Debian Linux

DATE	CVE	VULNERABILITY TITLE	RISK
2024-01-23	CVE-2024-0742	It was possible for certain browser prompts and dialogs to be activated or dismissed unintentionally by the user due to an incorrect timestamp used to prevent input after page load. network low complexity mozilla debian	4.3
2024-01-23	CVE-2024-0746	A Linux user opening the print preview dialog could have caused the browser to crash. network low complexity mozilla debian	6.5
2024-01-23	CVE-2024-0747	When a parent page loaded a child in an iframe with `unsafe-inline`, the parent Content Security Policy could have overridden the child Content Security Policy. network low complexity mozilla debian	6.5
2024-01-23	CVE-2024-0749	Origin Validation Error vulnerability in multiple products A phishing site could have repurposed an `about:` dialog to show phishing content with an incorrect origin in the address bar. network low complexity mozilla debian CWE-346	4.3
2024-01-23	CVE-2024-0750	A bug in popup notifications delay calculation could have made it possible for an attacker to trick a user into granting permissions. network low complexity mozilla debian	8.8
2024-01-23	CVE-2024-0751	Improper Privilege Management vulnerability in multiple products A malicious devtools extension could have been used to escalate privileges. network low complexity mozilla debian CWE-269	8.8
2024-01-23	CVE-2024-0753	In specific HSTS configurations an attacker could have bypassed HSTS on a subdomain. network low complexity mozilla debian	6.5
2024-01-23	CVE-2024-0755	Memory safety bugs present in Firefox 121, Firefox ESR 115.6, and Thunderbird 115.6. network low complexity mozilla debian	8.8
2024-01-19	CVE-2023-50447	Code Injection vulnerability in multiple products Pillow through 10.1.0 allows PIL.ImageMath.eval Arbitrary Code Execution via the environment parameter, a different vulnerability than CVE-2022-22817 (which was about the expression parameter). network high complexity python debian CWE-94	8.1
2024-01-18	CVE-2023-6816	Out-of-bounds Write vulnerability in multiple products A flaw was found in X.Org server. network low complexity x-org fedoraproject redhat debian CWE-787 critical	9.8