Security
فارسی
All products

Red Hat Enterprise Linux 8/thunderbird:flatpak/thunderbird

Red Hat · Package
17 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
angular vulnerable to regular expression denial of service via the <input type="url"> elementCVE-2023-26118 · GHSA-QWQH-HM9M-P5HR angularOpenShift Service Mesh 2.1/servicemesh-grafana npmRed Hat Medium No fix reported
Angular vulnerable to Cross-site ScriptingCVE-2021-4231 · GHSA-C75V-2VQ8-878F @angular/core.NET Core 3.1 on Red Hat Enterprise Linux/rh-dotnet31-dotnet npmRed Hat Medium Fix reported
node-fetch forwards secure headers to untrusted sitesCVE-2022-0235 · GHSA-R683-J2X4-V87G node-fetch.NET Core 3.1 on Red Hat Enterprise Linux/rh-dotnet31-dotnet npmRed Hat High Fix reported
Uncontrolled Resource Consumption in HawkCVE-2022-29167 · GHSA-44PW-H2CW-W3VQ hawk.NET Core 5.0 on Red Hat Enterprise Linux/rh-dotnet50-dotnet npmRed Hat High Fix reported
thunderbird: Crafted email could trigger an out-of-bounds writeCVE-2022-0566 Red Hat Enterprise Linux 6/thunderbirdRed Hat Enterprise Linux 8/thunderbird:flatpak/thunderbird Red Hat Medium No fix reported
expat: Namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code executionCVE-2022-25236 Red Hat Enterprise Linux 8/firefox:flatpak/firefoxRed Hat Enterprise Linux 8/thunderbird:flatpak/thunderbird Red Hat High No fix reported
expat: Malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code executionCVE-2022-25235 Red Hat Enterprise Linux 8/firefox:flatpak/firefoxRed Hat Enterprise Linux 8/thunderbird:flatpak/thunderbird Red Hat High No fix reported
expat: Stack exhaustion in doctype parsingCVE-2022-25313 Red Hat Enterprise Linux 6/expatRed Hat Enterprise Linux 7/expat Red Hat Medium No fix reported
Mozilla: Use-after-free in XSLT parameter processingCVE-2022-26485 Red Hat Enterprise Linux 6/firefoxRed Hat Enterprise Linux 6/thunderbird Red Hat Critical No fix reported
Mozilla: Use-after-free in WebGPU IPC FrameworkCVE-2022-26486 Red Hat Enterprise Linux 6/firefoxRed Hat Enterprise Linux 6/thunderbird Red Hat Critical No fix reported
expat: a use-after-free in the doContent function in xmlparse.cCVE-2022-40674 Red Hat Enterprise Linux 8/firefox:flatpak/firefoxRed Hat Enterprise Linux 8/thunderbird:flatpak/thunderbird Red Hat High No fix reported
expat: use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreateCVE-2022-43680 Red Hat Enterprise Linux 6/compat-expat1Red Hat Enterprise Linux 6/expat Red Hat Medium No fix reported
nss: vulnerable to Minerva side-channel information leakCVE-2023-6135 Red Hat Enterprise Linux 6/firefoxRed Hat Enterprise Linux 6/nss Red Hat Medium No fix reported
expat: recursive XML entity expansion vulnerabilityCVE-2023-52426 Red Hat Enterprise Linux 6/expatRed Hat Enterprise Linux 7/expat Red Hat Medium No fix reported
expat: parsing large tokens can trigger a denial of serviceCVE-2023-52425 Red Hat Enterprise Linux 6/expatRed Hat Enterprise Linux 7/expat Red Hat Medium No fix reported
libvpx: Integer overflow in vpx_img_alloc()CVE-2024-5197 Red Hat Enterprise Linux 6/libvpxRed Hat Enterprise Linux 7/firefox Red Hat Medium No fix reported
libaom: Integer overflow in internal function img_alloc_helperCVE-2024-5171 Red Hat Enterprise Linux 7/firefoxRed Hat Enterprise Linux 7/thunderbird Red Hat Medium No fix reported