Open Source Vulnerabilities

nodejs-23, nodejs18, nodejs18

nghttp2 version >= 1

net-snmp

net-snmp provides various tools relating to the Simple Network Management Protocol

WebDyne versions from 2.022 before 3.022 for Perl disclose application source to unauthenticated clients via the viewer in the default index page

p11-kit

issue was discovered in p11-kit 0

webkit2gtk

buffer overflow issue was addressed with improved memory handling

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

Using techniques that built on the slipstream research, a malicious webpage could have scanned both an internal network's hosts as well as services running on the user's local machine utilizing Web...

libde265

libde265 v1

net-snmp

net-snmp provides various tools relating to the Simple Network Management Protocol

nodejs-23, nodejs18, nodejs18

All versions of Node

p11-kit

issue was discovered in p11-kit 0

webkit2gtk

information leakage issue was addressed

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the buffer used to unpack it, resulting in memory corruption and a potentially exploitable information lea...

libde265

libde265 v1

net-snmp

handle_ipv6IpForwarding in agent/mibgroup/ip-mib/ip_scalars

nodejs-23, nodejs18, nodejs18

Calling Buffer

p11-kit

issue was discovered in p11-kit 0

webkit2gtk

issue was resolved with additional restrictions on CSS compositing

librewolf, librewolf, librewolf, librewolf, librewolf

Mozilla developers reported memory safety bugs present in Firefox 85

libde265

Libde265 v1

net-snmp

handle_ipDefaultTTL in agent/mibgroup/ip-mib/ip_scalars

webkit2gtk

memory corruption vulnerability was addressed with improved locking

nodejs-23, nodejs18, nodejs18

In all versions of Node

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

Mozilla developers reported memory safety bugs present in Firefox 85 and Firefox ESR 78

libde265

Libde265 v1

net-snmp

net-snmp package in OpenBSD through 5

webkit2gtk

memory corruption issue was addressed with improved memory handling

librewolf, librewolf, librewolf, librewolf, librewolf

Firefox for Android suffered from a time-of-check-time-of-use vulnerability that allowed a malicious application to read sensitive data from application directories

nodejs-23, openssl1.1-compat, nodejs-current, nodejs18, nodejs18

OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack

libde265

Libde265 v1

webkit2gtk

logic issue was addressed with improved restrictions

librewolf, librewolf, librewolf, librewolf, librewolf

When accepting a malicious intent from other installed apps, Firefox for Android accepted manifests from arbitrary file paths and allowed declaring webapp manifests for other origins

libde265

Libde265 v1

nodejs-23, openssl1.1-compat, nodejs-current, nodejs18, nodejs18

OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack

webkit2gtk

type confusion issue was addressed with improved state handling

librewolf, librewolf, librewolf, librewolf, librewolf

developer page about:memory has a Measure function for exploring what object types the browser has allocated and their sizes

libde265

Libde265 v1

webkit2gtk

BubblewrapLauncher

nodejs-23, nodejs-current, nodejs18, nodejs18

Node

librewolf, librewolf, librewolf, librewolf, librewolf

DOMParser API did not properly process '<noscript>' elements for escaping

webkit2gtk

logic issue was addressed with improved state management

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

When trying to load a cross-origin resource in an audio/video context a decoding error may have resulted, and the content of that error may have revealed information about the resource

nodejs-23, nodejs-current, nodejs18, nodejs18

Node

webkit2gtk

logic issue was addressed with improved restrictions

librewolf, librewolf, librewolf, librewolf, librewolf

One phishing tactic on the web is to provide a link with HTTP Auth

nodejs-23, nodejs-current, nodejs18, nodejs18

Node

bridge

Adobe Bridge version 11

WebDyne versions from 2.031 before 3.022 for Perl execute files with .psp anywhere in the name as Perl pages

librewolf, librewolf, librewolf, librewolf, librewolf

When processing a redirect with a conflicting Referrer-Policy, Firefox would have adopted the redirect's Referrer-Policy

webkit2gtk

cross-origin issue in the IndexDB API was addressed with improved input validation

nodejs-23, nodejs-current, nodejs18, nodejs18

In Node