Latest CVE Feed
Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.
Authentication configured for an EJB JAX-WS endpoint in the TomEE deployment descriptor is not enforced when the endpoint is published within an existing web application. A remote unauthenticated att…
The Jakarta Security LDAP identity store does not neutralize special characters in the caller name before using it in directory queries. A remote unauthenticated attacker can alter the queries to enu…
V programming language standard library net.http through version 0.5.2 prior to commit 4077484 contains a TLS certificate validation bypass vulnerability that allows on-path attackers to intercept HT…
Summary Cloudflare tokio-quiche was found to contain an uncontrolled resource consumption vulnerability in its HTTP/3 DATAGRAM handling. For every previously unseen flow identifier (quarter stream …
Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox ESR 115.45.
Privilege escalation in the Nimbus Desktop Client component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
Same-origin policy bypass in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160.
Other issue in the SVG component. This vulnerability was fixed in Firefox 160.
Incorrect boundary conditions, use-after-free in the Graphics component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 160.
Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 160.
Invalid pointer in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 160.
Information disclosure in the Marionette component. This vulnerability was fixed in Firefox 160.
Use-after-free in the Layout component. This vulnerability was fixed in Firefox 160.
Invalid pointer in the DOM: Streams component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
Information disclosure in the Security: RLBox component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
Mitigation bypass in the Add-ons Manager component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
Other issue in the Media component in Firefox for Android. This vulnerability was fixed in Firefox 160.