deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-23217
Published: 2024-01-23
Description: A privacy issue was addressed with improved handling of temporary files. This issue is fixed in iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, macOS Ventura 13.6.5, watchOS 10.3. An app may be able to bypass certain Privacy preferences.
CVSS Score: 3.3 (LOW)
CWE: CWE-922
References: https://support.apple.com/en-us/120304; https://support.apple.com/en-us/120306; https://support.apple.com/en-us/120309
CVE: CVE-2024-23218
Published: 2024-01-23
Description: A timing side-channel issue was addressed with improvements to constant-time computation in cryptographic functions. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.3 and iPadOS 17.3, macOS Monterey 12.7.4, macOS Sonoma 14.3, macOS Ventura 13.6.5, tvOS 17.3, watchOS 10.3. An attacker may be able to decrypt legacy RSA PKCS#1 v1.5 ciphertexts without having the private key.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-203, CWE-203
References: https://support.apple.com/en-us/120304; https://support.apple.com/en-us/120306; https://support.apple.com/en-us/120309
CVE: CVE-2024-23219
Published: 2024-01-23
Description: The issue was addressed with improved authentication. This issue is fixed in iOS 17.3 and iPadOS 17.3. Stolen Device Protection may be unexpectedly disabled.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-287, CWE-287
References: https://support.apple.com/en-us/120304; http://seclists.org/fulldisclosure/2024/Jan/33; https://support.apple.com/en-us/HT214059
CVE: CVE-2024-23222
Published: 2024-01-23
Description: A type confusion issue was addressed with improved checks. This issue is fixed in Safari 17.3, iOS 15.8.7 and iPadOS 15.8.7, iOS 16.7.5 and iPadOS 16.7.5, iOS 17.3 and iPadOS 17.3, macOS Monterey 12.7.3, macOS Sonoma 14.3, macOS Ventura 13.6.4, tvOS 17.3, visionOS 1.0.2. Processing maliciously crafted web content may lead to arbitrary code execution. This fix associated with the Coruna exploit was shipped in iOS 17.3 on January 22, 2024. This update brings that fix to devices that cannot update to the latest iOS version.
CVSS Score: 8.8 (HIGH)
CWE: CWE-843, CWE-843
References: https://support.apple.com/en-us/118479; https://support.apple.com/en-us/120304; https://support.apple.com/en-us/120305
CVE: CVE-2024-23223
Published: 2024-01-23
Description: A privacy issue was addressed with improved handling of files. This issue is fixed in iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, tvOS 17.3, watchOS 10.3. An app may be able to access sensitive user data.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-732
References: https://support.apple.com/en-us/120304; https://support.apple.com/en-us/120306; https://support.apple.com/en-us/120309
CVE: CVE-2024-23224
Published: 2024-01-23
Description: The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.3, macOS Ventura 13.6.4. An app may be able to access sensitive user data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://support.apple.com/en-us/120307; https://support.apple.com/en-us/120309; http://seclists.org/fulldisclosure/2024/Jan/36
CVE: CVE-2023-39197
Published: 2024-01-23
Description: An out-of-bounds read vulnerability was found in Netfilter Connection Tracking (conntrack) in the Linux kernel. This flaw allows a remote user to disclose sensitive information via the DCCP protocol.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://access.redhat.com/security/cve/CVE-2023-39197; https://bugzilla.redhat.com/show_bug.cgi?id=2218342; https://access.redhat.com/security/cve/CVE-2023-39197
CVE: CVE-2024-22768
Published: 2024-01-23
Description: Improper Input Validation in Hitron Systems DVR HVR-4781 1.03~4.02 allows an attacker to cause network attack in case of using defalut admin ID/PW.

CVSS Score: 7.4 (HIGH)
CWE: CWE-20, CWE-798
References: http://www.hitron.co.kr/firmware/; http://www.hitron.co.kr/firmware/
CVE: CVE-2024-22769
Published: 2024-01-23
Description: Improper Input Validation in Hitron Systems DVR HVR-8781 1.03~4.02 allows an attacker to cause network attack in case of using defalut admin ID/PW.
CVSS Score: 7.4 (HIGH)
CWE: CWE-20, CWE-798
References: http://www.hitron.co.kr/firmware/; http://www.hitron.co.kr/firmware/
CVE: CVE-2024-22770
Published: 2024-01-23
Description: Improper Input Validation in Hitron Systems DVR HVR-16781 1.03~4.02 allows an attacker to cause network attack in case of using defalut admin ID/PW.
CVSS Score: 7.4 (HIGH)
CWE: CWE-20, CWE-798
References: http://www.hitron.co.kr/firmware/; http://www.hitron.co.kr/firmware/
CVE: CVE-2024-22771
Published: 2024-01-23
Description: Improper Input Validation in Hitron Systems DVR LGUVR-4H 1.02~4.02 allows an attacker to cause network attack in case of using defalut admin ID/PW.
CVSS Score: 7.4 (HIGH)
CWE: CWE-20, CWE-798
References: http://www.hitron.co.kr/firmware/; http://www.hitron.co.kr/firmware/
CVE: CVE-2024-22772
Published: 2024-01-23
Description: Improper Input Validation in Hitron Systems DVR LGUVR-8H 1.02~4.02 allows an attacker to cause network attack in case of using defalut admin ID/PW.
CVSS Score: 7.4 (HIGH)
CWE: CWE-20, CWE-798
References: http://www.hitron.co.kr/firmware/; http://www.hitron.co.kr/firmware/
CVE: CVE-2024-23842
Published: 2024-01-23
Description: Improper Input Validation in Hitron Systems DVR LGUVR-16H 1.02~4.02 allows an attacker to cause network attack in case of using defalut admin ID/PW.
CVSS Score: 7.4 (HIGH)
CWE: CWE-20, CWE-798
References: http://www.hitron.co.kr/firmware/; http://www.hitron.co.kr/firmware/
CVE: CVE-2024-0587
Published: 2024-01-23
Description: The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'disqus_name' parameter in all versions up to, and including, 1.0.92.1 due to insufficient input sanitization and output escaping on the executed JS file. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/changeset/3024147/accelerated-mobile-pages/trunk/includes/disqus.html; https://www.wordfence.com/threat-intel/vulnerabilities/id/85ca96a6-7992-424b-8b88-9a[PII_REDACTED]?source=cve; https://plugins.trac.wordpress.org/changeset/3024147/accelerated-mobile-pages/trunk/includes/disqus.html
CVE: CVE-2024-23848
Published: 2024-01-23
Description: In the Linux kernel through 6.7.1, there is a use-after-free in cec_queue_msg_fh, related to drivers/media/cec/core/cec-adap.c and drivers/media/cec/core/cec-api.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416, CWE-416
References: https://lore.kernel.org/lkml/e9f42704-2f99-4f2c-ade5-f952e5fd53e5%40xs4all.nl/; https://lore.kernel.org/lkml/e9f42704-2f99-4f2c-ade5-f952e5fd53e5%40xs4all.nl/
CVE: CVE-2024-23849
Published: 2024-01-23
Description: In rds_recv_track_latency in net/rds/af_rds.c in the Linux kernel through 6.7.1, there is an off-by-one error for an RDS_MSG_RX_DGRAM_TRACE_MAX comparison, resulting in out-of-bounds access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-193, CWE-193
References: https://bugzilla.suse.com/show_bug.cgi?id=1219127; https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=13e788deb7348cc88df34bed736c3b3b9927ea52; https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html
CVE: CVE-2024-23850
Published: 2024-01-23
Description: In btrfs_get_root_ref in fs/btrfs/disk-io.c in the Linux kernel through 6.7.1, there can be an assertion failure and crash because a subvolume can be read out too soon after its root item is inserted upon subvolume creation.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-617
References: https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZOU3745CWCDZ7EMKMXB2OEEIB5Q3IWM/; https://lore.kernel.org/all/6a80cb4b32af89787dadee728310e5e2ca85343f[PII_REDACTED].git.wqu%40suse.com/
CVE: CVE-2024-23851
Published: 2024-01-23
Description: copy_params in drivers/md/dm-ioctl.c in the Linux kernel through 6.7.1 can attempt to allocate more than INT_MAX bytes, and crash, because of a missing param_kernel->data_size check. This is related to ctl_ioctl.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-190
References: https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html; https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZOU3745CWCDZ7EMKMXB2OEEIB5Q3IWM/
CVE: CVE-2023-46343
Published: 2024-01-23
Description: In the Linux kernel before 6.5.9, there is a NULL pointer dereference in send_acknowledge in net/nfc/nci/spi.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.5.9; https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=7937609cd387246aed994e81aa4fa951358fba41; https://github.com/torvalds/linux/commit/7937609cd387246aed994e81aa4fa951358fba41
CVE: CVE-2024-23180
Published: 2024-01-23
Description: Improper input validation vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ver.2.11.x series versions prior to Ver.2.11.58, Ver.2.10.x series versions prior to Ver.2.10.50, and Ver.2.9.0 and earlier allows a remote authenticated attacker to execute arbitrary code by uploading a specially crafted SVG file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://developer.a-blogcms.jp/blog/news/JVN-34565930.html; https://jvn.jp/en/jp/JVN34565930/; https://developer.a-blogcms.jp/blog/news/JVN-34565930.html
CVE: CVE-2024-23181
Published: 2024-01-23
Description: Cross-site scripting vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ver.2.11.x series versions prior to Ver.2.11.58, Ver.2.10.x series versions prior to Ver.2.10.50, and Ver.2.9.0 and earlier allows a remote unauthenticated attacker to execute an arbitrary script on the logged-in user's web browser.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://developer.a-blogcms.jp/blog/news/JVN-34565930.html; https://jvn.jp/en/jp/JVN34565930/; https://developer.a-blogcms.jp/blog/news/JVN-34565930.html
CVE: CVE-2024-23182
Published: 2024-01-23
Description: Relative path traversal vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ver.2.11.x series versions prior to Ver.2.11.58, Ver.2.10.x series versions prior to Ver.2.10.50, and Ver.2.9.0 and earlier allows a remote authenticated attacker to delete arbitrary files on the server.
CVSS Score: 8.1 (HIGH)
CWE: CWE-22, CWE-22
References: https://developer.a-blogcms.jp/blog/news/JVN-34565930.html; https://jvn.jp/en/jp/JVN34565930/; https://developer.a-blogcms.jp/blog/news/JVN-34565930.html
CVE: CVE-2024-23183
Published: 2024-01-23
Description: Cross-site scripting vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ver.2.11.x series versions prior to Ver.2.11.58, Ver.2.10.x series versions prior to Ver.2.10.50, and Ver.2.9.0 and earlier allows a remote authenticated attacker to execute an arbitrary script on the logged-in user's web browser.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://developer.a-blogcms.jp/blog/news/JVN-34565930.html; https://jvn.jp/en/jp/JVN34565930/; https://developer.a-blogcms.jp/blog/news/JVN-34565930.html
CVE: CVE-2024-23348
Published: 2024-01-23
Description: Improper input validation vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ver.2.11.x series versions prior to Ver.2.11.58, Ver.2.10.x series versions prior to Ver.2.10.50, and Ver.2.9.0 and earlier allows a remote authenticated attacker to execute arbitrary JavaScript code by uploading a specially crafted SVG file.
CVSS Score: 8.8 (HIGH)
References: https://developer.a-blogcms.jp/blog/news/JVN-34565930.html; https://jvn.jp/en/jp/JVN34565930/; https://developer.a-blogcms.jp/blog/news/JVN-34565930.html
CVE: CVE-2023-51042
Published: 2024-01-23
Description: In the Linux kernel before 6.4.12, amdgpu_cs_wait_all_fences in drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c has a fence use-after-free.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.4.12; https://github.com/torvalds/linux/commit/2e54154b9f27262efd0cb4f903cc7d5ad1fe9628; https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.4.12
CVE: CVE-2023-51043
Published: 2024-01-23
Description: In the Linux kernel before 6.4.5, drivers/gpu/drm/drm_atomic.c has a use-after-free during a race condition between a nonblocking atomic commit and a driver unload.
CVSS Score: 7.0 (HIGH)
CWE: CWE-416, CWE-416
References: https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.4.5; https://github.com/torvalds/linux/commit/4e076c73e4f6e90816b30fcd4a0d7ab365087255; https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.4.5
CVE: CVE-2024-0703
Published: 2024-01-23
Description: The Sticky Buttons – floating buttons builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via sticky URLs in all versions up to, and including, 3.2.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3024941%40sticky-buttons&new=3024941%40sticky-buttons&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/b3c070be-e955-4076-9878-0b[PII_REDACTED]?source=cve; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3024941%40sticky-buttons&new=3024941%40sticky-buttons&sfp_email=&sfph_mail=
CVE: CVE-2024-22076
Published: 2024-01-23
Description: MyQ Print Server before 8.2 patch 43 allows remote authenticated administrators to execute arbitrary code via PHP scripts that are reached through the administrative interface.
CVSS Score: 9.8 (CRITICAL)
References: https://docs.myq-solution.com/en/print-server/8.2/; https://docs.myq-solution.com/en/print-server/8.2/technical-changelog#id-%288.2%29ReleaseNotes-8.2%28Patch43%29; https://www.access42.nl/nieuws/unmasking-web-vulnerabilities-a-tale-of-default-admin-credentials-and-php-command-execution-cve-2024-22076/
CVE: CVE-2024-22705
Published: 2024-01-23
Description: An issue was discovered in ksmbd in the Linux kernel before 6.6.10. smb2_get_data_area_len in fs/smb/server/smb2misc.c can cause an smb_strndup_from_utf16 out-of-bounds access because the relationship between Name data and CreateContexts data is mishandled.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-125
References: https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.10; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=d10c77873ba1e9e6b91905018e29e196fd5f863d; https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.10
CVE: CVE-2023-44401
Published: 2024-01-23
Description: The Silverstripe CMS GraphQL Server serves Silverstripe data as GraphQL representations. In versions 4.0.0 prior to 4.3.7 and 5.0.0 prior to 5.1.3, `canView` permission checks are bypassed for ORM data in paginated GraphQL query results where the total number of records is greater than the number of records per page. Note that this also affects GraphQL queries which have a limit applied, even if the query isn’t paginated per se. This has been fixed in versions 4.3.7 and 5.1.3 by ensuring no new records are pulled in from the database after performing `canView` permission checks for each page of results. This may result in some pages in the query results having less than the maximum number of records per page even when there are more pages of results. This behavior is consistent with how pagination works in other areas of Silverstripe CMS, such as in `GridField`, and is a result of having to perform permission checks in PHP rather than in the database directly. One may disable these permission checks by disabling the `CanViewPermission` plugin.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-863
References: https://github.com/silverstripe/silverstripe-graphql/security/advisories/GHSA-jgph-w8rh-xf5p; https://www.silverstripe.org/download/security-releases/CVE-2023-44401; https://github.com/silverstripe/silverstripe-graphql/security/advisories/GHSA-jgph-w8rh-xf5p
CVE: CVE-2023-48714
Published: 2024-01-23
Description: Silverstripe Framework is the framework that forms the base of the Silverstripe content management system. Prior to versions 4.13.39 and 5.1.11, if a user should not be able to see a record, but that record can be added to a `GridField` using the `GridFieldAddExistingAutocompleter` component, the record's title can be accessed by that user. Versions 4.13.39 and 5.1.11 contain a fix for this issue.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200, CWE-732
References: https://github.com/silverstripe/silverstripe-framework/security/advisories/GHSA-qm2j-qvq3-j29v; https://www.silverstripe.org/download/security-releases/CVE-2023-48714; https://github.com/silverstripe/silverstripe-framework/security/advisories/GHSA-qm2j-qvq3-j29v
CVE: CVE-2023-49783
Published: 2024-01-23
Description: Silverstripe Admin provides a basic management interface for the Silverstripe Framework. In versions on the 1.x branch prior to 1.13.19 and on the 2.x branch prior to 2.1.8, users who don't have edit or delete permissions for records exposed in a `ModelAdmin` can still edit or delete records using the CSV import form, provided they have create permissions. The likelihood of a user having create permissions but not having edit or delete permissions is low, but it is possible. Note that this doesn't affect any `ModelAdmin` which has had the import form disabled via the `showImportForm` public property. Versions 1.13.19 and 2.1.8 contain a patch for the issue. Those who have a custom implementation of `BulkLoader` should update their implementations to respect permissions when the return value of `getCheckPermissions()` is true. Those who use any `BulkLoader` in their own project logic, or maintain a module which uses it, should consider passing `true` to `setCheckPermissions()` if the data is provided by users.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-863
References: https://github.com/silverstripe/silverstripe-admin/security/advisories/GHSA-j3m6-gvm8-mhvw; https://www.silverstripe.org/download/security-releases/CVE-2023-49783; https://github.com/silverstripe/silverstripe-admin/security/advisories/GHSA-j3m6-gvm8-mhvw
CVE: CVE-2024-0741
Published: 2024-01-23
Description: An out of bounds write in ANGLE could have allowed an attacker to corrupt memory leading to a potentially exploitable crash. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunderbird < 115.7.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1864587; https://lists.debian.org/debian-lts-announce/2024/01/msg00015.html; https://lists.debian.org/debian-lts-announce/2024/01/msg00022.html
CVE: CVE-2024-0742
Published: 2024-01-23
Description: It was possible for certain browser prompts and dialogs to be activated or dismissed unintentionally by the user due to an incorrect timestamp used to prevent input after page load. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunderbird < 115.7.
CVSS Score: 4.3 (MEDIUM)
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1867152; https://lists.debian.org/debian-lts-announce/2024/01/msg00015.html; https://lists.debian.org/debian-lts-announce/2024/01/msg00022.html
CVE: CVE-2024-0743
Published: 2024-01-23
Description: An unchecked return value in TLS handshake code could have caused a potentially exploitable crash. This vulnerability affects Firefox < 122, Firefox ESR < 115.9, and Thunderbird < 115.9.
CVSS Score: 7.5 (HIGH)
CWE: CWE-252, CWE-252
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1867408; https://lists.debian.org/debian-lts-announce/2024/03/msg00010.html; https://lists.debian.org/debian-lts-announce/2024/03/msg00022.html
CVE: CVE-2024-0744
Published: 2024-01-23
Description: In some circumstances, JIT compiled code could have dereferenced a wild pointer value. This could have led to an exploitable crash. This vulnerability affects Firefox < 122.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119, CWE-119
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1871089; https://www.mozilla.org/security/advisories/mfsa2024-01/; https://bugzilla.mozilla.org/show_bug.cgi?id=1871089
CVE: CVE-2024-0745
Published: 2024-01-23
Description: The WebAudio `OscillatorNode` object was susceptible to a stack buffer overflow. This could have led to a potentially exploitable crash. This vulnerability affects Firefox < 122.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787, CWE-121, CWE-787
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1871838; https://www.mozilla.org/security/advisories/mfsa2024-01/; https://bugzilla.mozilla.org/show_bug.cgi?id=1871838
CVE: CVE-2024-0746
Published: 2024-01-23
Description: A Linux user opening the print preview dialog could have caused the browser to crash. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunderbird < 115.7.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-416
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1660223; https://lists.debian.org/debian-lts-announce/2024/01/msg00015.html; https://lists.debian.org/debian-lts-announce/2024/01/msg00022.html
CVE: CVE-2024-0747
Published: 2024-01-23
Description: When a parent page loaded a child in an iframe with `unsafe-inline`, the parent Content Security Policy could have overridden the child Content Security Policy. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunderbird < 115.7.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-693
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1764343; https://lists.debian.org/debian-lts-announce/2024/01/msg00015.html; https://lists.debian.org/debian-lts-announce/2024/01/msg00022.html
CVE: CVE-2024-0748
Published: 2024-01-23
Description: A compromised content process could have updated the document URI. This could have allowed an attacker to set an arbitrary URI in the address bar or history. This vulnerability affects Firefox < 122.
CVSS Score: 4.3 (MEDIUM)
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1783504; https://www.mozilla.org/security/advisories/mfsa2024-01/; https://bugzilla.mozilla.org/show_bug.cgi?id=1783504
CVE: CVE-2024-0749
Published: 2024-01-23
Description: A phishing site could have repurposed an `about:` dialog to show phishing content with an incorrect origin in the address bar. This vulnerability affects Firefox < 122 and Thunderbird < 115.7.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-346, CWE-346
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1813463; https://lists.debian.org/debian-lts-announce/2024/01/msg00015.html; https://lists.debian.org/debian-lts-announce/2024/01/msg00022.html
CVE: CVE-2024-0750
Published: 2024-01-23
Description: A bug in popup notifications delay calculation could have made it possible for an attacker to trick a user into granting permissions. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunderbird < 115.7.
CVSS Score: 8.8 (HIGH)
CWE: CWE-451
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1863083; https://lists.debian.org/debian-lts-announce/2024/01/msg00015.html; https://lists.debian.org/debian-lts-announce/2024/01/msg00022.html
CVE: CVE-2024-0751
Published: 2024-01-23
Description: A malicious devtools extension could have been used to escalate privileges. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunderbird < 115.7.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269, CWE-269
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1865689; https://lists.debian.org/debian-lts-announce/2024/01/msg00015.html; https://lists.debian.org/debian-lts-announce/2024/01/msg00022.html