Archive
11 June 2018
Vulnerabilities first published on this day (UTC), newest first.
349 results · Feed
-
High 8.1
VMware NSX SD-WAN Edge by VeloCloud prior to version 3.1.0 contains a command injection vulnerability in the local web …
KEV Mar 25, 2022 -
Unscored —
The VMware AirWatch Agent for Android prior to 8.2 and AirWatch Agent for Windows Mobile prior to 6.5.2 contain a remot…
-
Unscored —
WebExtensions may use "view-source:" URLs to view local "file:" URL content, as well as content stored in "about:cache"…
-
Unscored —
A use-after-free vulnerability can occur in the compositor during certain graphics operations when a raw pointer is use…
-
Unscored —
If right-to-left text is used in the addressbar with left-to-right alignment, it is possible in some circumstances to s…
-
Unscored —
A use-after-free vulnerability can occur during WebRTC connections when interacting with the DTMF timers. This results …
-
Unscored —
Memory safety bugs were reported in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7. Some of these bugs showed evide…
-
Unscored —
The filename appearing in the "Downloads" panel improperly renders some Unicode characters, allowing for the file name …
-
Unscored —
If an HTTP authentication prompt is triggered by a background network request from a page or extension, it is displayed…
-
Unscored —
The web console and JavaScript debugger do not sanitize all output that can be hyperlinked. Both will display "chrome:"…
-
Unscored —
Memory safety bugs were reported in Firefox 58 and Firefox ESR 52.6. Some of these bugs showed evidence of memory corru…
-
Unscored —
If manipulated hyperlinked text with "chrome:" URL contained in it is dragged and dropped on the "home" icon, the home …
-
Unscored —
A legacy extension's non-contentaccessible, defined resources can be loaded by an arbitrary web page through script. Th…
-
Unscored —
URLs using "javascript:" have the protocol removed when pasted into the addressbar to protect users from cross-site scr…
-
Unscored —
If Media Capture and Streams API permission is requested from documents with "data:" or "blob:" URLs, the permission no…
-
Unscored —
A use-after-free vulnerability can occur when manipulating elements, events, and selection ranges during editor operati…
-
Unscored —
A use-after-free vulnerability can occur during WebGL operations. While this results in a potentially exploitable crash…
-
Unscored —
If a malicious attacker has used another vulnerability to gain full control over a content process, they may be able to…
-
Unscored —
The "browser.identity.launchWebAuthFlow" function of WebExtensions is only allowed to load content over "https:" but th…
-
Unscored —
A use-after-free vulnerability can occur during mouse event handling due to issues with multiprocess support. This resu…
-
Unscored —
Using remote content in encrypted messages can lead to the disclosure of plaintext. This vulnerability affects Thunderb…
-
Unscored —CVE-2018-5094 EPSS 15%
A heap buffer overflow vulnerability may occur in WebAssembly when "shrinkElements" is called followed by garbage colle…
-
Unscored —
A use-after-free vulnerability can occur while editing events in form elements on a page, resulting in a potentially ex…
-
Unscored —
A potential integer overflow in the "DoCrypt" function of WebCrypto was identified. If a means was found of exploiting …
-
Unscored —
Plaintext of decrypted emails can leak through the src attribute of remote images, or links. This vulnerability affects…
-
Unscored —
If the "app.support.baseURL" preference is changed by a malicious local program to contain HTML and script content, thi…
-
Unscored —
Mozilla developers backported selected changes in the Skia library. These changes correct memory corruption issues incl…
-
Unscored —
In 32-bit versions of Firefox, the Adobe Flash plugin setting for "Enable Adobe Flash protected mode" is unchecked by d…
-
Unscored —
WebExtensions with the "ActiveTab" permission are able to access frames hosted within the active tab even if the frames…
-
Unscored —
An integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with at …
-
Unscored —
A lack of parameter validation on IPC messages results in a potential out-of-bounds write through malformed IPC message…
-
Unscored —
If a URL using the "file:" protocol is dragged and dropped onto an open tab that is running in a different child proces…
-
Unscored —
A Blob URL can violate origin attribute segregation, allowing it to be accessed from a private browsing tab and for dat…
-
Unscored —
The Live Bookmarks page and the PDF viewer can run injected script content if a user pastes script from the clipboard i…
-
Unscored —
A vulnerability exists in XSLT during number formatting where a negative buffer size may be allocated in some instances…
-
Unscored —
A use-after-free vulnerability can occur during XSL transformations when the source document for the transformation is …
-
Unscored —
If cursor visibility is toggled by script using from 'none' to an image and back through script, the cursor will be ren…
-
Unscored —
Memory safety bugs were reported in Firefox 57 and Firefox ESR 52.5. Some of these bugs showed evidence of memory corru…
-
Unscored —
When the text of a specially formatted URL is dragged to the addressbar from page content, the displayed URL can be spo…
-
Unscored —
An integer overflow can occur during conversion of text to some Unicode character sets due to an unchecked length param…