VDB
GCVE-110-MAGEIA-2019-212
GCVE-110-MAGEIA-2019-212
Advisory Published
Sandbox escape via installation of malicious language pack. (CVE-2019-9811)
Script injection within domain through inner window reuse. (CVE-2019-11711)
Cross-origin POST requests can be made with NPAPI plugins by following 308
redirects. (CVE-2019-11712)
Use-after-free with HTTP/2 cached stream. (CVE-2019-11713)
Empty or malformed p256-ECDH public keys may trigger a segmentation fault.
(CVE-2019-11729)
HTML parsing error can contribute to content XSS. (CVE-2019-11715)
Caret character improperly escaped in origins. (CVE-2019-11717)
Out-of-bounds read when importing curve25519 private key. (CVE-2019-11719)
Same-origin policy treats all files in a directory as having the
same-origin. (CVE-2019-11730)
Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8 and Thunderbird
60.8. (CVE-2019-11709)
Enigmail 2.0.12 sets the default keyserver to keys.openpgp.org in order to
mitigate the SKS Keyserver Network Attack.
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | thunderbird-l10n | 0 (affected), 60.8.0-1.mga7 (unaffected), 0 (affected), 60.8.0-1.mga7 (unaffected) | — |
| Mageia | thunderbird-l10n | 0 (affected), 60.8.0-1.mga6 (unaffected), 0 (affected), 60.8.0-1.mga6 (unaffected) | — |
| Mageia | thunderbird | 60.8.0-1.1.mga7 (unaffected), 0 (affected), 0 (affected), 60.8.0-1.1.mga7 (unaffected) | — |
| Mageia | nvidia390 | 0 (affected), 390.132-1.mga7.nonfree (unaffected) | — |
| Mageia | thunderbird | 0 (affected), 60.8.0-1.1.mga6 (unaffected), 0 (affected), 60.8.0-1.1.mga6 (unaffected) | — |
Aliases
References
nvidia390 maintenance release
advisory
Browse GCVE Records
74,496 records in the GCVE database · Updated July 23, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.