6 results · Clear filters · Feed
-
Low 3.4
Spoofing issue in Firefox
Spoofing issue in Firefox. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, and Firefox ESR 115.30.
-
Low 3.7
There was no limit to the number of HTTP/2 CONTINUATION frames that would be processed. A server could abuse this to cr…
-
Low 2.7
To harden ICU against exploitation, the behavior for out-of-memory conditions was changed to crash instead of attempt t…
-
Low 3.3
Logins saved by Firefox should be managed by the Password Manager component which uses encryption to save files on-disk…
-
Low 3.8
wasmtime_trap_code C API function has out of bounds write vulnerability
Wasmtime is a standalone runtime for WebAssembly. Prior to version 2.0.2, there is a bug in Wasmtime's C API implementation where the definition of the `wasmtime_trap_code` does not match its declared signature in the `wasmtime/trap.h` header file. This discr…
-
Low 3.7
The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not pr…