# CVEs published 2018-06-11 349 CVEs were published on June 11, 2018: 0 critical, 2 high. 2 are now in CISA KEV. Days are UTC. - [CVE-2018-6961](https://cve.now/CVE-2018-6961.md): VMware NSX SD-WAN Edge by VeloCloud prior to version 3.1.0 contains a command injection vulnerability in the local web UI component. (CVSS 8.1, KEV, VMware NSX SD-WAN by VeloCloud) - [CVE-2018-6968](https://cve.now/CVE-2018-6968.md): The VMware AirWatch Agent for Android prior to 8.2 and AirWatch Agent for Windows Mobile prior to 6.5.2 contain a remote code execution vuln (no CVSS, VMware AirWatch Agent) - [CVE-2016-5287](https://cve.now/CVE-2016-5287.md): A potentially exploitable use-after-free crash during actor destruction with service workers. (no CVSS, Mozilla Firefox) - [CVE-2016-5288](https://cve.now/CVE-2016-5288.md): Web content could access information in the HTTP cache if e10s is disabled. (no CVSS, Mozilla Firefox) - [CVE-2016-5289](https://cve.now/CVE-2016-5289.md): Memory safety bugs were reported in Firefox 49. (no CVSS, Mozilla Firefox) - [CVE-2016-5290](https://cve.now/CVE-2016-5290.md): Memory safety bugs were reported in Firefox 49 and Firefox ESR 45.4. (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2016-5291](https://cve.now/CVE-2016-5291.md): A same-origin policy bypass with local shortcut files to load arbitrary local content from disk. (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2016-5292](https://cve.now/CVE-2016-5292.md): During URL parsing, a maliciously crafted URL can cause a potentially exploitable crash. (no CVSS, Mozilla Firefox) - [CVE-2016-5293](https://cve.now/CVE-2016-5293.md): When the Mozilla Updater is run, if the Updater's log file in the working directory points to a hardlink, data can be appended to an arbitra (no CVSS, Mozilla Firefox ESR · Mozilla Firefox) - [CVE-2016-5294](https://cve.now/CVE-2016-5294.md): The Mozilla Updater can be made to choose an arbitrary target working directory for output files resulting from the update process. (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2016-5295](https://cve.now/CVE-2016-5295.md): This vulnerability allows an attacker to use the Mozilla Maintenance Service to escalate privilege by having the Maintenance Service invoke (no CVSS, Mozilla Firefox) - [CVE-2016-5296](https://cve.now/CVE-2016-5296.md): A heap-buffer-overflow in Cairo when processing SVG content caused by compiler optimization, resulting in a potentially exploitable crash. (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2016-5297](https://cve.now/CVE-2016-5297.md): An error in argument length checking in JavaScript, leading to potential integer overflows or other bounds checking issues. (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2016-5298](https://cve.now/CVE-2016-5298.md): A mechanism where disruption of the loading of a new web page can cause the previous page's favicon and SSL indicator to not be reset when t (no CVSS, Mozilla Firefox) - [CVE-2016-5299](https://cve.now/CVE-2016-5299.md): A previously installed malicious Android application with same signature-level permissions as Firefox can intercept AuthTokens meant for Fir (no CVSS, Mozilla Firefox) - [CVE-2016-9061](https://cve.now/CVE-2016-9061.md): A previously installed malicious Android application which defines a specific signature-level permissions used by Firefox can access API key (no CVSS, Mozilla Firefox) - [CVE-2016-9062](https://cve.now/CVE-2016-9062.md): Private browsing mode leaves metadata information, such as URLs, for sites visited in "browser.db" and "browser.db-wal" files within the Fir (no CVSS, Mozilla Firefox) - [CVE-2016-9063](https://cve.now/CVE-2016-9063.md): An integer overflow during the parsing of XML using the Expat library. (no CVSS, Mozilla Firefox) - [CVE-2016-9064](https://cve.now/CVE-2016-9064.md): Add-on updates failed to verify that the add-on ID inside the signed package matched the ID of the add-on being updated. (no CVSS, Mozilla Firefox ESR · Mozilla Firefox) - [CVE-2016-9065](https://cve.now/CVE-2016-9065.md): The location bar in Firefox for Android can be spoofed by forcing a user into fullscreen mode, blocking its exiting, and creating of a fake (no CVSS, Mozilla Firefox) - [CVE-2016-9066](https://cve.now/CVE-2016-9066.md): A buffer overflow resulting in a potentially exploitable crash due to memory allocation issues when handling large amounts of incoming data. (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2016-9067](https://cve.now/CVE-2016-9067.md): Two use-after-free errors during DOM operations resulting in potentially exploitable crashes. (no CVSS, Mozilla Firefox) - [CVE-2016-9068](https://cve.now/CVE-2016-9068.md): A use-after-free during web animations when working with timelines resulting in a potentially exploitable crash. (no CVSS, Mozilla Firefox) - [CVE-2016-9070](https://cve.now/CVE-2016-9070.md): A maliciously crafted page loaded to the sidebar through a bookmark can reference a privileged chrome window and engage in limited JavaScrip (no CVSS, Mozilla Firefox) - [CVE-2016-9071](https://cve.now/CVE-2016-9071.md): Content Security Policy combined with HTTP to HTTPS redirection can be used by malicious server to verify whether a known site is within a u (no CVSS, Mozilla Firefox) - [CVE-2016-9072](https://cve.now/CVE-2016-9072.md): When a new Firefox profile is created on 64-bit Windows installations, the sandbox for 64-bit NPAPI plugins is not enabled by default. (no CVSS, Mozilla Firefox) - [CVE-2016-9073](https://cve.now/CVE-2016-9073.md): WebExtensions can bypass security checks to load privileged URLs and potentially escape the WebExtension sandbox. (no CVSS, Mozilla Firefox) - [CVE-2016-9074](https://cve.now/CVE-2016-9074.md): An existing mitigation of timing side-channel attacks is insufficient in some circumstances. (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2016-9075](https://cve.now/CVE-2016-9075.md): An issue where WebExtensions can use the mozAddonManager API to elevate privilege due to privileged pages being allowed in the permissions l (no CVSS, Mozilla Firefox) - [CVE-2016-9076](https://cve.now/CVE-2016-9076.md): An issue where a "\" dropdown menu can be used to cover location bar content, resulting in potential spoofing attacks. (no CVSS, Mozilla Firefox) - [CVE-2016-9077](https://cve.now/CVE-2016-9077.md): Canvas allows the use of the "feDisplacementMap" filter on images loaded cross-origin. (no CVSS, Mozilla Firefox) - [CVE-2016-9078](https://cve.now/CVE-2016-9078.md): Redirection from an HTTP connection to a "data:" URL assigns the referring site's origin to the "data:" URL in some circumstances. (no CVSS, Mozilla Firefox) - [CVE-2016-9079](https://cve.now/CVE-2016-9079.md): A use-after-free vulnerability in SVG Animation has been discovered. (CVSS 7.5, KEV, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2016-9080](https://cve.now/CVE-2016-9080.md): Memory safety bugs were reported in Firefox 50.0.2. (no CVSS, Mozilla Firefox) - [CVE-2016-9893](https://cve.now/CVE-2016-9893.md): Memory safety bugs were reported in Thunderbird 45.5. (no CVSS, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2016-9894](https://cve.now/CVE-2016-9894.md): A buffer overflow in SkiaGl caused when a GrGLBuffer is truncated during allocation. (no CVSS, Mozilla Firefox) - [CVE-2016-9895](https://cve.now/CVE-2016-9895.md): Event handlers on "marquee" elements were executed despite a strict Content Security Policy (CSP) that disallowed inline JavaScript. (no CVSS, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2016-9896](https://cve.now/CVE-2016-9896.md): Use-after-free while manipulating the "navigator" object within WebVR. (no CVSS, Mozilla Firefox) - [CVE-2016-9897](https://cve.now/CVE-2016-9897.md): Memory corruption resulting in a potentially exploitable crash during WebGL functions using a vector constructor with a varying array within (no CVSS, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2016-9898](https://cve.now/CVE-2016-9898.md): Use-after-free resulting in potentially exploitable crash when manipulating DOM subtrees in the Editor. (no CVSS, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2016-9899](https://cve.now/CVE-2016-9899.md): Use-after-free while manipulating DOM events and removing audio elements due to errors in the handling of node adoption. (no CVSS, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2016-9900](https://cve.now/CVE-2016-9900.md): External resources that should be blocked when loaded by SVG images can bypass security restrictions through the use of "data:" URLs. (no CVSS, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2016-9901](https://cve.now/CVE-2016-9901.md): HTML tags received from the Pocket server will be processed without sanitization and any JavaScript code executed will be run in the "about: (no CVSS, Mozilla Firefox ESR · Mozilla Firefox) - [CVE-2016-9902](https://cve.now/CVE-2016-9902.md): The Pocket toolbar button, once activated, listens for events fired from it's own pages but does not verify the origin of incoming events. (no CVSS, Mozilla Firefox ESR · Mozilla Firefox) - [CVE-2016-9903](https://cve.now/CVE-2016-9903.md): Mozilla's add-ons SDK had a world-accessible resource with an HTML injection vulnerability. (no CVSS, Mozilla Firefox) - [CVE-2016-9904](https://cve.now/CVE-2016-9904.md): An attacker could use a JavaScript Map/Set timing attack to determine whether an atom is used by another compartment/zone in specific contex (no CVSS, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2016-9905](https://cve.now/CVE-2016-9905.md): A potentially exploitable crash in "EnumerateSubDocuments" while adding or removing sub-documents. (no CVSS, Mozilla Firefox ESR · Mozilla Thunderbird) - [CVE-2017-5373](https://cve.now/CVE-2017-5373.md): Memory safety bugs were reported in Firefox 50.1 and Firefox ESR 45.6. (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2017-5374](https://cve.now/CVE-2017-5374.md): Memory safety bugs were reported in Firefox 50.1. (no CVSS, Mozilla Firefox) - [CVE-2017-5375](https://cve.now/CVE-2017-5375.md): JIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2017-5376](https://cve.now/CVE-2017-5376.md): Use-after-free while manipulating XSL in XSLT documents. (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2017-5377](https://cve.now/CVE-2017-5377.md): A memory corruption vulnerability in Skia that can occur when using transforms to make gradients, resulting in a potentially exploitable cra (no CVSS, Mozilla Firefox) - [CVE-2017-5378](https://cve.now/CVE-2017-5378.md): Hashed codes of JavaScript objects are shared between pages. (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2017-5379](https://cve.now/CVE-2017-5379.md): Use-after-free vulnerability in Web Animations when interacting with cycle collection found through fuzzing. (no CVSS, Mozilla Firefox) - [CVE-2017-5380](https://cve.now/CVE-2017-5380.md): A potential use-after-free found through fuzzing during DOM manipulation of SVG content. (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2017-5381](https://cve.now/CVE-2017-5381.md): The "export" function in the Certificate Viewer can force local filesystem navigation when the "common name" in a certificate contains slash (no CVSS, Mozilla Firefox) - [CVE-2017-5382](https://cve.now/CVE-2017-5382.md): Feed preview for RSS feeds can be used to capture errors and exceptions generated by privileged content, allowing for the exposure of intern (no CVSS, Mozilla Firefox) - [CVE-2017-5383](https://cve.now/CVE-2017-5383.md): URLs containing certain unicode glyphs for alternative hyphens and quotes do not properly trigger punycode display, allowing for domain name (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2017-5384](https://cve.now/CVE-2017-5384.md): Proxy Auto-Config (PAC) files can specify a JavaScript function called for all URL requests with the full URL path which exposes more inform (no CVSS, Mozilla Firefox) - [CVE-2017-5385](https://cve.now/CVE-2017-5385.md): Data sent with in multipart channels, such as the multipart/x-mixed-replace MIME type, will ignore the referrer-policy response header, lead (no CVSS, Mozilla Firefox) - [CVE-2017-5386](https://cve.now/CVE-2017-5386.md): WebExtension scripts can use the "data:" protocol to affect pages loaded by other web extensions using this protocol, leading to potential d (no CVSS, Mozilla Firefox ESR · Mozilla Firefox) - [CVE-2017-5387](https://cve.now/CVE-2017-5387.md): The existence of a specifically requested local file can be found due to the double firing of the "onerror" when the "source" attribute on a (no CVSS, Mozilla Firefox) - [CVE-2017-5388](https://cve.now/CVE-2017-5388.md): A STUN server in conjunction with a large number of "webkitRTCPeerConnection" objects can be used to send large STUN packets in a short peri (no CVSS, Mozilla Firefox) - [CVE-2017-5389](https://cve.now/CVE-2017-5389.md): WebExtensions could use the "mozAddonManager" API by modifying the CSP headers on sites with the appropriate permissions and then using host (no CVSS, Mozilla Firefox) - [CVE-2017-5390](https://cve.now/CVE-2017-5390.md): The JSON viewer in the Developer Tools uses insecure methods to create a communication channel for copying and viewing JSON or HTTP headers (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2017-5391](https://cve.now/CVE-2017-5391.md): Special "about:" pages used by web content, such as RSS feeds, can load privileged "about:" pages in an iframe. (no CVSS, Mozilla Firefox) - [CVE-2017-5392](https://cve.now/CVE-2017-5392.md): Weak proxy objects have weak references on multiple threads when they should only have them on one, resulting in incorrect memory usage and (no CVSS, Mozilla Firefox) - [CVE-2017-5393](https://cve.now/CVE-2017-5393.md): The "mozAddonManager" allows for the installation of extensions from the CDN for addons.mozilla.org, a publicly accessible site. (no CVSS, Mozilla Firefox) - [CVE-2017-5394](https://cve.now/CVE-2017-5394.md): A location bar spoofing attack where the location bar of loaded page will be shown over the content of another tab due to a series of JavaSc (no CVSS, Mozilla Firefox) - [CVE-2017-5395](https://cve.now/CVE-2017-5395.md): Malicious sites can display a spoofed location bar on a subsequently loaded page when the existing location bar on the new page is scrolled (no CVSS) - [CVE-2017-5396](https://cve.now/CVE-2017-5396.md): A use-after-free vulnerability in the Media Decoder when working with media files when some events are fired after the media elements are fr (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2017-5397](https://cve.now/CVE-2017-5397.md): The cache directory on the local file system is set to be world writable. (no CVSS, Mozilla Firefox) - [CVE-2017-5398](https://cve.now/CVE-2017-5398.md): Memory safety bugs were reported in Thunderbird 45.7. (no CVSS, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2017-5399](https://cve.now/CVE-2017-5399.md): Memory safety bugs were reported in Firefox 51. (no CVSS, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2017-5400](https://cve.now/CVE-2017-5400.md): JIT-spray targeting asm.js combined with a heap spray allows for a bypass of ASLR and DEP protections leading to potential memory corruption (no CVSS, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2017-5401](https://cve.now/CVE-2017-5401.md): A crash triggerable by web content in which an "ErrorResult" references unassigned memory due to a logic error. (no CVSS, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2017-5402](https://cve.now/CVE-2017-5402.md): A use-after-free can occur when events are fired for a "FontFace" object after the object has been already been destroyed while working with (no CVSS, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2017-5403](https://cve.now/CVE-2017-5403.md): When adding a range to an object in the DOM, it is possible to use "addRange" to add the range to an incorrect root object. (no CVSS, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2017-5404](https://cve.now/CVE-2017-5404.md): A use-after-free error can occur when manipulating ranges in selections with one node inside a native anonymous tree and one node outside of (no CVSS, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2017-5405](https://cve.now/CVE-2017-5405.md): Certain response codes in FTP connections can result in the use of uninitialized values for ports in FTP operations. (no CVSS, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2017-5406](https://cve.now/CVE-2017-5406.md): A segmentation fault can occur in the Skia graphics library during some canvas operations due to issues with mask/clip intersection and empt (no CVSS, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2017-5407](https://cve.now/CVE-2017-5407.md): Using SVG filters that don't use the fixed point math implementation on a target iframe, a malicious page can extract pixel values from a ta (no CVSS, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2017-5408](https://cve.now/CVE-2017-5408.md): Video files loaded video captions cross-origin without checking for the presence of CORS headers permitting such cross-origin use, leading t (no CVSS, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2017-5409](https://cve.now/CVE-2017-5409.md): The Mozilla Windows updater can be called by a non-privileged user to delete an arbitrary local file by passing a special path to the callba (no CVSS, Mozilla Firefox ESR · Mozilla Firefox) - [CVE-2017-5410](https://cve.now/CVE-2017-5410.md): Memory corruption resulting in a potentially exploitable crash during garbage collection of JavaScript due errors in how incremental sweepin (no CVSS, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2017-5411](https://cve.now/CVE-2017-5411.md): A use-after-free can occur during buffer storage operations within the ANGLE graphics library, used for WebGL content. (no CVSS, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2017-5412](https://cve.now/CVE-2017-5412.md): A buffer overflow read during SVG filter color value operations, resulting in data exposure. (no CVSS, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2017-5413](https://cve.now/CVE-2017-5413.md): A segmentation fault can occur during some bidirectional layout operations. (no CVSS, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2017-5414](https://cve.now/CVE-2017-5414.md): The file picker dialog can choose and display the wrong local default directory when instantiated. (no CVSS, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2017-5415](https://cve.now/CVE-2017-5415.md): An attack can use a blob URL and script to spoof an arbitrary addressbar URL prefaced by "blob:" as the protocol, leading to user confusion (no CVSS, Mozilla Firefox) - [CVE-2017-5416](https://cve.now/CVE-2017-5416.md): In certain circumstances a networking event listener can be prematurely released. (no CVSS, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2017-5417](https://cve.now/CVE-2017-5417.md): When dragging content from the primary browser pane to the addressbar on a malicious site, it is possible to change the addressbar so that t (no CVSS, Mozilla Firefox) - [CVE-2017-5418](https://cve.now/CVE-2017-5418.md): An out of bounds read error occurs when parsing some HTTP digest authorization responses, resulting in information leakage through the readi (no CVSS, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2017-5419](https://cve.now/CVE-2017-5419.md): If a malicious site repeatedly triggers a modal authentication prompt, eventually the browser UI will become non-responsive, requiring shutd (no CVSS, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2017-5420](https://cve.now/CVE-2017-5420.md): A "javascript:" url loaded by a malicious page can obfuscate its location by blanking the URL displayed in the addressbar, allowing for an a (no CVSS, Mozilla Firefox) - [CVE-2017-5421](https://cve.now/CVE-2017-5421.md): A malicious site could spoof the contents of the print preview window if popup windows are enabled, resulting in user confusion of what site (no CVSS, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2017-5422](https://cve.now/CVE-2017-5422.md): If a malicious site uses the "view-source:" protocol in a series within a single hyperlink, it can trigger a non-exploitable browser crash w (no CVSS, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2017-5425](https://cve.now/CVE-2017-5425.md): The Gecko Media Plugin sandbox allows access to local files that match specific regular expressions. (no CVSS, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2017-5426](https://cve.now/CVE-2017-5426.md): On Linux, if the secure computing mode BPF (seccomp-bpf) filter is running when the Gecko Media Plugin sandbox is started, the sandbox fails (no CVSS, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2017-5427](https://cve.now/CVE-2017-5427.md): A non-existent chrome.manifest file will attempt to be loaded during startup from the primary installation directory. (no CVSS, Mozilla Firefox) - [CVE-2017-5428](https://cve.now/CVE-2017-5428.md): An integer overflow in "createImageBitmap()" was reported through the Pwn2Own contest. (no CVSS, Mozilla Firefox ESR · Mozilla Firefox) - [CVE-2017-5429](https://cve.now/CVE-2017-5429.md): Memory safety bugs were reported in Firefox 52, Firefox ESR 45.8, Firefox ESR 52, and Thunderbird 52. (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2017-5430](https://cve.now/CVE-2017-5430.md): Memory safety bugs were reported in Firefox 52, Firefox ESR 52, and Thunderbird 52. (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2017-5432](https://cve.now/CVE-2017-5432.md): A use-after-free vulnerability occurs during certain text input selection resulting in a potentially exploitable crash. (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2017-5433](https://cve.now/CVE-2017-5433.md): A use-after-free vulnerability in SMIL animation functions occurs when pointers to animation elements in an array are dropped from the anima (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2017-5434](https://cve.now/CVE-2017-5434.md): A use-after-free vulnerability occurs when redirecting focus handling which results in a potentially exploitable crash. (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2017-5435](https://cve.now/CVE-2017-5435.md): A use-after-free vulnerability occurs during transaction processing in the editor during design mode interactions. (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2017-5436](https://cve.now/CVE-2017-5436.md): An out-of-bounds write in the Graphite 2 library triggered with a maliciously crafted Graphite font. (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2017-5438](https://cve.now/CVE-2017-5438.md): A use-after-free vulnerability during XSLT processing due to the result handler being held by a freed handler during handling. (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2017-5439](https://cve.now/CVE-2017-5439.md): A use-after-free vulnerability during XSLT processing due to poor handling of template parameters. (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2017-5440](https://cve.now/CVE-2017-5440.md): A use-after-free vulnerability during XSLT processing due to a failure to propagate error conditions during matching while evaluating contex (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2017-5441](https://cve.now/CVE-2017-5441.md): A use-after-free vulnerability when holding a selection during scroll events. (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2017-5442](https://cve.now/CVE-2017-5442.md): A use-after-free vulnerability during changes in style when manipulating DOM elements. (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2017-5443](https://cve.now/CVE-2017-5443.md): An out-of-bounds write vulnerability while decoding improperly formed BinHex format archives. (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2017-5444](https://cve.now/CVE-2017-5444.md): A buffer overflow vulnerability while parsing "application/http-index-format" format content when the header contains improperly formatted d (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2017-5445](https://cve.now/CVE-2017-5445.md): A vulnerability while parsing "application/http-index-format" format content where uninitialized values are used to create an array. (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2017-5446](https://cve.now/CVE-2017-5446.md): An out-of-bounds read when an HTTP/2 connection to a servers sends "DATA" frames with incorrect data content. (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2017-5447](https://cve.now/CVE-2017-5447.md): An out-of-bounds read during the processing of glyph widths during text layout. (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2017-5448](https://cve.now/CVE-2017-5448.md): An out-of-bounds write in "ClearKeyDecryptor" while decrypting some Clearkey-encrypted media content. (no CVSS, Mozilla Firefox ESR · Mozilla Firefox) - [CVE-2017-5449](https://cve.now/CVE-2017-5449.md): A possibly exploitable crash triggered during layout and manipulation of bidirectional unicode text in concert with CSS animations. (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2017-5450](https://cve.now/CVE-2017-5450.md): A mechanism to spoof the Firefox for Android addressbar using a "javascript:" URI. (no CVSS, Mozilla Firefox) - [CVE-2017-5451](https://cve.now/CVE-2017-5451.md): A mechanism to spoof the addressbar through the user interaction on the addressbar and the "onblur" event. (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2017-5452](https://cve.now/CVE-2017-5452.md): Malicious sites can display a spoofed addressbar on a page when the existing location bar on the new page is scrolled out of view if an HTML (no CVSS, Mozilla Firefox) - [CVE-2017-5453](https://cve.now/CVE-2017-5453.md): A mechanism to inject static HTML into the RSS reader preview page due to a failure to escape characters sent as URL parameters for a feed's (no CVSS, Mozilla Firefox) - [CVE-2017-5454](https://cve.now/CVE-2017-5454.md): A mechanism to bypass file system access protections in the sandbox to use the file picker to access different files than those selected in (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2017-5455](https://cve.now/CVE-2017-5455.md): The internal feed reader APIs that crossed the sandbox barrier allowed for a sandbox escape and escalation of privilege if combined with ano (no CVSS, Mozilla Firefox ESR · Mozilla Firefox) - [CVE-2017-5456](https://cve.now/CVE-2017-5456.md): A mechanism to bypass file system access protections in the sandbox using the file system request constructor through an IPC message. (no CVSS, Mozilla Firefox ESR · Mozilla Firefox) - [CVE-2017-5458](https://cve.now/CVE-2017-5458.md): When a "javascript:" URL is drag and dropped by a user into the addressbar, the URL will be processed and executed. (no CVSS, Mozilla Firefox) - [CVE-2017-5459](https://cve.now/CVE-2017-5459.md): A buffer overflow in WebGL triggerable by web content, resulting in a potentially exploitable crash. (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2017-5460](https://cve.now/CVE-2017-5460.md): A use-after-free vulnerability in frame selection triggered by a combination of malicious script content and key presses by a user. (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2017-5462](https://cve.now/CVE-2017-5462.md): A flaw in DRBG number generation within the Network Security Services (NSS) library where the internal state V does not correctly carry bits (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2017-5463](https://cve.now/CVE-2017-5463.md): Android intents can be used to launch Firefox for Android in reader mode with a user specified URL. (no CVSS, Mozilla Firefox) - [CVE-2017-5464](https://cve.now/CVE-2017-5464.md): During DOM manipulations of the accessibility tree through script, the DOM tree can become out of sync with the accessibility tree, leading (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2017-5465](https://cve.now/CVE-2017-5465.md): An out-of-bounds read while processing SVG content in "ConvolvePixel". (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2017-5466](https://cve.now/CVE-2017-5466.md): If a page is loaded from an original site through a hyperlink and contains a redirect to a "data:text/html" URL, triggering a reload will ru (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2017-5467](https://cve.now/CVE-2017-5467.md): A potential memory corruption and crash when using Skia content when drawing content outside of the bounds of a clipping region. (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2017-5468](https://cve.now/CVE-2017-5468.md): An issue with incorrect ownership model of "privateBrowsing" information exposed through developer tools. (no CVSS, Mozilla Firefox) - [CVE-2017-5469](https://cve.now/CVE-2017-5469.md): Fixed potential buffer overflows in generated Firefox code due to CVE-2016-6354 issue in Flex. (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2017-5470](https://cve.now/CVE-2017-5470.md): Memory safety bugs were reported in Firefox 53 and Firefox ESR 52.1. (no CVSS, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2017-5471](https://cve.now/CVE-2017-5471.md): Memory safety bugs were reported in Firefox 53. (no CVSS, Mozilla Firefox) - [CVE-2017-5472](https://cve.now/CVE-2017-5472.md): A use-after-free vulnerability with the frameloader during tree reconstruction while regenerating CSS layout when attempting to use a node i (no CVSS, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2017-7749](https://cve.now/CVE-2017-7749.md): A use-after-free vulnerability when using an incorrect URL during the reloading of a docshell. (no CVSS, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2017-7750](https://cve.now/CVE-2017-7750.md): A use-after-free vulnerability during video control operations when a "\" element holds a reference to an older window if that window (no CVSS, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2017-7751](https://cve.now/CVE-2017-7751.md): A use-after-free vulnerability with content viewer listeners that results in a potentially exploitable crash. (no CVSS, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2017-7752](https://cve.now/CVE-2017-7752.md): A use-after-free vulnerability during specific user interactions with the input method editor (IME) in some languages due to how events are (no CVSS, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2017-7753](https://cve.now/CVE-2017-7753.md): An out-of-bounds read occurs when applying style rules to pseudo-elements, such as ::first-line, using cached style data. (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2017-7754](https://cve.now/CVE-2017-7754.md): An out-of-bounds read in WebGL with a maliciously crafted "ImageInfo" object during WebGL operations. (no CVSS, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2017-7755](https://cve.now/CVE-2017-7755.md): The Firefox installer on Windows can be made to load malicious DLL files stored in the same directory as the installer when it is run. (no CVSS, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2017-7756](https://cve.now/CVE-2017-7756.md): A use-after-free and use-after-scope vulnerability when logging errors from headers for XML HTTP Requests (XHR). (no CVSS, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2017-7757](https://cve.now/CVE-2017-7757.md): A use-after-free vulnerability in IndexedDB when one of its objects is destroyed in memory while a method on it is still being executed. (no CVSS, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2017-7758](https://cve.now/CVE-2017-7758.md): An out-of-bounds read vulnerability with the Opus encoder when the number of channels in an audio stream changes while the encoder is in use (no CVSS, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2017-7759](https://cve.now/CVE-2017-7759.md): Android intent URLs given to Firefox for Android can be used to navigate from HTTP or HTTPS URLs to local "file:" URLs, allowing for the rea (no CVSS, Mozilla Firefox) - [CVE-2017-7760](https://cve.now/CVE-2017-7760.md): The Mozilla Windows updater modifies some files to be updated by reading the original file and applying changes to it. (no CVSS, Mozilla Firefox ESR · Mozilla Firefox) - [CVE-2017-7761](https://cve.now/CVE-2017-7761.md): The Mozilla Maintenance Service "helper.exe" application creates a temporary directory writable by non-privileged users. (no CVSS, Mozilla Firefox ESR · Mozilla Firefox) - [CVE-2017-7762](https://cve.now/CVE-2017-7762.md): When entered directly, Reader Mode did not strip the username and password section of URLs displayed in the addressbar. (no CVSS, Mozilla Firefox) - [CVE-2017-7763](https://cve.now/CVE-2017-7763.md): Default fonts on OS X display some Tibetan characters as whitespace. (no CVSS, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2017-7764](https://cve.now/CVE-2017-7764.md): Characters from the "Canadian Syllabics" unicode block can be mixed with characters from other unicode blocks in the addressbar instead of b (no CVSS, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2017-7765](https://cve.now/CVE-2017-7765.md): The "Mark of the Web" was not correctly saved on Windows when files with very long names were downloaded from the Internet. (no CVSS, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2017-7766](https://cve.now/CVE-2017-7766.md): An attack using manipulation of "updater.ini" contents, used by the Mozilla Windows Updater, and privilege escalation through the Mozilla Ma (no CVSS, Mozilla Firefox ESR · Mozilla Firefox) - [CVE-2017-7767](https://cve.now/CVE-2017-7767.md): The Mozilla Maintenance Service can be invoked by an unprivileged user to overwrite arbitrary files with junk data using the Mozilla Windows (no CVSS, Mozilla Firefox ESR · Mozilla Firefox) - [CVE-2017-7768](https://cve.now/CVE-2017-7768.md): The Mozilla Maintenance Service can be invoked by an unprivileged user to read 32 bytes of any arbitrary file on the local system by convinc (no CVSS, Mozilla Firefox ESR · Mozilla Firefox) - [CVE-2017-7770](https://cve.now/CVE-2017-7770.md): A mechanism where when a new tab is loaded through JavaScript events, if fullscreen mode is then entered, the addressbar will not be rendere (no CVSS, Mozilla Firefox) - [CVE-2017-7778](https://cve.now/CVE-2017-7778.md): A number of security vulnerabilities in the Graphite 2 library including out-of-bounds reads, buffer overflow reads and writes, and the use (no CVSS, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2017-7779](https://cve.now/CVE-2017-7779.md): Memory safety bugs were reported in Firefox 54, Firefox ESR 52.2, and Thunderbird 52.2. (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2017-7780](https://cve.now/CVE-2017-7780.md): Memory safety bugs were reported in Firefox 54. (no CVSS, Mozilla Firefox) - [CVE-2017-7781](https://cve.now/CVE-2017-7781.md): An error occurs in the elliptic curve point addition algorithm that uses mixed Jacobian-affine coordinates where it can yield a result "POIN (no CVSS, Mozilla Firefox) - [CVE-2017-7782](https://cve.now/CVE-2017-7782.md): An error in the "WindowsDllDetourPatcher" where a RWX ("Read/Write/Execute") 4k block is allocated but never protected, violating DEP protec (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2017-7783](https://cve.now/CVE-2017-7783.md): If a long user name is used in a username/password combination in a site URL (such as " http://UserName:Password@example.com"), the resultin (no CVSS, Mozilla Firefox) - [CVE-2017-7784](https://cve.now/CVE-2017-7784.md): A use-after-free vulnerability can occur when reading an image observer during frame reconstruction after the observer has been freed. (no CVSS) - [CVE-2017-7785](https://cve.now/CVE-2017-7785.md): A buffer overflow can occur when manipulating Accessible Rich Internet Applications (ARIA) attributes within the DOM. (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2017-7786](https://cve.now/CVE-2017-7786.md): A buffer overflow can occur when the image renderer attempts to paint non-displayable SVG elements. (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2017-7787](https://cve.now/CVE-2017-7787.md): Same-origin policy protections can be bypassed on pages with embedded iframes during page reloads, allowing the iframes to access content on (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2017-7788](https://cve.now/CVE-2017-7788.md): When an "iframe" has a "sandbox" attribute and its content is specified using "srcdoc", that content does not inherit the containing page's (no CVSS, Mozilla Firefox) - [CVE-2017-7789](https://cve.now/CVE-2017-7789.md): If a server sends two Strict-Transport-Security (STS) headers for a single connection, they will be rejected as invalid and HTTP Strict Tran (no CVSS, Mozilla Firefox) - [CVE-2017-7790](https://cve.now/CVE-2017-7790.md): On Windows systems, if non-null-terminated strings are copied into the crash reporter for some specific registry keys, stack memory data can (no CVSS, Mozilla Firefox) - [CVE-2017-7791](https://cve.now/CVE-2017-7791.md): On pages containing an iframe, the "data:" protocol can be used to create a modal alert that will render over arbitrary domains following pa (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2017-7792](https://cve.now/CVE-2017-7792.md): A buffer overflow will occur when viewing a certificate in the certificate manager if the certificate has an extremely long object identifie (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2017-7793](https://cve.now/CVE-2017-7793.md): A use-after-free vulnerability can occur in the Fetch API when the worker or the associated window are freed when still in use, resulting in (no CVSS, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2017-7794](https://cve.now/CVE-2017-7794.md): On Linux systems, if the content process is compromised, the sandbox broker will allow files to be truncated even though the sandbox explici (no CVSS, Mozilla Firefox) - [CVE-2017-7796](https://cve.now/CVE-2017-7796.md): On Windows systems, the logger run by the Windows updater deletes the file "update.log" before it runs in order to write a new log of that n (no CVSS, Mozilla Firefox) - [CVE-2017-7797](https://cve.now/CVE-2017-7797.md): Response header name interning does not have same-origin protections and these headers are stored in a global registry. (no CVSS, Mozilla Firefox) - [CVE-2017-7798](https://cve.now/CVE-2017-7798.md): The Developer Tools feature suffers from a XUL injection vulnerability due to improper sanitization of the web page source code. (no CVSS, Mozilla Firefox ESR · Mozilla Firefox) - [CVE-2017-7799](https://cve.now/CVE-2017-7799.md): JavaScript in the "about:webrtc" page is not sanitized properly being assigned to "innerHTML". (no CVSS, Mozilla Firefox) - [CVE-2017-7800](https://cve.now/CVE-2017-7800.md): A use-after-free vulnerability can occur in WebSockets when the object holding the connection is freed before the disconnection operation is (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2017-7801](https://cve.now/CVE-2017-7801.md): A use-after-free vulnerability can occur while re-computing layout for a "marquee" element during window resizing where the updated style ob (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2017-7802](https://cve.now/CVE-2017-7802.md): A use-after-free vulnerability can occur when manipulating the DOM during the resize event of an image element. (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2017-7803](https://cve.now/CVE-2017-7803.md): When a page's content security policy (CSP) header contains a "sandbox" directive, other directives are ignored. (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2017-7804](https://cve.now/CVE-2017-7804.md): The destructor function for the "WindowsDllDetourPatcher" class can be re-purposed by malicious code in concert with another vulnerability t (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2017-7805](https://cve.now/CVE-2017-7805.md): During TLS 1.2 exchanges, handshake hashes are generated which point to a message buffer. (no CVSS, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2017-7806](https://cve.now/CVE-2017-7806.md): A use-after-free vulnerability can occur when the layer manager is freed too early when rendering specific SVG content, resulting in a poten (no CVSS, Mozilla Firefox) - [CVE-2017-7807](https://cve.now/CVE-2017-7807.md): A mechanism that uses AppCache to hijack a URL in a domain using fallback by serving the files from a sub-path on the domain. (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2017-7808](https://cve.now/CVE-2017-7808.md): A content security policy (CSP) "frame-ancestors" directive containing origins with paths allows for comparisons against those paths instead (no CVSS, Mozilla Firefox) - [CVE-2017-7809](https://cve.now/CVE-2017-7809.md): A use-after-free vulnerability can occur when an editor DOM node is deleted prematurely during tree traversal while still bound to the docum (no CVSS) - [CVE-2017-7810](https://cve.now/CVE-2017-7810.md): Memory safety bugs were reported in Firefox 55 and Firefox ESR 52.3. (no CVSS, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2017-7811](https://cve.now/CVE-2017-7811.md): Memory safety bugs were reported in Firefox 55. (no CVSS, Mozilla Firefox) - [CVE-2017-7812](https://cve.now/CVE-2017-7812.md): If web content on a page is dragged onto portions of the browser UI, such as the tab bar, links can be opened that otherwise would not be al (no CVSS, Mozilla Firefox) - [CVE-2017-7813](https://cve.now/CVE-2017-7813.md): Inside the JavaScript parser, a cast of an integer to a narrower type can result in data read from outside the buffer being parsed. (no CVSS, Mozilla Firefox) - [CVE-2017-7814](https://cve.now/CVE-2017-7814.md): File downloads encoded with "blob:" and "data:" URL elements bypassed normal file download checks though the Phishing and Malware Protection (no CVSS, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2017-7815](https://cve.now/CVE-2017-7815.md): On pages containing an iframe, the "data:" protocol can be used to create a modal dialog through Javascript that will have an arbitrary doma (no CVSS, Mozilla Firefox) - [CVE-2017-7816](https://cve.now/CVE-2017-7816.md): WebExtensions could use popups and panels in the extension UI to load an "about:" privileged URL, violating security checks that disallow th (no CVSS, Mozilla Firefox) - [CVE-2017-7817](https://cve.now/CVE-2017-7817.md): A spoofing vulnerability can occur when a page switches to fullscreen mode without user notification, allowing a fake address bar to be disp (no CVSS, Mozilla Firefox) - [CVE-2017-7818](https://cve.now/CVE-2017-7818.md): A use-after-free vulnerability can occur when manipulating arrays of Accessible Rich Internet Applications (ARIA) elements within containers (no CVSS, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2017-7819](https://cve.now/CVE-2017-7819.md): A use-after-free vulnerability can occur in design mode when image objects are resized if objects referenced during the resizing have been f (no CVSS, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2017-7820](https://cve.now/CVE-2017-7820.md): The "instanceof" operator can bypass the Xray wrapper mechanism. (no CVSS, Mozilla Firefox) - [CVE-2017-7821](https://cve.now/CVE-2017-7821.md): A vulnerability where WebExtensions can download and attempt to open a file of some non-executable file types. (no CVSS, Mozilla Firefox) - [CVE-2017-7822](https://cve.now/CVE-2017-7822.md): The AES-GCM implementation in WebCrypto API accepts 0-length IV when it should require a length of 1 according to the NIST Special Publicati (no CVSS, Mozilla Firefox) - [CVE-2017-7823](https://cve.now/CVE-2017-7823.md): The content security policy (CSP) "sandbox" directive did not create a unique origin for the document, causing it to behave as if the "allow (no CVSS, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2017-7824](https://cve.now/CVE-2017-7824.md): A buffer overflow occurs when drawing and validating elements with the ANGLE graphics library, used for WebGL content. (no CVSS, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2017-7825](https://cve.now/CVE-2017-7825.md): Several fonts on OS X display some Tibetan and Arabic characters as whitespace. (no CVSS, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2017-7826](https://cve.now/CVE-2017-7826.md): Memory safety bugs were reported in Firefox 56 and Firefox ESR 52.4. (no CVSS, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2017-7827](https://cve.now/CVE-2017-7827.md): Memory safety bugs were reported in Firefox 56. (no CVSS, Mozilla Firefox) - [CVE-2017-7828](https://cve.now/CVE-2017-7828.md): A use-after-free vulnerability can occur when flushing and resizing layout because the "PressShell" object has been freed while still in use (no CVSS, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2017-7829](https://cve.now/CVE-2017-7829.md): It is possible to spoof the sender's email address and display an arbitrary sender address to the email recipient. (no CVSS, Mozilla Thunderbird) - [CVE-2017-7830](https://cve.now/CVE-2017-7830.md): The Resource Timing API incorrectly revealed navigations in cross-origin iframes. (no CVSS, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2017-7831](https://cve.now/CVE-2017-7831.md): A vulnerability where the security wrapper does not deny access to some exposed properties using the deprecated "\_exposedProps\_" mechanism o (no CVSS, Mozilla Firefox) - [CVE-2017-7832](https://cve.now/CVE-2017-7832.md): The combined, single character, version of the letter 'i' with any of the potential accents in unicode, such as acute or grave, can be spoof (no CVSS, Mozilla Firefox) - [CVE-2017-7833](https://cve.now/CVE-2017-7833.md): Some Arabic and Indic vowel marker characters can be combined with Latin characters in a domain name to eclipse the non-Latin character with (no CVSS, Mozilla Firefox) - [CVE-2017-7834](https://cve.now/CVE-2017-7834.md): A "data:" URL loaded in a new tab did not inherit the Content Security Policy (CSP) of the original page, allowing for bypasses of the polic (no CVSS, Mozilla Firefox) - [CVE-2017-7835](https://cve.now/CVE-2017-7835.md): Mixed content blocking of insecure (HTTP) sub-resources in a secure (HTTPS) document was not correctly applied for resources that redirect f (no CVSS, Mozilla Firefox) - [CVE-2017-7836](https://cve.now/CVE-2017-7836.md): The "pingsender" executable used by the Firefox Health Report dynamically loads a system copy of libcurl, which an attacker could replace. (no CVSS, Mozilla Firefox) - [CVE-2017-7837](https://cve.now/CVE-2017-7837.md): SVG loaded through "\" tags can use "\" tags within the SVG data to set cookies for that page. (no CVSS, Mozilla Firefox) - [CVE-2017-7838](https://cve.now/CVE-2017-7838.md): Punycode format text will be displayed for entire qualified international domain names in some instances when a sub-domain triggers the puny (no CVSS, Mozilla Firefox) - [CVE-2017-7839](https://cve.now/CVE-2017-7839.md): Control characters prepended before "javascript:" URLs pasted in the addressbar can cause the leading characters to be ignored and the paste (no CVSS, Mozilla Firefox) - [CVE-2017-7840](https://cve.now/CVE-2017-7840.md): JavaScript can be injected into an exported bookmarks file by placing JavaScript code into user-supplied tags in saved bookmarks. (no CVSS, Mozilla Firefox) - [CVE-2017-7842](https://cve.now/CVE-2017-7842.md): If a document's Referrer Policy attribute is set to "no-referrer" sometimes two network requests are made for "\" elements instead of o (no CVSS, Mozilla Firefox) - [CVE-2017-7843](https://cve.now/CVE-2017-7843.md): When Private Browsing mode is used, it is possible for a web worker to write persistent data to IndexedDB and fingerprint a user uniquely. (no CVSS, Mozilla Firefox ESR · Mozilla Firefox) - [CVE-2017-7844](https://cve.now/CVE-2017-7844.md): A combination of an external SVG image referenced on a page and the coloring of anchor links stored within this image can be used to determi (no CVSS, Mozilla Firefox) - [CVE-2017-7845](https://cve.now/CVE-2017-7845.md): A buffer overflow occurs when drawing and validating elements using Direct 3D 9 with the ANGLE graphics library, used for WebGL content. (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2017-7846](https://cve.now/CVE-2017-7846.md): It is possible to execute JavaScript in the parsed RSS feed when RSS feed is viewed as a website, e.g. (no CVSS, Mozilla Thunderbird) - [CVE-2017-7847](https://cve.now/CVE-2017-7847.md): Crafted CSS in an RSS feed can leak and reveal local path strings, which may contain user name. (no CVSS, Mozilla Thunderbird) - [CVE-2017-7848](https://cve.now/CVE-2017-7848.md): RSS fields can inject new lines into the created email structure, modifying the message body. (no CVSS, Mozilla Thunderbird) - [CVE-2018-5089](https://cve.now/CVE-2018-5089.md): Memory safety bugs were reported in Firefox 57 and Firefox ESR 52.5. (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2018-5090](https://cve.now/CVE-2018-5090.md): Memory safety bugs were reported in Firefox 57. (no CVSS, Mozilla Firefox) - [CVE-2018-5091](https://cve.now/CVE-2018-5091.md): A use-after-free vulnerability can occur during WebRTC connections when interacting with the DTMF timers. (no CVSS, Mozilla Firefox ESR · Mozilla Firefox) - [CVE-2018-5092](https://cve.now/CVE-2018-5092.md): A use-after-free vulnerability can occur when the thread for a Web Worker is freed from memory prematurely instead of from memory in the mai (no CVSS, Mozilla Firefox) - [CVE-2018-5093](https://cve.now/CVE-2018-5093.md): A heap buffer overflow vulnerability may occur in WebAssembly during Memory/Table resizing, resulting in a potentially exploitable crash. (no CVSS, Mozilla Firefox) - [CVE-2018-5094](https://cve.now/CVE-2018-5094.md): A heap buffer overflow vulnerability may occur in WebAssembly when "shrinkElements" is called followed by garbage collection on memory that (no CVSS, Mozilla Firefox) - [CVE-2018-5095](https://cve.now/CVE-2018-5095.md): An integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with at least 8 GB of RAM. (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2018-5096](https://cve.now/CVE-2018-5096.md): A use-after-free vulnerability can occur while editing events in form elements on a page, resulting in a potentially exploitable crash. (no CVSS, Mozilla Firefox ESR · Mozilla Thunderbird) - [CVE-2018-5097](https://cve.now/CVE-2018-5097.md): A use-after-free vulnerability can occur during XSL transformations when the source document for the transformation is manipulated by script (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2018-5098](https://cve.now/CVE-2018-5098.md): A use-after-free vulnerability can occur when form input elements, focus, and selections are manipulated by script content. (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2018-5099](https://cve.now/CVE-2018-5099.md): A use-after-free vulnerability can occur when the widget listener is holding strong references to browser objects that have previously been (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2018-5100](https://cve.now/CVE-2018-5100.md): A use-after-free vulnerability can occur when arguments passed to the "IsPotentiallyScrollable" function are freed while still in use by scr (no CVSS, Mozilla Firefox) - [CVE-2018-5101](https://cve.now/CVE-2018-5101.md): A use-after-free vulnerability can occur when manipulating floating "first-letter" style elements, resulting in a potentially exploitable cr (no CVSS, Mozilla Firefox) - [CVE-2018-5102](https://cve.now/CVE-2018-5102.md): A use-after-free vulnerability can occur when manipulating HTML media elements with media streams, resulting in a potentially exploitable cr (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2018-5103](https://cve.now/CVE-2018-5103.md): A use-after-free vulnerability can occur during mouse event handling due to issues with multiprocess support. (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2018-5104](https://cve.now/CVE-2018-5104.md): A use-after-free vulnerability can occur during font face manipulation when a font face is freed while still in use, resulting in a potentia (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2018-5105](https://cve.now/CVE-2018-5105.md): WebExtensions can bypass user prompts to first save and then open an arbitrarily downloaded file. (no CVSS, Mozilla Firefox) - [CVE-2018-5106](https://cve.now/CVE-2018-5106.md): Style editor traffic in the Developer Tools can be routed through a service worker hosted on a third party website if a user selects error l (no CVSS, Mozilla Firefox) - [CVE-2018-5107](https://cve.now/CVE-2018-5107.md): The printing process can bypass local access protections to read files available through symlinks, bypassing local file restrictions. (no CVSS, Mozilla Firefox) - [CVE-2018-5108](https://cve.now/CVE-2018-5108.md): A Blob URL can violate origin attribute segregation, allowing it to be accessed from a private browsing tab and for data to be passed betwee (no CVSS, Mozilla Firefox) - [CVE-2018-5109](https://cve.now/CVE-2018-5109.md): An audio capture session can started under an incorrect origin from the site making the capture request. (no CVSS, Mozilla Firefox) - [CVE-2018-5110](https://cve.now/CVE-2018-5110.md): If cursor visibility is toggled by script using from 'none' to an image and back through script, the cursor will be rendered temporarily inv (no CVSS, Mozilla Firefox) - [CVE-2018-5111](https://cve.now/CVE-2018-5111.md): When the text of a specially formatted URL is dragged to the addressbar from page content, the displayed URL can be spoofed to show a differ (no CVSS, Mozilla Firefox) - [CVE-2018-5112](https://cve.now/CVE-2018-5112.md): Development Tools panels of an extension are required to load URLs for the panels as relative URLs from the extension manifest file but this (no CVSS, Mozilla Firefox) - [CVE-2018-5113](https://cve.now/CVE-2018-5113.md): The "browser.identity.launchWebAuthFlow" function of WebExtensions is only allowed to load content over "https:" but this requirement was no (no CVSS, Mozilla Firefox) - [CVE-2018-5114](https://cve.now/CVE-2018-5114.md): If an existing cookie is changed to be "HttpOnly" while a document is open, the original value remains accessible through script until that (no CVSS, Mozilla Firefox) - [CVE-2018-5115](https://cve.now/CVE-2018-5115.md): If an HTTP authentication prompt is triggered by a background network request from a page or extension, it is displayed over the currently l (no CVSS, Mozilla Firefox) - [CVE-2018-5116](https://cve.now/CVE-2018-5116.md): WebExtensions with the "ActiveTab" permission are able to access frames hosted within the active tab even if the frames are cross-origin. (no CVSS, Mozilla Firefox) - [CVE-2018-5117](https://cve.now/CVE-2018-5117.md): If right-to-left text is used in the addressbar with left-to-right alignment, it is possible in some circumstances to scroll this text to sp (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2018-5118](https://cve.now/CVE-2018-5118.md): The screenshot images displayed in the Activity Stream page displayed when a new tab is opened is created from the meta tags of websites. (no CVSS, Mozilla Firefox) - [CVE-2018-5119](https://cve.now/CVE-2018-5119.md): The reader view will display cross-origin content when CORS headers are set to prohibit the loading of cross-origin content by a site. (no CVSS, Mozilla Firefox) - [CVE-2018-5121](https://cve.now/CVE-2018-5121.md): Low descenders on some Tibetan characters in several fonts on OS X are clipped when rendered in the addressbar. (no CVSS, Mozilla Firefox) - [CVE-2018-5122](https://cve.now/CVE-2018-5122.md): A potential integer overflow in the "DoCrypt" function of WebCrypto was identified. (no CVSS, Mozilla Firefox) - [CVE-2018-5125](https://cve.now/CVE-2018-5125.md): Memory safety bugs were reported in Firefox 58 and Firefox ESR 52.6. (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2018-5126](https://cve.now/CVE-2018-5126.md): Memory safety bugs were reported in Firefox 58. (no CVSS, Mozilla Firefox) - [CVE-2018-5127](https://cve.now/CVE-2018-5127.md): A buffer overflow can occur when manipulating the SVG "animatedPathSegList" through script. (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2018-5128](https://cve.now/CVE-2018-5128.md): A use-after-free vulnerability can occur when manipulating elements, events, and selection ranges during editor operations. (no CVSS, Mozilla Firefox) - [CVE-2018-5129](https://cve.now/CVE-2018-5129.md): A lack of parameter validation on IPC messages results in a potential out-of-bounds write through malformed IPC messages. (no CVSS, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2018-5130](https://cve.now/CVE-2018-5130.md): When packets with a mismatched RTP payload type are sent in WebRTC connections, in some circumstances a potentially exploitable crash is tri (no CVSS, Mozilla Firefox ESR · Mozilla Firefox) - [CVE-2018-5131](https://cve.now/CVE-2018-5131.md): Under certain circumstances the "fetch()" API can return transient local copies of resources that were sent with a "no-store" or "no-cache" (no CVSS, Mozilla Firefox ESR · Mozilla Firefox) - [CVE-2018-5132](https://cve.now/CVE-2018-5132.md): The Find API for WebExtensions can search some privileged pages, such as "about:debugging", if these pages are open in a tab. (no CVSS, Mozilla Firefox) - [CVE-2018-5133](https://cve.now/CVE-2018-5133.md): If the "app.support.baseURL" preference is changed by a malicious local program to contain HTML and script content, this content is not sani (no CVSS, Mozilla Firefox) - [CVE-2018-5134](https://cve.now/CVE-2018-5134.md): WebExtensions may use "view-source:" URLs to view local "file:" URL content, as well as content stored in "about:cache", bypassing restricti (no CVSS, Mozilla Firefox) - [CVE-2018-5135](https://cve.now/CVE-2018-5135.md): WebExtensions can bypass normal restrictions in some circumstances and use "browser.tabs.executeScript" to inject scripts into contexts wher (no CVSS, Mozilla Firefox) - [CVE-2018-5136](https://cve.now/CVE-2018-5136.md): A shared worker created from a "data:" URL in one tab can be shared by another tab with a different origin, bypassing the same-origin policy (no CVSS, Mozilla Firefox) - [CVE-2018-5137](https://cve.now/CVE-2018-5137.md): A legacy extension's non-contentaccessible, defined resources can be loaded by an arbitrary web page through script. (no CVSS, Mozilla Firefox) - [CVE-2018-5138](https://cve.now/CVE-2018-5138.md): A spoofing vulnerability can occur when a malicious site with an extremely long domain name is opened in an Android Custom Tab (a browser pa (no CVSS, Mozilla Firefox) - [CVE-2018-5140](https://cve.now/CVE-2018-5140.md): Image for moz-icons can be accessed through the "moz-icon:" protocol through script in web content even when otherwise prohibited. (no CVSS, Mozilla Firefox) - [CVE-2018-5141](https://cve.now/CVE-2018-5141.md): A vulnerability in the notifications Push API where notifications can be sent through service workers by web content without direct user int (no CVSS, Mozilla Firefox) - [CVE-2018-5142](https://cve.now/CVE-2018-5142.md): If Media Capture and Streams API permission is requested from documents with "data:" or "blob:" URLs, the permission notifications do not pr (no CVSS, Mozilla Firefox) - [CVE-2018-5143](https://cve.now/CVE-2018-5143.md): URLs using "javascript:" have the protocol removed when pasted into the addressbar to protect users from cross-site scripting (XSS) attacks, (no CVSS, Mozilla Firefox) - [CVE-2018-5144](https://cve.now/CVE-2018-5144.md): An integer overflow can occur during conversion of text to some Unicode character sets due to an unchecked length parameter. (no CVSS, Mozilla Firefox ESR · Mozilla Thunderbird) - [CVE-2018-5145](https://cve.now/CVE-2018-5145.md): Memory safety bugs were reported in Firefox ESR 52.6. (no CVSS, Mozilla Firefox ESR · Mozilla Thunderbird) - [CVE-2018-5146](https://cve.now/CVE-2018-5146.md): An out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own contest. (no CVSS, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2018-5147](https://cve.now/CVE-2018-5147.md): The libtremor library has the same flaw as CVE-2018-5146. (no CVSS, Mozilla Firefox ESR · Mozilla Firefox) - [CVE-2018-5148](https://cve.now/CVE-2018-5148.md): A use-after-free vulnerability can occur in the compositor during certain graphics operations when a raw pointer is used instead of a refere (no CVSS, Mozilla Firefox ESR · Mozilla Firefox) - [CVE-2018-5150](https://cve.now/CVE-2018-5150.md): Memory safety bugs were reported in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7. (no CVSS, Mozilla Thunderbird · Mozilla Firefox) - [CVE-2018-5151](https://cve.now/CVE-2018-5151.md): Memory safety bugs were reported in Firefox 59. (no CVSS, Mozilla Firefox) - [CVE-2018-5152](https://cve.now/CVE-2018-5152.md): WebExtensions with the appropriate permissions can attach content scripts to Mozilla sites such as accounts.firefox.com and listen to networ (no CVSS, Mozilla Firefox) - [CVE-2018-5153](https://cve.now/CVE-2018-5153.md): If websocket data is sent with mixed text and binary in a single message, the binary data can be corrupted. (no CVSS, Mozilla Firefox) - [CVE-2018-5154](https://cve.now/CVE-2018-5154.md): A use-after-free vulnerability can occur while enumerating attributes during SVG animations with clip paths. (no CVSS, Mozilla Thunderbird · Mozilla Firefox) - [CVE-2018-5155](https://cve.now/CVE-2018-5155.md): A use-after-free vulnerability can occur while adjusting layout during SVG animations with text paths. (no CVSS, Mozilla Thunderbird · Mozilla Firefox) - [CVE-2018-5157](https://cve.now/CVE-2018-5157.md): Same-origin protections for the PDF viewer can be bypassed, allowing a malicious site to intercept messages meant for the viewer. (no CVSS, Mozilla Firefox ESR · Mozilla Firefox) - [CVE-2018-5158](https://cve.now/CVE-2018-5158.md): The PDF viewer does not sufficiently sanitize PostScript calculator functions, allowing malicious JavaScript to be injected through a crafte (no CVSS, Mozilla Firefox ESR · Mozilla Firefox +1) - [CVE-2018-5159](https://cve.now/CVE-2018-5159.md): An integer overflow can occur in the Skia library due to 32-bit integer use in an array without integer overflow checks, resulting in possib (no CVSS, Mozilla Thunderbird · Mozilla Firefox) - [CVE-2018-5160](https://cve.now/CVE-2018-5160.md): WebRTC can use a "WrappedI420Buffer" pixel buffer but the owning image object can be freed while it is still in use. (no CVSS, Mozilla Firefox) - [CVE-2018-5161](https://cve.now/CVE-2018-5161.md): Crafted message headers can cause a Thunderbird process to hang on receiving the message. (no CVSS, Mozilla Thunderbird ESR · Mozilla Thunderbird) - [CVE-2018-5162](https://cve.now/CVE-2018-5162.md): Plaintext of decrypted emails can leak through the src attribute of remote images, or links. (no CVSS, Mozilla Thunderbird ESR · Mozilla Thunderbird) - [CVE-2018-5163](https://cve.now/CVE-2018-5163.md): If a malicious attacker has used another vulnerability to gain full control over a content process, they may be able to replace the alternat (no CVSS, Mozilla Firefox) - [CVE-2018-5164](https://cve.now/CVE-2018-5164.md): Content Security Policy (CSP) is not applied correctly to all parts of multipart content sent with the "multipart/x-mixed-replace" MIME type (no CVSS, Mozilla Firefox) - [CVE-2018-5165](https://cve.now/CVE-2018-5165.md): In 32-bit versions of Firefox, the Adobe Flash plugin setting for "Enable Adobe Flash protected mode" is unchecked by default even though th (no CVSS, Mozilla Firefox) - [CVE-2018-5166](https://cve.now/CVE-2018-5166.md): WebExtensions can use request redirection and a "filterReponseData" filter to bypass host permission settings to redirect network traffic an (no CVSS, Mozilla Firefox) - [CVE-2018-5167](https://cve.now/CVE-2018-5167.md): The web console and JavaScript debugger do not sanitize all output that can be hyperlinked. (no CVSS, Mozilla Firefox) - [CVE-2018-5168](https://cve.now/CVE-2018-5168.md): Sites can bypass security checks on permissions to install lightweight themes by manipulating the "baseURI" property of the theme element. (no CVSS, Mozilla Thunderbird · Mozilla Firefox) - [CVE-2018-5169](https://cve.now/CVE-2018-5169.md): If manipulated hyperlinked text with "chrome:" URL contained in it is dragged and dropped on the "home" icon, the home page can be reset to (no CVSS, Mozilla Firefox) - [CVE-2018-5170](https://cve.now/CVE-2018-5170.md): It is possible to spoof the filename of an attachment and display an arbitrary attachment name. (no CVSS, Mozilla Thunderbird ESR · Mozilla Thunderbird) - [CVE-2018-5172](https://cve.now/CVE-2018-5172.md): The Live Bookmarks page and the PDF viewer can run injected script content if a user pastes script from the clipboard into them while viewin (no CVSS, Mozilla Firefox) - [CVE-2018-5173](https://cve.now/CVE-2018-5173.md): The filename appearing in the "Downloads" panel improperly renders some Unicode characters, allowing for the file name to be spoofed. (no CVSS, Mozilla Firefox) - [CVE-2018-5174](https://cve.now/CVE-2018-5174.md): In the Windows 10 April 2018 Update, Windows Defender SmartScreen honors the "SEE\_MASK\_FLAG\_NO\_UI" flag associated with downloaded files and (no CVSS, Mozilla Thunderbird · Mozilla Firefox) - [CVE-2018-5175](https://cve.now/CVE-2018-5175.md): A mechanism to bypass Content Security Policy (CSP) protections on sites that have a "script-src" policy of "'strict-dynamic'". (no CVSS, Mozilla Firefox) - [CVE-2018-5176](https://cve.now/CVE-2018-5176.md): The JSON Viewer displays clickable hyperlinks for strings that are parseable as URLs, including "javascript:" links. (no CVSS, Mozilla Firefox) - [CVE-2018-5177](https://cve.now/CVE-2018-5177.md): A vulnerability exists in XSLT during number formatting where a negative buffer size may be allocated in some instances, leading to a buffer (no CVSS, Mozilla Firefox) - [CVE-2018-5178](https://cve.now/CVE-2018-5178.md): A buffer overflow was found during UTF8 to Unicode string conversion within JavaScript with extremely large amounts of data. (no CVSS, Mozilla Thunderbird ESR · Mozilla Thunderbird +1) - [CVE-2018-5180](https://cve.now/CVE-2018-5180.md): A use-after-free vulnerability can occur during WebGL operations. (no CVSS, Mozilla Firefox) - [CVE-2018-5181](https://cve.now/CVE-2018-5181.md): If a URL using the "file:" protocol is dragged and dropped onto an open tab that is running in a different child process the tab will open a (no CVSS, Mozilla Firefox) - [CVE-2018-5182](https://cve.now/CVE-2018-5182.md): If a text string that happens to be a filename in the operating system's native format is dragged and dropped onto the addressbar the specif (no CVSS, Mozilla Firefox) - [CVE-2018-5183](https://cve.now/CVE-2018-5183.md): Mozilla developers backported selected changes in the Skia library. (no CVSS, Mozilla Thunderbird ESR · Mozilla Thunderbird +1) - [CVE-2018-5184](https://cve.now/CVE-2018-5184.md): Using remote content in encrypted messages can lead to the disclosure of plaintext. (no CVSS, Mozilla Thunderbird ESR · Mozilla Thunderbird) - [CVE-2018-5185](https://cve.now/CVE-2018-5185.md): Plaintext of decrypted emails can leak through by user submitting an embedded form. (no CVSS, Mozilla Thunderbird ESR · Mozilla Thunderbird) - [CVE-2018-6512](https://cve.now/CVE-2018-6512.md): The previous version of Puppet Enterprise 2018.1 is vulnerable to unsafe code execution when upgrading pe-razor-server. (no CVSS, Puppet Enterprise 2018.1.x prior to 2018.1.1, razor-server…) - [CVE-2018-6513](https://cve.now/CVE-2018-6513.md): Puppet Enterprise 2016.4.x prior to 2016.4.12, Puppet Enterprise 2017.3.x prior to 2017.3.7, Puppet Enterprise 2018.1.x prior to 2018.1.1, P (no CVSS, Puppet Enterprise and Puppet Agent) - [CVE-2018-6514](https://cve.now/CVE-2018-6514.md): In Puppet Agent 1.10.x prior to 1.10.13, Puppet Agent 5.3.x prior to 5.3.7, Puppet Agent 5.5.x prior to 5.5.2, Facter on Windows is vulnerab (no CVSS, Puppet Agent) - [CVE-2018-6515](https://cve.now/CVE-2018-6515.md): Puppet Agent 1.10.x prior to 1.10.13, Puppet Agent 5.3.x prior to 5.3.7, and Puppet Agent 5.5.x prior to 5.5.2 on Windows only, with a speci (no CVSS, Puppet Agent) - [CVE-2017-3199](https://cve.now/CVE-2017-3199.md): GraniteDS, version 3.1.1.GA, Action Message Format (AMF3) Java implementation is vulnerable to insecure deserialization (no CVSS, GraniteDS Framework · org.graniteds:granite-core) - [CVE-2017-3200](https://cve.now/CVE-2017-3200.md): The implementation of Action Message Format (AMF3) deserializers in GraniteDS, version 3.1.1.GA, may allow instantiation of arbitrary classes due to improper code control (no CVSS, GraniteDS Framework · org.graniteds:granite-server-core) - [CVE-2017-3201](https://cve.now/CVE-2017-3201.md): Flamingo amf-serializer by Exadel, version 2.2.0, Action Message Format (AMF3) Java implementation is vulnerable to insecure deserialization (no CVSS, Exadel Flamingo amf-serializer) - [CVE-2017-3202](https://cve.now/CVE-2017-3202.md): The implementation of Action Message Format (AMF3) deserializers in Flamingo amf-serializer by Exadel, version 2.2.0, may allow instantiation of arbitrary classes due to improper code control (no CVSS, Exadel Flamingo amf-serializer · com.exadel.flamingo.flex:a…) - [CVE-2017-3203](https://cve.now/CVE-2017-3203.md): Pivotal/Spring Spring-flex's Action Message Format (AMF3) Java implementation is vulnerable to insecure deserialization (no CVSS, Pivotal/Spring Spring-flex · org.springframework.flex:sprin…) - [CVE-2017-3206](https://cve.now/CVE-2017-3206.md): The Action Message Format (AMF3) deserializers used by Flamingo amf-serializer by Exadel, version 2.2.0, allows external entity references (XXEs) from XML documents embedded within AMF3 messages (no CVSS, Exadel Flamingo amf-serializer) - [CVE-2017-3207](https://cve.now/CVE-2017-3207.md): WebORB for Java by Midnight Coders, version 5.1.1.0, Action Message Format (AMF3) Java implementation is vulnerable to insecure deserialization (no CVSS, Midnight Coders WebORB for Java) - [CVE-2017-3208](https://cve.now/CVE-2017-3208.md): The Java implementation of AMF3 deserializers used by WebORB for Java by Midnight Coders, version 5.1.1.0, allows external entity references (no CVSS) - [CVE-2011-4181](https://cve.now/CVE-2011-4181.md): open build service information leak via unauthorized source access (CVSS 4.3, SUSE open build service) - [CVE-2018-12112](https://cve.now/CVE-2018-12112.md): md\_build\_attribute in md4c.c in md4c 0.2.6 allows remote attackers to cause a denial of service (Segmentation fault and application crash) o (no CVSS) - [CVE-2018-12102](https://cve.now/CVE-2018-12102.md): md4c 0.2.6 has a NULL pointer dereference in the function md\_process\_line in md4c.c, related to ctx-\>current\_block. (no CVSS) - [CVE-2018-12108](https://cve.now/CVE-2018-12108.md): An issue was discovered in Dropbox Lepton 1.2.1. (no CVSS) - [CVE-2018-12109](https://cve.now/CVE-2018-12109.md): An issue was discovered in Free Lossless Image Format (FLIF) 0.3. (no CVSS) - [CVE-2018-12110](https://cve.now/CVE-2018-12110.md): portfolioCMS 1.0.5 has SQL Injection via the admin/portfolio.php preview parameter. (no CVSS) - [CVE-2018-12111](https://cve.now/CVE-2018-12111.md): Cross-site scripting (XSS) vulnerability in the Canon PrintMe EFI webinterface allows remote attackers to inject arbitrary web script or HTM (no CVSS) - [CVE-2018-12092](https://cve.now/CVE-2018-12092.md): tinyexr 0.9.5 has a heap-based buffer over-read in tinyexr::DecodePixelData in tinyexr.h, related to OpenEXR code. (no CVSS) - [CVE-2018-12093](https://cve.now/CVE-2018-12093.md): tinyexr 0.9.5 has a memory leak in ParseEXRHeaderFromMemory in tinyexr.h. (no CVSS) - [CVE-2018-12094](https://cve.now/CVE-2018-12094.md): Cross-site scripting (XSS) vulnerability in news.php in Dimofinf CMS Version 3.0.0 allows remote attackers to inject arbitrary web script or (no CVSS) - [CVE-2018-12095](https://cve.now/CVE-2018-12095.md): A Reflected Cross-Site Scripting web vulnerability has been discovered in the OEcms v3.1 web-application. (no CVSS) - [CVE-2018-12099](https://cve.now/CVE-2018-12099.md): Grafana before 5.2.0-beta1 has XSS vulnerabilities in dashboard links. (no CVSS, github.com/grafana/grafana) - [CVE-2018-12100](https://cve.now/CVE-2018-12100.md): Sonatype Nexus Repository Manager versions 3.x before 3.12.0 has XSS in multiple areas in the Administration UI. (no CVSS) - [CVE-2018-10360](https://cve.now/CVE-2018-10360.md): The do\_core\_note function in readelf.c in libmagic.a in file 5.33 allows remote attackers to cause a denial of service (out-of-bounds read a (no CVSS) - [CVE-2018-12025](https://cve.now/CVE-2018-12025.md): The transferFrom function of a smart contract implementation for FuturXE (FXE), an Ethereum ERC20 token, allows attackers to accomplish an u (no CVSS) - [CVE-2018-12089](https://cve.now/CVE-2018-12089.md): In Octopus Deploy version 2018.5.1 to 2018.5.7, a user with Task View is able to view a password for a Service Fabric Cluster, when the Serv (no CVSS) - [CVE-2018-12090](https://cve.now/CVE-2018-12090.md): There is unauthenticated reflected cross-site scripting (XSS) in LAMS before 3.1 that allows a remote attacker to introduce arbitrary JavaSc (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2018-06-11 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.