Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6649
Adobe 6383
Ibm 6266
Cisco 5746
Debian 3919
Apache 2864
Mozilla 2857
Redhat 2581
Vpn
MEDIUM 5.5
An invalid Polkit Authentication check and missing authentication requirements for D-Bus methods allowed any local user to configure arbitrary VPN se…
Firefox
MEDIUM 6.5
When Firefox is configured to block storage of all cookies, it was still possible to store data in localstorage by using an iframe with a source of '…
Firefox
MEDIUM 6.5
When a ServiceWorker intercepted a request with <code>FetchEvent</code>, the origin of the request was lost after the ServiceWorker took ownership of…
Firefox
MEDIUM 6.5
The developer page about:memory has a Measure function for exploring what object types the browser has allocated and their sizes. When this function …
Firefox
CRITICAL 9.8
A malicious extension could have called <code>browser.identity.launchWebAuthFlow</code>, controlling the redirect_uri, and through the Promise return…
Firefox
MEDIUM 5.4
By using a form with a data URI it was possible to gain access to the privileged JSONView object that had been cloned into content. Impact from expos…
Firefox
MEDIUM 6.5
A hyperlink using the res: protocol can be used to open local files at a known location in Internet Explorer if a user approves execution when prompt…
Firefox
MEDIUM 6.5
A hyperlink using protocols associated with Internet Explorer, such as IE.HTTP:, can be used to open local files at a known location with Internet Ex…
Firefox
HIGH 7.5
WebExtensions can bypass normal restrictions in some circumstances and use "browser.tabs.executeScript" to inject scripts into contexts where this sh…
Firefox
HIGH 7.5
The "browser.identity.launchWebAuthFlow" function of WebExtensions is only allowed to load content over "https:" but this requirement was not properl…