Lucene search
+L

784 matches found

BDU FSTEC
BDU FSTEC
added 2016/04/19 12:0 a.m.8 views

The vulnerability of the Firefox browser, which allows a hacker to replace web pages

The vulnerability of Firefox browsers is related to errors in processing the "" character in URI data. Exploiting this vulnerability can allow a remote attacker to replace web pages...

5CVSS7.1AI score0.02543EPSS
SaveExploits0References3Affected Software1
exploitpack
exploitpack
added 2016/04/18 12:0 a.m.14 views

WordPress Plugin Kento Post View Counter 2.8 - Cross-Site Request Forgery Cross-Site Scripting

WordPress Plugin Kento Post View Counter 2.8 - Cross-Site Request Forgery Cross-Site Scripting I would like to disclose CSRF and stored XSS vulnerability in Kento post view counter plugin version 2.8 . The vulnerable Fields for XSS are kentopvcnumberslang kentopvctodaytext kentopvctotaltext The...

0.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2016/04/18 12:0 a.m.39 views

WordPress Plugin leenk.me 2.5.0 - Cross-Site Request Forgery / Cross-Site Scripting

I would like to disclose CSRF and stored XSS vulnerability in Wordpress plugin LeenkMe version 2.5.0. The plugin can be found at https://wordpress.org/plugins/leenkme/ In the page wp-content/plugins/leenkme/facebook.php XSS vulnerable Fields are : - facebookmessage - facebooklinkname -...

5.3AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2016/03/31 12:0 a.m.9 views

The vulnerabilities of Firefox ESR and Firefox, the rendering software Graphite 2, allow attackers to induce service failures or exert other effects.

The vulnerability of the graphite2::TtfUtil::CmapSubtable12Lookup function TtfUtil.cpp for Firefox ESR and Firefox browsers can be exploited due to buffer overflows. Exploiting this vulnerability may allow an attacker to cause service interruptions or other effects by using a specially crafted...

6.8CVSS7.9AI score0.0227EPSS
SaveExploits0References3Affected Software3
BDU FSTEC
BDU FSTEC
added 2016/03/31 12:0 a.m.11 views

The vulnerability of the Firefox browser, which allows a perpetrator to exert other effects or cause service failures

The vulnerability of the I420VideoFrame::CreateFrame function in the Firefox WebRTC browser implementation is caused by buffer overflow. Exploiting this vulnerability could allow a malicious actor to cause service failures or other effects such as memory corruption...

6.8CVSS8.1AI score0.0172EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/03/31 12:0 a.m.10 views

The vulnerabilities of Firefox ESR and Firefox, the rendering software Graphite 2, allow attackers to induce service failures or exert other effects.

The vulnerability of the graphite2::Slot::getAttr function Slot.cpp in Firefox ESR and Firefox browsers, as well as in the Graphite 2 rendering software, arises due to buffer overflows. Exploiting this vulnerability can allow an attacker to cause service interruptions or other effects through a...

6.8CVSS7.9AI score0.0227EPSS
SaveExploits0References3Affected Software3
BDU FSTEC
BDU FSTEC
added 2016/03/31 12:0 a.m.10 views

The vulnerability of the Firefox browser, which allows a violator to trigger a service failure or cause other effects

The vulnerability of the DesktopDisplayDevice class in the Firefox browser’s WebRTC implementation relates to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to cause service interruptions or other adverse effects...

6.8CVSS6.8AI score0.01337EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/03/31 12:0 a.m.7 views

The vulnerability of the Graphite 2 rendering software, as well as the Firefox and Firefox ESR browsers, allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the Machine::Code::decoder::analysis::setref function in the Graphite rendering software, used by browsers Firefox and Firefox ESR, arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure memor...

6.8CVSS8.6AI score0.02912EPSS
SaveExploits0References3Affected Software3
BDU FSTEC
BDU FSTEC
added 2016/03/31 12:0 a.m.11 views

The vulnerability of the Graphite 2 rendering software, as well as the Firefox and Firefox ESR browsers, allows a perpetrator to trigger a service failure or exert other effects.

The vulnerability of the setAttr function in the Graphite rendering software for browsers Firefox and Firefox ESR is caused by buffer overflow. Exploiting this vulnerability allows an attacker to cause service interruptions or other effects such as memory corruption through a specially created...

6.8CVSS8AI score0.01665EPSS
SaveExploits0References3Affected Software3
BDU FSTEC
BDU FSTEC
added 2016/03/31 12:0 a.m.5 views

The vulnerability of the Firefox browser, which allows a hacker to trigger a service failure or increase their privileges.

The vulnerability of the FileReader class in Firefox browsers is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to enhance their privileges or cause a service failure memory corruption due to changes made to the file while it is being read by the...

4.4CVSS7.4AI score0.00299EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/03/31 12:0 a.m.13 views

The vulnerabilities of Firefox ESR and Firefox, the rendering software Graphite 2, allow attackers to induce service failures or exert other effects.

The vulnerability of the graphite2::Slot::setAttr function in Firefox ESR and Firefox browsers, as well as in the Graphite 2 rendering software, is caused by a buffer overflow in the dynamic memory. Exploiting this vulnerability can allow an attacker to cause service interruptions or other effect...

9.3CVSS8AI score0.04889EPSS
SaveExploits0References3Affected Software3
BDU FSTEC
BDU FSTEC
added 2016/03/31 12:0 a.m.8 views

The vulnerability of the Thunderbird email client, as well as the Firefox and Firefox ESR browsers, allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the nsNPObjWrapper::GetNewOrUsed function located in dom/plugins/base/nsJSNPRuntime.cpp in the Thunderbird email client, as well as in Firefox and Firefox ESR browsers, is related to pointer dereferencing errors. Exploiting this vulnerability could allow an attacker to execut...

6.8CVSS8.2AI score0.02928EPSS
SaveExploits0References4Affected Software3
BDU FSTEC
BDU FSTEC
added 2016/03/31 12:0 a.m.6 views

The vulnerability of the Thunderbird email client, as well as the Firefox and Firefox ESR browsers, allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the AtomicBaseIncDec function in the Thunderbird email client, as well as in browsers like Firefox and Firefox ESR, is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure...

6.8CVSS8.2AI score0.02831EPSS
SaveExploits0References3Affected Software3
BDU FSTEC
BDU FSTEC
added 2016/03/31 12:0 a.m.9 views

The vulnerability of the Thunderbird email client, as well as the Firefox and Firefox ESR browsers, allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the nsHtml5TreeBuilder class in the Thunderbird HTML5 client browser, as well as in Firefox and Firefox ESR browsers, arises due to a loss of precision. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure disruption of resourc...

6.8CVSS8.2AI score0.30946EPSS
SaveExploits8References4Affected Software3
BDU FSTEC
BDU FSTEC
added 2016/03/31 12:0 a.m.7 views

The vulnerability of the Firefox browser, which allows a violator to trigger a service failure

The vulnerability of the Intel video driver for the Firefox browser is related to resource management errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions such as memory consumption and memory corruption due to the invocation of the WebGL shader...

7.1CVSS7.1AI score0.02425EPSS
SaveExploits0References3Affected Software1
RedHat Linux
RedHat Linux
added 2016/03/16 5:36 p.m.7 views

graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)

CachedCmap.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service buffer over-read or possibly have unspecified other impact via a crafted Graphite smart font...

8.8CVSS7.5AI score0.02708EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2016/03/16 5:36 p.m.7 views

graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)

The graphite2::FileFace::gettablefn function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, does not initialize memory for an unspecified data structure, which allows remote attackers to cause a denial of service or possibly have unknown other...

8.8CVSS7.5AI score0.0227EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2016/03/16 5:36 p.m.8 views

graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)

The graphite2::GlyphCache::Loader::Loader function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service buffer over-read or possibly have unspecified other impact via a crafted Graphite smart font...

8.8CVSS7.5AI score0.0227EPSS
SaveExploits0References5
CNVD
CNVD
added 2016/03/16 12:0 a.m.4 views

Mozilla Firefox Network Security Services Memory Misreference Vulnerability

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the U.S. Mozilla Network Security Services NSS is a library of functions Network Security Services library. A memory misreference vulnerability exists in the 'ssl3HandleECDHServerKeyExchange' function in Mozilla...

7.5CVSS8.7AI score0.02386EPSS
SaveExploits0References1
OSV
OSV
added 2016/03/13 6:59 p.m.6 views

DEBIAN-CVE-2016-1978

Use-after-free vulnerability in the ssl3HandleECDHServerKeyExchange function in Mozilla Network Security Services NSS before 3.21, as used in Mozilla Firefox before 44.0, allows remote attackers to cause a denial of service or possibly have unspecified other impact by making an SSL 1 DHE or 2 ECD...

7.3CVSS9AI score0.02386EPSS
SaveExploits0References1
Rows per page
Query Builder