| CVE-2019-11696 |
Files with the .JNLP extension used for "Java web start" applications are not treated as executable content for download…
|
Non notée
|
23 juil. 2019 |
| CVE-2019-11697 |
If the ALT and "a" keys are pressed when users receive an extension installation prompt, the extension will be installed…
|
Non notée
|
23 juil. 2019 |
| CVE-2019-11698 |
If a crafted hyperlink is dragged and dropped to the bookmark bar or sidebar and the resulting bookmark is…
|
Non notée
|
23 juil. 2019 |
| CVE-2019-11699 |
A malicious page can briefly cause the wrong name to be highlighted as the domain name in the addressbar during page…
|
Non notée
|
23 juil. 2019 |
| CVE-2019-11700 |
A hyperlink using the res: protocol can be used to open local files at a known location in Internet Explorer if a user…
|
Non notée
|
23 juil. 2019 |
| CVE-2019-11701 |
The default webcal: protocol handler will load a web site vulnerable to cross-site scripting (XSS) attacks
|
Non notée
|
23 juil. 2019 |
| CVE-2019-11702 |
A hyperlink using protocols associated with Internet Explorer, such as IE.HTTP:, can be used to open local files at a…
|
Non notée
|
23 juil. 2019 |
| CVE-2019-11707 |
Exploitée
Mozilla Firefox and Thunderbird Type Confusion Vulnerability
|
8.8
Élevée
|
23 juil. 2019 |
| CVE-2019-11708 |
Exploitée
Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability
|
10.0
Critique
|
23 juil. 2019 |
| CVE-2019-11709 |
Mozilla developers and community members reported memory safety bugs present in Firefox 67 and Firefox ESR 60.7
|
Non notée
|
23 juil. 2019 |
| CVE-2019-11710 |
Mozilla developers and community members reported memory safety bugs present in Firefox 67
|
Non notée
|
23 juil. 2019 |
| CVE-2019-11711 |
When an inner window is reused, it does not consider the use of document.domain for cross-origin protections
|
Non notée
|
23 juil. 2019 |
| CVE-2019-11712 |
POST requests made by NPAPI plugins, such as Flash, that receive a status 308 redirect response can bypass CORS…
|
Non notée
|
23 juil. 2019 |
| CVE-2019-11713 |
A use-after-free vulnerability can occur in HTTP/2 when a cached HTTP/2 stream is closed while still in use, resulting…
|
Non notée
|
23 juil. 2019 |
| CVE-2019-11714 |
Necko can access a child on the wrong thread during UDP connections, resulting in a potentially exploitable crash in…
|
Non notée
|
23 juil. 2019 |
| CVE-2019-11715 |
Due to an error while parsing page content, it is possible for properly sanitized user input to be misinterpreted and…
|
Non notée
|
23 juil. 2019 |
| CVE-2019-11716 |
Until explicitly accessed by script, window.globalThis is not enumerable and, as a result, is not visible to code such…
|
Non notée
|
23 juil. 2019 |
| CVE-2019-11717 |
A vulnerability exists where the caret ("^") character is improperly escaped constructing some URIs due to it being used…
|
Non notée
|
23 juil. 2019 |
| CVE-2019-11718 |
Activity Stream can display content from sent from the Snippet Service website
|
Non notée
|
23 juil. 2019 |
| CVE-2019-11719 |
When importing a curve25519 private key in PKCS#8format with leading 0x00 bytes, it is possible to trigger an…
|
Non notée
|
23 juil. 2019 |
| CVE-2019-11720 |
Some unicode characters are incorrectly treated as whitespace during the parsing of web content instead of triggering…
|
Non notée
|
23 juil. 2019 |
| CVE-2019-11721 |
The unicode latin 'kra' character can be used to spoof a standard 'k' character in the addressbar
|
Non notée
|
23 juil. 2019 |
| CVE-2019-11723 |
A vulnerability exists during the installation of add-ons where the initial fetch ignored the origin attributes of the…
|
Non notée
|
23 juil. 2019 |
| CVE-2019-11724 |
Application permissions give additional remote troubleshooting permission to the site input.mozilla.org, which has…
|
Non notée
|
23 juil. 2019 |
| CVE-2019-11725 |
When a user navigates to site marked as unsafe by the Safebrowsing API, warning messages are displayed and navigation is…
|
Non notée
|
23 juil. 2019 |