CVE-2016-3640

The Extended Application Services aka XS or XS Engine in SAP HANA DB 1.00.091.00.1418659308 allows local users to obtain sensitive password information via vectors related to passwords in Web Dispatcher trace files, aka SAP Security Note 2148905...

DEBIAN-CVE-2016-5258

Use-after-free vulnerability in the WebRTC socket thread in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code by leveraging incorrect free operations on DTLS objects during the shutdown of a WebRTC session...

DEBIAN-CVE-2016-2838

Heap-based buffer overflow in the nsBidi::BracketData::AddOpening function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code via directional content in an SVG document...

Unspecified Memory Corruption Vulnerability in Mozilla Firefox and Firefox ESR

Mozilla Firefox is an open source web browser; Firefox ESR is an extended support version of Firefox. An unspecified memory corruption vulnerability exists in Mozilla Firefox and Firefox, which allows remote attackers to exploit the vulnerability to construct a malicious web page that can be pars...

WordPress Extended Plugin - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...

Updated util-linux packages fix security vulnerability

The util-linux libblkid is vulnerable to a Denial of Service attack during MSDOS partition table parsing, in the extended partition boot record EBR. If the next EBR starts at relative offset 0, parsedosextended will loop until running out of memory. An attacker could install a specially crafted...

The vulnerability in the Firefox ESR software allows a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information.

The numerous vulnerabilities in the Mozilla Firefox ESR browser engine allow malicious actors to trigger service failures memory errors and unexpected application termination or execute arbitrary code...

The vulnerability in the Firefox ESR software allows a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information.

The use of this function after release in CERTDestroyCertificate in libnss3.so within the NSS Mozilla library for Firefox ESR allows malicious actors operating remotely to execute arbitrary code, thereby improperly deleting the NSSCertificate structure from the trusted domain...

The vulnerability in the Firefox ESR software allows a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability in Mozilla Firefox ESR allows malicious actors to execute arbitrary code using specially crafted WebGL content, created with the Cesium JavaScript library...

The vulnerability in the Firefox ESR software allows a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information.

The use of this functionality after release in the nsDocLoader::OnProgress function in Mozilla Firefox ESR allows malicious actors operating remotely to execute arbitrary code, triggering the FireOnStateChange event...

The vulnerability in the Firefox ESR software allows a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information.

The numerous vulnerabilities in the Mozilla Firefox ESR browser engine allow malicious actors to trigger service failures memory errors and unexpected application termination or execute arbitrary code...

The vulnerability in the Firefox ESR software allows a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information.

The use of this after liberation in DirectionalityUtils.cpp in Mozilla Firefox ESR allows malicious individuals operating remotely to execute arbitrary code using text that is improperly processed during the installation of its orientation and layout...

The vulnerability in the Firefox ESR software allows a malicious individual to compromise the confidentiality of protected information.

A vulnerability exists in the mozilla::dom::AudioEventTimeline function within the implementation of the Web Audio API in Mozilla Firefox ESR, due to the improper creation of the audio data timeline. Exploiting this vulnerability allows malicious actors, operating remotely, to access confidential...

The vulnerability in the Firefox ESR software allows a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information.

The numerous vulnerabilities in the Mozilla Firefox ESR browser engine allow malicious actors to trigger service failures memory errors and unexpected application termination or execute arbitrary code...

The vulnerability of Thunderbird software, which allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.

Multiple vulnerabilities exist in the browser engine of Mozilla Firefox, Firefox ESR, and Thunderbird. These vulnerabilities allow malicious actors to trigger service failures memory errors and unexpected application termination or execute arbitrary code...

The vulnerability of the Firefox ESR browser allows a malicious individual to execute arbitrary code, gain access to confidential information, or cause a service failure.

Mozilla Firefox ESR browser contains a vulnerability related to errors in the implementation of the Mozilla::WaveReader::DecodeAudioData function. Exploiting this vulnerability allows malicious actors to gain access to confidential information from the dynamic memory of the process, trigger servi...

The vulnerability of the Firefox ESR browser allows local users to elevate their privileges level.

The Mozilla Firefox ESR browser contains a vulnerability that can be exploited when working with mar-files. Exploiting this vulnerability allows a local user to elevate their privileges and modify the content of mar-files during updates...

The vulnerability of the Firefox ESR browser allows a malicious individual to gain access to authentication data.

The Mozilla Firefox ESR browser contains a vulnerability related to errors in the implementation of the Web Workers technology. Exploiting this vulnerability allows malicious actors operating remotely to circumvent Domain Restrictions Policy SOP rules and gain access to authentication data throug...

The vulnerability of the Firefox ESR browser allows a malicious individual to execute arbitrary code or perform a denial-of-service attack.

The Mozilla Firefox ESR browser contains a vulnerability related to errors in the source code file RasterImage.cpp. Exploiting this vulnerability allows malicious individuals to execute arbitrary code or cause service failures incorrect write operations by using specially crafted image data...

The vulnerability of the Firefox ESR browser allows a malicious individual to gain access to confidential information.

The Mozilla Firefox ESR browser contains a vulnerability related to errors in the implementation of the SVG filter. This vulnerability allows a malicious actor to gain access to confidential information about displacement and correlations, as well as to circumvent Domain Restrictions Policy SOP...