RHEL 5 / 6 / 7 : firefox (RHSA-2017:0190)

An update for firefox is now available for Red Hat Enterprise Linux 5, Red Hat Enterprise Linux 6, and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

Scientific Linux Security Update : firefox on SL5.x, SL6.x, SL7.x i386/x86_64 (20170125)

This update upgrades Firefox to version 45.7.0 ESR. Security Fixes : - Multiple flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox...

Debian DSA-3771-1 : firefox-esr - security update

Multiple security issues have been found in the Mozilla Firefox web browser: Memory safety errors, use-after-frees and other implementation errors may lead to the execution of arbitrary code, information disclosure or privilege escalation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

RedHat Update for firefox RHSA-2017:0190-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 3771-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3771-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 25, 2017 https://www.debian.org/security/faq -...

CVE-2017-5376

Use-after-free while manipulating XSL in XSLT documents. This vulnerability affects Thunderbird 45.7, Firefox ESR 45.7, and Firefox 51...

Moab Authentication Bypass (insecure message signing) [CVE-2014-5376]

Moab Authentication Bypass insecure message signing : CVE-2014-5376 Software: Moab Affected Versions: Dependent on configuration, can affect all versions of Moab including Moab 8 CVE Reference: CVE-2014-5376 Author: John Fitzpatrick, Luke Jennings MWR Labs http://labs.mwrinfosecurity.com/ Severit...

CVE-2014-5376

Moab Authentication Bypass (CVE-2014-5376): Moab before 7.2.9 and 8 before 8.0.0 can sign messages with a pre-generated key, bypassing validation that the signing user matches the actor in the message. This allows remote authenticated users to impersonate arbitrary users via the actor field, enab...

Moab Insecure Message Signing Authentication Bypass

Moab Authentication Bypass insecure message signing : CVE-2014-5376 Software: Moab Affected Versions: Dependent on configuration, can affect all versions of Moab including Moab 8 CVE Reference: CVE-2014-5376 Author: John Fitzpatrick, Luke Jennings MWR Labs http://labs.mwrinfosecurity.com/ Severit...

CVE-2013-5376

IBM Storwize V7000 Unified (1.3.0.0–1.4.1.1) is affected by CVE-2013-5376 due to a Cross Frame Scripting flaw in the Graphical User Interface that can allow a remote authenticated user to access the system as an authenticated administrator. The vulnerability is fixed starting with version 1.4.2.0...

Google Chrome Multiple Vulnerabilities-02 Oct12 (Windows)

This host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvuln02oct12win.nasl 5999 2017-04-21 09:02:32Z teissa $ Google Chrome Multiple Vulnerabilities-02 Oct12 Windows Authors: Antu Sanadi Copyright: Copyright c 2012...

CVE-2012-5376

CVE-2012-5376 affects Google Chrome prior to 22.0.1229.94: the Inter-process Communication (IPC) implementation in Chrome’s renderer process can bypass sandbox restrictions, enabling remote attackers to write to arbitrary files given renderer access.

CVE-2008-5376

editcomment in crip 3.7 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/.tag.tmp temporary file...

CVE-2008-5376

In Crip 3.7, an local-privilege vulnerability exists: editcomment allows local users to overwrite arbitrary files through a symlink attack on a /tmp/*.tag.tmp temporary file. Root cause is improper handling of temp file creation/overwrite, enabling a symlink to redirect writes. The CVE entry note...

CVE-2008-5376

editcomment in crip 3.7 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/.tag.tmp temporary file...

CVE-2006-5376

CVE-2006-5376 concerns multiple unspecified vulnerabilities in the PeopleTools component of Oracle PeopleSoft Enterprise across several releases (8.22 GA, 8.46 GA, 8.47 GA, 8.48 GA and numbered updates). The description indicates unknown impact and remote authenticated attack vectors (PSE04, PSE0...