Most recent entries from all

bdu:2020-01398

certfr-2019-avi-421 — De multiples vulnérabilités ont été découvertes dans Mozilla Firefox. Certaines d'entre elles permettent à un attaquant…

certfr-2019-avi-421

cnvd-2019-30437

EUVD-2026-54598

fkie_cve-2019-11743

Navigation events were not fully adhering to the W3C's "Navigation-Timing Level 2" draft specification in some instances for the unload event, which restricts access to detailed timing attributes to only be same-origin. This resulted in potential cross-origin information exposure of history through timing side-channel attacks. This vulnerability affects Firefox < 69, Thunderbird < 68.1, Thunderbird < 60.9, Firefox ESR < 60.9, and Firefox ESR < 68.1.

GHSA-98fg-hp5j-cm68

gsd-2019-11743

openSUSE-SU-2019:2248-1 — Security update for MozillaThunderbird

Security update for MozillaThunderbird

RHSA-2019:2694 — Red Hat Security Advisory: firefox security update

Mozilla: Sandbox escape through Firefox Sync firefox: stored passwords in 'Saved Logins' can be copied without master password entry Mozilla: Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9 Mozilla: Same-origin policy violation with SVG filters and canvas to steal cross-origin images Mozilla: Cross-origin access to unload event attributes Mozilla: XSS by breaking out of title and textarea elements using innerHTML Mozilla: Use-after-free while manipulating video Mozilla: Use-after-free while extracting a key value in IndexedDB

SUSE-SU-2019:14173-1 — Security update for MozillaFirefox, firefox-glib2, firefox-gtk3

Security update for MozillaFirefox, firefox-glib2, firefox-gtk3

UBUNTU-CVE-2019-11743

Affected: Ubuntu:16.04:LTS: firefox, Ubuntu:16.04:LTS: thunderbird, Ubuntu:18.04:LTS: firefox, Ubuntu:18.04:LTS: thunderbird, Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: mozjs52