Canonical

Ubuntu Linux

4106 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
10

CVE-2008-5017

  • EPSS 17.42%
  • Published 13.11.2008 11:30:01
  • Last modified 09.04.2025 00:30:58

Integer overflow in xpcom/io/nsEscape.cpp in the browser engine in Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (c...

10

CVE-2008-5018

  • EPSS 20.19%
  • Published 13.11.2008 11:30:01
  • Last modified 09.04.2025 00:30:58

The JavaScript engine in Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) via vectors related to "insufficient...

4.3

CVE-2008-5019

  • EPSS 12.82%
  • Published 13.11.2008 11:30:01
  • Last modified 09.04.2025 00:30:58

The session restore feature in Mozilla Firefox 3.x before 3.0.4 and 2.x before 2.0.0.18 allows remote attackers to violate the same origin policy to conduct cross-site scripting (XSS) attacks and execute arbitrary JavaScript with chrome privileges vi...

9.3

CVE-2008-5021

  • EPSS 25.26%
  • Published 13.11.2008 11:30:01
  • Last modified 09.04.2025 00:30:58

nsFrameManager in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by modifying pr...

7.5

CVE-2008-5022

  • EPSS 13.45%
  • Published 13.11.2008 11:30:01
  • Last modified 09.04.2025 00:30:58

The nsXMLHttpRequest::NotifyEventListeners method in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to bypass the same-origin policy and execute arbitrar...

7.5

CVE-2008-5023

  • EPSS 18.39%
  • Published 13.11.2008 11:30:01
  • Last modified 09.04.2025 00:30:58

Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to bypass the protection mechanism for codebase principals and execute arbitrary script via the -moz-binding CSS property in a signed JAR f...

7.5

CVE-2008-5024

Exploit
  • EPSS 7.22%
  • Published 13.11.2008 11:30:01
  • Last modified 09.04.2025 00:30:58

Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 do not properly escape quote characters used for XML processing, which allows remote attackers to conduct XML injection at...

5.9

CVE-2008-4989

  • EPSS 0.39%
  • Published 13.11.2008 01:00:01
  • Last modified 09.04.2025 00:30:58

The _gnutls_x509_verify_certificate function in lib/x509/verify.c in libgnutls in GnuTLS before 2.6.1 trusts certificate chains in which the last certificate is an arbitrary trusted, self-signed certificate, which allows man-in-the-middle attackers t...

7.8

CVE-2008-4934

  • EPSS 0.76%
  • Published 05.11.2008 15:00:14
  • Last modified 09.04.2025 00:30:58

The hfsplus_block_allocate function in fs/hfsplus/bitmap.c in the Linux kernel before 2.6.28-rc1 does not check a certain return value from the read_mapping_page function before calling kmap, which allows attackers to cause a denial of service (syste...

7.5

CVE-2008-4577

  • EPSS 1.1%
  • Published 15.10.2008 20:08:02
  • Last modified 09.04.2025 00:30:58

The ACL plugin in Dovecot before 1.1.4 treats negative access rights as if they are positive access rights, which allows attackers to bypass intended access restrictions.