Browse CVEs

MEDIUM 6.5 CVE-2021-4126 When receiving an OpenPGP/MIME signed email message that contains an additional outer MIME message layer, for example a message footer added by a mai… Thunderbird 91.4.1+ Fix from $1,6002022-12-22 MEDIUM 6.5 CVE-2021-4128 When transitioning in and out of fullscreen mode, a graphics object was not correctly protected; resulting in memory corruption and a potentially exp… Firefox 95.0+ Fix from $1,6002022-12-22 HIGH 7.6 CVE-2020-15679 An OAuth session fixation vulnerability existed in the VPN login flow, where an attacker could craft a custom login URL, convince a VPN user to login… Vpn 1.0.7_ / 1.1.0_+ Fix from $1,9502022-12-22 HIGH 8.2 CVE-2022-4066 A vulnerability was found in davidmoreno onion. It has been rated as problematic. Affected by this issue is the function onion_response_flush of the … Firefox 2022-09-05+ Fix from $1,9502022-11-19 HIGH 7.5 CVE-2022-3479 A vulnerability found in nss. By this security vulnerability, nss client auth crash without a user certificate in the database and this can lead us t… Network Security Services 3.87+ Fix from $1,9502022-10-14 CRITICAL 9.8 CVE-2022-21190 This affects the package convict before 6.2.3. This is a bypass of [CVE-2022-22143](https://security.snyk.io/vuln/SNYK-JS-CONVICT-2340604). The [fix]… Convict 6.2.3+ Fix from $2,3002022-05-13 HIGH 7.5 CVE-2022-29167 Hawk is an HTTP authentication scheme providing mechanisms for making authenticated HTTP requests with partial cryptographic verification of the requ… Hawk 9.0.1+ Fix from $1,9502022-05-05 MEDIUM 5.3 CVE-2021-4138 Improved Host header checks to reject requests not sent to a well-known local hostname or IP, or the server-specified hostname. Geckodriver 0.30.0+ Fix from $1,6002022-05-02 CRITICAL 9.8 CVE-2022-22143 The package convict before 6.2.2 are vulnerable to Prototype Pollution via the convict function due to missing validation of parentKey. **Note:** Thi… Convict 6.2.2+ Fix from $2,3002022-05-01 MEDIUM 6.5 CVE-2021-43545 Using the Location API in a loop could have caused severe application hangs and crashes. This vulnerability affects Thunderbird < 91.4.0, Firefox ESR… Firefox 91.4.0 / 95.0+ Fix from $1,6002021-12-08 CRITICAL 9.8 CVE-2021-43527EPSS 18% NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER-encoded DSA or RSA-PSS signa… Nss 3.68.1 / 3.73+ Fix from $2,3002021-12-08 HIGH 8.8 CVE-2021-38510 The executable file warning was not presented when downloading .inetloc files, which, due to a flaw in Mac OS, can run commands on a user's computer.… Firefox 91.3.0 / 94.0+ Fix from $1,9502021-12-08 HIGH 8.8 CVE-2021-43534 Mozilla developers and community members reported memory safety bugs present in Firefox 93 and Firefox ESR 91.2. Some of these bugs showed evidence o… Firefox 91.3.0 / 94.0+ Fix from $1,9502021-12-08 HIGH 8.8 CVE-2021-43535 A use-after-free could have occured when an HTTP2 session object was released on a different thread, leading to memory corruption and a potentially e… Firefox 91.3.0 / 93.0+ Fix from $1,9502021-12-08 HIGH 8.8 CVE-2021-43537 An incorrect type conversion of sizes from 64bit to 32bit integers allowed an attacker to corrupt memory leading to a potentially exploitable crash. … Firefox 91.4.0 / 95.0+ Fix from $1,9502021-12-08 HIGH 8.8 CVE-2021-43539 Failure to correctly record the location of live pointers across wasm instance calls resulted in a GC occurring within the call not tracing those liv… Firefox 91.4.0 / 95.0+ Fix from $1,9502021-12-08 MEDIUM 6.5 CVE-2021-43536 Under certain circumstances, asynchronous functions could have caused a navigation to fail but expose the target URL. This vulnerability affects Thun… Firefox 91.4.0 / 95.0+ Fix from $1,6002021-12-08 MEDIUM 6.5 CVE-2021-43540 WebExtensions with the correct permissions were able to create and install ServiceWorkers for third-party websites that would not have been uninstall… Firefox 95.0+ Fix from $1,6002021-12-08 MEDIUM 6.5 CVE-2021-43541 When invoking protocol handlers for external protocols, a supplied parameter URL containing spaces was not properly escaped. This vulnerability affec… Firefox 91.4.0 / 95.0+ Fix from $1,6002021-12-08 MEDIUM 6.5 CVE-2021-43542 Using XMLHttpRequest, an attacker could have identified installed applications by probing error messages for loading external protocols. This vulnera… Firefox 91.4.0 / 95.0+ Fix from $1,6002021-12-08 MEDIUM 6.1 CVE-2021-43530 A Universal XSS vulnerability was present in Firefox for Android resulting from improper sanitization when processing a URL scanned from a QR code. *… Firefox 94.0+ Fix from $1,6002021-12-08 MEDIUM 6.1 CVE-2021-43532 The 'Copy Image Link' context menu action would copy the final image URL after redirects. By embedding an image that triggered authentication flows -… Firefox 94.0+ Fix from $1,6002021-12-08 MEDIUM 6.1 CVE-2021-43543 Documents loaded with the CSP sandbox directive could have escaped the sandbox's script restriction by embedding additional content. This vulnerabili… Firefox 91.4.0 / 95.0+ Fix from $1,6002021-12-08 MEDIUM 6.1 CVE-2021-43544 When receiving a URL through a SEND intent, Firefox would have searched for the text, but subsequent usages of the address bar might have caused the … Firefox 95.0+ Fix from $1,6002021-12-08 CRITICAL 10.0 CVE-2021-38503 The iframe sandbox rules were not correctly applied to XSLT stylesheets, allowing an iframe to bypass restrictions such as executing scripts or navig… Firefox 91.3 / 94.0+ Fix from $2,3002021-12-08 HIGH 8.8 CVE-2021-38504 When interacting with an HTML input element's file picker dialog with webkitdirectory set, a use-after-free could have resulted, leading to memory co… Firefox 91.3.0 / 94.0+ Fix from $1,9502021-12-08 MEDIUM 6.5 CVE-2021-38505 Microsoft introduced a new feature in Windows 10 known as Cloud Clipboard which, if enabled, will record data copied to the clipboard to the cloud, a… Firefox 91.3.0 / 94.0+ Fix from $1,6002021-12-08 MEDIUM 6.5 CVE-2021-38507 The Opportunistic Encryption feature of HTTP2 (RFC 8164) allows a connection to be transparently upgraded to TLS while retaining the visual propertie… Firefox 91.3.0 / 94.0+ Fix from $1,6002021-12-08 HIGH 8.8 CVE-2021-38493 Mozilla developers reported memory safety bugs present in Firefox 91 and Firefox ESR 78.13. Some of these bugs showed evidence of memory corruption a… Firefox 78.14 / 92.0+ Fix from $1,9502021-11-03 HIGH 8.8 CVE-2021-38494 Mozilla developers reported memory safety bugs present in Firefox 91. Some of these bugs showed evidence of memory corruption and we presume that wit… Firefox 92.0+ Fix from $1,9502021-11-03