by Kastro CVE-2022-26486 · Mozilla Firefox
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,271 matching vulnerabilities · Page 595 of 786
Mozilla
CVE-2021-4140 · Mozilla Firefox ESR
It was possible to construct specific XSLT markup that would be able to bypass an iframe sandbox.
CVE-2022-34470 · Mozilla Firefox
Session history navigations may have led to a use-after-free and potentially exploitable crash.
CVE-2022-26384 · Mozilla Firefox
If an attacker could control the contents of an iframe sandboxed with <code>allow-popups</code> but not <code>allow-scripts</code>, they…
CVE-2022-31737 · Mozilla Thunderbird
A malicious webpage could have caused an out-of-bounds write in WebGL, leading to memory corruption and a potentially exploitable crash.
CVE-2022-1887 · Mozilla Firefox for iOS
The search term could have been specified externally to trigger SQL injection.
CVE-2022-22759 · Mozilla Firefox
If a document created a sandboxed iframe without <code>allow-scripts</code>, and subsequently appended an element to the iframe's documen…
CVE-2022-31736 · Mozilla Thunderbird
A malicious website could have learned the size of a cross-origin resource that supported Range requests.
CVE-2022-45406 · Mozilla Firefox ESR
If an out-of-memory condition occurred when creating a JavaScript global, a JavaScript realm may be deleted while references to it lived…
CVE-2021-4127 · Mozilla Thunderbird
An out of date graphics library (Angle) likely contained vulnerabilities that could potentially be exploited.
CVE-2021-4129 · Mozilla Firefox
Mozilla developers and community members Julian Hector, Randell Jesup, Gabriele Svelto, Tyson Smith, Christian Holler, and Masayuki Nakan…
CVE-2022-29917 · Mozilla Thunderbird
Mozilla developers Andrew McCreight, Gabriele Svelto, Tom Ritter and the Mozilla Fuzzing Team reported memory safety bugs present in Fire…
CVE-2022-31747 · Mozilla Thunderbird
Mozilla developers Andrew McCreight, Nicolas B.
CVE-2022-46882 · Mozilla Firefox
A use-after-free in WebGL extensions could have led to a potentially exploitable crash.
CVE-2022-31748 · Mozilla Firefox
Mozilla developers Gabriele Svelto, Timothy Nikkel, Randell Jesup, Jon Coppeard, and the Mozilla Fuzzing Team reported memory safety bugs…
CVE-2022-34476 · Mozilla Firefox
ASN.1 parsing of an indefinite SEQUENCE inside an indefinite GROUP could have resulted in the parser accepting malformed ASN.1.
CVE-2022-34485 · Mozilla Firefox
Mozilla developers Bryce Seager van Dyk and the Mozilla Fuzzing Team reported potential vulnerabilities present in Firefox 101.
CVE-2022-36320 · Mozilla Firefox
Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 102.
mitre
CVE-2022-46538 · mitre
Tenda F1203 V2.0.1.6 was discovered to contain a command injection vulnerability via the mac parameter at /goform/WriteFacMac.
CVE-2022-46547 · mitre
Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the page parameter at /goform/VirtualSer.
CVE-2022-47629 · mitre
Libksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser.
CVE-2022-45966 · mitre
here is an arbitrary file upload vulnerability in the file management function module of Classcms3.5.
CVE-2022-46102 · mitre
AyaCMS 3.1.2 is vulnerable to Arbitrary file upload via /aya/module/admin/fst_down.inc.php
CVE-2022-46493 · mitre
Default version of nbnbk was discovered to contain an arbitrary file upload vulnerability via the component /api/User/download_img.
CVE-2022-47926 · mitre
AyaCMS 3.1.2 is vulnerable to file deletion via /aya/module/admin/fst_del.inc.php
CVE-2022-47635 · mitre
Wildix WMS 6 before 6.02.20221216, WMS 5 before 5.04.20221214, and WMS4 before 4.04.45396.23 allows Server-side request forgery (SSRF) vi…
CVE-2022-47931 · mitre
IO FinNet tss-lib before 2.0.0 allows a collision of hash values.
snyk
Dataprobe
CVE-2022-3184 · Dataprobe iBoot-PDU FW
Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where the device’s existing firmware allows unauthenticate…
CVE-2022-3183 · Dataprobe iBoot-PDU FW
Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where a specific function does not sanitize the input prov…
Apache Software Foundation
CVE-2022-40145 · Apache Software Foundation Apache Karaf
Apache Karaf: JDBC JAAS LDAP injection
CVE-2022-46421 · Apache Software Foundation Apache Airflow Hive Provider
Apache Airflow Hive Provider: Hive Provider RCE vulnerability with hive_cli_params
CVE-2022-45347 · Apache Software Foundation Apache ShardingSphere-Proxy
Apache ShardingSphere-Proxy: MySQL authentication bypass
hackerone
pjsip
codeigniter4
CVE-2022-46170 · codeigniter4 CodeIgniter4
CodeIgniter is vulnerable to improper authentication via Session Handlers
unspecified
ActivityWatch
CVE-2021-32692 · ActivityWatch Activity Watch
Activity Watch vulnerable to command execution on macOS via printAppTitle.scpt
hikvision
Zyxel
Huawei
CVE-2022-46324 · Huawei HarmonyOS
Some smartphones have the out-of-bounds write vulnerability.
CVE-2022-46325 · Huawei HarmonyOS
Some smartphones have the out-of-bounds write vulnerability.Successful exploitation of this vulnerability may cause system service except…
CVE-2022-46326 · Huawei HarmonyOS
Some smartphones have the out-of-bounds write vulnerability.
CVE-2022-46327 · Huawei HarmonyOS