Open Source Vulnerabilities

prosody

issue was discovered in Prosody before 0

libde265

issue was discovered in libde265 v1

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

Using techniques that built on the slipstream research, a malicious webpage could have exposed both an internal network's hosts as well as services running on the user's local machine

podofo

PdfFontFactory

otrs

issue was discovered in Open Ticket Request System (OTRS) 7

webkit2gtk

"Clear History and Website Data" did not clear the history

prosody

Prosody before 0

libde265

Incorrect Access Control vulnerability exists in libde265 v1

librewolf, librewolf, librewolf, librewolf, librewolf

By attempting to connect a website using an unresponsive port, an attacker could have controlled the content of a tab while the URL bar displayed the original domain

podofo

doc/PdfPage

wabt

wasm2c v1

otrs

issue was discovered in Open Ticket Request System (OTRS) Community Edition 5

webkit2gtk

use after free issue was addressed with improved memory management

prosody

issue was discovered in Prosody before 0

libde265

Libde265 1

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

When a HTTPS pages was embedded in a HTTP page, and there was a service worker registered for the former, the service worker could have intercepted the request for the secure page despite the ifram...

podofo

doc/PdfPage

wabt

wasm-interp v1

otrs

issue was discovered in Open Ticket Request System (OTRS) 7

prosody

issue was discovered in Prosody before 0

webkit2gtk

logic issue was addressed with improved restrictions

libde265

Libde265 v1

librewolf, librewolf, librewolf, librewolf, librewolf

When a malicious application installed on the user's device broadcast an Intent to Firefox for Android, arbitrary headers could have been specified, leading to attacks such as abusing ambient autho...

wabt

wasm-interp v1

podofo

PoDoFo::PdfSimpleEncoding::ConvertToEncoding function in PdfEncoding

otrs

issue was discovered in Open Ticket Request System (OTRS) 7

prosody

issue was discovered in Prosody before 0

webkit2gtk

logic issue was addressed with improved restrictions

libde265

Libde265 v1

podofo

PoDoFo::PdfPainter::ExpandTabs function in PdfPainter

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

When flex-basis was used on a table wrapper, a StyleGenericFlexBasis object could have been incorrectly cast to the wrong type

otrs

jQuery before 3

webkit2gtk

memory corruption issue was addressed with improved validation

libde265

Libde265 v1

podofo

PoDoFo::PdfXObject::PdfXObject function in PdfXObject

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

Certain input to the CSS Sanitizer confused it, resulting in incorrect components being removed

otrs

issue was discovered in Open Ticket Request System (OTRS) 7

webkit2gtk

use after free issue was addressed with improved memory management

libde265

Libde265 v1

podofo

PoDoFo::PdfVariant::DelayedLoad function in PdfVariant

otrs

issue was discovered in Open Ticket Request System (OTRS) 7

librewolf, librewolf, librewolf, librewolf, librewolf

lifecycle of IPC Actors allows managed actors to outlive their manager actors; and the former must ensure that they are not attempting to use a dead actor they have a reference to

webkit2gtk

type confusion issue was addressed with improved state handling

libde265

Libde265 v1

podofo

issue was discovered in PoDoFo 0

otrs

issue was discovered in Open Ticket Request System (OTRS) 7

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

Certain blit values provided by the user were not properly constrained leading to a heap buffer overflow on some video drivers

libde265

Libde265 v1

webkit2gtk

Multiple memory corruption issues were addressed with improved memory handling

podofo

issue was discovered in PoDoFo 0