CVEs published December 22, 2022
218 CVEs were published on December 22, 2022: 23 critical, 80 high. 2 are now in CISA KEV.
- Published
- 218
- Critical
- 23
- High
- 80
- Medium
- 112
- Low
- 1
- Unrated
- 2
- Now in CISA KEV
- 2
- Fix available
- 193
Most affected products
- Mozilla Firefox
- 55
- Mozilla Firefox · Mozilla Thunderbird
- 31
- Mozilla Firefox ESR · Mozilla Thunderbird +1
- 22
- Mozilla Firefox ESR · Mozilla Firefox +1
- 21
- Mozilla Thunderbird · Mozilla Firefox
- 14
- Mozilla Thunderbird
- 13
- Mozilla Thunderbird · Mozilla Firefox ESR +1
- 9
- IBM Security Verify Governance, Identity Manager
- 6
- IBM Navigator for i
- 4
- auth0 node-jsonwebtoken · jsonwebtoken
- 3
Critical 23
- CVE-2022-45347Apache ShardingSphere-Proxy: MySQL authentication bypassApache Software Foundation Apache ShardingSphere-Proxy · or…
- CVE-2021-4127An out of date graphics library (Angle) likely contained vulnerabilities that could potentially be exploited.Mozilla Thunderbird · Mozilla Firefox ESR
- CVE-2021-4129Mozilla developers and community members Julian Hector, Randell Jesup, Gabriele Svelto, Tyson Smith, Christian Holler, and Masayuki Nakano rMozilla Firefox · Mozilla Thunderbird
- CVE-2021-4140It was possible to construct specific XSLT markup that would be able to bypass an iframe sandbox.Mozilla Firefox ESR · Mozilla Firefox +1
- CVE-2022-1887The search term could have been specified externally to trigger SQL injection.Mozilla Firefox for iOS
- CVE-2022-22759If a document created a sandboxed iframe without <code>allow-scripts</code>, and subsequently appended an element to the iframe's document tMozilla Firefox · Mozilla Thunderbird
- CVE-2022-26384If an attacker could control the contents of an iframe sandboxed with <code>allow-popups</code> but not <code>allow-scripts</code>, they werMozilla Firefox · Mozilla Thunderbird
- CVE-2022-26486An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape.Mozilla Firefox · Mozilla Thunderbird +1
- CVE-2022-29917Mozilla developers Andrew McCreight, Gabriele Svelto, Tom Ritter and the Mozilla Fuzzing Team reported memory safety bugs present in FirefoxMozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2022-31736A malicious website could have learned the size of a cross-origin resource that supported Range requests.Mozilla Thunderbird · Mozilla Firefox
- CVE-2022-31737A malicious webpage could have caused an out-of-bounds write in WebGL, leading to memory corruption and a potentially exploitable crash.Mozilla Thunderbird · Mozilla Firefox
- CVE-2022-31747Mozilla developers Andrew McCreight, Nicolas B.Mozilla Thunderbird · Mozilla Firefox
- CVE-2022-31748Mozilla developers Gabriele Svelto, Timothy Nikkel, Randell Jesup, Jon Coppeard, and the Mozilla Fuzzing Team reported memory safety bugs prMozilla Firefox
- CVE-2022-34470Session history navigations may have led to a use-after-free and potentially exploitable crash.Mozilla Firefox · Mozilla Thunderbird
- CVE-2022-34476ASN.1 parsing of an indefinite SEQUENCE inside an indefinite GROUP could have resulted in the parser accepting malformed ASN.1.Mozilla Firefox
- CVE-2022-34485Mozilla developers Bryce Seager van Dyk and the Mozilla Fuzzing Team reported potential vulnerabilities present in Firefox 101.Mozilla Firefox
- CVE-2022-36320Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 102.Mozilla Firefox
- CVE-2022-45406If an out-of-memory condition occurred when creating a JavaScript global, a JavaScript realm may be deleted while references to it lived on Mozilla Firefox ESR · Mozilla Thunderbird +1
- CVE-2022-45966here is an arbitrary file upload vulnerability in the file management function module of Classcms3.5.
- CVE-2022-46102AyaCMS 3.1.2 is vulnerable to Arbitrary file upload via /aya/module/admin/fst_down.inc.php
- CVE-2022-46493Default version of nbnbk was discovered to contain an arbitrary file upload vulnerability via the component /api/User/download_img.
- CVE-2022-46882A use-after-free in WebGL extensions could have led to a potentially exploitable crash.Mozilla Firefox · Mozilla Thunderbird
- CVE-2022-47926AyaCMS 3.1.2 is vulnerable to file deletion via /aya/module/admin/fst_del.inc.php
High 80
- CVE-2022-45798A link following vulnerability in the Damage Cleanup Engine component of Trend Micro Apex One and Trend Micro Apex One as a Service could alTrend Micro Apex One
- CVE-2022-3805Jeg Elementor Kit <= 2.5.6 - Unauthenticated Authorization Bypassjegtheme Jeg Kit for Elementor – Powerful Addons for Elemen…
- CVE-2022-46170CodeIgniter is vulnerable to improper authentication via Session HandlersCodeIgniter4 · codeigniter4/framework
- CVE-2022-38658HCL BigFix Server Automation (SA) is affected by a security vulnerability around Notification Service HCL Software BigFix Server Automation
- CVE-2022-23556CodeIgniter is vulnerable to IP address spoofing when using proxyCodeIgniter4 · codeigniter4/framework
- CVE-2020-15679An OAuth session fixation vulnerability existed in the VPN login flow, where an attacker could craft a custom login URL, convince a VPN userMozilla VPN iOS · Mozilla VPN Windows +1
- CVE-2020-15685During the plaintext phase of the STARTTLS connection setup, protocol commands could have been injected and evaluated within the encrypted sMozilla Thunderbird
- CVE-2022-0511Mozilla developers and community members Gabriele Svelto, Sebastian Hengst, Randell Jesup, Luan Herrera, Lars T Hansen, and the Mozilla FuzzMozilla Firefox
- CVE-2022-0517Mozilla VPN can load an OpenSSL configuration file from an unsecured directory.Mozilla VPN
- CVE-2022-0566It may be possible for an attacker to craft an email message that causes Thunderbird to perform an out-of-bounds write of one byte when procMozilla Thunderbird
- CVE-2022-0843Mozilla developers Kershaw Chang, Ryan VanderMeulen, and Randell Jesup reported memory safety bugs present in Firefox 97.Mozilla Firefox
- CVE-2022-1529An attacker could have sent a message to the parent process where the contents were used to double-index into a JavaScript object, leading tMozilla Firefox ESR · Mozilla Firefox +1
- CVE-2022-1802If an attacker was able to corrupt the methods of an Array object in JavaScript via prototype pollution, they could have achieved execution Mozilla Firefox ESR · Mozilla Firefox +1
- CVE-2022-2200If an object prototype was corrupted by an attacker, they would have been able to set undesired attributes on a JavaScript object, leading tMozilla Firefox · Mozilla Thunderbird
- CVE-2022-22736If Firefox was installed to a world-writable directory, a local privilege escalation could occur when Firefox searched the current directoryMozilla Firefox
- CVE-2022-22737Constructing audio sinks could have lead to a race condition when playing audio files and closing windows.Mozilla Firefox ESR · Mozilla Firefox +1
- CVE-2022-22738Applying a CSS filter effect could have accessed out of bounds memory.Mozilla Firefox ESR · Mozilla Firefox +1
- CVE-2022-22740Certain network request objects were freed too early when releasing a network request handle.Mozilla Firefox ESR · Mozilla Firefox +1
- CVE-2022-22741When resizing a popup while requesting fullscreen access, the popup would have become unable to leave fullscreen mode.Mozilla Firefox ESR · Mozilla Firefox +1
- CVE-2022-22744The constructed curl command from the "Copy as curl" feature in DevTools was not properly escaped for PowerShell.Mozilla Firefox ESR · Mozilla Firefox +1
- CVE-2022-22751Mozilla developers Calixte Denizet, Kershaw Chang, Christian Holler, Jason Kratzer, Gabriele Svelto, Tyson Smith, Simon Giesecke, and Steve Mozilla Firefox ESR · Mozilla Firefox +1
- CVE-2022-22752Mozilla developers Christian Holler and Jason Kratzer reported memory safety bugs present in Firefox 95.Mozilla Firefox
- CVE-2022-22753A Time-of-Check Time-of-Use bug existed in the Maintenance (Updater) Service that could be abused to grant Users write access to an arbitrarMozilla Firefox · Mozilla Thunderbird
- CVE-2022-22755By using XSL Transforms, a malicious webserver could have served a user an XSL document that would continue to execute JavaScript (within thMozilla Firefox
- CVE-2022-22756If a user was convinced to drag and drop an image to their desktop or other folder, the resulting object could have been changed into an exeMozilla Firefox · Mozilla Thunderbird
- CVE-2022-22758When clicking on a tel: link, USSD codes, specified after a <code>\*</code> character, would be included in the phone number.Mozilla Firefox
- CVE-2022-22761Web-accessible extension pages (pages with a moz-extension:// scheme) were not correctly enforcing the frame-ancestors directive when it wasMozilla Firefox · Mozilla Thunderbird
- CVE-2022-22763When a worker is shutdown, it was possible to cause script to run late in the lifecycle, at a point after where it should not be possible.Mozilla Firefox · Mozilla Thunderbird
- CVE-2022-22764Mozilla developers Paul Adenot and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 96 and Firefox ESR 91.5.Mozilla Firefox · Mozilla Thunderbird
- CVE-2022-2505Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 102.Mozilla Firefox ESR · Mozilla Firefox +1
- CVE-2022-26381An attacker could have caused a use-after-free by forcing a text reflow in an SVG object leading to a potentially exploitable crash.Mozilla Firefox · Mozilla Thunderbird
- CVE-2022-26387When installing an add-on, Firefox verified the signature before prompting the user; but while the user was confirming the prompt, the underMozilla Firefox · Mozilla Thunderbird
- CVE-2022-26485Removing an XSLT parameter during processing could have lead to an exploitable use-after-free.Mozilla Firefox · Mozilla Thunderbird +1
- CVE-2022-28281If a compromised content process sent an unexpected number of WebAuthN Extensions in a Register command to the parent process, an out of bouMozilla Thunderbird · Mozilla Firefox
- CVE-2022-28284SVG's <code><use></code> element could have been used to load unexpected content that could have executed script in certain circumstanMozilla Firefox
- CVE-2022-28288Mozilla developers and community members Randell Jesup, Sebastian Hengst, and the Mozilla Fuzzing Team reported memory safety bugs present iMozilla Firefox
- CVE-2022-28289Mozilla developers and community members Nika Layzell, Andrew McCreight, Gabriele Svelto, and the Mozilla Fuzzing Team reported memory safetMozilla Thunderbird · Mozilla Firefox
- CVE-2022-29909Documents in deeply-nested cross-origin browsing contexts could have obtained permissions granted to the top-level origin, bypassing the exiMozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2022-29918Mozilla developers Gabriele Svelto, Randell Jesup and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 99.Mozilla Firefox
- CVE-2022-3033If a Thunderbird user replied to a crafted HTML email containing a <code>meta</code> tag, with the <code>meta</code> tag having the <code>htMozilla Thunderbird
- CVE-2022-3155When saving or opening an email attachment on macOS, Thunderbird did not set attribute com.apple.quarantine on the received file.Mozilla Thunderbird
- CVE-2022-31739When downloading files on Windows, the % character was not escaped, which could have lead to a download incorrectly being saved to attacker-Mozilla Thunderbird · Mozilla Firefox
- CVE-2022-31740On arm64, WASM code could have resulted in incorrect assembly generation leading to a register allocation problem, and a potentially exploitMozilla Thunderbird · Mozilla Firefox
- CVE-2022-31741A crafted CMS message could have been processed incorrectly, leading to an invalid memory read, and potentially further memory corruption.Mozilla Thunderbird · Mozilla Firefox
- CVE-2022-34468An iframe that was not permitted to run scripts could do so if the user clicked on a <code>javascript:</code> link.Mozilla Firefox · Mozilla Thunderbird
- CVE-2022-34469When a TLS Certificate error occurs on a domain protected by the HSTS header, the browser should not allow the user to bypass the certificatMozilla Firefox
- CVE-2022-34477The MediaError message property should be consistent to avoid leaking information about cross-origin resources; however for a same-site crosMozilla Firefox
- CVE-2022-34480Within the <code>lg_init()</code> function, if several allocations succeed but then one fails, an uninitialized pointer would have been freeMozilla Firefox
- CVE-2022-34481In the <code>nsTArray_Impl::ReplaceElementsAt()</code> function, an integer overflow could have occurred when the number of elements to replMozilla Firefox · Mozilla Thunderbird
- CVE-2022-34482An attacker who could have convinced a user to drag and drop an image to a filesystem could have manipulated the resulting filename to contaMozilla Firefox
- CVE-2022-34483An attacker who could have convinced a user to drag and drop an image to a filesystem could have manipulated the resulting filename to contaMozilla Firefox
- CVE-2022-34484The Mozilla Fuzzing Team reported potential vulnerabilities present in Thunderbird 91.10.Mozilla Firefox · Mozilla Thunderbird
- CVE-2022-36319When combining CSS properties for overflow and transform, the mouse cursor could interact with different coordinates than displayed.Mozilla Firefox ESR · Mozilla Firefox +1
- CVE-2022-38473A cross-origin iframe referencing an XSLT document would inherit the parent domain's permissions (such as microphone or camera access).Mozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2022-38476A data race could occur in the <code>PK11_ChangePW</code> function, potentially leading to a use-after-free vulnerability.Mozilla Firefox ESR · Mozilla Thunderbird
- CVE-2022-38477Mozilla developer Nika Layzell and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 103 and Firefox ESR 102.1.Mozilla Firefox ESR · Mozilla Thunderbird +1
- CVE-2022-38478Members the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 103, Firefox ESR 102.1, and Firefox ESR 91.12.Mozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2022-40898An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via awheel
- CVE-2022-40899An issue discovered in Python Charmers Future 0.18.2 and earlier allows remote attackers to cause a denial of service via crafted Set-Cookiefuture
- CVE-2022-40962Mozilla developers Nika Layzell, Timothy Nikkel, Sebastian Hengst, Andreas Pehrson, and the Mozilla Fuzzing Team reported memory safety bugsMozilla Firefox ESR · Mozilla Thunderbird +1
- CVE-2022-42927A same-origin policy violation could have allowed the theft of cross-origin URL entries, leaking the result of a redirect, via `performance.Mozilla Firefox · Mozilla Thunderbird
- CVE-2022-42928Certain types of allocations were missing annotations that, if the Garbage Collector was in a specific state, could have lead to memory corrMozilla Firefox · Mozilla Thunderbird
- CVE-2022-42930If two Workers were simultaneously initializing their CacheStorage, a data race could have occurred in the `ThirdPartyUtil` component.Mozilla Firefox
- CVE-2022-42932Mozilla developers Ashley Hale and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 105 and Firefox ESR 102.3.Mozilla Firefox · Mozilla Thunderbird
- CVE-2022-45407If an attacker loaded a font using <code>FontFace()</code> on a background worker, a use-after-free could have occurred, leading to a potentMozilla Firefox
- CVE-2022-45409The garbage collector could have been aborted in several states and zones and <code>GCRuntime::finishCollection</code> may not have been calMozilla Firefox ESR · Mozilla Thunderbird +1
- CVE-2022-45412When resolving a symlink such as <code>file:///proc/self/fd/1</code>, an error message may be produced where the symlink was resolved to a sMozilla Firefox ESR · Mozilla Thunderbird +1
- CVE-2022-45414If a Thunderbird user quoted from an HTML email, for example by replying to the email, and the email contained either a VIDEO tag with the PMozilla Thunderbird
- CVE-2022-45415When downloading an HTML file, if the title of the page was formatted as a filename with a malicious extension, Firefox may have saved the fMozilla Firefox
- CVE-2022-45421Mozilla developers Andrew McCreight and Gabriele Svelto reported memory safety bugs present in Thunderbird 102.4.Mozilla Firefox ESR · Mozilla Thunderbird +1
- CVE-2022-46101AyaCMS v3.1.2 was found to have a code flaw in the ust_sql.inc.php file, which allows attackers to cause command execution by inserting mali
- CVE-2022-46871An out of date library (libusrsctp) contained vulnerabilities that could potentially be exploited.Mozilla Firefox
- CVE-2022-46872An attacker who compromised a content process could have partially escaped the sandbox to read arbitrary files via clipboard-related IPC mesMozilla Firefox · Mozilla Thunderbird
- CVE-2022-46873Because Firefox did not implement the <code>unsafe-hashes</code> CSP directive, an attacker who was able to inject markup into a page otherwMozilla Firefox
- CVE-2022-46874A file with a long filename could have had its filename truncated to remove the valid extension, leaving a malicious extension in its place.Mozilla Firefox · Mozilla Thunderbird
- CVE-2022-46878Mozilla developers Randell Jesup, Valentin Gosu, Olli Pettay, and the Mozilla Fuzzing Team reported memory safety bugs present in ThunderbirMozilla Firefox · Mozilla Thunderbird
- CVE-2022-46879Mozilla developers and community members Lukas Bernhard, Gabriele Svelto, Randell Jesup, and the Mozilla Fuzzing Team reported memory safetyMozilla Firefox
- CVE-2022-46881An optimization in WebGL was incorrect in some cases, and could have led to memory corruption and a potentially exploitable crash.Mozilla Firefox · Mozilla Thunderbird
- CVE-2022-46883Mozilla developers Gabriele Svelto, Yulia Startsev, Andrew McCreight and the Mozilla Fuzzing Team reported memory safety bugs present in FirMozilla Firefox
- CVE-2022-46885Mozilla developers Timothy Nikkel, Ashley Hale, and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 105.Mozilla Firefox
Medium, low and unrated 115
- CVE-2022-23539jsonwebtoken unrestricted key type could lead to legacy keys usageauth0 node-jsonwebtoken · jsonwebtoken
- CVE-2022-23513Pi-Hole/AdminLTE vulnerable due to improper access control in queryads endpointpi-hole AdminLTE
- CVE-2022-22449IBM Security Verify Governance, Identity Manager information disclosureIBM Security Verify Governance, Identity Manager
- CVE-2022-22457IBM Security Verify Governance, Identity Manager information disclosureIBM Security Verify Governance, Identity Manager
- CVE-2022-22458IBM Security Verify Governance, Identity Manager information disclosureIBM Security Verify Governance, Identity Manager
- CVE-2022-22456IBM Security Verify Governance, Identity Manager cross-site scriptingIBM Security Verify Governance, Identity Manager
- CVE-2022-43860IBM Navigator for i SQL injectionIBM Navigator for i
- CVE-2022-43859IBM Navigator for i SQL injectionIBM Navigator for i
- CVE-2022-43858IBM Navigator for i information disclosureIBM Navigator for i
- CVE-2022-3794Jeg Elementor Kit <= 2.5.6 - Authorization Bypassjegtheme Jeg Kit for Elementor – Powerful Addons for Elemen…
- CVE-2022-43857IBM Navigator for i information disclosureIBM Navigator for i
- CVE-2022-22461IBM Security Verify Governance, Identity Manager information disclosure IBM Security Verify Governance, Identity Manager
- CVE-2022-35646IBM Security Verify Governance, Identity Manager security bypassIBM Security Verify Governance, Identity Manager
- CVE-2022-23540jsonwebtoken vulnerable to signature validation bypass due to insecure default algorithm in jwt.verify()auth0 node-jsonwebtoken · jsonwebtoken
- CVE-2022-23541jsonwebtoken's insecure implementation of key retrieval function could lead to Forgeable Public/Private Tokens from RSA to HMACauth0 node-jsonwebtoken · jsonwebtoken
- CVE-2022-47896In JetBrains IntelliJ IDEA before 2022.3.1 code Templates were vulnerable to SSTI attacks.JetBrains IntelliJ IDEA
- CVE-2022-47895In JetBrains IntelliJ IDEA before 2022.3.1 the "Validate JSP File" action used the HTTP protocol to download required JAR files.JetBrains IntelliJ IDEA
- CVE-2020-36624ahorner text-helpers translation.rb reverse tabnabbingahorner text-helpers · text_helpers
- CVE-2020-36625destiny.gg chat main.go websocket.Upgrader cross-site request forgerydestiny.gg chat · github.com/destinygg/chat
- CVE-2021-36631Untrusted search path vulnerability in Baidunetdisk Version 7.4.3 and earlier allows an attacker to gain privileges via a Trojan horse DLL i
- CVE-2021-4126When receiving an OpenPGP/MIME signed email message that contains an additional outer MIME message layer, for example a message footer addedMozilla Thunderbird
- CVE-2021-4128When transitioning in and out of fullscreen mode, a graphics object was not correctly protected; resulting in memory corruption and a potentMozilla Firefox
- CVE-2021-4221If a domain name contained a RTL character, it would cause the domain to be rendered to the right of the path.Mozilla Firefox
- CVE-2021-43657A Stored Cross-site scripting (XSS) vulnerability via MAster.php in Sourcecodetester Simple Client Management System (SCMS) 1.0 allows remot
- CVE-2022-1097<code>NSSToken</code> objects were referenced via direct points, and could have been accessed in an unsafe way on different threads, leadingMozilla Thunderbird · Mozilla Firefox
- CVE-2022-1196After a VR Process is destroyed, a reference to it may have been retained and used, leading to a use-after-free and potentially exploitable Mozilla Thunderbird · Mozilla Firefox ESR
- CVE-2022-1197When importing a revoked key that specified key compromise as the revocation reason, Thunderbird did not update the existing copy of the keyMozilla Thunderbird
- CVE-2022-1520When viewing an email message A, which contains an attached message B, where B is encrypted or digitally signed or both, Thunderbird may shoMozilla Thunderbird
- CVE-2022-1834When displaying the sender of an email, and the sender name contained the Braille Pattern Blank space character multiple times, Thunderbird Mozilla Thunderbird
- CVE-2022-2226An OpenPGP digital signature includes information about the date when the signature was created.Mozilla Thunderbird
- CVE-2022-22739Malicious websites could have tricked users into accepting launching a program to handle an external URL protocol.Mozilla Firefox ESR · Mozilla Firefox +1
- CVE-2022-22742When inserting text while in edit mode, some characters might have lead to out-of-bounds memory access causing a potentially exploitable craMozilla Firefox ESR · Mozilla Firefox +1
- CVE-2022-22743When navigating from inside an iframe while requesting fullscreen access, an attacker-controlled tab could have made the browser unable to lMozilla Firefox ESR · Mozilla Firefox +1
- CVE-2022-22745Securitypolicyviolation events could have leaked cross-origin information for frame-ancestors violations.Mozilla Firefox ESR · Mozilla Firefox +1
- CVE-2022-22746A race condition could have allowed bypassing the fullscreen notification which could have lead to a fullscreen window spoof being unnoticedMozilla Firefox ESR · Mozilla Firefox +1
- CVE-2022-22747After accepting an untrusted certificate, handling an empty pkcs7 sequence as part of the certificate data could have lead to a crash.Mozilla Firefox ESR · Mozilla Firefox +1
- CVE-2022-22748Malicious websites could have confused Firefox into showing the wrong origin when asking to launch a program and handling an external URL prMozilla Firefox ESR · Mozilla Firefox +1
- CVE-2022-22749When scanning QR codes, Firefox for Android would have allowed navigation to some URLs that do not point to web content.<br>*This bug only aMozilla Firefox
- CVE-2022-22750By generally accepting and passing resource handles across processes, a compromised content process might have confused higher privileged prMozilla Firefox
- CVE-2022-22754If a user installed an extension of a particular type, the extension could have auto-updated itself and while doing so, bypass the prompt whMozilla Firefox · Mozilla Thunderbird
- CVE-2022-22757Remote Agent, used in WebDriver, did not validate the Host or Origin headers.Mozilla Firefox
- CVE-2022-22760When importing resources using Web Workers, error messages would distinguish the difference between <code>application/javascript</code> respMozilla Firefox · Mozilla Thunderbird
- CVE-2022-22762Under certain circumstances, a JavaScript alert (or prompt) could have been shown while another website was displayed underneath it.Mozilla Firefox
- CVE-2022-26382While the text displayed in Autofill tooltips cannot be directly read by JavaScript, the text was rendered using page fonts.Mozilla Firefox
- CVE-2022-26383When resizing a popup after requesting fullscreen access, the popup would not display the fullscreen notification.Mozilla Firefox · Mozilla Thunderbird
- CVE-2022-26385In unusual circumstances, an individual thread may outlive the thread's manager during shutdown.Mozilla Firefox
- CVE-2022-26386Previously Firefox for macOS and Linux would download temporary files to a user-specific directory in <code>/tmp</code>, but this behavior wMozilla Firefox ESR · Mozilla Thunderbird
- CVE-2022-28282By using a link with <code>rel="localization"</code> a use-after-free could have been triggered by destroying an object during JavaScript exMozilla Thunderbird · Mozilla Firefox
- CVE-2022-28283The sourceMapURL feature in devtools was missing security checks that would have allowed a webpage to attempt to include local files or otheMozilla Firefox
- CVE-2022-28285When generating the assembly code for <code>MLoadTypedArrayElementHole</code>, an incorrect AliasSet was used.Mozilla Thunderbird · Mozilla Firefox
- CVE-2022-28286Due to a layout change, iframe contents could have been rendered outside of its border.Mozilla Thunderbird · Mozilla Firefox
- CVE-2022-28287In unusual circumstances, selecting text could cause text selection caching to behave incorrectly, leading to a crash.Mozilla Firefox
- CVE-2022-29910When closed or sent to the background, Firefox for Android would not properly record and persist HSTS settings.<br>*Note: This issue only afMozilla Firefox
- CVE-2022-29911An improper implementation of the new iframe sandbox keyword <code>allow-top-navigation-by-user-activation</code> could lead to script execuMozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2022-29912Requests initiated through reader mode did not properly omit cookies with a SameSite attribute.Mozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2022-29913The parent process would not properly check whether the Speech Synthesis feature is enabled, when receiving instructions from a child procesMozilla Thunderbird
- CVE-2022-29914When reusing existing popups Firefox would have allowed them to cover the fullscreen notification UI, which could have enabled browser spoofMozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2022-29915The Performance API did not properly hide the fact whether a request cross-origin resource has observed redirects.Mozilla Firefox
- CVE-2022-29916Firefox behaved slightly differently for already known resources when loading CSS resources involving CSS variables.Mozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2022-3032When receiving an HTML email that contained an <code>iframe</code> element, which used a <code>srcdoc</code> attribute to define the inner HMozilla Thunderbird
- CVE-2022-3034When receiving an HTML email that specified to load an <code>iframe</code> element from a remote location, a request to the remote document Mozilla Thunderbird
- CVE-2022-31738When exiting fullscreen mode, an iframe could have confused the browser about the current state of fullscreen, resulting in potential user cMozilla Thunderbird · Mozilla Firefox
- CVE-2022-31742An attacker could have exploited a timing attack by sending a large number of allowCredential entries and detecting the difference between iMozilla Thunderbird · Mozilla Firefox
- CVE-2022-31743Firefox's HTML parser did not correctly interpret HTML comment tags, resulting in an incongruity with other browsers.Mozilla Firefox
- CVE-2022-31744An attacker could have injected CSS into stylesheets accessible via internal URIs, such as resource:, and in doing so bypass a page's ContenMozilla Firefox ESR · Mozilla Thunderbird +1
- CVE-2022-31745If array shift operations are not used, the Garbage Collector may have become confused about valid objects.Mozilla Firefox
- CVE-2022-31746Internal URLs are protected by a secret UUID key, which could have been leaked to web page through the Referrer header.Mozilla Firefox for iOS
- CVE-2022-3266An out-of-bounds read can occur when decoding H264 video.Mozilla Firefox ESR · Mozilla Thunderbird +1
- CVE-2022-34471When downloading an update for an addon, the downloaded addon update's version was not verified to match the version selected from the manifMozilla Firefox
- CVE-2022-34472If there was a PAC URL set and the server that hosts the PAC was not reachable, OCSP requests would have been blocked, resulting in incorrecMozilla Firefox · Mozilla Thunderbird
- CVE-2022-34473The HTML Sanitizer should have sanitized the <code>href</code> attribute of SVG <code><use></code> tags; however it incorrectly did noMozilla Firefox
- CVE-2022-34474Even when an iframe was sandboxed with <code>allow-top-navigation-by-user-activation</code>, if it received a redirect header to an externalMozilla Firefox
- CVE-2022-34475SVG <code><use></code> tags that referenced a same-origin document could have resulted in script execution if attacker input was sanitMozilla Firefox
- CVE-2022-34478The <code>ms-msdt</code>, <code>search</code>, and <code>search-ms</code> protocols deliver content to Microsoft applications, bypassing theMozilla Firefox · Mozilla Thunderbird
- CVE-2022-34479A malicious website that could create a popup could have resized the popup to overlay the address bar with its own content, resulting in potMozilla Firefox · Mozilla Thunderbird
- CVE-2022-36314When opening a Windows shortcut from the local filesystem, an attacker could supply a remote path that would lead to unexpected network requMozilla Firefox ESR · Mozilla Firefox +1
- CVE-2022-36315When loading a script with Subresource Integrity, attackers with an injection capability could trigger the reuse of previously cached entrieMozilla Firefox
- CVE-2022-36316When using the Performance API, an attacker was able to notice subtle differences between PerformanceEntries and thus learn whether the targMozilla Firefox
- CVE-2022-36317When visiting a website with an overly long URL, the user interface would start to hang.Mozilla Firefox
- CVE-2022-36318When visiting directory listings for `chrome://` URLs as source text, some parameters were reflected.Mozilla Firefox ESR · Mozilla Firefox +1
- CVE-2022-38472An attacker could have abused XSLT error handling to associate attacker-controlled content with another origin which was displayed in the adMozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2022-38474A website that had permission to access the microphone could record audio without the audio notification being shown.Mozilla Firefox
- CVE-2022-38475An attacker could have written a value to the first element in a zero-length JavaScript array.Mozilla Firefox
- CVE-2022-40897Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted packagsetuptools
- CVE-2022-40956When injecting an HTML base element, some requests would ignore the CSP's base-uri settings and accept the injected element's base instead.Mozilla Firefox ESR · Mozilla Thunderbird +1
- CVE-2022-40957Inconsistent data in instruction and data cache when creating wasm code could lead to a potentially exploitable crash.<br>*This bug only affMozilla Firefox ESR · Mozilla Thunderbird +1
- CVE-2022-40958By injecting a cookie with certain special characters, an attacker on a shared subdomain which is not a secure context could set and thus ovMozilla Firefox ESR · Mozilla Thunderbird +1
- CVE-2022-40959During iframe navigation, certain pages did not have their FeaturePolicy fully initialized leading to a bypass that leaked device permissionMozilla Firefox ESR · Mozilla Thunderbird +1
- CVE-2022-40960Concurrent use of the URL parser with non-UTF-8 data was not thread-safe.Mozilla Firefox ESR · Mozilla Thunderbird +1
- CVE-2022-40961During startup, a graphics driver with an unexpected name could lead to a stack-buffer overflow causing a potentially exploitable crash.<br>Mozilla Firefox
- CVE-2022-42929If a website called `window.print()` in a particular way, it could cause a denial of service of the browser, which may persist beyond browseMozilla Firefox · Mozilla Thunderbird
- CVE-2022-42931Logins saved by Firefox should be managed by the Password Manager component which uses encryption to save files on-disk.Mozilla Firefox
- CVE-2022-43271Inhabit Systems Pty Ltd Move CRM version 4, build 260 was discovered to contain a cross-site scripting (XSS) vulnerability via the User prof
- CVE-2022-45403Service Workers should not be able to infer information about opaque cross-origin responses; but timing information for cross-origin media cMozilla Firefox ESR · Mozilla Thunderbird +1
- CVE-2022-45404Through a series of popup and <code>window.print()</code> calls, an attacker can cause a window to go fullscreen without the user seeing theMozilla Firefox ESR · Mozilla Thunderbird +1
- CVE-2022-45405Freeing arbitrary <code>nsIInputStream</code>'s on a different thread than creation could have led to a use-after-free and potentially exploMozilla Firefox ESR · Mozilla Thunderbird +1
- CVE-2022-45408Through a series of popups that reuse windowName, an attacker can cause a window to go fullscreen without the user seeing the notification pMozilla Firefox ESR · Mozilla Thunderbird +1
- CVE-2022-45410When a ServiceWorker intercepted a request with <code>FetchEvent</code>, the origin of the request was lost after the ServiceWorker took ownMozilla Firefox ESR · Mozilla Thunderbird +1
- CVE-2022-45411Cross-Site Tracing occurs when a server will echo a request back via the Trace method, allowing an XSS attack to access to authorization heaMozilla Firefox ESR · Mozilla Thunderbird +1
- CVE-2022-45413Using the <code>S.browser_fallback_url parameter</code> parameter, an attacker could redirect a user to a URL and cause SameSite=Strict cookMozilla Firefox
- CVE-2022-45416Keyboard events reference strings like "KeyA" that were at fixed, known, and widely-spread addresses.Mozilla Firefox ESR · Mozilla Thunderbird +1
- CVE-2022-45417Service Workers did not detect Private Browsing Mode correctly in all cases, which could have led to Service Workers being written to disk fMozilla Firefox
- CVE-2022-45418If a custom mouse cursor is specified in CSS, under certain circumstances the cursor could have been drawn over the browser UI, resulting inMozilla Firefox ESR · Mozilla Thunderbird +1
- CVE-2022-45419If the user added a security exception for an invalid TLS certificate, opened an ongoing TLS connection with a server that used that certifiMozilla Firefox
- CVE-2022-45420Use tables inside of an iframe, an attacker could have caused iframe contents to be rendered outside the boundaries of the iframe, resultingMozilla Firefox ESR · Mozilla Thunderbird +1
- CVE-2022-4644Open Redirect in ikus060/rdiffwebikus060/rdiffweb · rdiffweb
- CVE-2022-4646Cross-Site Request Forgery (CSRF) in ikus060/rdiffwebikus060/rdiffweb · rdiffweb
- CVE-2022-4647Cross-site Scripting (XSS) - Stored in microweber/microwebermicroweber/microweber
- CVE-2022-46491A Cross-Site Request Forgery (CSRF) vulnerability in the Add Administrator function of the default version of nbnbk allows attackers to arbi
- CVE-2022-4662A flaw incorrect access control in the Linux kernel USB core subsystem was found in the way user attaches usb device.Kernel
- CVE-2022-46875The executable file warning was not presented when downloading .atloc and .ftploc files, which can run commands on a user's computer.Mozilla Firefox · Mozilla Thunderbird
- CVE-2022-46877By confusing the browser, the fullscreen notification could have been delayed or suppressed, resulting in potential user confusion or spoofiMozilla Firefox
- CVE-2022-46880A missing check related to tex units could have led to a use-after-free and potentially exploitable crash.<br />*Note*: This advisory was adMozilla Firefox ESR · Mozilla Firefox +1
- CVE-2022-47928In MISP before 2.4.167, there is XSS in the template file uploads in app/View/Templates/upload_file.ctp.
- CVE-2022-47931IO FinNet tss-lib before 2.0.0 allows a collision of hash values.github.com/bnb-chain/tss-lib · github.com/binance-chain/tss…