2019

In pfSense 2.4.4_1, blocking of source IP addresses on the basis of failed HTTPS authentication is inconsistent with blo

The expiretable configuration in pfSense 2.4.4_1 establishes block durations that are incompatible with the block durati

The Glen Dimplex Deutschland GmbH implementation of the Carel pCOWeb configuration tool allows remote attackers to obtai

Amazon Ring Doorbell before 3.4.7 mishandles encryption, which allows attackers to obtain audio and video data, or inser

In MISP 2.4.102, an authenticated user can view sightings that they should not be eligible for. Exploiting this requires

Pangea Communications Internet FAX ATA all Versions 3.1.8 and prior allow an attacker to bypass user authentication usin

Delta Industrial Automation CNCSoft, CNCSoft ScreenEditor Version 1.00.84 and prior. An out-of-bounds read vulnerability

Cscape, 9.80 SP4 and prior. An improper input validation vulnerability may be exploited by processing specially crafted

A vulnerability in the update service of Cisco Webex Meetings Desktop App and Cisco Webex Productivity Tools for Windows

A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless

A same-origin policy violation allowing the theft of cross-origin URL entries when using a meta http-equiv="refresh" on

A potential vulnerability leading to an integer overflow can occur during buffer size calculations for images when a raw

Limitations on the URIs allowed to WebExtensions by the browser.windows.create API can be bypassed when a pipe in the UR

When the RSS Feed preview about:feeds page is framed within another page, it can be used in concert with scripted conten

WebExtension content scripts can be loaded into about: pages in some circumstances, in violation of the permissions gran

A same-origin policy violation allowing the theft of cross-origin URL entries when using the Javascript location propert

A buffer overflow can occur in the Skia library during buffer offset calculations with hardware accelerated canvas 2D ac

A use-after-free vulnerability can occur after deleting a selection element due to a weak reference to the select elemen

A buffer overflow occurs when drawing and validating elements with the ANGLE graphics library, used for WebGL content, w

Mozilla developers and community members reported memory safety bugs present in Firefox 63. Some of these bugs showed ev

Mozilla developers and community members reported memory safety bugs present in Firefox 63 and Firefox ESR 60.3. Some of

If a site is loaded over a HTTPS connection but loads a favicon resource over HTTP, the mixed content warning is not dis

The internal WebBrowserPersist code does not use correct origin context for a resource being saved. This manifests when

Some special resource URIs will cause a non-exploitable crash if loaded with optional parameters following a '?' in the

In private browsing mode on Firefox for Android, favicons are cached in the cache/icons folder as they are in non-privat

When a new protocol handler is registered, the API accepts a title argument which can be used to mislead users about whi

By using the reflected URL in some special resource URIs, such as chrome:, it is possible to inject stylesheets and bypa

A WebExtension can request access to local files without the warning prompt stating that the extension will "Access your

A vulnerability where a WebExtension can run content scripts in disallowed contexts following navigation or other events

By rewriting the Host: request headers using the webRequest API, a WebExtension can bypass domain restrictions through d

A potential vulnerability was found in 32-bit builds where an integer overflow during the conversion of scripts to an in

When manipulating user events in nested loops while opening a document through script, it is possible to trigger a poten

During HTTP Live Stream playback on Firefox for Android, audio data can be accessed across origins in violation of secur

Mozilla developers and community members reported memory safety bugs present in Firefox 62 and Firefox ESR 60.2. Some of

Mozilla developers and community members reported memory safety bugs present in Firefox ESR 60.2. Some of these bugs sho

Mozilla developers and community members reported memory safety bugs present in Firefox 62. Some of these bugs showed ev

The permissions on /proc/iomem were world-readable. This could lead to local information disclosure with no additional e

In several functions of binder.c, there is possible memory corruption due to a use after free. This could lead to local

In binder_alloc_free_page of binder_alloc.c, there is a possible double free due to improper locking. This could lead to

In event_handler of keymaster_app.c, there is possible resource exhaustion due to a table being lost on reboot. This cou

In random_get_bytes of random.c, there is a possible degradation of randomness due to an insecure default value. This co

In avrc_pars_browse_rsp of avrc_pars_ct.cc, there is a possible out of bounds read due to a missing bounds check. This c

In ComposeActivityEmail of ComposeActivityEmail.java, there is a possible way to silently attach files to an email due t

In refresh of DevelopmentTiles.java, there is the possibility of leaving development settings accessible due to an insec

In register_app of btif_hd.cc, there is a possible memory corruption due to an integer overflow. This could lead to loca

In bta_hl_sdp_query_results of bta_hl_main.cc, there is a possible use-after-free due to a race condition. This could le

In btif_dm_data_copy of btif_core.cc, there is a possible out of bounds write due to a buffer overflow. This could lead

In sample6 of SkSwizzler.cpp, there is a possible out of bounds write due to improper input validation. This could lead

In onSetSampleX of SkSwizzler.cpp, there is a possible out of bounds write due to a missing bounds check. This could lea

In SkSwizzler::onSetSampleX of SkSwizzler.cpp, there is a possible out of bounds write due to a missing bounds check. Th