Open Source Vulnerabilities

librewolf, librewolf, librewolf, librewolf, librewolf

If upgrade-insecure-requests was specified in the Content Security Policy, and a link was dragged and dropped from that page, the link was not upgraded to https

libvncserver

issue was discovered in LibVNCServer before 0

dhcp

In ISC DHCP 4

librewolf, librewolf, librewolf, librewolf, librewolf

Content-Security-Policy that blocks in-line scripts could be bypassed using an object tag to execute JavaScript in the protected document (cross-site scripting)

libvncserver

issue was discovered in LibVNCServer before 0

dhcp

In ISC DHCP 1

librewolf, librewolf, librewolf, librewolf, librewolf

object tag with a data URI did not correctly inherit the document's Content Security Policy

libvncserver

issue was discovered in LibVNCServer before 0

dhcp

In ISC DHCP 4

librewolf, librewolf, librewolf, librewolf, librewolf

compromised content process could send a message to the parent process that would cause the 'Click to Play' permission prompt to be shown

libvncserver

issue was discovered in LibVNCServer before 0

librewolf, librewolf, librewolf, librewolf, librewolf

Mozilla developers and community members reported memory safety bugs present in Firefox 69 and Firefox ESR 68

libvncserver

issue was discovered in LibVNCServer before 0

libmad

mad_decoder_run() function in decoder

librewolf, librewolf, librewolf, librewolf, librewolf

Failure to correctly handle null bytes when processing HTML entities resulted in Firefox incorrectly parsing these entities

libvncserver

issue was discovered in LibVNCServer before 0

libmad

mpg321

librewolf, librewolf, librewolf, librewolf, librewolf

If two same-origin documents set document

libvncserver

issue was discovered in LibVNCServer before 0

libmad

mad_bit_skip function in bit

librewolf, librewolf, librewolf, librewolf, librewolf

By using a form with a data URI it was possible to gain access to the privileged JSONView object that had been cloned into content

lrzip

null pointer dereference was discovered lzo_decompress_buf in stream

libvncserver

issue was discovered in LibVNCServer before 0

libmad

mad_layer_III function in layer3

privoxy

flaw was found in Privoxy in versions before 3

librewolf, librewolf, librewolf, librewolf, librewolf

fixed-size stack buffer could overflow in nrappkit when doing WebRTC signaling

lrzip

null pointer dereference was discovered in ucompthread in stream

libvncserver

libvncclient/sockets

libmad

mad_layer_III function in layer3

privoxy

flaw was found in Privoxy in versions before 3

lrzip

Use after free in lzma_decompress_buf function in stream

librewolf, librewolf, librewolf, librewolf, librewolf

attacker could have caused 4 bytes of HMAC output to be written past the end of a buffer stored on the stack

libvncserver

libvncclient v0

privoxy

flaw was found in Privoxy in versions before 3

librewolf, librewolf, librewolf, librewolf, librewolf

When following the value's prototype chain, it was possible to retain a reference to a locale, delete it, and subsequently reference it

webkit2gtk

issue was discovered in certain Apple products

lrzip

lrzip v0

privoxy

flaw was found in Privoxy in versions before 3

librewolf, librewolf, librewolf, librewolf, librewolf

In libexpat before 2

lrzip

Irzip v0

webkit2gtk

issue was discovered in certain Apple products

privoxy

flaw was found in Privoxy in versions before 3

librewolf, librewolf, librewolf, librewolf, librewolf

Incorect derivation of a packet length in WebRTC in Google Chrome prior to 68

webkit2gtk

issue was discovered in certain Apple products

privoxy

flaw was found in Privoxy in versions before 3

librewolf, librewolf, librewolf, librewolf, librewolf

Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion

webkit2gtk

issue was discovered in certain Apple products

privoxy

flaw was found in Privoxy in versions before 3

librewolf, librewolf, librewolf, librewolf, librewolf

Mozilla developers reported memory safety bugs present in Firefox 71

webkit2gtk

issue was discovered in certain Apple products