2,316 results · Feed
-
Unscored —
A vulnerability exists where it possible to force Network Security Services (NSS) to sign CertificateVerify with PKCS#1…
-
Unscored —
The HTTP Alternative Services header, Alt-Svc, can be used by a malicious site to scan all TCP ports of any host that t…
-
Unscored —
Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values being improperly sanitized before …
-
Unscored —
A vulnerability exists where if a user opens a locally saved HTML file, this file can use file: URIs to access other fi…
-
Unscored —
A vulnerability exists during authorization prompting for FTP transaction where successive modal prompts are displayed …
-
Unscored —
The about:crashcontent and about:crashparent pages can be triggered by web content. These pages are used to crash the l…
-
Unscored —
Cross-origin images can be read from a canvas element in violation of the same-origin policy using the transferFromImag…
-
Unscored —
Mozilla developers and community members reported memory safety bugs present in Firefox 65. Some of these bugs showed e…
-
Unscored —
Mozilla developers and community members reported memory safety bugs present in Firefox 65, Firefox ESR 60.5, and Thund…
-
Unscored —
The type inference system allows the compilation of functions that can cause type confusions between arbitrary objects …
-
Unscored —
A latent vulnerability exists in the Prio library where data may be read from uninitialized memory for some functions, …
-
Unscored —
Firefox will accept any registered Program ID as an external protocol handler and offer to launch this local applicatio…
-
Unscored —
Insufficient bounds checking of data during inter-process communication might allow a compromised content process to be…
-
Unscored —
A mechanism was discovered that removes some bounds checking for string, array, or typed array accesses if Spectre miti…
-
Unscored —
On Android systems, Firefox can load a library from APITRACE_LIB, which is writable by all users and applications. This…
-
Unscored —
The IonMonkey just-in-time (JIT) compiler can leak an internal JS_OPTIMIZED_OUT magic value to the running script durin…
-
Unscored —
If a Sandbox content process is compromised, it can initiate an FTP download which will then use a child process to ren…
-
Unscored —
A vulnerability was discovered where specific command line arguments are not properly discarded during Firefox invocati…
-
Unscored —
The Upgrade-Insecure-Requests (UIR) specification states that if UIR is enabled through Content Security Policy (CSP), …
-
Unscored —
In Firefox Developer Tools it is possible that pasting the result of the 'Copy as cURL' command into a command shell on…
-
Unscored —
A vulnerability where type-confusion in the IonMonkey just-in-time (JIT) compiler could potentially be used by maliciou…
-
Unscored —
A use-after-free vulnerability can occur when the SMIL animation controller incorrectly registers with the refresh driv…
-
Unscored —
Cross-origin images can be read in violation of the same-origin policy by exporting an image after using createImageBit…
-
Unscored —
A use-after-free vulnerability can occur when a raw pointer to a DOM element on a page is obtained using JavaScript and…
-
Unscored —
When arbitrary text is sent over an FTP connection and a page reload is initiated, it is possible to create a modal ale…
-
Unscored —
If WebRTC permission is requested from documents with data: or blob: URLs, the permission notifications do not properly…
-
Unscored —
If the source for resources on a page is through an FTP connection, it is possible to trigger a series of modal alert m…
-
Unscored —
Incorrect alias information in IonMonkey JIT compiler for Array.prototype.slice method may lead to missing bounds check…
-
Unscored —CVE-2019-9813 Public exploit
Incorrect handling of __proto__ mutations may lead to type confusion in IonMonkey JIT code and can be leveraged for arb…
-
Unscored —
Use of uninitialized memory in Graphite2 library in Firefox before 54 in graphite2::GlyphCache::Loader::read_glyph func…
-
Unscored —
Heap-based Buffer Overflow read in Graphite2 library in Firefox before 54 in graphite2::Silf::getClassGlyph.
-
Unscored —
Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Silf::readGraphite function.
-
Unscored —
Heap-based Buffer Overflow write in Graphite2 library in Firefox before 54 in lz4::decompress src/Decompressor.
-
Unscored —
Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Pass::readPass function.
-
Unscored —
Heap-based Buffer Overflow in Graphite2 library in Firefox before 54 in lz4::decompress function.
-
Unscored —
A buffer overflow can occur in the Skia library during buffer offset calculations with hardware accelerated canvas 2D a…
-
Unscored —
A same-origin policy violation allowing the theft of cross-origin URL entries when using the Javascript location proper…
-
Unscored —
When the RSS Feed preview about:feeds page is framed within another page, it can be used in concert with scripted conte…
-
Unscored —
WebExtension content scripts can be loaded into about: pages in some circumstances, in violation of the permissions gra…
-
Unscored —
Limitations on the URIs allowed to WebExtensions by the browser.windows.create API can be bypassed when a pipe in the U…