CVE-2015-4521

Mozilla Firefox contains a vulnerability in ConvertDialogOptions that can be triggered by a crafted web page, potentially causing memory corruption and application crashes (DoS) or other impact. Affected: Firefox before 41.0 and ESR 38.x before 38.3. Exploitation is remote; upgrade to Firefox 41....

[SECURITY] [DSA 3365-1] iceweasel security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3365-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 23, 2015 https://www.debian.org/security/faq -...

firefox security update

CentOS Errata and Security Advisory CESA-2015:1834 Updated firefox packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5, 6, and 7. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS bas...

Critical: Red Hat Security Advisory: firefox security update

Updated firefox packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5, 6, and 7. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

Firefox ESR < 38.3 Multiple Vulnerabilities (Mac OS X)

The version of Firefox ESR installed on the remote Mac OS X host is prior to 38.3. It is, therefore, affected by the following vulnerabilities : - Multiple unspecified memory corruption issues exist due to improper validation of user-supplied input. A remote attacker can exploit these issues to...

CVE-2015-4521

The ConvertDialogOptions function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to cause a denial of service memory corruption and application crash or possibly have unspecified other impact via unknown vectors...

Firefox ESR < 38.3 Multiple Vulnerabilities

The version of Firefox ESR installed on the remote Windows host is prior to 38.3. It is, therefore, affected by the following vulnerabilities : - Multiple unspecified memory corruption issues exist due to improper validation of user-supplied input. A remote attacker can exploit these issues to...

WordPress dsIDXpress IDX Plugin Cross Site Scripting Vulnerability

WordPress dsIDXpress IDX Plugin is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2014-4521

The CVE-2014-4521 entry concerns WordPress: dsIDXpress IDX Plugin, vulnerable component is client-assist.php. The underlying issue is a cross-site scripting (XSS) flaw that allows an attacker to inject arbitrary script/HTML by supplying a crafted action parameter. Affected version appears to be t...

CVE-2011-5105

Multiple cross-site scripting XSS vulnerabilities in EmployeeSearch.cc in ZOHO ManageEngine ADSelfService Plus 4.5 Build 4521 allow remote attackers to inject arbitrary web script or HTML via the 1 searchType and 2 searchString parameters, a different vulnerability than CVE-2010-3274...

CVE-2011-4521

CVE-2011-4521 describes an SQL injection vulnerability in Advantech/BroadWin WebAccess prior to version 7.0, allowing remote attackers to execute arbitrary SQL commands via crafted string input. Affected product: Advantech/BroadWin WebAccess (pre-7.0). Root cause centers on unsanitized input hand...

ZOHO ManageEngine ADSelfService Plus 4.5 Build 4521 Administrative Access

ZOHO ManageEngine ADSelfService Plus Administrative Access ========================================================== ADVISORY INFORMATION Title: ZOHO ManageEngine ADSelfService Plus Administrative Access Release date: 10/10/2011 Last update: 10/10/2011 Credits: Roberto Paleari, Emaze Networks...

Fedora 14 : drupal-views-6.x.2.12-1.fc14 (2010-19009)

New upstream version fixing DRUPAL-SA-CONTRIB-2010-111 : http://drupal.org/node/999380 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible withou...

Fedora 13 : drupal-views-6.x.2.12-1.fc13 (2010-18927)

New upstream version fixing DRUPAL-SA-CONTRIB-2010-111 : http://drupal.org/node/999380 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible withou...

CVE-2010-4521

This entry (CVE-2010-4521) concerns the Drupal Views module (6.x) before 6.x-2.12. The vulnerability is an XSS flaw that allows an attacker to inject arbitrary web script or HTML via a page path, as described by connected sources (Drupal/VI). The OpenVAS/Nessus entries corroborate XSS in the Drup...

CVE-2010-4521

Cross-site scripting XSS vulnerability in the Views module 6.x before 6.x-2.12 for Drupal allows remote attackers to inject arbitrary web script or HTML via a page path...

CVE-2009-4521

Cross-site scripting XSS vulnerability in birt-viewer/run in Eclipse Business Intelligence and Reporting Tools BIRT before 2.5.0, as used in KonaKart and other products, allows remote attackers to inject arbitrary web script or HTML via the report parameter...

CVE-2009-4521

CVE-2009-4521 : Eclipse BIRT’s birt-viewer/run is vulnerable to cross-site scripting due to improper validation of user input via the __report parameter in BIRT versions before 2.5.0 (KonaKart and other products use BIRT). An attacker could inject arbitrary script/HTML that executes in the victim...

CVE-2009-4521

creationtimestamp| type| source ---|---|--- 2009-10-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33286...

CVE-2008-4521

The CVE-2008-4521 issue affects the World of Warcraft tracker Infusion module (raidtracker_panel) for PHP-Fusion, with a vulnerability in the thisraidprogress.php script. The underlying flaw is SQL injection triggered by the INFO_RAID_ID parameter, enabling remote attackers to manipulate the data...