Vulnerabilities
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-10-29 | CVE-2024-9505 | Cross-site Scripting vulnerability in Fastlinemedia Beaver Builder The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Button widget in all versions up to, and including, 2.8.4.2 due to insufficient input sanitization and output escaping on user supplied attributes. | 5.4 |
| 2024-10-29 | CVE-2024-10458 | Unspecified vulnerability in Mozilla Thunderbird A permission leak could have occurred from a trusted site to an untrusted site via `embed` or `object` elements. | 7.5 |
| 2024-10-29 | CVE-2024-10459 | Use After Free vulnerability in Mozilla Thunderbird An attacker could have caused a use-after-free when accessibility was enabled, leading to a potentially exploitable crash. | 7.5 |
| 2024-10-29 | CVE-2024-10460 | Unspecified vulnerability in Mozilla Firefox and Thunderbird The origin of an external protocol handler prompt could have been obscured using a data: URL within an `iframe`. | 5.3 |
| 2024-10-29 | CVE-2024-10461 | Cross-site Scripting vulnerability in Mozilla Thunderbird In multipart/x-mixed-replace responses, `Content-Disposition: attachment` in the response header was not respected and did not force a download, which could allow XSS attacks. | 6.1 |
| 2024-10-29 | CVE-2024-10462 | Authentication Bypass by Spoofing vulnerability in Mozilla Thunderbird Truncation of a long URL could have allowed origin spoofing in a permission prompt. | 6.5 |
| 2024-10-29 | CVE-2024-10463 | Information Exposure Through Discrepancy vulnerability in Mozilla Thunderbird Video frames could have been leaked between origins in some situations. | 6.5 |
| 2024-10-29 | CVE-2024-10464 | Out-of-bounds Read vulnerability in Mozilla Thunderbird Repeated writes to history interface attributes could have been used to cause a Denial of Service condition in the browser. | 6.5 |
| 2024-10-29 | CVE-2024-10465 | Authentication Bypass by Spoofing vulnerability in Mozilla Thunderbird A clipboard "paste" button could persist across tabs which allowed a spoofing attack. | 6.5 |
| 2024-10-29 | CVE-2024-10466 | Unspecified vulnerability in Mozilla Thunderbird By sending a specially crafted push message, a remote server could have hung the parent process, causing the browser to become unresponsive. | 7.5 |