Linux 13140
Google 12530
Microsoft 12379
Oracle 6737
Apple 6692
Adobe 6387
Ibm 6330
Cisco 5757
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
Firefox
HIGH 8.8
The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a request, which can be controlled by the website. If …
Firefox
HIGH 7.5
When a Web Extension had the all-urls permission and made a fetch request with a mode set to 'same-origin', it was possible for the Web Extension to …
Firefox
MEDIUM 6.5
When a JavaScript URL (javascript:) is evaluated and the result is a string, this string is parsed to create an HTML document, which is then presente…
Firefox
MEDIUM 5.3
The first time AirPods are connected to an iPhone, they become named after the user's name by default (e.g. Jane Doe's AirPods.) Websites with camera…
Firefox
MEDIUM 5.3
When protecting CSS blocks with the nonce feature of Content Security Policy, the @import statement in the CSS block could allow an attacker to injec…
Firefox
HIGH 8.8
A content process could have modified shared memory relating to crash reporting information, crash itself, and cause an out-of-bound write. This coul…
Firefox
HIGH 8.8
Command line arguments could have been injected during Firefox invocation as a shell handler for certain unsupported file types. This required Firefo…
Firefox
HIGH 8.8
Mozilla developers and community members reported memory safety bugs present in Firefox 72 and Firefox ESR 68.4. Some of these bugs showed evidence o…
Firefox
HIGH 8.8
Mozilla developers reported memory safety bugs present in Firefox 72. Some of these bugs showed evidence of memory corruption and we presume that wit…
Firefox
MEDIUM 6.1
If a template tag was used in a select tag, the parser could be confused and allow JavaScript parsing and execution when it should not be allowed. A …
Firefox
HIGH 8.8
Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion. We are aware of targeted attacks in …
When processing an email message with an ill-formed envelope, Thunderbird could read data from a random memory location. This vulnerability affects T…
When processing a message that contains multiple S/MIME signatures, a bug in the MIME processing code caused a null pointer dereference, leading to a…
An open redirect is present on the gateway's login page, which could cause a user to be redirected to a malicious site after logging in.
A reflected XSS vulnerability exists within the gateway, allowing an attacker to craft a specialized URL which could steal the user's authentication …
Persona
HIGH 8.8
Cross-site request forgery (CSRF) vulnerability in the persona_xsrf_token function in persona.module in the Mozilla Persona module 7.x-1.x before 7.x…
Firefox
HIGH 8.8
Mozilla Firefox through 1.5.0.3 has a vulnerability in processing the content-length header
Firefox
MEDIUM 6.5
Mozilla Firefox prior to 3.6 has a DoS vulnerability due to an issue in the validation of certificates.
Firefox
MEDIUM 6.1
Mozilla Firefox before 3.6 is vulnerable to XSS via the rendering of Cascading Style Sheets
Firefox
CRITICAL 9.3
Given a compromised sandboxed content process due to a separate vulnerability, it is possible to escape that sandbox by loading accounts.firefox.com …
Firefox
HIGH 8.8
Mozilla developers reported memory safety bugs present in Firefox 70 and Firefox ESR 68.2. Some of these bugs showed evidence of memory corruption an…
Firefox
HIGH 8.8
Mozilla developers reported memory safety bugs present in Firefox 70. Some of these bugs showed evidence of memory corruption and we presume that wit…
Firefox
HIGH 8.8
During the initialization of a new content process, a pointer offset can be manipulated leading to memory corruption and a potentially exploitable cr…
Firefox
HIGH 8.8
Due to a missing case handling object types, a type confusion vulnerability could occur, resulting in a crash. We presume that with enough effort tha…
Firefox
HIGH 8.8
When Python was installed on Windows, a python file being served with the MIME type of text/plain could be executed by Python instead of being opened…
Firefox
HIGH 8.8
Mozilla developers reported memory safety bugs present in Firefox 71 and Firefox ESR 68.3. Some of these bugs showed evidence of memory corruption an…
Firefox
HIGH 8.8
Mozilla developers reported memory safety bugs present in Firefox 71. Some of these bugs showed evidence of memory corruption and we presume that wit…
Firefox
HIGH 7.4
If an image had not loaded correctly (such as when it is not actually an image), it could be dragged and dropped cross-domain, resulting in a cross-o…
Firefox
MEDIUM 6.5
If an XML file is served with a Content Security Policy and the XML file includes an XSL stylesheet, the Content Security Policy will not be applied …
Firefox
MEDIUM 6.5
After a HelloRetryRequest has been sent, the client may negotiate a lower protocol that TLS 1.3, resulting in an invalid state transition in the TLS …