| Max CVSS | 7.5 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2018-18497 | 4.3 |
Limitations on the URIs allowed to WebExtensions by the browser.windows.create API can be bypassed when a pipe in the URL field is used within the extension to load multiple pages as a single argument. This could allow a malicious WebExtension to ope
|
24-08-2020 - 17:37 | 28-02-2019 - 18:29 | |
| CVE-2018-18496 | 6.8 |
When the RSS Feed preview about:feeds page is framed within another page, it can be used in concert with scripted content for a clickjacking attack that confuses users into downloading and executing an executable file from a temporary directory. *Not
|
24-08-2020 - 17:37 | 28-02-2019 - 18:29 | |
| CVE-2018-18495 | 4.3 |
WebExtension content scripts can be loaded into about: pages in some circumstances, in violation of the permissions granted to extensions. This could allow an extension to interfere with the loading and usage of these pages and use capabilities that
|
24-08-2020 - 17:37 | 28-02-2019 - 18:29 | |
| CVE-2006-0143 | 7.5 |
Microsoft Windows Graphics Rendering Engine (GRE) allows remote attackers to corrupt memory and cause a denial of service (crash) via a WMF file containing (1) ExtCreateRegion or (2) ExtEscape function calls with arguments with inconsistent lengths.
|
30-04-2019 - 14:27 | 09-01-2006 - 20:03 | |
| CVE-2018-12407 | 7.5 |
A buffer overflow occurs when drawing and validating elements with the ANGLE graphics library, used for WebGL content, when working with the VertexBuffer11 module. This results in a potentially exploitable crash. This vulnerability affects Firefox <
|
01-03-2019 - 17:20 | 28-02-2019 - 18:29 | |
| CVE-2018-12406 | 6.8 |
Mozilla developers and community members reported memory safety bugs present in Firefox 63. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. Th
|
01-03-2019 - 15:35 | 28-02-2019 - 18:29 | |
| CVE-2007-5677 | 4.3 |
Cross-site scripting (XSS) vulnerability in shoutbox/blocco.php in Hackish BETA 1.1 allows remote attackers to inject arbitrary web script or HTML via the go_shout parameter.
|
15-10-2018 - 21:45 | 24-10-2007 - 23:46 | |
| CVE-2011-0538 | 6.8 |
Wireshark 1.2.0 through 1.2.14, 1.4.0 through 1.4.3, and 1.5.0 frees an uninitialized pointer during processing of a .pcap file in the pcap-ng format, which allows remote attackers to cause a denial of service (memory corruption) or possibly have uns
|
19-09-2017 - 01:32 | 08-02-2011 - 22:00 | |
| CVE-2002-2398 | 5.0 |
The new thread posting page in APBoard 2.02 and 2.03 allows remote attackers to post messages to protected forums by modifying the insertinto parameter.
|
05-09-2008 - 20:33 | 31-12-2002 - 05:00 |