543
IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 198929...
Microsoft Edge 安全漏洞
An elevation of privilege vulnerability exists in Microsoft Edge Chromium-based, a Web browser that ships with post-Windows 10 versions of Microsoft Corporation USA. The vulnerability stems from a failure to properly program a call to a high-level native procedure. An attacker could exploit this...
Cross-site Scripting ( XSS) - Reflected
Description Please enter a description of the vulnerability. File pts-core/phoromatic/publichtml/public.php line 258 of public.php sends unvalidated data to a web browser, which can result in the browser executing malicious code. Proof of Concept GET /test"alert1 HTTP/1.1 Host: localhost:8670...
MAL-2022-5089 Malicious code in opbox-web-browser (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4082c2c84fc3313fac52ef72371ba806a2e6d3e2287c50a7ac26fa954d731860 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in opbox-web-browser (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4082c2c84fc3313fac52ef72371ba806a2e6d3e2287c50a7ac26fa954d731860 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Cisco Catalyst 2940 Series Cross-Site Scripting Vulnerability
Cisco Catalyst is a series of switches from Cisco, Inc. A cross-site scripting vulnerability exists in the Cisco Catalyst 2940 Series, which stems from a failure to properly process user input and generate an error page that could be exploited by an attacker to execute arbitrary scripts on the we...
CVE-2022-27231
Cross-site scripting vulnerability exists in WP Statistics versions prior to 13.2.0 because it improperly processes a platform parameter. By exploiting this vulnerability, an arbitrary script may be executed on the web browser of the user who is logging in to the website using the product...
Cross site scripting
Cross-site scripting vulnerability exists in WP Statistics versions prior to 13.2.0 because it improperly processes a platform parameter. By exploiting this vulnerability, an arbitrary script may be executed on the web browser of the user who is logging in to the website using the product...