https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 13:26:01 +0000 https://vulnerability.circl.lu/vuln/cve-2020-6821 <p><strong>Affected:</strong> Mozilla Thunderbird, Mozilla Firefox ESR, Mozilla Firefox</p> <p>When reading from areas partially or fully outside the source resource with WebGL&#39;s &lt;code&gt;copyTexSubImage&lt;/code&gt; method, the specification requires the returned values be zero. Previously, this memory was uninitialized, leading to potentially sensitive data disclosure. This vulnerability affects Thunderbird &lt; 68.7.0, Firefox ESR &lt; 68.7, and Firefox &lt; 75.</p> <p><strong>Affected:</strong> Mozilla Thunderbird, Mozilla Firefox ESR, Mozilla Firefox</p> <p>When reading from areas partially or fully outside the source resource with WebGL&#39;s &lt;code&gt;copyTexSubImage&lt;/code&gt; method, the specification requires the returned values be zero. Previously, this memory was uninitialized, leading to potentially sensitive data disclosure. This vulnerability affects Thunderbird &lt; 68.7.0, Firefox ESR &lt; 68.7, and Firefox &lt; 75.</p> https://vulnerability.circl.lu/vuln/cve-2020-6821 https://vulnerability.circl.lu/vuln/usn-4323-1 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: firefox, Ubuntu:18.04:LTS: firefox</p> <p>Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information, or execute arbitrary code. (CVE-2020-6821, CVE-2020-6822, CVE-2020-6824, CVE-2020-6825, CVE-2020-6826)</p> <p>It was discovered that extensions could obtain auth codes from OAuth login flows in some circumstances. If a user were tricked in to installing a specially crafted extension, an attacker could potentially exploit this to obtain access to the user&#39;s account. (CVE-2020-6823)</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: firefox, Ubuntu:18.04:LTS: firefox</p> <p>Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information, or execute arbitrary code. (CVE-2020-6821, CVE-2020-6822, CVE-2020-6824, CVE-2020-6825, CVE-2020-6826)</p> <p>It was discovered that extensions could obtain auth codes from OAuth login flows in some circumstances. If a user were tricked in to installing a specially crafted extension, an attacker could potentially exploit this to obtain access to the user&#39;s account. (CVE-2020-6823)</p> https://vulnerability.circl.lu/vuln/usn-4323-1