132 matches found
CVE-2014-1514
vmtypedarrayobject.cpp in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 does not validate the length of the destination array before a copy operation, which allows remote attackers to execute arbitrary code or cause a denial of servi...
CVE-2014-1514
CVE-2014-1514 affects Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25. The issue arises from not validating the length of the destination array before a copy operation in TypedArrayObject, allowing remote attackers to execute arbitrary...
firefox security update
CentOS Errata and Security Advisory CESA-2014:0310 Updated firefox packages that fix several security issues are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having Critical security impact. Common Vulnerability Scoring System CVS...
Fedora 19 : firefox-27.0-1.fc19 / xulrunner-27.0-1.fc19 (2014-2051)
See following page for changes: http://www.mozilla.org/en-US/firefox/27.0/releasenotes/ Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible witho...
CVE-2013-1514
CVE-2013-1514 affects Oracle Fusion Middleware 10.1.3.5 in the Oracle Containers for J2EE component. The vulnerability is described as unspecified, allowing remote authenticated users to affect integrity via vectors related to RMI Support. The information available does not specify affected produ...
CVE-2012-1514
Cross-site request forgery CSRF vulnerability in VMware vShield Manager vSM 1.0.1 before Update 2 and 4.1.0 before Update 2 allows remote attackers to hijack the authentication of arbitrary users...
CVE-2012-1514
CVE-2012-1514 is a CSRF issue in VMware vShield Manager (vSM). The advisory and open-source mirrors state that vSM 4.1 (Linux) Update 2 and vSM 4.0 (Linux) Update 2 are affected, with vSM 5.0 not affected. The vulnerability allows an authenticated user to be coerced into sending a forged request ...
HP Data Protector <= A.06.20 Multiple Vulnerabilities (credentialed check)
The version of HP Data Protector installed on the remote Windows host is affected by one or more of the following vulnerabilities : - Multiple denial of service vulnerabilities exist in the 'data protect inet' service. CVE-2011-1514, CVE-2011-1515 - A buffer overflow vulnerability exists in the...
HP Data Protector <= A.06.20 Multiple Vulnerabilities (uncredentialed check)
Binary data hpdataprotector0620multiplevulns.nbin...
CVE-2011-1514
The CVE-2011-1514 weakness affects HP OpenView Storage Data Protector (HP Data Protector) 6.00–6.20, specifically the inet service. A crafted request can trigger a NULL pointer dereference causing a denial of service (daemon crash). Public sources also describe related issues (CVE-2011-1515, CVE-...
Multiple vulnerabilities in HP Data Protector
Core Security Technologies - Corelabs Advisory Multiple vulnerabilities in HP Data Protector 1. Advisory Information Title: Multiple vulnerabilities in HP Data Protector Advisory ID: CORE-2011-0514 Advisory URL: http://www.coresecurity.com/content/HP-Data-Protector-multiple-vulnerabilities Date...
HP Data Protector 6.20 Multiple Vulnerabilities
Exploit for windows platform in category dos / poc Core Security Technologies - Corelabs Advisory http://corelabs.coresecurity.com/ Multiple vulnerabilities in HP Data Protector 1. Advisory Information Title: Multiple vulnerabilities in HP Data Protector Advisory ID: CORE-2011-0514 Advisory URL:...
HP Data Protector 6.20 - Multiple Vulnerabilities
HP Data Protector 6.20 - Multiple Vulnerabilities -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - Corelabs Advisory http://corelabs.coresecurity.com/ Multiple vulnerabilities in HP Data Protector 1. Advisory Information Title: Multiple vulnerabilities in HP Data Protect...
CVE-2010-1514
TomatoCMS 2.0.6 (and earlier) is affected by an Unrestricted file upload vulnerability. The CVE description shows that remote authenticated users with certain privileges can upload an image file and then access it via a direct request to the file in an unspecified directory to execute arbitrary P...
TomatoCMS 2.0.6 任意文件上传和跨站脚本漏洞
BUGTRAQ ID: 40544 CVE ID: CVE-2010-1514,CVE-2010-1515 TomatoCMS是一款开源的内容管理系统。 在向TomatoCMS添加新文章时没有对所上传的文件执行重复的验证，拥有Add new article、Upload file to server和Browse uploaded files权限的用户可以向服务器上传并执行恶意文件。 TomatoCMS没有正确地过滤提交给index.php/admin/news/article/list页面的keyword和article-...
Design/Logic Flaw
Safari on Apple iPhone OS 3.1.3 for iPod touch allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a long exception string in a throw statement, possibly a related issue to CVE-2009-1514...
SLES10: Security update for Linux kernel
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: kernel-bigsmp kernel-debug kernel-default kernel-kdump kernel-smp kernel-source kernel-syms kernel-vmi kernel-vmipae kernel-xen kernel-xenpae More details ma...
CVE-2009-1514
CVE-2009-1514 affects Google Chrome 1.0.154.53 and is caused by a NULL pointer dereference in a throw statement with a long exception value, leading to a denial of service (application crash). The vulnerability is documented across multiple sources (NVD/NVD-linked entries and PRION/NVD mirrors). ...
