2018

An issue was discovered in the Ldap component in Symfony 2.8.x before 2.8.37, 3.3.x before 3.3.17, 3.4.x before 3.4.7, a

A use-after-free vulnerability exists in DOMProxyHandler::EnsureExpandoObject in Pale Moon before 27.9.3.

acccheck.pl in acccheck 0.2.1 allows Command Injection via shell metacharacters in a username or password file, as demon

An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the GET user parameter.

An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the GET sort_direction parame

An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exist in ladder/stats.php via the GET type parameter.

An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the GET game parameter.

An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the POST user_search paramete

The web server on Western Digital TV Media Player 1.03.07 and TV Live Hub 3.12.13 allow unauthenticated remote attackers

SAP UI5 did not validate user input before adding it to the DOM structure. This may lead to malicious user-provided Java

The VMware AirWatch Agent for Android prior to 8.2 and AirWatch Agent for Windows Mobile prior to 6.5.2 contain a remote

Mozilla developers backported selected changes in the Skia library. These changes correct memory corruption issues inclu

An integer overflow can occur in the Skia library due to 32-bit integer use in an array without integer overflow checks,

A use-after-free vulnerability can occur while adjusting layout during SVG animations with text paths. This results in a

A use-after-free vulnerability can occur while enumerating attributes during SVG animations with clip paths. This result

Memory safety bugs were reported in Firefox 59. Some of these bugs showed evidence of memory corruption and we presume t

Memory safety bugs were reported in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7. Some of these bugs showed eviden

A use-after-free vulnerability can occur in the compositor during certain graphics operations when a raw pointer is used

The libtremor library has the same flaw as CVE-2018-5146. This library is used by Firefox in place of libvorbis on Andro

Memory safety bugs were reported in Firefox ESR 52.6. These bugs showed evidence of memory corruption and we presume tha

A use-after-free vulnerability can occur when manipulating elements, events, and selection ranges during editor operatio

Memory safety bugs were reported in Firefox 58. Some of these bugs showed evidence of memory corruption and we presume t

A potential integer overflow in the "DoCrypt" function of WebCrypto was identified. If a means was found of exploiting i

WebExtensions with the "ActiveTab" permission are able to access frames hosted within the active tab even if the frames

A use-after-free vulnerability can occur during font face manipulation when a font face is freed while still in use, res

A use-after-free vulnerability can occur during mouse event handling due to issues with multiprocess support. This resul

A use-after-free vulnerability can occur when manipulating HTML media elements with media streams, resulting in a potent

A use-after-free vulnerability can occur when the widget listener is holding strong references to browser objects that h

A use-after-free vulnerability can occur when form input elements, focus, and selections are manipulated by script conte

A use-after-free vulnerability can occur during XSL transformations when the source document for the transformation is m

A use-after-free vulnerability can occur while editing events in form elements on a page, resulting in a potentially exp

An integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with at l

A use-after-free vulnerability can occur when the thread for a Web Worker is freed from memory prematurely instead of fr

A use-after-free vulnerability can occur during WebRTC connections when interacting with the DTMF timers. This results i

Memory safety bugs were reported in Firefox 57. Some of these bugs showed evidence of memory corruption and we presume t

Memory safety bugs were reported in Firefox 57 and Firefox ESR 52.5. Some of these bugs showed evidence of memory corrup

A use-after-free vulnerability can occur when flushing and resizing layout because the "PressShell" object has been free

Memory safety bugs were reported in Firefox 56. Some of these bugs showed evidence of memory corruption and we presume t

Memory safety bugs were reported in Firefox 56 and Firefox ESR 52.4. Some of these bugs showed evidence of memory corrup

A buffer overflow occurs when drawing and validating elements with the ANGLE graphics library, used for WebGL content. T

A vulnerability where WebExtensions can download and attempt to open a file of some non-executable file types. This can

A use-after-free vulnerability can occur in design mode when image objects are resized if objects referenced during the

A use-after-free vulnerability can occur when manipulating arrays of Accessible Rich Internet Applications (ARIA) elemen

Memory safety bugs were reported in Firefox 55. Some of these bugs showed evidence of memory corruption and we presume t

Memory safety bugs were reported in Firefox 55 and Firefox ESR 52.3. Some of these bugs showed evidence of memory corrup

A use-after-free vulnerability can occur when an editor DOM node is deleted prematurely during tree traversal while stil

A use-after-free vulnerability can occur when manipulating the DOM during the resize event of an image element. If these

A use-after-free vulnerability can occur while re-computing layout for a "marquee" element during window resizing where

A use-after-free vulnerability can occur in WebSockets when the object holding the connection is freed before the discon

A use-after-free vulnerability can occur in the Fetch API when the worker or the associated window are freed when still