thunderbird-l10n vulnerabilities (Mageia)
1,570 vulnerabilities.
thunderbird-l10nMageiaWhen pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer...6.1 Mediumthunderbird-l10nMageiaWhen running, the updater service wrote status and log files to an unrestricted location;...7.8 Highthunderbird-l10nMageiaInappropriate implementation in WebRTC in Google Chrome prior to 79.0.3945.79 allowed a remote...6.5 Mediumthunderbird-l10nMageiaMozilla developers reported memory safety bugs present in Firefox 70 and Firefox ESR 68.2. Some...8.8 Highthunderbird-l10nMageiaUnder certain conditions, when retrieving a document from a DocShell in the antitracking code, a...7.5 Highthunderbird-l10nMageiaUnder certain conditions, when checking the Resist Fingerprinting preference during device...7.5 Highthunderbird-l10nMageiaWhen using nested workers, a use-after-free could occur during worker destruction. This resulted...8.8 Highthunderbird-l10nMageiaThe plain text serializer used a fixed-size array for the number of <ol> elements it could...8.8 Highthunderbird-l10nMageiaMozilla community member Philipp reported a memory safety bug present in Firefox 68 when 360...8.8 Highthunderbird-l10nMageiaMozilla developers and community members reported memory safety bugs present in Firefox 69 and...8.8 Highthunderbird-l10nMageiaFailure to correctly handle null bytes when processing HTML entities resulted in Firefox...6.1 Mediumthunderbird-l10nMageiaIf two same-origin documents set document.domain differently to become cross-origin, it was...6.1 Mediumthunderbird-l10nMageiaBy using a form with a data URI it was possible to gain access to the privileged JSONView object...5.4 Mediumthunderbird-l10nMageiaA fixed-size stack buffer could overflow in nrappkit when doing WebRTC signaling. This resulted...8.8 Highthunderbird-l10nMageiaAn attacker could have caused 4 bytes of HMAC output to be written past the end of a buffer...8.8 Highthunderbird-l10nMageiaWhen following the value's prototype chain, it was possible to retain a reference to a locale,...8.8 Highthunderbird-l10nMageiaA crafted S/MIME message consisting of an inner encryption layer and an outer SignedData layer...7.5 Highthunderbird-l10nMageiaEncrypted S/MIME parts in a crafted multipart/alternative message can leak plaintext when...6.5 Mediumthunderbird-l10nMageiaIn libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing...7.5 Highthunderbird-l10nMageiaIt is possible to delete an IndexedDB key value and subsequently try to extract it during...8.8 Highthunderbird-l10nMageiaA use-after-free vulnerability can occur while manipulating video elements if the body is freed...8.8 Highthunderbird-l10nMageiaSome HTML elements, such as <title> and <textarea>, can contain literal angle...6.1 Mediumthunderbird-l10nMageiaNavigation events were not fully adhering to the W3C's "Navigation-Timing Level 2" draft...3.7 Lowthunderbird-l10nMageiaA same-origin policy violation occurs allowing the theft of cross-origin images through a...6.5 Mediumthunderbird-l10nMageiaMozilla developers and community members reported memory safety bugs present in Firefox 68,...8.8 Highthunderbird-l10nMageiaAs part of a winning Pwn2Own entry, a researcher demonstrated a sandbox escape by installing a...8.3 Highthunderbird-l10nMageiaA vulnerability exists where if a user opens a locally saved HTML file, this file can use file:...6.5 Mediumthunderbird-l10nMageiaEmpty or malformed p256-ECDH public keys may trigger a segmentation fault due values being...7.5 Highthunderbird-l10nMageiaThe HTTP Alternative Services header, Alt-Svc, can be used by a malicious site to scan all TCP...4.7 Mediumthunderbird-l10nMageiaA vulnerability exists where it possible to force Network Security Services (NSS) to sign...5.3 Mediumthunderbird-l10nMageiaWhen a user navigates to site marked as unsafe by the Safebrowsing API, warning messages are...6.5 Mediumthunderbird-l10nMageiaApplication permissions give additional remote troubleshooting permission to the site input...6.1 Mediumthunderbird-l10nMageiaA vulnerability exists during the installation of add-ons where the initial fetch ignored the...7.5 Highthunderbird-l10nMageiaThe unicode latin 'kra' character can be used to spoof a standard 'k' character in the addressbar...6.5 Mediumthunderbird-l10nMageiaSome unicode characters are incorrectly treated as whitespace during the parsing of web content...6.1 Mediumthunderbird-l10nMageiaWhen importing a curve25519 private key in PKCS#8format with leading 0x00 bytes, it is possible...7.5 Highthunderbird-l10nMageiaA vulnerability exists where the caret ("^") character is improperly escaped constructing some...5.3 Mediumthunderbird-l10nMageiaUntil explicitly accessed by script, window.globalThis is not enumerable and, as a result, is not...8.3 Highthunderbird-l10nMageiaDue to an error while parsing page content, it is possible for properly sanitized user input to...6.1 Mediumthunderbird-l10nMageiaNecko can access a child on the wrong thread during UDP connections, resulting in a potentially...9.8 Criticalthunderbird-l10nMageiaA use-after-free vulnerability can occur in HTTP/2 when a cached HTTP/2 stream is closed while...9.8 Criticalthunderbird-l10nMageiaPOST requests made by NPAPI plugins, such as Flash, that receive a status 308 redirect response...8.8 Highthunderbird-l10nMageiaWhen an inner window is reused, it does not consider the use of document.domain for cross-origin...8.8 Highthunderbird-l10nMageiaMozilla developers and community members reported memory safety bugs present in Firefox 67. Some...9.8 Criticalthunderbird-l10nMageiaMozilla developers and community members reported memory safety bugs present in Firefox 67 and...9.8 Criticalthunderbird-l10nMageiaInsufficient vetting of parameters passed with the Prompt:Open IPC message between child and...10.0 Criticalthunderbird-l10nMageiaA type confusion vulnerability can occur when manipulating JavaScript objects due to issues in...8.8 Highthunderbird-l10nMageiaA flaw in Thunderbird's implementation of iCal causes a type confusion in...7.5 Highthunderbird-l10nMageiaA flaw in Thunderbird's implementation of iCal causes a stack buffer overflow in...9.8 Criticalthunderbird-l10nMageiaA flaw in Thunderbird's implementation of iCal causes a heap buffer overflow in...9.8 Critical- Show moreLoading…