Satoki Tsuji

Privilege escalation exists within the Networking: Cookies component.

An information disclosure issue exists within the Privacy component, which could allow sensitive data to be exposed.

The web management console allows an authenticated user to perform OS command injection, which can lead to arbitrary command execution with root privileges. OS command injection is a flaw where an application passes unsafe user-supplied data to a system shell, allowing the execution of unauthorized operating system commands.

A spoofing issue exists within the Popup Blocker component.

A use-after-free issue exists in the DOM: Bindings (WebIDL) component. Use-after-free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed.

A mitigation bypass exists in the Networking: Cookies component.

A privilege escalation issue exists in the Netmonitor component. This allows for potential unauthorized access or control within the affected applications.

An uncontrolled search path element issue exists that may lead to arbitrary code execution with the privileges of the running program.

An OS Command Injection issue exists in TkEasyGUI. If exploited, an unauthenticated remote attacker may execute arbitrary OS commands if the settings are configured to construct messages from external sources.

The issue involves previewing a response in Devtools ignoring CSP headers, potentially allowing content injection attacks.

This issue is related to the `window.open` function in Mozilla browsers, which can lead to information disclosure through inconsistency. An attacker could determine if an application that implements a specific protocol handler is installed by checking the result of calls to `window.open` with specifically set protocol handlers. This could allow a remote attacker to gain unauthorized access to protected information.

Name of the Vulnerable Software and Affected Versions: Firefox versions prior to 127 Firefox ESR versions prior to 115.12 Thunderbird versions prior to 115.12 Description: The issue is related to the use of hidden side channels, allowing an attacker to potentially guess which external protocol handlers are functional on a user's system by monitoring the time certain operations take. This could enable a remote attacker to gain unauthorized access to protected information. Recommendations: For Firefox versions prior to 127, update to version 127 or later. For Firefox ESR versions prior to 115.12, update to version 115.12 or later. For Thunderbird versions prior to 115.12, update to version 115.12 or later.

The issue is related to an improper check or handling of exceptional conditions in the Nako3edit component, which is part of the Nadeshiko 3 programming language. This allows a remote attacker to inject an invalid value into the `decodeURIComponent` function of Nako3edit. As a result, the server may crash.

The issue allows a remote attacker to execute an arbitrary OS command when processing compression and decompression on the product. Release notes for versions 3.3.62 and 3.3.69 link to patches for this issue, and the JPCERT/CC advisory lists versions 3.3.68 and prior as vulnerable, with the most recent patch tagged with version 3.3.69.

The issue allows a remote attacker to obtain the appkey of the product and execute an arbitrary OS command on the product. This is due to an OS command injection vulnerability in the editor component of nadesiko3 (PC Version).

The issue is related to an incorrect restriction of visualizable layers or frames in the user interface when handling HTML elements, specifically with the implementation of the Content Security Policy (CSP) `base-uri` directive in browsers. This can allow a remote attacker to bypass security restrictions by injecting an HTML base element, which some requests would accept instead of the CSP's `base-uri` settings.

A cross-site scripting issue allows a remote unauthenticated attacker to inject an arbitrary script or an arbitrary OS command via a specially crafted CSV file that contains an HTML `a` tag.

A cross-site scripting issue allows remote attackers to execute an arbitrary script via a specially crafted URL.

A directory traversal issue allows remote attackers to read arbitrary files.

A cross-site scripting issue allows remote attackers to execute an arbitrary script via a specially crafted URL.