CVE-2015-4510

CVE-2015-4510 is a race condition in Mozilla Firefox’s WorkerPrivate::NotifyFeatures that can be triggered by the interaction between shared workers and IndexedDB, allowing remote attackers to execute arbitrary code or cause a denial of service via use-after-free and application crash. This vulne...

CVE-2015-4510

Race condition in the WorkerPrivate::NotifyFeatures function in Mozilla Firefox before 41.0 allows remote attackers to execute arbitrary code or cause a denial of service use-after-free and application crash by leveraging improper interaction between shared workers and the IndexedDB implementatio...

Scientific Linux Security Update : firefox on SL5.x, SL6.x, SL7.x i386/x86_64 (20150922)

Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. CVE-2015-4500, CVE-2015-4509, CVE-2015-4510 After installing the updat...

Ubuntu 14.04 LTS : Ubufox update (USN-2743-2)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2743-2 advisory. USN-2743-1 fixed vulnerabilities in Firefox. This update provides the corresponding update for Ubufox. Tenable has extracted the preceding description block...

CentOS Update for firefox CESA-2015:1834 centos5

Check the version of firefox SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882287";...

CentOS Update for firefox CESA-2015:1834 centos6

Check the version of firefox SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882288";...

RedHat Update for firefox RHSA-2015:1834-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-4510

Race condition in the WorkerPrivate::NotifyFeatures function in Mozilla Firefox before 41.0 allows remote attackers to execute arbitrary code or cause a denial of service use-after-free and application crash by leveraging improper interaction between shared workers and the IndexedDB implementatio...

Novell eDirectory evtFilteredMonitorEventsRequest Invalid free Code Execution - Ver2 (CVE-2006-4510)

A code execution vulnerability has been reported in Novell eDirectory. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CVE-2014-4510

Cross-site scripting XSS vulnerability in job.cc in apt-cacher-ng 0.7.26 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2014-4510

Cross-site scripting XSS vulnerability in job.cc in apt-cacher-ng 0.7.26 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2014-4510

The CVE-2014-4510 entry concerns apt-cacher-ng (v0.7.26) with a Cross-site Scripting (XSS) vulnerability in job.cc. The underlying issue allows remote attackers to inject arbitrary web script or HTML via a crafted URL, enabling/script execution within the affected server’s web interface. Affected...

CVE-2014-4510

Cross-site scripting XSS vulnerability in job.cc in apt-cacher-ng 0.7.26 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

Fedora Update for apt-cacher-ng FEDORA-2014-7751

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DEBIAN-CVE-2013-4510

Directory traversal vulnerability in the client in Tryton 3.0.0, as distributed before 20131104 and earlier, allows remote servers to write arbitrary files via path separators in the extension of a report...

CVE-2013-4510

Directory traversal vulnerability in the client in Tryton 3.0.0, as distributed before 20131104 and earlier, allows remote servers to write arbitrary files via path separators in the extension of a report...

CVE-2013-4510

CVE-2013-4510 describes a directory traversal vulnerability in the Tryton client (3.0.0, prior to 20131104) that allows a remote server to write arbitrary files via path separators in the extension of a report. The issue is documented across multiple sources (including GHSA and OSV entries) with ...

Debian DSA-2791-1 : tryton-client - missing input sanitization

Cedric Krier discovered that the Tryton client does not sanitize the file extension supplied by the server when processing reports. As a result, a malicious server could send a report with a crafted file extension that causes the client to write any local file to which the user running the client...

Fedora Update for cups-pk-helper FEDORA-2012-18950

Check for the Version of cups-pk-helper OpenVAS Vulnerability Test Fedora Update for cups-pk-helper FEDORA-2012-18950 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...

Fedora 18 : cups-pk-helper-0.2.4-1.fc18 (2012-17907)

Update to cups-pk-helper-0.2.4. Fixes CVE-2012-4510. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...