CVE-2020-5278

CVE-2020-5278 affects PrestaShop versions 1.5.4.0 through 1.7.6.5, with a reflected cross‑site scripting vulnerability on the Exception page. The underlying issue is a lack of proper validation of client‑side data in the web app. The vulnerability is fixed in 1.7.6.5. Practical impact is stated a...

EulerOS 2.0 SP3 : qemu-kvm (EulerOS-SA-2020-1430)

According to the versions of the qemu-kvm packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In libslirp 4.1.0, as used in QEMU 4.2.0, tcpsubr.c misuses snprintf return values, leading to a buffer overflow in later code.CVE-2020-8608 -...

BELL-CVE-2014-5278 CVE-2014-5278 does not affect BellSoft software

Bulletin has no description...

CVE-2014-5278

CVE-2014-5278 describes a vulnerability in Docker prior to 1.2 where container names may collide with and override container IDs. The initial description explicitly states the issue; connected sources reiterate the same vulnerability. No exploit vectors, affected products, or remediation steps ar...

DEBIAN-CVE-2015-5278

The ne2000receive function in hw/net/ne2000.c in QEMU before 2.4.0.1 allows attackers to cause a denial of service infinite loop and instance crash or possibly execute arbitrary code via vectors related to receiving packets...

CVE-2015-5278

The CVE-2015-5278 entry concerns QEMU’s ne2000_receive() in hw/net/ne2000.c, where an attacker could trigger an infinite loop and crash the QEMU instance, potentially enabling arbitrary code execution via crafted network packets. Public sources in the CVE context confirm the vulnerability exists ...

Huawei EulerOS: Security Advisory for firefox (EulerOS-SA-2016-1046)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2019-5278

CVE-2019-5278 affects Huawei GaussDB-100 OLTP (CampusInsight) prior to V100R019C00SPC200. The vulnerability is an out-of-bounds read in the Advanced Packages feature. With specific permissions, an attacker can issue crafted SQL statements to the database, potentially causing a crash. The issue is...

Mozilla Firefox < 49 Multiple Vulnerabilities (macOS)

The version of Mozilla Firefox installed on the remote macOS host is prior to 49. It is, therefore, affected by multiple vulnerabilities as noted in Mozilla Firefox stable channel update release notes for 2016/09/20. Please refer to the release notes for additional information. Note that Nessus h...

Mozilla Firefox < 49 Multiple Vulnerabilities

The version of Mozilla Firefox installed on the remote Windows host is prior to 49. It is, therefore, affected by multiple vulnerabilities as noted in Mozilla Firefox stable channel update release notes for 2016/09/20. Please refer to the release notes for additional information. Note that Nessus...

Security Bulletin: Multiple vulnerabilities in qemu-kvm affect IBM SmartCloud Provisioning for IBM Software Virtual Appliance

Summary Multiple vulnerabilities in qemu-kvm affect IBM SmartCloud Provisioning V2.1 for IBM Software Virtual Appliance. Please note product software support discontinuance as per IBM Withdrawal Announcement 916-016. For withdrawal announcement information details see the Reference section below...

CVE-2018-5278

CVE-2018-5278 affects Malwarebytes Premium 3.3.1.2183 via the FARFLT.SYS driver. The root cause is improper input validation for IOCTL 0x9c40e00c, enabling local users to trigger a denial of service (BSOD) and potentially other impact. Affected component: driver file FARFLT.SYS in Malwarebytes Pr...

[SECURITY] [DLA 658-1] icedove security update

Package : icedove Version : 45.4.0-1deb7u1 CVE ID : CVE-2016-5278, CVE-2016-5270, CVE-2016-5272, CVE-2016-5276, CVE-2016-5277, CVE-2016-5280, CVE-2016-5281, CVE-2016-5284, CVE-2016-5250, CVE-2016-5261, CVE-2016-5257 Multiple security issues have been found in Icedove, Debians version of the Mozil...

SUSE SLES11 Security Update : MozillaFirefox (SUSE-SU-2016:2431-1)

Mozilla Firefox was updated to 45.4.0 ESR to fix the following issues bsc999701: The following security issue were fixed : - MFSA 2016-86/CVE-2016-5270: Heap-buffer-overflow in nsCaseTransformTextRunFactory::TransformString - MFSA 2016-86/CVE-2016-5272: Bad cast in nsImageGeometryMixin - MFSA...

SUSE SLED12 / SLES12 Security Update : MozillaFirefox (SUSE-SU-2016:2434-1)

Mozilla Firefox was updated to version 45.4.0 ESR to fix the following issues: Security issues fixed: bsc999701 MFSA 2016-86 : - CVE-2016-5270: Heap-buffer-overflow in nsCaseTransformTextRunFactory::TransformString - CVE-2016-5272: Bad cast in nsImageGeometryMixin - CVE-2016-5276:...

Updated firefox/rootcerts/nss packages fix security vulnerability

Multiple flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox CVE-2016-5257, CVE-2016-5278, CVE-2016-5270, CVE-2016-5272,...

openSUSE: Security Advisory for MozillaFirefox, mozilla-nss (openSUSE-SU-2016:2386-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS Update for firefox CESA-2016:1912 centos5

Check the version of firefox SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882559";...

CVE-2016-5278

Heap-based buffer overflow in the nsBMPEncoder::AddImageFrame function in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird 45.4 allows remote attackers to execute arbitrary code via a crafted image data that is mishandled during the encoding of an image frame to an image...

DEBIAN-CVE-2016-5278

Heap-based buffer overflow in the nsBMPEncoder::AddImageFrame function in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird 45.4 allows remote attackers to execute arbitrary code via a crafted image data that is mishandled during the encoding of an image frame to an image...