|
257361
|
7.5 |
HIGH
Network
|
mozilla
|
firefox
|
A use-after-free during web animations when working with timelines resulting in a potentially exploitable crash. This vulnerability affects Firefox < 50.
|
CWE-416
Use After Free
|
CVE-2016-9068
|
2024-11-21 12:00 |
2018-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
257362
|
6.5 |
MEDIUM
Network
|
mozilla
|
firefox
|
Two use-after-free errors during DOM operations resulting in potentially exploitable crashes. This vulnerability affects Firefox < 50.
|
CWE-416
Use After Free
|
CVE-2016-9067
|
2024-11-21 12:00 |
2018-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
257363
|
7.5 |
HIGH
Network
|
mozilla debian
|
firefox thunderbird firefox_esr debian_linux
|
A buffer overflow resulting in a potentially exploitable crash due to memory allocation issues when handling large amounts of incoming data. This vulnerability affects Thunderbird < 45.5, Firefox ESR…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2016-9066
|
2024-11-21 12:00 |
2018-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
257364
|
7.5 |
HIGH
Network
|
mozilla
|
firefox
|
The location bar in Firefox for Android can be spoofed by forcing a user into fullscreen mode, blocking its exiting, and creating of a fake location bar without any user notification. Note: This issu…
|
CWE-20
Improper Input Validation
|
CVE-2016-9065
|
2024-11-21 12:00 |
2018-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
257365
|
5.9 |
MEDIUM
Network
|
mozilla
|
firefox firefox_esr
|
Add-on updates failed to verify that the add-on ID inside the signed package matched the ID of the add-on being updated. An attacker who could perform a man-in-the-middle attack on the user's connect…
|
CWE-295
Improper Certificate Validation
|
CVE-2016-9064
|
2024-11-21 12:00 |
2018-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
257366
|
9.8 |
CRITICAL
Network
|
mozilla debian python
|
firefox debian_linux python
|
An integer overflow during the parsing of XML using the Expat library. This vulnerability affects Firefox < 50.
|
CWE-190
Integer Overflow or Wraparound
|
CVE-2016-9063
|
2024-11-21 12:00 |
2018-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
257367
|
3.3 |
LOW
Local
|
mozilla
|
firefox
|
Private browsing mode leaves metadata information, such as URLs, for sites visited in "browser.db" and "browser.db-wal" files within the Firefox profile after the mode is exited. Note: This issue onl…
|
CWE-200
Information Exposure
|
CVE-2016-9062
|
2024-11-21 12:00 |
2018-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
257368
|
7.5 |
HIGH
Network
|
mozilla
|
firefox
|
A previously installed malicious Android application which defines a specific signature-level permissions used by Firefox can access API keys meant for Firefox only. Note: This issue only affects Fir…
|
CWE-275
Permission Issues
|
CVE-2016-9061
|
2024-11-21 12:00 |
2018-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
257369
|
5.9 |
MEDIUM
Network
|
ntp freebsd hpe siemens
|
ntp freebsd hpux-ntp simatic_net_cp_443-1_opc_ua_firmware
|
An exploitable denial of service vulnerability exists in the origin timestamp check functionality of ntpd 4.2.8p9. A specially crafted unauthenticated network packet can be used to reset the expected…
|
CWE-20
Improper Input Validation
|
CVE-2016-9042
|
2024-11-21 12:00 |
2018-06-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
257370
|
10.0 |
CRITICAL
Network
|
redlion
|
sixnet-managed_industrial_switches_firmware stride-managed_ethernet_switches_firmware
|
A hard-coded cryptographic key vulnerability was identified in Red Lion Controls Sixnet-Managed Industrial Switches running firmware Version 5.0.196 and Stride-Managed Ethernet Switches running firmw…
|
CWE-798
Use of Hard-coded Credentials
|
CVE-2016-9335
|
2024-11-21 12:00 |
2018-05-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|