GHSA-QM5V-PJ64-852J Passbolt Api Tabnabbing when opening URI with menu "Open URI in a new tab"

Description A user could create and share a resource with a malicious URI. When the victim opens with menu “Open URI in a new tab” function, the malicious page has access to the window.opener object. Impact of issue The newly opened malicious page can for example change the window.opener.location...

CVE-2024-35986

A vulnerability was found in the Linux kernel's phy: ti: tusb1210 driver, where unregistering a powersupply device while other code holds a reference to it causes a crash. This issue happens due to a dangling reference in the tusb1210getonline function after the power supply is removed and its...

CVE-2024-35986 phy: ti: tusb1210: Resolve charger-det crash if charger psy is unregistered

In the Linux kernel, the following vulnerability has been resolved: phy: ti: tusb1210: Resolve charger-det crash if charger psy is unregistered The powersupply frame-work is not really designed for there to be long living in kernel references to powersupply devices. Specifically unregistering a...

Mozilla: IndexedDB files retained in private browsing mode

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as follows: If the browser.privatebrowsing.autostart preference is enabled, IndexedDB files were not properly deleted when the window was closed. This preference is disabled by default in Firefox...

Mozilla: IndexedDB files retained in private browsing mode

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as follows: If the browser.privatebrowsing.autostart preference is enabled, IndexedDB files were not properly deleted when the window was closed. This preference is disabled by default in Firefox...

Windows DWM Disclosure

The vulnerability of the Windows DWM library in Windows operating systems is related to integer overflow. Exploiting this vulnerability can allow an attacker to disclose protected information...

PT-2024-40435 · Packagist · Passbolt/Passbolt Api

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned, so the information is not available. Description: A user could create and share a resource with a malicious URI. When the victim opens the URI in a new tab using the "Open URI in a new tab"...

SUSE CVE-2024-4767

If the browser.privatebrowsing.autostart preference is enabled, IndexedDB files were not properly deleted when the window was closed. This preference is disabled by default in Firefox. This vulnerability affects Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11...

OESA-2024-1597 xorg-x11-server-xwayland security update

Xwayland is an X server for running X clients under Wayland. %package devel Summary: Development package Requires: pkgconfig %description devel The development package provides the developmental files which are necessary for developing Wayland compositors using Xwayland. %prep %autosetup -n...

PT-2024-21887 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A data-race issue has been identified around sysctl netrom transport requested window size in the netrom component. Recommendations: At the moment, there is no information about a newe...

Mozilla: IndexedDB files retained in private browsing mode

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as follows: If the browser.privatebrowsing.autostart preference is enabled, IndexedDB files were not properly deleted when the window was closed. This preference is disabled by default in Firefox...

Mozilla Firefox Security Bypass Vulnerability (CNVD-2024-23348)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security bypass vulnerability exists in Mozilla Firefox, which can be exploited by attackers to bypass security restrictions due to a window being disabled even after the file dialog box is displayed...

Windows DWM Privilege Escalation

The vulnerability of the Windows DWM library in Windows operating systems is related to the possibility of buffer overflow attacks. Exploiting this vulnerability can allow a malicious actor to gain elevated privileges remotely...

UBUNTU-CVE-2024-4776

A file dialog shown while in full-screen mode could have resulted in the window remaining disabled. This vulnerability affects Firefox 126...

CVE-2024-4776

A file dialog shown while in full-screen mode could have resulted in the window remaining disabled. This vulnerability affects Firefox 126...

CVE-2024-30035

Windows DWM Core Library Elevation of Privilege Vulnerability...

CVE-2024-30008

Windows DWM Core Library Information Disclosure Vulnerability...

CVE-2024-3460

In KioWare for Windows versions all through 8.34 it is possible to exit this software and use other already opened applications utilizing a short time window before the forced automatic logout occurs. Then, by using some built-in function of these applications, one may launch any other programs. ...

CVE-2024-4776: Improper Neutralization of Input During Web Page Generation

A file dialog shown while in full-screen mode could have resulted in the window remaining disabled. This vulnerability affects Firefox 126...

Microsoft Windows DWM Core Library 资源管理错误漏洞

Microsoft Windows is a suite of operating systems used by Microsoft Corporation USA for personal devices. A resource management error vulnerability exists in the Microsoft Windows DWM Core Library. The following products and editions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows...