CVE-2023-0547
OCSP revocation status of recipient certificates was not checked when sending S/Mime encrypted email, and revoked certificates would be accepted. Thunderbird versions […]
İçeriği inceleyinALLSAFE / Güncel Güvenlik Açıkları
Güvenlik Açıkları
NIST NVD, USOM / Siber Güvenlik Başkanlığı ve Exploit-DB kaynaklarından güvenlik bildirimleri. Etkilenen ürün ve sürümleri özgün kaynakta doğrulayın.
Kayıtlar kaynakların yayın tarihleri ve özgün içerikleriyle sunulur. Bir kaydın bulunması, kurumunuzun etkilendiğini tek başına göstermez. Sürüm ve yapılandırmayı kontrol ederek üreticinin güncel önerilerini değerlendirin.
CVE-2023-0616
If a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeatedly attempts to process and display the […]
İçeriği inceleyinCVE-2023-0767
An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory writes via PKCS […]
İçeriği inceleyinCVE-2023-1945
Unexpected data returned from the Safe Browsing API could have led to memory corruption and a potentially exploitable crash. This vulnerability affects […]
İçeriği inceleyinCVE-2023-23597
A compromised web child process could disable web security opening restrictions, leading to a new child process being spawned within the file:// […]
İçeriği inceleyinCVE-2023-23598
Due to the Firefox GTK wrapper code’s use of text/plain for drag data and GTK treating all text/plain MIMEs containing file URLs […]
İçeriği inceleyinCVE-2023-23599
When copying a network request from the developer tools panel as a curl command the output was not being properly sanitized and […]
İçeriği inceleyinCVE-2023-23600
Per origin notification permissions were being stored in a way that didn’t take into account what browsing context the permission was granted […]
İçeriği inceleyinCVE-2023-23601
Navigations were being allowed when dragging a URL from a cross-origin iframe into the same tab which could lead to website spoofing […]
İçeriği inceleyinCVE-2023-23602
A mishandled security check when creating a WebSocket in a WebWorker caused the Content Security Policy connect-src header to be ignored. This […]
İçeriği inceleyinCVE-2023-23603
Regular expressions used to filter out forbidden properties and values from style directives in calls to console.log weren’t accounting for external URLs. […]
İçeriği inceleyinCVE-2023-23604
A duplicate SystemPrincipal object could be created when parsing a non-system html document via DOMParser::ParseFromSafeString. This could have lead to bypassing web […]
İçeriği inceleyin