Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

firefox os vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2024-3273
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L up to 20240403. Affected is an unknown function of the file /cgi-bin/nas_sharing.cgi of the component HTTP GET Request Handler. The mani...
Dlink Dns-320l Firmware -Dlink Dns-120 Firmware -Dlink Dnr-202l Firmware -Dlink Dns-315l Firmware -Dlink Dns-320 Firmware -Dlink Dns-320lw Firmware -Dlink Dns-321 Firmware -Dlink Dnr-322l Firmware -Dlink Dns-323 Firmware -Dlink Dns-325 Firmware -Dlink Dns-326 Firmware -Dlink Dns-327l Firmware -Dlink Dnr-326 Firmware -Dlink Dns-340l Firmware -Dlink Dns-343 Firmware -Dlink Dns-345 Firmware -Dlink Dns-726-4 Firmware -Dlink Dns-1100-4 Firmware -Dlink Dns-1200-05 Firmware -Dlink Dns-1550-04 Firmware -
NA
CVE-2023-5217
Heap buffer overflow in vp8 encoding in libvpx in Google Chrome before 117.0.5938.132 and libvpx 1.13.1 allowed a remote malicious user to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Webmproject LibvpxMicrosoft Edge 116.0.1938.98Microsoft Edge 117.0.2045.47Microsoft Edge Chromium 116.0.5845.229Microsoft Edge Chromium 117.0.5938.132Mozilla Firefox FocusMozilla Firefox EsrMozilla FirefoxMozilla ThunderbirdFedoraproject Fedora 37Fedoraproject Fedora 38Fedoraproject Fedora 39Debian Debian Linux 10.0Debian Debian Linux 11.0Debian Debian Linux 12.0Apple Iphone OsApple Ipad OsApple Ipad Os 16.7Apple Iphone Os 16.7
NA
CVE-2023-4582
Due to large allocation checks in Angle for glsl shaders being too lenient a buffer overflow could have occured when allocating too much private shader memory on mac OS. *This bug only affects Firefox on macOS. Other operating systems are unaffected.* This vulnerability affects F...
Mozilla FirefoxMozilla Firefox EsrMozilla Thunderbird
NA
CVE-2022-46875
The executable file warning was not presented when downloading .atloc and .ftploc files, which can run commands on a user's computer. <br>*Note: This issue only affected Mac OS operating systems. Other operating systems are unaffected.*. This vulnerability affects Fire...
Mozilla FirefoxMozilla Firefox EsrMozilla Thunderbird
NA
CVE-2022-32212
A OS Command Injection vulnerability exists in Node.js versions <14.20.0, <16.20.0, <18.5.0 due to an insufficient IsAllowedHost check that can easily be bypassed because IsIPAddress does not properly check if an IP address is invalid before making DBS requests allowing ...
Nodejs Node.jsDebian Debian Linux 10.0Debian Debian Linux 11.0Fedoraproject Fedora 35Fedoraproject Fedora 36Fedoraproject Fedora 37Siemens Sinec Ins 1.0Siemens Sinec Ins
6.8
CVSSv2
CVE-2022-0107
Use after free in File Manager API in Google Chrome on Chrome OS before 97.0.4692.71 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.
Google ChromeFedoraproject Fedora 34Fedoraproject Fedora 35Fedoraproject Fedora 36
6.8
CVSSv2
CVE-2022-0098
Use after free in Screen Capture in Google Chrome on Chrome OS before 97.0.4692.71 allowed an attacker who convinced a user to perform specific user gestures to potentially exploit heap corruption via specific user gestures.
Google ChromeFedoraproject Fedora 34Fedoraproject Fedora 35Fedoraproject Fedora 36
6.8
CVSSv2
CVE-2021-38510
The executable file warning was not presented when downloading .inetloc files, which, due to a flaw in Mac OS, can run commands on a user's computer.*Note: This issue only affected Mac OS operating systems. Other operating systems are unaffected.*. This vulnerability affects...
Mozilla Firefox EsrMozilla ThunderbirdMozilla Firefox
7.5
CVSSv2
CVE-2021-43527
NSS (Network Security Services) versions before 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER-encoded DSA or RSA-PSS signatures. Applications using NSS for handling signatures encoded within CMS, S/MIME, PKCS \#7, or PKCS \#12 are likely to be impacted. A...
Mozilla Nss EsrMozilla NssNetapp Cloud Backup -Netapp E-series Santricity Os ControllerOracle Communications Cloud Native Core Network Slice Selection Function 1.8.0Oracle Communications Cloud Native Core Network Repository Function 1.15.0Oracle Communications Cloud Native Core Network Repository Function 1.15.1Oracle Communications Cloud Native Core Binding Support Function 1.11.0Oracle Communications Policy Management 12.6.0.0.0Starwindsoftware Starwind Virtual San V8r13Starwindsoftware Starwind San \\& Nas V8r13
6.8
CVSSv2
CVE-2021-37840
aaPanel up to and including 6.8.12 allows Cross-Site WebSocket Hijacking (CSWH) involving OS commands within WebSocket messages at a ws:// URL for /webssh (the victim must have configured Terminal with at least one host). Successful exploitation depends on the browser used by a p...
Aapanel Aapanel
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
deserializationCVE-2024-4040cross-site scriptingCVE-2023-25790CVE-2024-2961XML external entityCVE-2024-26926CVE-2024-32806CVE-2024-32711
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook