[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

250770

 
 

909

 
 

196157

 
 

282

 
 
 
Paid content will be excluded from the download.

Filter
Matches : 195419 Download | Alert*

Mozilla Firefox 108 : Because Firefox did not implement the unsafe-hashes CSP directive, an attacker who was able to inject markup into a page otherwise protected by a Content Security Policy may have been able to inject executable script. This would be severely constrained by the specified Content Security Policy of the document.

Mozilla Firefox 108, Mozilla Firefox ESR 102.7 and Mozilla Thunderbird 102.7 : An out of date library (libusrsctp) contained vulnerabilities that could potentially be exploited.

The host is missing a high severity security update according to the Mozilla advisory MFSA2022-53 and is prone to multiple vulnerabilities. The flaws are present in the application, which fails to properly handle unspecified vectors. Successful exploitation allows an attacker to have unspecified impact.

The host is missing a high severity security update according to Mozilla advisory, MFSA2022-52. The update is required to fix multiple vulnerabilities. The flaws are present in the application, which fails to handle multiple vectors. Successful exploitation can cause multiple impacts.

The host is missing a high severity security update according to Mozilla advisory, MFSA2022-51. The update is required to fix multiple vulnerabilities. The flaws are present in the application, which fails to handle multiple vectors. Successful exploitation can cause multiple impacts.

The host is missing a high severity security update according to the Mozilla advisory MFSA2022-50 and is prone to sensitive information disclosure vulnerability. A flaw is present in the application, which fails to handle issues in quoting from an HTML email. Successful exploitation allow attackers to trigger network requests and load remote content.

The host is installed with Mozilla Thunderbird before 102.5.1 and is prone to a sensitive information disclosure vulnerability. A flaw is present in the application, which fails to handle issues in quoting from an HTML email. Successful exploitation allow attackers to trigger network requests and load remote content.

Mozilla Firefox 107, Mozilla Firefox ESR 102.5 or Mozilla Thunderbird 102.5: Mozilla developers Andrew McCreight and Gabriele Svelto reported memory safety bugs present in Firefox 106 and Firefox ESR 102.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.

Mozilla Firefox 107, Mozilla Firefox ESR 102.5 or Mozilla Thunderbird 102.5: Using tables inside of an iframe, an attacker could have caused iframe contents to be rendered outside the boundaries of the iframe, resulting in potential user confusion or spoofing attacks.

Mozilla Firefox 107 : If the user added a security exception for an invalid TLS certificate, opened an ongoing TLS connection with a server that used that certificate, and then deleted the exception, Firefox would have kept the connection alive, making it seem like the certificate was still trusted.


Pages:      Start    8682    8683    8684    8685    8686    8687    8688    8689    8690    8691    8692    8693    8694    8695    ..   19541

© SecPod Technologies