CVEs published June 11, 2018
349 CVEs were published on June 11, 2018: 0 critical, 2 high. 2 are now in CISA KEV.
- Published
- 349
- Critical
- 0
- High
- 2
- Medium
- 1
- Low
- 0
- Unrated
- 346
- Now in CISA KEV
- 2
- Fix available
- 317
Most affected products
- Mozilla Firefox
- 141
- Mozilla Thunderbird · Mozilla Firefox ESR +1
- 70
- Mozilla Firefox · Mozilla Thunderbird
- 59
- Mozilla Firefox ESR · Mozilla Firefox
- 23
- Mozilla Thunderbird · Mozilla Firefox
- 6
- Mozilla Thunderbird ESR · Mozilla Thunderbird
- 5
- Mozilla Firefox ESR · Mozilla Thunderbird
- 4
- Mozilla Thunderbird
- 4
- Exadel Flamingo amf-serializer
- 2
- Mozilla Thunderbird ESR · Mozilla Thunderbird +1
- 2
High 2
Medium, low and unrated 347
- CVE-2018-6968The VMware AirWatch Agent for Android prior to 8.2 and AirWatch Agent for Windows Mobile prior to 6.5.2 contain a remote code execution vulnVMware AirWatch Agent
- CVE-2016-5287A potentially exploitable use-after-free crash during actor destruction with service workers.Mozilla Firefox
- CVE-2016-5288Web content could access information in the HTTP cache if e10s is disabled.Mozilla Firefox
- CVE-2016-5289Memory safety bugs were reported in Firefox 49.Mozilla Firefox
- CVE-2016-5290Memory safety bugs were reported in Firefox 49 and Firefox ESR 45.4.Mozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2016-5291A same-origin policy bypass with local shortcut files to load arbitrary local content from disk.Mozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2016-5292During URL parsing, a maliciously crafted URL can cause a potentially exploitable crash.Mozilla Firefox
- CVE-2016-5293When the Mozilla Updater is run, if the Updater's log file in the working directory points to a hardlink, data can be appended to an arbitraMozilla Firefox ESR · Mozilla Firefox
- CVE-2016-5294The Mozilla Updater can be made to choose an arbitrary target working directory for output files resulting from the update process.Mozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2016-5295This vulnerability allows an attacker to use the Mozilla Maintenance Service to escalate privilege by having the Maintenance Service invoke Mozilla Firefox
- CVE-2016-5296A heap-buffer-overflow in Cairo when processing SVG content caused by compiler optimization, resulting in a potentially exploitable crash.Mozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2016-5297An error in argument length checking in JavaScript, leading to potential integer overflows or other bounds checking issues.Mozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2016-5298A mechanism where disruption of the loading of a new web page can cause the previous page's favicon and SSL indicator to not be reset when tMozilla Firefox
- CVE-2016-5299A previously installed malicious Android application with same signature-level permissions as Firefox can intercept AuthTokens meant for FirMozilla Firefox
- CVE-2016-9061A previously installed malicious Android application which defines a specific signature-level permissions used by Firefox can access API keyMozilla Firefox
- CVE-2016-9062Private browsing mode leaves metadata information, such as URLs, for sites visited in "browser.db" and "browser.db-wal" files within the FirMozilla Firefox
- CVE-2016-9063An integer overflow during the parsing of XML using the Expat library.Mozilla Firefox
- CVE-2016-9064Add-on updates failed to verify that the add-on ID inside the signed package matched the ID of the add-on being updated.Mozilla Firefox ESR · Mozilla Firefox
- CVE-2016-9065The location bar in Firefox for Android can be spoofed by forcing a user into fullscreen mode, blocking its exiting, and creating of a fake Mozilla Firefox
- CVE-2016-9066A buffer overflow resulting in a potentially exploitable crash due to memory allocation issues when handling large amounts of incoming data.Mozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2016-9067Two use-after-free errors during DOM operations resulting in potentially exploitable crashes.Mozilla Firefox
- CVE-2016-9068A use-after-free during web animations when working with timelines resulting in a potentially exploitable crash.Mozilla Firefox
- CVE-2016-9070A maliciously crafted page loaded to the sidebar through a bookmark can reference a privileged chrome window and engage in limited JavaScripMozilla Firefox
- CVE-2016-9071Content Security Policy combined with HTTP to HTTPS redirection can be used by malicious server to verify whether a known site is within a uMozilla Firefox
- CVE-2016-9072When a new Firefox profile is created on 64-bit Windows installations, the sandbox for 64-bit NPAPI plugins is not enabled by default.Mozilla Firefox
- CVE-2016-9073WebExtensions can bypass security checks to load privileged URLs and potentially escape the WebExtension sandbox.Mozilla Firefox
- CVE-2016-9074An existing mitigation of timing side-channel attacks is insufficient in some circumstances.Mozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2016-9075An issue where WebExtensions can use the mozAddonManager API to elevate privilege due to privileged pages being allowed in the permissions lMozilla Firefox
- CVE-2016-9076An issue where a "<select>" dropdown menu can be used to cover location bar content, resulting in potential spoofing attacks.Mozilla Firefox
- CVE-2016-9077Canvas allows the use of the "feDisplacementMap" filter on images loaded cross-origin.Mozilla Firefox
- CVE-2016-9078Redirection from an HTTP connection to a "data:" URL assigns the referring site's origin to the "data:" URL in some circumstances.Mozilla Firefox
- CVE-2016-9080Memory safety bugs were reported in Firefox 50.0.2.Mozilla Firefox
- CVE-2016-9893Memory safety bugs were reported in Thunderbird 45.5.Mozilla Firefox · Mozilla Thunderbird
- CVE-2016-9894A buffer overflow in SkiaGl caused when a GrGLBuffer is truncated during allocation.Mozilla Firefox
- CVE-2016-9895Event handlers on "marquee" elements were executed despite a strict Content Security Policy (CSP) that disallowed inline JavaScript.Mozilla Firefox · Mozilla Thunderbird
- CVE-2016-9896Use-after-free while manipulating the "navigator" object within WebVR.Mozilla Firefox
- CVE-2016-9897Memory corruption resulting in a potentially exploitable crash during WebGL functions using a vector constructor with a varying array withinMozilla Firefox · Mozilla Thunderbird
- CVE-2016-9898Use-after-free resulting in potentially exploitable crash when manipulating DOM subtrees in the Editor.Mozilla Firefox · Mozilla Thunderbird
- CVE-2016-9899Use-after-free while manipulating DOM events and removing audio elements due to errors in the handling of node adoption.Mozilla Firefox · Mozilla Thunderbird
- CVE-2016-9900External resources that should be blocked when loaded by SVG images can bypass security restrictions through the use of "data:" URLs.Mozilla Firefox · Mozilla Thunderbird
- CVE-2016-9901HTML tags received from the Pocket server will be processed without sanitization and any JavaScript code executed will be run in the "about:Mozilla Firefox ESR · Mozilla Firefox
- CVE-2016-9902The Pocket toolbar button, once activated, listens for events fired from it's own pages but does not verify the origin of incoming events.Mozilla Firefox ESR · Mozilla Firefox
- CVE-2016-9903Mozilla's add-ons SDK had a world-accessible resource with an HTML injection vulnerability.Mozilla Firefox
- CVE-2016-9904An attacker could use a JavaScript Map/Set timing attack to determine whether an atom is used by another compartment/zone in specific contexMozilla Firefox · Mozilla Thunderbird
- CVE-2016-9905A potentially exploitable crash in "EnumerateSubDocuments" while adding or removing sub-documents.Mozilla Firefox ESR · Mozilla Thunderbird
- CVE-2017-5373Memory safety bugs were reported in Firefox 50.1 and Firefox ESR 45.6.Mozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2017-5374Memory safety bugs were reported in Firefox 50.1.Mozilla Firefox
- CVE-2017-5375JIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential memory corruption attacks.Mozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2017-5376Use-after-free while manipulating XSL in XSLT documents.Mozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2017-5377A memory corruption vulnerability in Skia that can occur when using transforms to make gradients, resulting in a potentially exploitable craMozilla Firefox
- CVE-2017-5378Hashed codes of JavaScript objects are shared between pages.Mozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2017-5379Use-after-free vulnerability in Web Animations when interacting with cycle collection found through fuzzing.Mozilla Firefox
- CVE-2017-5380A potential use-after-free found through fuzzing during DOM manipulation of SVG content.Mozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2017-5381The "export" function in the Certificate Viewer can force local filesystem navigation when the "common name" in a certificate contains slashMozilla Firefox
- CVE-2017-5382Feed preview for RSS feeds can be used to capture errors and exceptions generated by privileged content, allowing for the exposure of internMozilla Firefox
- CVE-2017-5383URLs containing certain unicode glyphs for alternative hyphens and quotes do not properly trigger punycode display, allowing for domain nameMozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2017-5384Proxy Auto-Config (PAC) files can specify a JavaScript function called for all URL requests with the full URL path which exposes more informMozilla Firefox
- CVE-2017-5385Data sent with in multipart channels, such as the multipart/x-mixed-replace MIME type, will ignore the referrer-policy response header, leadMozilla Firefox
- CVE-2017-5386WebExtension scripts can use the "data:" protocol to affect pages loaded by other web extensions using this protocol, leading to potential dMozilla Firefox ESR · Mozilla Firefox
- CVE-2017-5387The existence of a specifically requested local file can be found due to the double firing of the "onerror" when the "source" attribute on aMozilla Firefox
- CVE-2017-5388A STUN server in conjunction with a large number of "webkitRTCPeerConnection" objects can be used to send large STUN packets in a short periMozilla Firefox
- CVE-2017-5389WebExtensions could use the "mozAddonManager" API by modifying the CSP headers on sites with the appropriate permissions and then using hostMozilla Firefox
- CVE-2017-5390The JSON viewer in the Developer Tools uses insecure methods to create a communication channel for copying and viewing JSON or HTTP headers Mozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2017-5391Special "about:" pages used by web content, such as RSS feeds, can load privileged "about:" pages in an iframe.Mozilla Firefox
- CVE-2017-5392Weak proxy objects have weak references on multiple threads when they should only have them on one, resulting in incorrect memory usage and Mozilla Firefox
- CVE-2017-5393The "mozAddonManager" allows for the installation of extensions from the CDN for addons.mozilla.org, a publicly accessible site.Mozilla Firefox
- CVE-2017-5394A location bar spoofing attack where the location bar of loaded page will be shown over the content of another tab due to a series of JavaScMozilla Firefox
- CVE-2017-5395Malicious sites can display a spoofed location bar on a subsequently loaded page when the existing location bar on the new page is scrolled
- CVE-2017-5396A use-after-free vulnerability in the Media Decoder when working with media files when some events are fired after the media elements are frMozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2017-5397The cache directory on the local file system is set to be world writable.Mozilla Firefox
- CVE-2017-5398Memory safety bugs were reported in Thunderbird 45.7.Mozilla Firefox · Mozilla Thunderbird
- CVE-2017-5399Memory safety bugs were reported in Firefox 51.Mozilla Firefox · Mozilla Thunderbird
- CVE-2017-5400JIT-spray targeting asm.js combined with a heap spray allows for a bypass of ASLR and DEP protections leading to potential memory corruptionMozilla Firefox · Mozilla Thunderbird
- CVE-2017-5401A crash triggerable by web content in which an "ErrorResult" references unassigned memory due to a logic error.Mozilla Firefox · Mozilla Thunderbird
- CVE-2017-5402A use-after-free can occur when events are fired for a "FontFace" object after the object has been already been destroyed while working withMozilla Firefox · Mozilla Thunderbird
- CVE-2017-5403When adding a range to an object in the DOM, it is possible to use "addRange" to add the range to an incorrect root object.Mozilla Firefox · Mozilla Thunderbird
- CVE-2017-5404A use-after-free error can occur when manipulating ranges in selections with one node inside a native anonymous tree and one node outside ofMozilla Firefox · Mozilla Thunderbird
- CVE-2017-5405Certain response codes in FTP connections can result in the use of uninitialized values for ports in FTP operations.Mozilla Firefox · Mozilla Thunderbird
- CVE-2017-5406A segmentation fault can occur in the Skia graphics library during some canvas operations due to issues with mask/clip intersection and emptMozilla Firefox · Mozilla Thunderbird
- CVE-2017-5407Using SVG filters that don't use the fixed point math implementation on a target iframe, a malicious page can extract pixel values from a taMozilla Firefox · Mozilla Thunderbird
- CVE-2017-5408Video files loaded video captions cross-origin without checking for the presence of CORS headers permitting such cross-origin use, leading tMozilla Firefox · Mozilla Thunderbird
- CVE-2017-5409The Mozilla Windows updater can be called by a non-privileged user to delete an arbitrary local file by passing a special path to the callbaMozilla Firefox ESR · Mozilla Firefox
- CVE-2017-5410Memory corruption resulting in a potentially exploitable crash during garbage collection of JavaScript due errors in how incremental sweepinMozilla Firefox · Mozilla Thunderbird
- CVE-2017-5411A use-after-free can occur during buffer storage operations within the ANGLE graphics library, used for WebGL content.Mozilla Firefox · Mozilla Thunderbird
- CVE-2017-5412A buffer overflow read during SVG filter color value operations, resulting in data exposure.Mozilla Firefox · Mozilla Thunderbird
- CVE-2017-5413A segmentation fault can occur during some bidirectional layout operations.Mozilla Firefox · Mozilla Thunderbird
- CVE-2017-5414The file picker dialog can choose and display the wrong local default directory when instantiated.Mozilla Firefox · Mozilla Thunderbird
- CVE-2017-5415An attack can use a blob URL and script to spoof an arbitrary addressbar URL prefaced by "blob:" as the protocol, leading to user confusion Mozilla Firefox
- CVE-2017-5416In certain circumstances a networking event listener can be prematurely released.Mozilla Firefox · Mozilla Thunderbird
- CVE-2017-5417When dragging content from the primary browser pane to the addressbar on a malicious site, it is possible to change the addressbar so that tMozilla Firefox
- CVE-2017-5418An out of bounds read error occurs when parsing some HTTP digest authorization responses, resulting in information leakage through the readiMozilla Firefox · Mozilla Thunderbird
- CVE-2017-5419If a malicious site repeatedly triggers a modal authentication prompt, eventually the browser UI will become non-responsive, requiring shutdMozilla Firefox · Mozilla Thunderbird
- CVE-2017-5420A "javascript:" url loaded by a malicious page can obfuscate its location by blanking the URL displayed in the addressbar, allowing for an aMozilla Firefox
- CVE-2017-5421A malicious site could spoof the contents of the print preview window if popup windows are enabled, resulting in user confusion of what siteMozilla Firefox · Mozilla Thunderbird
- CVE-2017-5422If a malicious site uses the "view-source:" protocol in a series within a single hyperlink, it can trigger a non-exploitable browser crash wMozilla Firefox · Mozilla Thunderbird
- CVE-2017-5425The Gecko Media Plugin sandbox allows access to local files that match specific regular expressions.Mozilla Firefox · Mozilla Thunderbird
- CVE-2017-5426On Linux, if the secure computing mode BPF (seccomp-bpf) filter is running when the Gecko Media Plugin sandbox is started, the sandbox failsMozilla Firefox · Mozilla Thunderbird
- CVE-2017-5427A non-existent chrome.manifest file will attempt to be loaded during startup from the primary installation directory.Mozilla Firefox
- CVE-2017-5428An integer overflow in "createImageBitmap()" was reported through the Pwn2Own contest.Mozilla Firefox ESR · Mozilla Firefox
- CVE-2017-5429Memory safety bugs were reported in Firefox 52, Firefox ESR 45.8, Firefox ESR 52, and Thunderbird 52.Mozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2017-5430Memory safety bugs were reported in Firefox 52, Firefox ESR 52, and Thunderbird 52.Mozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2017-5432A use-after-free vulnerability occurs during certain text input selection resulting in a potentially exploitable crash.Mozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2017-5433A use-after-free vulnerability in SMIL animation functions occurs when pointers to animation elements in an array are dropped from the animaMozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2017-5434A use-after-free vulnerability occurs when redirecting focus handling which results in a potentially exploitable crash.Mozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2017-5435A use-after-free vulnerability occurs during transaction processing in the editor during design mode interactions.Mozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2017-5436An out-of-bounds write in the Graphite 2 library triggered with a maliciously crafted Graphite font.Mozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2017-5438A use-after-free vulnerability during XSLT processing due to the result handler being held by a freed handler during handling.Mozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2017-5439A use-after-free vulnerability during XSLT processing due to poor handling of template parameters.Mozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2017-5440A use-after-free vulnerability during XSLT processing due to a failure to propagate error conditions during matching while evaluating contexMozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2017-5441A use-after-free vulnerability when holding a selection during scroll events.Mozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2017-5442A use-after-free vulnerability during changes in style when manipulating DOM elements.Mozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2017-5443An out-of-bounds write vulnerability while decoding improperly formed BinHex format archives.Mozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2017-5444A buffer overflow vulnerability while parsing "application/http-index-format" format content when the header contains improperly formatted dMozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2017-5445A vulnerability while parsing "application/http-index-format" format content where uninitialized values are used to create an array.Mozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2017-5446An out-of-bounds read when an HTTP/2 connection to a servers sends "DATA" frames with incorrect data content.Mozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2017-5447An out-of-bounds read during the processing of glyph widths during text layout.Mozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2017-5448An out-of-bounds write in "ClearKeyDecryptor" while decrypting some Clearkey-encrypted media content.Mozilla Firefox ESR · Mozilla Firefox
- CVE-2017-5449A possibly exploitable crash triggered during layout and manipulation of bidirectional unicode text in concert with CSS animations.Mozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2017-5450A mechanism to spoof the Firefox for Android addressbar using a "javascript:" URI.Mozilla Firefox
- CVE-2017-5451A mechanism to spoof the addressbar through the user interaction on the addressbar and the "onblur" event.Mozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2017-5452Malicious sites can display a spoofed addressbar on a page when the existing location bar on the new page is scrolled out of view if an HTMLMozilla Firefox
- CVE-2017-5453A mechanism to inject static HTML into the RSS reader preview page due to a failure to escape characters sent as URL parameters for a feed'sMozilla Firefox
- CVE-2017-5454A mechanism to bypass file system access protections in the sandbox to use the file picker to access different files than those selected in Mozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2017-5455The internal feed reader APIs that crossed the sandbox barrier allowed for a sandbox escape and escalation of privilege if combined with anoMozilla Firefox ESR · Mozilla Firefox
- CVE-2017-5456A mechanism to bypass file system access protections in the sandbox using the file system request constructor through an IPC message.Mozilla Firefox ESR · Mozilla Firefox
- CVE-2017-5458When a "javascript:" URL is drag and dropped by a user into the addressbar, the URL will be processed and executed.Mozilla Firefox
- CVE-2017-5459A buffer overflow in WebGL triggerable by web content, resulting in a potentially exploitable crash.Mozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2017-5460A use-after-free vulnerability in frame selection triggered by a combination of malicious script content and key presses by a user.Mozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2017-5462A flaw in DRBG number generation within the Network Security Services (NSS) library where the internal state V does not correctly carry bitsMozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2017-5463Android intents can be used to launch Firefox for Android in reader mode with a user specified URL.Mozilla Firefox
- CVE-2017-5464During DOM manipulations of the accessibility tree through script, the DOM tree can become out of sync with the accessibility tree, leading Mozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2017-5465An out-of-bounds read while processing SVG content in "ConvolvePixel".Mozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2017-5466If a page is loaded from an original site through a hyperlink and contains a redirect to a "data:text/html" URL, triggering a reload will ruMozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2017-5467A potential memory corruption and crash when using Skia content when drawing content outside of the bounds of a clipping region.Mozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2017-5468An issue with incorrect ownership model of "privateBrowsing" information exposed through developer tools.Mozilla Firefox
- CVE-2017-5469Fixed potential buffer overflows in generated Firefox code due to CVE-2016-6354 issue in Flex.Mozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2017-5470Memory safety bugs were reported in Firefox 53 and Firefox ESR 52.1.Mozilla Firefox · Mozilla Thunderbird
- CVE-2017-5471Memory safety bugs were reported in Firefox 53.Mozilla Firefox
- CVE-2017-5472A use-after-free vulnerability with the frameloader during tree reconstruction while regenerating CSS layout when attempting to use a node iMozilla Firefox · Mozilla Thunderbird
- CVE-2017-7749A use-after-free vulnerability when using an incorrect URL during the reloading of a docshell.Mozilla Firefox · Mozilla Thunderbird
- CVE-2017-7750A use-after-free vulnerability during video control operations when a "<track>" element holds a reference to an older window if that window Mozilla Firefox · Mozilla Thunderbird
- CVE-2017-7751A use-after-free vulnerability with content viewer listeners that results in a potentially exploitable crash.Mozilla Firefox · Mozilla Thunderbird
- CVE-2017-7752A use-after-free vulnerability during specific user interactions with the input method editor (IME) in some languages due to how events are Mozilla Firefox · Mozilla Thunderbird
- CVE-2017-7753An out-of-bounds read occurs when applying style rules to pseudo-elements, such as ::first-line, using cached style data.Mozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2017-7754An out-of-bounds read in WebGL with a maliciously crafted "ImageInfo" object during WebGL operations.Mozilla Firefox · Mozilla Thunderbird
- CVE-2017-7755The Firefox installer on Windows can be made to load malicious DLL files stored in the same directory as the installer when it is run.Mozilla Firefox · Mozilla Thunderbird
- CVE-2017-7756A use-after-free and use-after-scope vulnerability when logging errors from headers for XML HTTP Requests (XHR).Mozilla Firefox · Mozilla Thunderbird
- CVE-2017-7757A use-after-free vulnerability in IndexedDB when one of its objects is destroyed in memory while a method on it is still being executed.Mozilla Firefox · Mozilla Thunderbird
- CVE-2017-7758An out-of-bounds read vulnerability with the Opus encoder when the number of channels in an audio stream changes while the encoder is in useMozilla Firefox · Mozilla Thunderbird
- CVE-2017-7759Android intent URLs given to Firefox for Android can be used to navigate from HTTP or HTTPS URLs to local "file:" URLs, allowing for the reaMozilla Firefox
- CVE-2017-7760The Mozilla Windows updater modifies some files to be updated by reading the original file and applying changes to it.Mozilla Firefox ESR · Mozilla Firefox
- CVE-2017-7761The Mozilla Maintenance Service "helper.exe" application creates a temporary directory writable by non-privileged users.Mozilla Firefox ESR · Mozilla Firefox
- CVE-2017-7762When entered directly, Reader Mode did not strip the username and password section of URLs displayed in the addressbar.Mozilla Firefox
- CVE-2017-7763Default fonts on OS X display some Tibetan characters as whitespace.Mozilla Firefox · Mozilla Thunderbird
- CVE-2017-7764Characters from the "Canadian Syllabics" unicode block can be mixed with characters from other unicode blocks in the addressbar instead of bMozilla Firefox · Mozilla Thunderbird
- CVE-2017-7765The "Mark of the Web" was not correctly saved on Windows when files with very long names were downloaded from the Internet.Mozilla Firefox · Mozilla Thunderbird
- CVE-2017-7766An attack using manipulation of "updater.ini" contents, used by the Mozilla Windows Updater, and privilege escalation through the Mozilla MaMozilla Firefox ESR · Mozilla Firefox
- CVE-2017-7767The Mozilla Maintenance Service can be invoked by an unprivileged user to overwrite arbitrary files with junk data using the Mozilla WindowsMozilla Firefox ESR · Mozilla Firefox
- CVE-2017-7768The Mozilla Maintenance Service can be invoked by an unprivileged user to read 32 bytes of any arbitrary file on the local system by convincMozilla Firefox ESR · Mozilla Firefox
- CVE-2017-7770A mechanism where when a new tab is loaded through JavaScript events, if fullscreen mode is then entered, the addressbar will not be rendereMozilla Firefox
- CVE-2017-7778A number of security vulnerabilities in the Graphite 2 library including out-of-bounds reads, buffer overflow reads and writes, and the use Mozilla Firefox · Mozilla Thunderbird
- CVE-2017-7779Memory safety bugs were reported in Firefox 54, Firefox ESR 52.2, and Thunderbird 52.2.Mozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2017-7780Memory safety bugs were reported in Firefox 54.Mozilla Firefox
- CVE-2017-7781An error occurs in the elliptic curve point addition algorithm that uses mixed Jacobian-affine coordinates where it can yield a result "POINMozilla Firefox
- CVE-2017-7782An error in the "WindowsDllDetourPatcher" where a RWX ("Read/Write/Execute") 4k block is allocated but never protected, violating DEP protecMozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2017-7783If a long user name is used in a username/password combination in a site URL (such as " http://UserName:Password@example.com"), the resultinMozilla Firefox
- CVE-2017-7784A use-after-free vulnerability can occur when reading an image observer during frame reconstruction after the observer has been freed.
- CVE-2017-7785A buffer overflow can occur when manipulating Accessible Rich Internet Applications (ARIA) attributes within the DOM.Mozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2017-7786A buffer overflow can occur when the image renderer attempts to paint non-displayable SVG elements.Mozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2017-7787Same-origin policy protections can be bypassed on pages with embedded iframes during page reloads, allowing the iframes to access content onMozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2017-7788When an "iframe" has a "sandbox" attribute and its content is specified using "srcdoc", that content does not inherit the containing page's Mozilla Firefox
- CVE-2017-7789If a server sends two Strict-Transport-Security (STS) headers for a single connection, they will be rejected as invalid and HTTP Strict TranMozilla Firefox
- CVE-2017-7790On Windows systems, if non-null-terminated strings are copied into the crash reporter for some specific registry keys, stack memory data canMozilla Firefox
- CVE-2017-7791On pages containing an iframe, the "data:" protocol can be used to create a modal alert that will render over arbitrary domains following paMozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2017-7792A buffer overflow will occur when viewing a certificate in the certificate manager if the certificate has an extremely long object identifieMozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2017-7793A use-after-free vulnerability can occur in the Fetch API when the worker or the associated window are freed when still in use, resulting inMozilla Firefox · Mozilla Thunderbird
- CVE-2017-7794On Linux systems, if the content process is compromised, the sandbox broker will allow files to be truncated even though the sandbox expliciMozilla Firefox
- CVE-2017-7796On Windows systems, the logger run by the Windows updater deletes the file "update.log" before it runs in order to write a new log of that nMozilla Firefox
- CVE-2017-7797Response header name interning does not have same-origin protections and these headers are stored in a global registry.Mozilla Firefox
- CVE-2017-7798The Developer Tools feature suffers from a XUL injection vulnerability due to improper sanitization of the web page source code.Mozilla Firefox ESR · Mozilla Firefox
- CVE-2017-7799JavaScript in the "about:webrtc" page is not sanitized properly being assigned to "innerHTML".Mozilla Firefox
- CVE-2017-7800A use-after-free vulnerability can occur in WebSockets when the object holding the connection is freed before the disconnection operation isMozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2017-7801A use-after-free vulnerability can occur while re-computing layout for a "marquee" element during window resizing where the updated style obMozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2017-7802A use-after-free vulnerability can occur when manipulating the DOM during the resize event of an image element.Mozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2017-7803When a page's content security policy (CSP) header contains a "sandbox" directive, other directives are ignored.Mozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2017-7804The destructor function for the "WindowsDllDetourPatcher" class can be re-purposed by malicious code in concert with another vulnerability tMozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2017-7805During TLS 1.2 exchanges, handshake hashes are generated which point to a message buffer.Mozilla Firefox · Mozilla Thunderbird
- CVE-2017-7806A use-after-free vulnerability can occur when the layer manager is freed too early when rendering specific SVG content, resulting in a potenMozilla Firefox
- CVE-2017-7807A mechanism that uses AppCache to hijack a URL in a domain using fallback by serving the files from a sub-path on the domain.Mozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2017-7808A content security policy (CSP) "frame-ancestors" directive containing origins with paths allows for comparisons against those paths insteadMozilla Firefox
- CVE-2017-7809A use-after-free vulnerability can occur when an editor DOM node is deleted prematurely during tree traversal while still bound to the docum
- CVE-2017-7810Memory safety bugs were reported in Firefox 55 and Firefox ESR 52.3.Mozilla Firefox · Mozilla Thunderbird
- CVE-2017-7811Memory safety bugs were reported in Firefox 55.Mozilla Firefox
- CVE-2017-7812If web content on a page is dragged onto portions of the browser UI, such as the tab bar, links can be opened that otherwise would not be alMozilla Firefox
- CVE-2017-7813Inside the JavaScript parser, a cast of an integer to a narrower type can result in data read from outside the buffer being parsed.Mozilla Firefox
- CVE-2017-7814File downloads encoded with "blob:" and "data:" URL elements bypassed normal file download checks though the Phishing and Malware ProtectionMozilla Firefox · Mozilla Thunderbird
- CVE-2017-7815On pages containing an iframe, the "data:" protocol can be used to create a modal dialog through Javascript that will have an arbitrary domaMozilla Firefox
- CVE-2017-7816WebExtensions could use popups and panels in the extension UI to load an "about:" privileged URL, violating security checks that disallow thMozilla Firefox
- CVE-2017-7817A spoofing vulnerability can occur when a page switches to fullscreen mode without user notification, allowing a fake address bar to be dispMozilla Firefox
- CVE-2017-7818A use-after-free vulnerability can occur when manipulating arrays of Accessible Rich Internet Applications (ARIA) elements within containersMozilla Firefox · Mozilla Thunderbird
- CVE-2017-7819A use-after-free vulnerability can occur in design mode when image objects are resized if objects referenced during the resizing have been fMozilla Firefox · Mozilla Thunderbird
- CVE-2017-7820The "instanceof" operator can bypass the Xray wrapper mechanism.Mozilla Firefox
- CVE-2017-7821A vulnerability where WebExtensions can download and attempt to open a file of some non-executable file types.Mozilla Firefox
- CVE-2017-7822The AES-GCM implementation in WebCrypto API accepts 0-length IV when it should require a length of 1 according to the NIST Special PublicatiMozilla Firefox
- CVE-2017-7823The content security policy (CSP) "sandbox" directive did not create a unique origin for the document, causing it to behave as if the "allowMozilla Firefox · Mozilla Thunderbird
- CVE-2017-7824A buffer overflow occurs when drawing and validating elements with the ANGLE graphics library, used for WebGL content.Mozilla Firefox · Mozilla Thunderbird
- CVE-2017-7825Several fonts on OS X display some Tibetan and Arabic characters as whitespace.Mozilla Firefox · Mozilla Thunderbird
- CVE-2017-7826Memory safety bugs were reported in Firefox 56 and Firefox ESR 52.4.Mozilla Firefox · Mozilla Thunderbird
- CVE-2017-7827Memory safety bugs were reported in Firefox 56.Mozilla Firefox
- CVE-2017-7828A use-after-free vulnerability can occur when flushing and resizing layout because the "PressShell" object has been freed while still in useMozilla Firefox · Mozilla Thunderbird
- CVE-2017-7829It is possible to spoof the sender's email address and display an arbitrary sender address to the email recipient.Mozilla Thunderbird
- CVE-2017-7830The Resource Timing API incorrectly revealed navigations in cross-origin iframes.Mozilla Firefox · Mozilla Thunderbird
- CVE-2017-7831A vulnerability where the security wrapper does not deny access to some exposed properties using the deprecated "_exposedProps_" mechanism oMozilla Firefox
- CVE-2017-7832The combined, single character, version of the letter 'i' with any of the potential accents in unicode, such as acute or grave, can be spoofMozilla Firefox
- CVE-2017-7833Some Arabic and Indic vowel marker characters can be combined with Latin characters in a domain name to eclipse the non-Latin character withMozilla Firefox
- CVE-2017-7834A "data:" URL loaded in a new tab did not inherit the Content Security Policy (CSP) of the original page, allowing for bypasses of the policMozilla Firefox
- CVE-2017-7835Mixed content blocking of insecure (HTTP) sub-resources in a secure (HTTPS) document was not correctly applied for resources that redirect fMozilla Firefox
- CVE-2017-7836The "pingsender" executable used by the Firefox Health Report dynamically loads a system copy of libcurl, which an attacker could replace.Mozilla Firefox
- CVE-2017-7837SVG loaded through "<img>" tags can use "<meta>" tags within the SVG data to set cookies for that page.Mozilla Firefox
- CVE-2017-7838Punycode format text will be displayed for entire qualified international domain names in some instances when a sub-domain triggers the punyMozilla Firefox
- CVE-2017-7839Control characters prepended before "javascript:" URLs pasted in the addressbar can cause the leading characters to be ignored and the pasteMozilla Firefox
- CVE-2017-7840JavaScript can be injected into an exported bookmarks file by placing JavaScript code into user-supplied tags in saved bookmarks.Mozilla Firefox
- CVE-2017-7842If a document's Referrer Policy attribute is set to "no-referrer" sometimes two network requests are made for "<link>" elements instead of oMozilla Firefox
- CVE-2017-7843When Private Browsing mode is used, it is possible for a web worker to write persistent data to IndexedDB and fingerprint a user uniquely.Mozilla Firefox ESR · Mozilla Firefox
- CVE-2017-7844A combination of an external SVG image referenced on a page and the coloring of anchor links stored within this image can be used to determiMozilla Firefox
- CVE-2017-7845A buffer overflow occurs when drawing and validating elements using Direct 3D 9 with the ANGLE graphics library, used for WebGL content.Mozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2017-7846It is possible to execute JavaScript in the parsed RSS feed when RSS feed is viewed as a website, e.g.Mozilla Thunderbird
- CVE-2017-7847Crafted CSS in an RSS feed can leak and reveal local path strings, which may contain user name.Mozilla Thunderbird
- CVE-2017-7848RSS fields can inject new lines into the created email structure, modifying the message body.Mozilla Thunderbird
- CVE-2018-5089Memory safety bugs were reported in Firefox 57 and Firefox ESR 52.5.Mozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2018-5090Memory safety bugs were reported in Firefox 57.Mozilla Firefox
- CVE-2018-5091A use-after-free vulnerability can occur during WebRTC connections when interacting with the DTMF timers.Mozilla Firefox ESR · Mozilla Firefox
- CVE-2018-5092A use-after-free vulnerability can occur when the thread for a Web Worker is freed from memory prematurely instead of from memory in the maiMozilla Firefox
- CVE-2018-5093A heap buffer overflow vulnerability may occur in WebAssembly during Memory/Table resizing, resulting in a potentially exploitable crash.Mozilla Firefox
- CVE-2018-5094A heap buffer overflow vulnerability may occur in WebAssembly when "shrinkElements" is called followed by garbage collection on memory that Mozilla Firefox
- CVE-2018-5095An integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with at least 8 GB of RAM.Mozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2018-5096A use-after-free vulnerability can occur while editing events in form elements on a page, resulting in a potentially exploitable crash.Mozilla Firefox ESR · Mozilla Thunderbird
- CVE-2018-5097A use-after-free vulnerability can occur during XSL transformations when the source document for the transformation is manipulated by scriptMozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2018-5098A use-after-free vulnerability can occur when form input elements, focus, and selections are manipulated by script content.Mozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2018-5099A use-after-free vulnerability can occur when the widget listener is holding strong references to browser objects that have previously been Mozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2018-5100A use-after-free vulnerability can occur when arguments passed to the "IsPotentiallyScrollable" function are freed while still in use by scrMozilla Firefox
- CVE-2018-5101A use-after-free vulnerability can occur when manipulating floating "first-letter" style elements, resulting in a potentially exploitable crMozilla Firefox
- CVE-2018-5102A use-after-free vulnerability can occur when manipulating HTML media elements with media streams, resulting in a potentially exploitable crMozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2018-5103A use-after-free vulnerability can occur during mouse event handling due to issues with multiprocess support.Mozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2018-5104A use-after-free vulnerability can occur during font face manipulation when a font face is freed while still in use, resulting in a potentiaMozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2018-5105WebExtensions can bypass user prompts to first save and then open an arbitrarily downloaded file.Mozilla Firefox
- CVE-2018-5106Style editor traffic in the Developer Tools can be routed through a service worker hosted on a third party website if a user selects error lMozilla Firefox
- CVE-2018-5107The printing process can bypass local access protections to read files available through symlinks, bypassing local file restrictions.Mozilla Firefox
- CVE-2018-5108A Blob URL can violate origin attribute segregation, allowing it to be accessed from a private browsing tab and for data to be passed betweeMozilla Firefox
- CVE-2018-5109An audio capture session can started under an incorrect origin from the site making the capture request.Mozilla Firefox
- CVE-2018-5110If cursor visibility is toggled by script using from 'none' to an image and back through script, the cursor will be rendered temporarily invMozilla Firefox
- CVE-2018-5111When the text of a specially formatted URL is dragged to the addressbar from page content, the displayed URL can be spoofed to show a differMozilla Firefox
- CVE-2018-5112Development Tools panels of an extension are required to load URLs for the panels as relative URLs from the extension manifest file but thisMozilla Firefox
- CVE-2018-5113The "browser.identity.launchWebAuthFlow" function of WebExtensions is only allowed to load content over "https:" but this requirement was noMozilla Firefox
- CVE-2018-5114If an existing cookie is changed to be "HttpOnly" while a document is open, the original value remains accessible through script until that Mozilla Firefox
- CVE-2018-5115If an HTTP authentication prompt is triggered by a background network request from a page or extension, it is displayed over the currently lMozilla Firefox
- CVE-2018-5116WebExtensions with the "ActiveTab" permission are able to access frames hosted within the active tab even if the frames are cross-origin.Mozilla Firefox
- CVE-2018-5117If right-to-left text is used in the addressbar with left-to-right alignment, it is possible in some circumstances to scroll this text to spMozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2018-5118The screenshot images displayed in the Activity Stream page displayed when a new tab is opened is created from the meta tags of websites.Mozilla Firefox
- CVE-2018-5119The reader view will display cross-origin content when CORS headers are set to prohibit the loading of cross-origin content by a site.Mozilla Firefox
- CVE-2018-5121Low descenders on some Tibetan characters in several fonts on OS X are clipped when rendered in the addressbar.Mozilla Firefox
- CVE-2018-5122A potential integer overflow in the "DoCrypt" function of WebCrypto was identified.Mozilla Firefox
- CVE-2018-5125Memory safety bugs were reported in Firefox 58 and Firefox ESR 52.6.Mozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2018-5126Memory safety bugs were reported in Firefox 58.Mozilla Firefox
- CVE-2018-5127A buffer overflow can occur when manipulating the SVG "animatedPathSegList" through script.Mozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2018-5128A use-after-free vulnerability can occur when manipulating elements, events, and selection ranges during editor operations.Mozilla Firefox
- CVE-2018-5129A lack of parameter validation on IPC messages results in a potential out-of-bounds write through malformed IPC messages.Mozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2018-5130When packets with a mismatched RTP payload type are sent in WebRTC connections, in some circumstances a potentially exploitable crash is triMozilla Firefox ESR · Mozilla Firefox
- CVE-2018-5131Under certain circumstances the "fetch()" API can return transient local copies of resources that were sent with a "no-store" or "no-cache" Mozilla Firefox ESR · Mozilla Firefox
- CVE-2018-5132The Find API for WebExtensions can search some privileged pages, such as "about:debugging", if these pages are open in a tab.Mozilla Firefox
- CVE-2018-5133If the "app.support.baseURL" preference is changed by a malicious local program to contain HTML and script content, this content is not saniMozilla Firefox
- CVE-2018-5134WebExtensions may use "view-source:" URLs to view local "file:" URL content, as well as content stored in "about:cache", bypassing restrictiMozilla Firefox
- CVE-2018-5135WebExtensions can bypass normal restrictions in some circumstances and use "browser.tabs.executeScript" to inject scripts into contexts wherMozilla Firefox
- CVE-2018-5136A shared worker created from a "data:" URL in one tab can be shared by another tab with a different origin, bypassing the same-origin policyMozilla Firefox
- CVE-2018-5137A legacy extension's non-contentaccessible, defined resources can be loaded by an arbitrary web page through script.Mozilla Firefox
- CVE-2018-5138A spoofing vulnerability can occur when a malicious site with an extremely long domain name is opened in an Android Custom Tab (a browser paMozilla Firefox
- CVE-2018-5140Image for moz-icons can be accessed through the "moz-icon:" protocol through script in web content even when otherwise prohibited.Mozilla Firefox
- CVE-2018-5141A vulnerability in the notifications Push API where notifications can be sent through service workers by web content without direct user intMozilla Firefox
- CVE-2018-5142If Media Capture and Streams API permission is requested from documents with "data:" or "blob:" URLs, the permission notifications do not prMozilla Firefox
- CVE-2018-5143URLs using "javascript:" have the protocol removed when pasted into the addressbar to protect users from cross-site scripting (XSS) attacks,Mozilla Firefox
- CVE-2018-5144An integer overflow can occur during conversion of text to some Unicode character sets due to an unchecked length parameter.Mozilla Firefox ESR · Mozilla Thunderbird
- CVE-2018-5145Memory safety bugs were reported in Firefox ESR 52.6.Mozilla Firefox ESR · Mozilla Thunderbird
- CVE-2018-5146An out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own contest.Mozilla Firefox · Mozilla Thunderbird
- CVE-2018-5147The libtremor library has the same flaw as CVE-2018-5146.Mozilla Firefox ESR · Mozilla Firefox
- CVE-2018-5148A use-after-free vulnerability can occur in the compositor during certain graphics operations when a raw pointer is used instead of a refereMozilla Firefox ESR · Mozilla Firefox
- CVE-2018-5150Memory safety bugs were reported in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7.Mozilla Thunderbird · Mozilla Firefox
- CVE-2018-5151Memory safety bugs were reported in Firefox 59.Mozilla Firefox
- CVE-2018-5152WebExtensions with the appropriate permissions can attach content scripts to Mozilla sites such as accounts.firefox.com and listen to networMozilla Firefox
- CVE-2018-5153If websocket data is sent with mixed text and binary in a single message, the binary data can be corrupted.Mozilla Firefox
- CVE-2018-5154A use-after-free vulnerability can occur while enumerating attributes during SVG animations with clip paths.Mozilla Thunderbird · Mozilla Firefox
- CVE-2018-5155A use-after-free vulnerability can occur while adjusting layout during SVG animations with text paths.Mozilla Thunderbird · Mozilla Firefox
- CVE-2018-5157Same-origin protections for the PDF viewer can be bypassed, allowing a malicious site to intercept messages meant for the viewer.Mozilla Firefox ESR · Mozilla Firefox
- CVE-2018-5158The PDF viewer does not sufficiently sanitize PostScript calculator functions, allowing malicious JavaScript to be injected through a crafteMozilla Firefox ESR · Mozilla Firefox +1
- CVE-2018-5159An integer overflow can occur in the Skia library due to 32-bit integer use in an array without integer overflow checks, resulting in possibMozilla Thunderbird · Mozilla Firefox
- CVE-2018-5160WebRTC can use a "WrappedI420Buffer" pixel buffer but the owning image object can be freed while it is still in use.Mozilla Firefox
- CVE-2018-5161Crafted message headers can cause a Thunderbird process to hang on receiving the message.Mozilla Thunderbird ESR · Mozilla Thunderbird
- CVE-2018-5162Plaintext of decrypted emails can leak through the src attribute of remote images, or links.Mozilla Thunderbird ESR · Mozilla Thunderbird
- CVE-2018-5163If a malicious attacker has used another vulnerability to gain full control over a content process, they may be able to replace the alternatMozilla Firefox
- CVE-2018-5164Content Security Policy (CSP) is not applied correctly to all parts of multipart content sent with the "multipart/x-mixed-replace" MIME typeMozilla Firefox
- CVE-2018-5165In 32-bit versions of Firefox, the Adobe Flash plugin setting for "Enable Adobe Flash protected mode" is unchecked by default even though thMozilla Firefox
- CVE-2018-5166WebExtensions can use request redirection and a "filterReponseData" filter to bypass host permission settings to redirect network traffic anMozilla Firefox
- CVE-2018-5167The web console and JavaScript debugger do not sanitize all output that can be hyperlinked.Mozilla Firefox
- CVE-2018-5168Sites can bypass security checks on permissions to install lightweight themes by manipulating the "baseURI" property of the theme element.Mozilla Thunderbird · Mozilla Firefox
- CVE-2018-5169If manipulated hyperlinked text with "chrome:" URL contained in it is dragged and dropped on the "home" icon, the home page can be reset to Mozilla Firefox
- CVE-2018-5170It is possible to spoof the filename of an attachment and display an arbitrary attachment name.Mozilla Thunderbird ESR · Mozilla Thunderbird
- CVE-2018-5172The Live Bookmarks page and the PDF viewer can run injected script content if a user pastes script from the clipboard into them while viewinMozilla Firefox
- CVE-2018-5173The filename appearing in the "Downloads" panel improperly renders some Unicode characters, allowing for the file name to be spoofed.Mozilla Firefox
- CVE-2018-5174In the Windows 10 April 2018 Update, Windows Defender SmartScreen honors the "SEE_MASK_FLAG_NO_UI" flag associated with downloaded files andMozilla Thunderbird · Mozilla Firefox
- CVE-2018-5175A mechanism to bypass Content Security Policy (CSP) protections on sites that have a "script-src" policy of "'strict-dynamic'".Mozilla Firefox
- CVE-2018-5176The JSON Viewer displays clickable hyperlinks for strings that are parseable as URLs, including "javascript:" links.Mozilla Firefox
- CVE-2018-5177A vulnerability exists in XSLT during number formatting where a negative buffer size may be allocated in some instances, leading to a bufferMozilla Firefox
- CVE-2018-5178A buffer overflow was found during UTF8 to Unicode string conversion within JavaScript with extremely large amounts of data.Mozilla Thunderbird ESR · Mozilla Thunderbird +1
- CVE-2018-5180A use-after-free vulnerability can occur during WebGL operations.Mozilla Firefox
- CVE-2018-5181If a URL using the "file:" protocol is dragged and dropped onto an open tab that is running in a different child process the tab will open aMozilla Firefox
- CVE-2018-5182If a text string that happens to be a filename in the operating system's native format is dragged and dropped onto the addressbar the specifMozilla Firefox
- CVE-2018-5183Mozilla developers backported selected changes in the Skia library.Mozilla Thunderbird ESR · Mozilla Thunderbird +1
- CVE-2018-5184Using remote content in encrypted messages can lead to the disclosure of plaintext.Mozilla Thunderbird ESR · Mozilla Thunderbird
- CVE-2018-5185Plaintext of decrypted emails can leak through by user submitting an embedded form.Mozilla Thunderbird ESR · Mozilla Thunderbird
- CVE-2018-6512The previous version of Puppet Enterprise 2018.1 is vulnerable to unsafe code execution when upgrading pe-razor-server.Puppet Enterprise 2018.1.x prior to 2018.1.1, razor-server…
- CVE-2018-6513Puppet Enterprise 2016.4.x prior to 2016.4.12, Puppet Enterprise 2017.3.x prior to 2017.3.7, Puppet Enterprise 2018.1.x prior to 2018.1.1, PPuppet Enterprise and Puppet Agent
- CVE-2018-6514In Puppet Agent 1.10.x prior to 1.10.13, Puppet Agent 5.3.x prior to 5.3.7, Puppet Agent 5.5.x prior to 5.5.2, Facter on Windows is vulnerabPuppet Agent
- CVE-2018-6515Puppet Agent 1.10.x prior to 1.10.13, Puppet Agent 5.3.x prior to 5.3.7, and Puppet Agent 5.5.x prior to 5.5.2 on Windows only, with a speciPuppet Agent
- CVE-2017-3199GraniteDS, version 3.1.1.GA, Action Message Format (AMF3) Java implementation is vulnerable to insecure deserializationGraniteDS Framework · org.graniteds:granite-core
- CVE-2017-3200The implementation of Action Message Format (AMF3) deserializers in GraniteDS, version 3.1.1.GA, may allow instantiation of arbitrary classes due to improper code controlGraniteDS Framework · org.graniteds:granite-server-core
- CVE-2017-3201Flamingo amf-serializer by Exadel, version 2.2.0, Action Message Format (AMF3) Java implementation is vulnerable to insecure deserializationExadel Flamingo amf-serializer
- CVE-2017-3202The implementation of Action Message Format (AMF3) deserializers in Flamingo amf-serializer by Exadel, version 2.2.0, may allow instantiation of arbitrary classes due to improper code controlExadel Flamingo amf-serializer · com.exadel.flamingo.flex:a…
- CVE-2017-3203Pivotal/Spring Spring-flex's Action Message Format (AMF3) Java implementation is vulnerable to insecure deserializationPivotal/Spring Spring-flex · org.springframework.flex:sprin…
- CVE-2017-3206The Action Message Format (AMF3) deserializers used by Flamingo amf-serializer by Exadel, version 2.2.0, allows external entity references (XXEs) from XML documents embedded within AMF3 messagesExadel Flamingo amf-serializer
- CVE-2017-3207WebORB for Java by Midnight Coders, version 5.1.1.0, Action Message Format (AMF3) Java implementation is vulnerable to insecure deserializationMidnight Coders WebORB for Java
- CVE-2017-3208The Java implementation of AMF3 deserializers used by WebORB for Java by Midnight Coders, version 5.1.1.0, allows external entity references
- CVE-2011-4181open build service information leak via unauthorized source accessSUSE open build service
- CVE-2018-12112md_build_attribute in md4c.c in md4c 0.2.6 allows remote attackers to cause a denial of service (Segmentation fault and application crash) o
- CVE-2018-12102md4c 0.2.6 has a NULL pointer dereference in the function md_process_line in md4c.c, related to ctx->current_block.
- CVE-2018-12108An issue was discovered in Dropbox Lepton 1.2.1.
- CVE-2018-12109An issue was discovered in Free Lossless Image Format (FLIF) 0.3.
- CVE-2018-12110portfolioCMS 1.0.5 has SQL Injection via the admin/portfolio.php preview parameter.
- CVE-2018-12111Cross-site scripting (XSS) vulnerability in the Canon PrintMe EFI webinterface allows remote attackers to inject arbitrary web script or HTM
- CVE-2018-12092tinyexr 0.9.5 has a heap-based buffer over-read in tinyexr::DecodePixelData in tinyexr.h, related to OpenEXR code.
- CVE-2018-12093tinyexr 0.9.5 has a memory leak in ParseEXRHeaderFromMemory in tinyexr.h.
- CVE-2018-12094Cross-site scripting (XSS) vulnerability in news.php in Dimofinf CMS Version 3.0.0 allows remote attackers to inject arbitrary web script or
- CVE-2018-12095A Reflected Cross-Site Scripting web vulnerability has been discovered in the OEcms v3.1 web-application.
- CVE-2018-12099Grafana before 5.2.0-beta1 has XSS vulnerabilities in dashboard links.github.com/grafana/grafana
- CVE-2018-12100Sonatype Nexus Repository Manager versions 3.x before 3.12.0 has XSS in multiple areas in the Administration UI.
- CVE-2018-10360The do_core_note function in readelf.c in libmagic.a in file 5.33 allows remote attackers to cause a denial of service (out-of-bounds read a
- CVE-2018-12025The transferFrom function of a smart contract implementation for FuturXE (FXE), an Ethereum ERC20 token, allows attackers to accomplish an u
- CVE-2018-12089In Octopus Deploy version 2018.5.1 to 2018.5.7, a user with Task View is able to view a password for a Service Fabric Cluster, when the Serv
- CVE-2018-12090There is unauthenticated reflected cross-site scripting (XSS) in LAMS before 3.1 that allows a remote attacker to introduce arbitrary JavaSc