Mozilla Suite: Update to October 2013 release (important)

MozillaFirefox was updated to Firefox 25.0. MozillaThunderbird was updated to Thunderbird 24.1.0. Mozilla XULRunner was updated to 17.0.10esr. Mozilla NSPR was updated to 4.10.1. Changes in MozillaFirefox: requires NSS 3.15.2 or above MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592...

CVE-2013-5596

Affected software: Mozilla Firefox (before 25.0), Firefox ESR (before 24.1, 24.x line), Thunderbird (before 24.1), SeaMonkey (before 2.22). Vulnerability: cycle-collection (CC) in Firefox may misdetermine the thread for releasing an image object, enabling a remote attacker to trigger arbitrary co...

CVE-2012-5596

This CVE-2012-5596 entry is rejected/not used and does not represent an active vulnerability.

CVE-2012-5596

...

CVE-2008-5596

CVE-2008-5596 affects Ikon AdManager 2.1 and earlier. The flaw is improper access control that stores sensitive data under the web root, enabling remote attackers to download the database file ikonBAnner_AdManager.mdb via a direct request. The NVD entry lists a Network attack vector with low comp...

CVE-2008-5596

creationtimestamp| type| source ---|---|--- 2008-12-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7372...

CVE-2007-5596

CVE-2007-5596 affects Drupal’s core Upload module in Drupal 4.7.x (before 4.7.8) and 5.x (before 5.3). The vulnerability arises from a whitelist that includes the .html extension, allowing remote attackers to upload .html files that can trigger cross-site scripting (XSS). Public details in the co...

CVE-2006-5596

Directory traversal vulnerability in the SSL server in AEP Smartgate 4.3b allows remote attackers to download arbitrary files via ..\ dot dot backslash sequences in an HTTP GET request...

CVE-2006-5596

CVE-2006-5596 affects the SSL server component of AEP Smartgate 4.3b. The vulnerability is a directory traversal that allows remote attackers to download arbitrary files by sending HTTP GET requests containing dot-dot backslash sequences (..\