1,829 results · Feed
-
Unscored —
Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values being improperly sanitized before …
-
Unscored —
A vulnerability exists where if a user opens a locally saved HTML file, this file can use file: URIs to access other fi…
-
Unscored —
Incorrect convexity calculations in Skia in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to perform an…
-
Unscored —
In libwebp 0.5.1, there is a double free bug in libwebpmux.
-
Unscored —
A vulnerability exists during authorization prompting for FTP transaction where successive modal prompts are displayed …
-
Unscored —
Cross-origin images can be read from a canvas element in violation of the same-origin policy using the transferFromImag…
-
Unscored —
Mozilla developers and community members reported memory safety bugs present in Firefox 65. Some of these bugs showed e…
-
Unscored —
Mozilla developers and community members reported memory safety bugs present in Firefox 65, Firefox ESR 60.5, and Thund…
-
Unscored —
The type inference system allows the compilation of functions that can cause type confusions between arbitrary objects …
-
Unscored —
A latent vulnerability exists in the Prio library where data may be read from uninitialized memory for some functions, …
-
Unscored —
Firefox will accept any registered Program ID as an external protocol handler and offer to launch this local applicatio…
-
Unscored —
Insufficient bounds checking of data during inter-process communication might allow a compromised content process to be…
-
Unscored —
A mechanism was discovered that removes some bounds checking for string, array, or typed array accesses if Spectre miti…
-
Unscored —
On Android systems, Firefox can load a library from APITRACE_LIB, which is writable by all users and applications. This…
-
Unscored —
The IonMonkey just-in-time (JIT) compiler can leak an internal JS_OPTIMIZED_OUT magic value to the running script durin…
-
Unscored —
If a Sandbox content process is compromised, it can initiate an FTP download which will then use a child process to ren…
-
Unscored —
A vulnerability was discovered where specific command line arguments are not properly discarded during Firefox invocati…
-
Unscored —
The Upgrade-Insecure-Requests (UIR) specification states that if UIR is enabled through Content Security Policy (CSP), …
-
Unscored —
In Firefox Developer Tools it is possible that pasting the result of the 'Copy as cURL' command into a command shell on…
-
Unscored —
A vulnerability where type-confusion in the IonMonkey just-in-time (JIT) compiler could potentially be used by maliciou…
-
Unscored —
A use-after-free vulnerability can occur when the SMIL animation controller incorrectly registers with the refresh driv…
-
Unscored —
Cross-origin images can be read in violation of the same-origin policy by exporting an image after using createImageBit…
-
Unscored —
A use-after-free vulnerability can occur when a raw pointer to a DOM element on a page is obtained using JavaScript and…
-
Unscored —
When arbitrary text is sent over an FTP connection and a page reload is initiated, it is possible to create a modal ale…
-
Unscored —
If WebRTC permission is requested from documents with data: or blob: URLs, the permission notifications do not properly…
-
Unscored —
If the source for resources on a page is through an FTP connection, it is possible to trigger a series of modal alert m…
-
Unscored —
Incorrect alias information in IonMonkey JIT compiler for Array.prototype.slice method may lead to missing bounds check…
-
Unscored —CVE-2019-9813 Public exploit
Incorrect handling of __proto__ mutations may lead to type confusion in IonMonkey JIT code and can be leveraged for arb…
-
Unscored —
A same-origin policy violation allowing the theft of cross-origin URL entries when using a meta http-equiv="refresh" on…
-
Unscored —
Some special resource URIs will cause a non-exploitable crash if loaded with optional parameters following a '?' in the…
-
Unscored —
Mozilla developers and community members reported memory safety bugs present in Firefox 63 and Firefox ESR 60.3. Some o…
-
Unscored —
Mozilla developers and community members reported memory safety bugs present in Firefox 63. Some of these bugs showed e…
-
Unscored —
A WebExtension can request access to local files without the warning prompt stating that the extension will "Access you…
-
Unscored —
By rewriting the Host: request headers using the webRequest API, a WebExtension can bypass domain restrictions through …
-
Unscored —
When a new protocol handler is registered, the API accepts a title argument which can be used to mislead users about wh…
-
Unscored —
If a site is loaded over a HTTPS connection but loads a favicon resource over HTTP, the mixed content warning is not di…
-
Unscored —
Mozilla developers and community members reported memory safety bugs present in Firefox 62. Some of these bugs showed e…
-
Unscored —
The internal WebBrowserPersist code does not use correct origin context for a resource being saved. This manifests when…
-
Unscored —
A potential vulnerability was found in 32-bit builds where an integer overflow during the conversion of scripts to an i…
-
Unscored —
By using the reflected URL in some special resource URIs, such as chrome:, it is possible to inject stylesheets and byp…