The vulnerability of the browser.tabs.executeScript() function in the WebExtensions extension of the Mozilla Firefox browser allows a hacker to perform cross-site scripting attacks.

The vulnerability of the browser.tabs.executeScript function in WebExtensions extensions of the Mozilla Firefox browser is related to access control deficiencies. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

The vulnerability in the WebExtensions extension of the Mozilla Firefox browser allows a hacker to gain unauthorized access to protected information.

The vulnerability of the WebExtensions extension in the Mozilla Firefox browser is related to deficiencies in restrictions when using the URL “view-source:” for viewing the local URL “file:”, as well as content stored in “about:cache”. Exploiting this vulnerability can allow an attacker to gain...

The vulnerability of Mozilla Firefox’s WebExtensions module allows a hacker to gain unauthorized access to protected information.

The vulnerability of the WebExtensions module in the Mozilla Firefox browser is related to a lack of mechanisms for checking input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of Mozilla Firefox’s WebExtensions module allows attackers to increase their privileges.

The vulnerability of the WebExtensions module in the Mozilla Firefox browser is related to insufficient checking of permission assignment for critical resources. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

The system’s vulnerability allows for the development of WebExtensions extensions for Firefox browsers and Firefox ESR, enabling a hacker to gain unauthorized access to local files.

The vulnerability of the system for developing WebExtensions extensions in Firefox browsers and Firefox ESR browsers is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to local files without warning the user...

The system’s vulnerability allows for the development of WebExtensions extensions for Firefox browsers and Firefox ESR, enabling a hacker to gain unauthorized access to protected information.

The vulnerability of the system for developing WebExtensions extensions in Firefox browsers and Firefox ESR is related to access control deficiencies. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information by modifying the Host: request...

The system’s vulnerability allows for the development of WebExtensions extensions for Firefox browsers and Firefox ESR, enabling attackers to increase their privileges.

The vulnerability of the system for developing WebExtensions extensions in Firefox browsers and Firefox ESR browsers relates to the ability to execute JavaScript scripts beyond the limitations. Exploiting this vulnerability can allow a remote attacker to enhance their privileges...

The vulnerability of the cross-browser system for developing WebExtensions extensions in Firefox and Firefox ESR browsers allows attackers to increase their privileges.

The vulnerability of the cross-browser system used for developing WebExtensions extensions in Firefox and Firefox ESR is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of the cross-browser system used for developing WebExtensions extensions in the Firefox web browser allows a hacker to gain unauthorized access to protected information.

The vulnerability of the cross-browser system used for developing WebExtensions extensions in the Firefox web browser is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the cross-browser system used for developing WebExtensions extensions in the Firefox ESR browser allows a hacker to circumvent existing security restrictions.

The vulnerability of the cross-browser system used for developing WebExtensions extensions in Firefox ESR is related to privilege assignment errors. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions remotely...

CVE-2018-18497

Limitations on the URIs allowed to WebExtensions by the browser.windows.create API can be bypassed when a pipe in the URL field is used within the extension to load multiple pages as a single argument. This could allow a malicious WebExtension to open privileged about: or file: locations. This...

CVE-2018-18497

Limitations on the URIs allowed to WebExtensions by the browser.windows.create API can be bypassed when a pipe in the URL field is used within the extension to load multiple pages as a single argument. This could allow a malicious WebExtension to open privileged about: or file: locations. This...

CVE-2018-18497

Limitations on the URIs allowed to WebExtensions by the browser.windows.create API can be bypassed when a pipe in the URL field is used within the extension to load multiple pages as a single argument. This could allow a malicious WebExtension to open privileged about: or file: locations. This...

CVE-2018-18497

CVE-2018-18497 : In Firefox, limitations on URIs allowed to WebExtensions via the browser.windows.create API can be bypassed by placing a pipe in the URL field, causing multiple pages to load as a single argument. This may allow a malicious WebExtension to open privileged locations such as about:...

CVE-2018-18497

Limitations on the URIs allowed to WebExtensions by the browser.windows.create API can be bypassed when a pipe in the URL field is used within the extension to load multiple pages as a single argument. This could allow a malicious WebExtension to open privileged about: or file: locations. This...

CVE-2018-18497

Limitations on the URIs allowed to WebExtensions by the browser.windows.create API can be bypassed when a pipe in the URL field is used within the extension to load multiple pages as a single argument. This could allow a malicious WebExtension to open privileged about: or file: locations. This...

CVE-2018-18497: Undefined Security Weakness

Limitations on the URIs allowed to WebExtensions by the browser.windows.create API can be bypassed when a pipe in the URL field is used within the extension to load multiple pages as a single argument. This could allow a malicious WebExtension to open privileged about: or file: locations. This...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : Firefox vulnerabilities (USN-3844-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3844-1 advisory. Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacke...

USN-3844-1: Firefox vulnerabilities

Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, bypass same-origin restritions, or execute arbitrary code. CVE-2018-12405, CVE-2018-12406, CVE-2018-1240...

USN-3844-1 firefox vulnerabilities

Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, bypass same-origin restritions, or execute arbitrary code. CVE-2018-12405, CVE-2018-12406, CVE-2018-1240...