Mozilla Firefox Media Capture and Streams API Privilege Vulnerability

Mozilla Firefox browser Firefox is a free, open source browser for Windows, Linux and MacOSX platforms. A privilege vulnerability exists in the Mozilla Firefox Media Capture and Streams API. A remote user can exploit the vulnerability to display incorrect source information to the target user...

CVE-2015-1395

Directory traversal vulnerability in GNU patch versions which support Git-style patching before 2.7.3 allows remote attackers to write to arbitrary files with the permissions of the target user via a .. dot dot in a diff file name...

CVE-2015-1395

Directory traversal vulnerability in GNU patch versions which support Git-style patching before 2.7.3 allows remote attackers to write to arbitrary files with the permissions of the target user via a .. dot dot in a diff file name...

D-Link DIR-100 Cross-Site Request Forgery Vulnerability

The D-Link DIR-100 is a compact broadband router with integrated firewall functionality. A cross-site request forgery vulnerability exists in D-Link DIR-100 version 1.01. It allows remote attackers to construct malicious URIs, trick users into parsing them, and can perform malicious actions in th...

HelpDEZk Cross-Site Request Forgery Vulnerability

HelpDEZk is a suite of PHP-based software for managing requests, events. A cross-site request forgery vulnerability exists in admin/home/person/ in HelpDEZk. It allows remote attackers to construct malicious URIs and trick users into parsing them, which can be used to perform malicious actions an...

Adobe Flash Player Use After Free Code Execution (APSB17-07: CVE-2017-3002)

A remote code execution vulnerability exists in Adobe Flash Player. The vulnerability is due to a use-after-free error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted SWF file...

Adobe Flash Player Use After Free Code Execution (APSB16-39: CVE-2016-7877)

A remote code execution vulnerability exists in Adobe Flash Player. The vulnerability is due to a use-after-free error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted SWF file...

IBM Forms Experience Builder Cross-Site Request Forgery Vulnerability

IBM Forms Experience Builder is a suite of applications for creating Web forms for Web sites. A cross-site request forgery vulnerability exists in IBM Forms Experience Builder that allows a remote attacker to construct a malicious URI, trick a user into parsing it, and perform malicious actions i...

Grails console cross-site request forgery vulnerability

Grails is a set of Groovy-based programming language and for rapid development of Web applications and open source framework. console is one of the Web-based Groovy interactive application management and debugging console plug-ins. A cross-site request forgery vulnerability exists in Grails...

Adobe Flash Player Use After Free Code Execution (APSB16-25: CVE-2016-4230)

A remote code execution vulnerability exists in Adobe Flash Player. The vulnerability is due to a use-after-free error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted SWF file...

I-O DATA DEVICE ETX-R Cross-Site Request Forgery Vulnerability

The I-O DATA DEVICE ETX-R is a router product from I-O DATA DEVICE Japan. The I-O DATA DEVICE ETX-R suffers from a cross-site request forgery vulnerability that allows remote attackers to construct malicious URIs, trick users into parsing them, and can perform malicious actions in the context of...

ImageMagick Studio ImageMagick Server-Side Request Forgery Vulnerability

ImageMagick Studio ImageMagick is the United States a set of open source image processing software. A server-side request forgery vulnerability exists in the HTTP and FTP encoders of ImageMagick Studio ImageMagick, which allows remote attackers to construct malicious URIs, trick users into parsin...

Adobe Flash Player Use After Free Code Execution (APSB16-10: CVE-2016-1017)

A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to a use-after-free error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially craft...

McAfee Vulnerability Manager Enterprise Manager Component Cross-Site Request Forgery Vulnerability

McAfee Vulnerability Manager is a security risk management solution from McAfee USA. A cross-site request forgery vulnerability exists in the Organizations and Remediation administration page in the Enterprise Manager component of McAfee Vulnerability Manager, which allows remote attackers to...

IBM Connections Cross-Site Request Forgery Vulnerability

IBM Connections is a suite of social software platforms. The platform provides advanced analytics and real-time data monitoring capabilities and accelerates web collaboration within and outside the organization through IBM SmartCloud services. IBM Connections suffers from a cross-site request...

HP StoreOnce Backup System Cross-Site Request Forgery Vulnerability

HP StoreOnce Backup System is a disk-based backup system. A cross-site request forgery vulnerability exists in HP StoreOnce Backup System, which allows remote attackers to construct malicious URIs, trick users into parsing them, and can perform malicious actions in the context of the target user...

Aruba Networks Mobility Controller Cross-Site Request Forgery Vulnerability

Aruba Networks Mobility Controller is a suite of solutions that provide mobile access for the enterprise. A cross-site request forgery vulnerability exists in Aruba Networks Mobility Controller, which allows remote attackers to construct malicious URIs, trick users into parsing them, and can...

Securifi Almond Cross-Site Request Forgery Vulnerability

Securifi Almond is a wireless router product from Securifi. Securifi Almond uses a default password and suffers from a cross-site request forgery vulnerability that allows remote attackers to construct malicious URIs, trick users into parsing them, and can perform malicious actions in the context...

Cisco Unified Intelligence Center Cross-Site Request Forgery Vulnerability (CNVD-2015-04963)

Cisco Unified Intelligence Center is a unified intelligence management center. A cross-site request forgery vulnerability exists in the Cisco Unified Intelligence Center WEB interface, which allows remote attackers to construct malicious URIs, trick users into parsing them, and can perform...

EMC Documentum CenterStage Cross-Site Scripting Vulnerability

EMC Documentum CenterStage is a document management service. A cross-site scripting vulnerability in EMC Documentum CenterStage allows remote attackers to construct malicious URIs, trick users into parsing them, and perform malicious actions in the context of the target user...