Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
libexpat vulnerabilities and exploits
(subscribe to this query)
6.8
CVSSv2
CVE-2019-11757
When following the value's prototype chain, it was possible to retain a reference to a locale, delete it, and subsequently reference it. This resulted in a use-after-free and a potentially exploitable crash. This vulnerability affects Firefox < 70, Thunderbird < 68.2, ...
Mozilla Firefox Esr
Mozilla Thunderbird
Mozilla Firefox
Canonical Ubuntu Linux 16.04
6.8
CVSSv2
CVE-2019-11759
An attacker could have caused 4 bytes of HMAC output to be written past the end of a buffer stored on the stack. This could be used by an malicious user to execute arbitrary code or more likely lead to a crash. This vulnerability affects Firefox < 70, Thunderbird < 68.2, an...
Mozilla Firefox Esr
Mozilla Thunderbird
Mozilla Firefox
Canonical Ubuntu Linux 16.04
2 Github repositories
6.8
CVSSv2
CVE-2019-11760
A fixed-size stack buffer could overflow in nrappkit when doing WebRTC signaling. This resulted in a potentially exploitable crash in some instances. This vulnerability affects Firefox < 70, Thunderbird < 68.2, and Firefox ESR < 68.2.
Mozilla Firefox Esr
Mozilla Thunderbird
Mozilla Firefox
Canonical Ubuntu Linux 16.04
5.8
CVSSv2
CVE-2019-11761
By using a form with a data URI it was possible to gain access to the privileged JSONView object that had been cloned into content. Impact from exposing this object appears to be minimal, however it was a bypass of existing defense in depth mechanisms. This vulnerability affects ...
Mozilla Firefox Esr
Mozilla Thunderbird
Mozilla Firefox
Canonical Ubuntu Linux 16.04
5.8
CVSSv2
CVE-2019-11762
If two same-origin documents set document.domain differently to become cross-origin, it was possible for them to call arbitrary DOM methods/getters/setters on the now-cross-origin window. This vulnerability affects Firefox < 70, Thunderbird < 68.2, and Firefox ESR < 68.2...
Mozilla Firefox Esr
Mozilla Thunderbird
Mozilla Firefox
Canonical Ubuntu Linux 16.04
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322
cross-site request forgery
unauthorized
CVE-2024-33925
reflected XSS
CVE-2023-51580
CVE-2023-51579
CVE-2015-2051
CVE-2023-51609
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5