| CVE-2019-11727 |
A vulnerability exists where it possible to force Network Security Services (NSS) to sign CertificateVerify with…
|
Non notée
|
23 juil. 2019 |
| CVE-2019-11728 |
The HTTP Alternative Services header, Alt-Svc, can be used by a malicious site to scan all TCP ports of any host that…
|
Non notée
|
23 juil. 2019 |
| CVE-2019-11729 |
Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values being improperly sanitized before…
|
Non notée
|
23 juil. 2019 |
| CVE-2019-11730 |
A vulnerability exists where if a user opens a locally saved HTML file, this file can use file: URIs to access other…
|
Non notée
|
23 juil. 2019 |
| CVE-2019-9806 |
A vulnerability exists during authorization prompting for FTP transaction where successive modal prompts are displayed…
|
Non notée
|
26 avr. 2019 |
| CVE-2019-9795 |
A vulnerability where type-confusion in the IonMonkey just-in-time (JIT) compiler could potentially be used by malicious…
|
Non notée
|
26 avr. 2019 |
| CVE-2019-9805 |
A latent vulnerability exists in the Prio library where data may be read from uninitialized memory for some functions,…
|
Non notée
|
26 avr. 2019 |
| CVE-2019-9794 |
A vulnerability was discovered where specific command line arguments are not properly discarded during Firefox…
|
Non notée
|
26 avr. 2019 |
| CVE-2019-9804 |
In Firefox Developer Tools it is possible that pasting the result of the 'Copy as cURL' command into a command shell…
|
Non notée
|
26 avr. 2019 |
| CVE-2019-9803 |
The Upgrade-Insecure-Requests (UIR) specification states that if UIR is enabled through Content Security Policy (CSP),…
|
Non notée
|
26 avr. 2019 |
| CVE-2019-9793 |
A mechanism was discovered that removes some bounds checking for string, array, or typed array accesses if Spectre…
|
Non notée
|
26 avr. 2019 |
| CVE-2019-9802 |
If a Sandbox content process is compromised, it can initiate an FTP download which will then use a child process to…
|
Non notée
|
26 avr. 2019 |
| CVE-2019-9792 |
The IonMonkey just-in-time (JIT) compiler can leak an internal JS_OPTIMIZED_OUT magic value to the running script during…
|
Non notée
|
26 avr. 2019 |
| CVE-2019-9801 |
Firefox will accept any registered Program ID as an external protocol handler and offer to launch this local application…
|
Non notée
|
26 avr. 2019 |
| CVE-2019-9791 |
The type inference system allows the compilation of functions that can cause type confusions between arbitrary objects…
|
Non notée
|
26 avr. 2019 |
| CVE-2019-9799 |
Insufficient bounds checking of data during inter-process communication might allow a compromised content process to…
|
Non notée
|
26 avr. 2019 |
| CVE-2019-9790 |
A use-after-free vulnerability can occur when a raw pointer to a DOM element on a page is obtained using JavaScript…
|
Non notée
|
26 avr. 2019 |
| CVE-2019-9798 |
On Android systems, Firefox can load a library from APITRACE_LIB, which is writable by all users and applications
|
Non notée
|
26 avr. 2019 |
| CVE-2019-9789 |
Mozilla developers and community members reported memory safety bugs present in Firefox 65
|
Non notée
|
26 avr. 2019 |
| CVE-2019-9797 |
Cross-origin images can be read in violation of the same-origin policy by exporting an image after using…
|
Non notée
|
26 avr. 2019 |
| CVE-2019-9788 |
Mozilla developers and community members reported memory safety bugs present in Firefox 65, Firefox ESR 60.5, and…
|
Non notée
|
26 avr. 2019 |
| CVE-2019-9796 |
A use-after-free vulnerability can occur when the SMIL animation controller incorrectly registers with the refresh…
|
Non notée
|
26 avr. 2019 |
| CVE-2018-18511 |
Cross-origin images can be read from a canvas element in violation of the same-origin policy using the…
|
Non notée
|
26 avr. 2019 |
| CVE-2018-18510 |
The about:crashcontent and about:crashparent pages can be triggered by web content
|
Non notée
|
26 avr. 2019 |
| CVE-2019-9807 |
When arbitrary text is sent over an FTP connection and a page reload is initiated, it is possible to create a modal…
|
Non notée
|
26 avr. 2019 |