75 matches found
SUSE: Security Advisory for MozillaFirefox (SUSE-SU-2015:1926-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2015-7193
Mozilla Firefox 42.0 and Firefox ESR 38.x before 38.4 fix a cross-origin request handling flaw (CORS) for POST with unspecified Content-Type headers. The vulnerability arises from not following the CORS preflight flow, allowing remote attackers to bypass the Same Origin Policy and potentially acc...
CentOS Update for firefox CESA-2015:1982 centos6
Check the version of firefox SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882319";...
CentOS Update for firefox CESA-2015:1982 centos7
Check the version of firefox SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882320";...
RedHat Update for firefox RHSA-2015:1982-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DSA 3393-1] iceweasel security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3393-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 04, 2015 https://www.debian.org/security/faq -...
Critical: Red Hat Security Advisory: firefox security update
Updated firefox packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5, 6, and 7. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...
CVE-2015-7193
Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 improperly follow the CORS cross-origin request algorithm for the POST method in situations involving an unspecified Content-Type header manipulation, which allows remote attackers to bypass the Same Origin Policy by leveraging the lack...
UBUNTU-CVE-2015-7193
Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 improperly follow the CORS cross-origin request algorithm for the POST method in situations involving an unspecified Content-Type header manipulation, which allows remote attackers to bypass the Same Origin Policy by leveraging the lack...
CVE-2014-7193
CVE-2014-7193 affects the Crumb plugin for Node.js prior to 3.0.0. When a hapi route has CORS enabled, token access is not properly restricted, potentially allowing remote attackers to obtain sensitive information and possibly spoof requests to non-CORS routes via a crafted site visited by an app...
CVE-2013-7193
creationtimestamp| type| source ---|---|--- 2013-12-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38877 2013-12-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38876...
CVE-2008-7193
PHPKIT 1.6.4 PL1 is vulnerable to Cross-Site Request Forgery (CSRF) because the session ID is included in the URL. An attacker can read the PHPKITSID parameter from the HTTP Referer and reuse it to perform actions on behalf of a user, specifically (1) modify the user profile via upload_files/incl...
CVE-2006-7193
PHP remote file inclusion vulnerability in unittest/testcases.php in Smarty 2.6.1 allows remote attackers to execute arbitrary PHP code via a URL in the SMARTYDIR parameter. NOTE: this issue is disputed by CVE and a third party because SMARTYDIR is a constant...
CVE-2006-7193
CVE-2006-7193 is a confirmed detail in the connected documents for Smarty 2.6.1. The vulnerability is a PHP remote file inclusion in Smarty’s unit_test/test_cases.php that could allow an attacker to execute arbitrary PHP code via a URL in the SMARTY_DIR parameter. The issue is explicitly describe...
