CentOS Update for firefox CESA-2015:1586 centos5

Check the version of firefox SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882244";...

CentOS 5 / 6 / 7 : firefox (CESA-2015:1586)

Updated firefox packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5, 6, and 7. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

Scientific Linux Security Update : firefox on SL5.x, SL6.x, SL7.x i386/x86_64 (20150811)

Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. CVE-2015-4473, CVE-2015-4475, CVE-2015-4478, CVE-2015-4479,...

Critical: Red Hat Security Advisory: firefox security update

Updated firefox packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5, 6, and 7. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

CVE-2015-4486

The decreaserefcount function in libvpx in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds read via malformed WebM video data...

CVE-2014-4486

CVE-2014-4486 affects Apple's IOAcceleratorFamily (iOS prior to 8.1.3, OS X prior to 10.10.2, Apple TV prior to 7.0.3). The issue is a null pointer dereference in the IOAcceleratorFamily’s handling of resource lists and IOService userclient types, which could enable arbitrary code execution or a ...

Oracle Linux 4 : php (ELSA-2006-0730 / ELSA-2006-0669)

Updated PHP packages that fix a security issue are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. Users of PHP should upgrade to these...

CVE-2012-4486

The CVE-2012-4486 issue affects the Drupal Subuser module prior to 6.x-1.8, where a CSRF flaw could allow remote attackers to hijack another user’s session by switching to a subuser via unspecified vectors. Impact is unauthorized account switching (CSRF) with partial confidentiality/integrity/ava...

CVE-2012-4486

Cross-site request forgery CSRF vulnerability in the Subuser module before 6.x-1.8 for Drupal allows remote attackers to hijack the authentication of arbitrary users for requests that switch the user to a subuser via unspecified vectors...

PHP < 5.2.0 Multiple Vulnerabilities

PHP is prone to multiple vulnerabilities. Copyright C 2012 NopSec Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or...

CVE-2011-4486

Cisco CUCM/Skinny (SCCP) vulnerabilities (CVE-2011-4486) allow remote, unauthenticated attackers to cause a device reload via crafted SCCP registrations. Affected software versions include CUCM 6.x and 7.x prior to 7.1(5b)su5, CUCM 8.0 prior to 8.0(3a)su3, and CUCM 8.5/8.6 prior to 8.6(2a)su1, pl...

CVE-2010-4486

Removed by vendor...

Novell iManager Importing/Exporting Schema Stack Buffer Overflow Vulnerability

Novell iManager is prone to a stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. Attackers may exploit this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely cause...

Novell iManager <= 2.7.2 Buffer Overflow Vulnerability

Novell iManager is prone to a stack-based buffer overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

CVE-2009-4486

CVE-2009-4486 involves a stack-based buffer overflow in the Novell iManager eDirectory plugin that handles importing/exporting schema data. The root cause is inadequate validation of user-supplied arguments in a sub-application, allowing remote attackers to trigger a long input path and execute a...

CVE-2008-4486

CVE-2008-4486 describes a directory traversal vulnerability in the SAC.php component of SACphp, used in Yerba 6.3 and earlier. An attacker can abuse a '..' in the mod parameter to cause index.php in SAC.php to include and execute arbitrary local files. The CVE entry notes remote access with netwo...

CVE-2008-4486

creationtimestamp| type| source ---|---|--- 2008-10-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6687 2008-10-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6691...

Debian: Security Advisory (DSA-1331-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 5.04 / 5.10 / 6.06 LTS : php4, php5 vulnerabilities (USN-362-1)

The stripos function did not check for invalidly long or empty haystack strings. In an application that uses this function on arbitrary untrusted data this could be exploited to crash the PHP interpreter. CVE-2006-4485 An integer overflow was discovered in the PHP memory allocation handling. On...

Debian DSA-1331-1 : php4 - several vulnerabilities

Several remote vulnerabilities have been discovered in PHP, a server-side, HTML-embedded scripting language, which may lead to the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-0207 Stefan Esser discovered HTTP respons...