615 matches found
Mac OS X 10.10.x < 10.10.1 Multiple Vulnerabilities
The remote host is running a version of Mac OS X 10.10.x that is prior to version 10.10.1. This update contains several security-related fixes for the following components : - CFNetwork - Spotlight - System Profiler About This Mac - WebKit Note that successful exploitation of the most serious of...
Moderate: Red Hat Security Advisory: openstack-heat security, bug fix, and enhancement update
Updated openstack-heat packages that fix one security issue, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux OpenStack Platform 4.0. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System...
CSRF vulnerability in the Web Profiler
More info at https://symfony.com/cve-2014-6072...
CSRF vulnerability in the Web Profiler
More info at https://symfony.com/cve-2014-6072...
CVE-2014-6072: CSRF vulnerability in the Web Profiler
Affected Versions All 2.0.X, 2.1.X, 2.2.X, 2.3.X, 2.4.X, and 2.5.X versions of the Symfony WebProfiler bundle are affected by this security issue. This issue has been fixed in Symfony 2.3.19, 2.4.9, and 2.5.4. Note that no fixes are provided for Symfony 2.0, 2.1, and 2.2 as they are not maintaine...
[SECURITY] Fedora 19 Update: ipython-0.13.2-4.fc19
IPython provides a replacement for the interactive Python interpreter with extra functionality. Main features: Comprehensive object introspection. Input history, persistent across sessions. Caching of output results during a session with automatically generated references. Readline based name...
IBM System Storage DS Storage Manager Profiler Multiple Vulnerabilities
No description provided by source...
[SECURITY] Fedora 20 Update: php-pecl-xhprof-0.9.4-1.fc20
XHProf is a function-level hierarchical profiler for PHP. This package provides the raw data collection component, implemented in C as a PHP extension. The HTML based navigational interface is provided in the "xhprof" package...
[SECURITY] Fedora 18 Update: php-pecl-xhprof-0.9.4-1.fc18
XHProf is a function-level hierarchical profiler for PHP. This package provides the raw data collection component, implemented in C as a PHP extension. The HTML based navigational interface is provided in the "xhprof" package...
Ubuntu 12.04 LTS / 12.10 / 13.04 : firefox regression (USN-1890-2)
USN-1890-1 fixed vulnerabilities in Firefox. This update introduced a regression which sometimes resulted in Firefox using the wrong network proxy settings. This update fixes the problem. We apologize for the inconvenience. Multiple memory safety issues were discovered in Firefox. If the user wer...
Mozilla Firefox Profiler实现代码注入漏洞
CVE-2013-1688 Firefox是美国Mozilla基金会开发的一款开源Web浏览器。 Mozilla Firefox 21.0及之前的版本中的Profiler实现中存在漏洞，该漏洞源于程序在UI渲染期间解析不信任的数据。用户协助的远程攻击者可通过特制的网站利用该漏洞执行任意JavaScript代码 0 Mozilla Firefox = 21.0 目前厂商已经发布了升级补丁以修复此安全问题，补丁获取链接： http://www.mozilla.org/security/announce/2013/mfsa2013-52.html...
Ubuntu 12.04 LTS / 12.10 / 13.04 : firefox vulnerabilities (USN-1890-1)
Multiple memory safety issues were discovered in Firefox. If the user were tricked into opening a specially crafted page, an attacker could possibly exploit these to cause a denial of service via application crash, or potentially execute arbitrary code with the privileges of the user invoking...
CVE-2013-1688
The Profiler implementation in Mozilla Firefox before 22.0 parses untrusted data during UI rendering, which allows user-assisted remote attackers to execute arbitrary JavaScript code via a crafted web site...
Code injection
The Profiler implementation in Mozilla Firefox before 22.0 parses untrusted data during UI rendering, which allows user-assisted remote attackers to execute arbitrary JavaScript code via a crafted web site...
CVE-2013-1688
The Profiler implementation in Mozilla Firefox before 22.0 parses untrusted data during UI rendering, which allows user-assisted remote attackers to execute arbitrary JavaScript code via a crafted web site...
CVE-2013-1688
CVE-2013-1688 affects Mozilla Firefox’s Profiler UI rendering where untrusted data is parsed, enabling user‑assisted remote attackers to execute arbitrary JavaScript via a crafted site. The issue is fixed by updating to Firefox 22.0+ (as reflected in MFSA 2013-52 and downstream advisories). OpenS...
CVE-2013-1688: Improper Control of Generation of Code
The Profiler implementation in Mozilla Firefox before 22.0 parses untrusted data during UI rendering, which allows user-assisted remote attackers to execute arbitrary JavaScript code via a crafted web site...
Mozilla Firefox Multiple Vulnerabilities - June 13 (Windows)
The host is installed with Mozilla Firefox and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodmozillafirefoxmultvulnjun13win.nasl 6086 2017-05-09 09:03:30Z teissa $ Mozilla Firefox Multiple Vulnerabilities - June 13 Windows Authors: Arun Kallavi Copyright: Copyright c...
PT-2013-3323
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 22.0 Description The issue allows user-assisted remote attackers to execute arbitrary JavaScript code via a crafted web site, due to the Profiler implementation parsing untrusted data during UI rendering...
CVE-2013-1688
The Profiler implementation in Mozilla Firefox before 22.0 parses untrusted data during UI rendering, which allows user-assisted remote attackers to execute arbitrary JavaScript code via a crafted web site...