Mozilla Firefox suffers from an unspecified memory corruption vulnerability (CNVD-2015-05436)

Mozilla Firefox is an open source WEB browser. An unspecified memory corruption vulnerability exists in Mozilla Firefox that allows remote attackers to construct a malicious web page and trick users into parsing it, which could crash the application or execute arbitrary code...

[SECURITY] Fedora 22 Update: firefox-40.0-4.fc22

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

Unspecified Arbitrary URL Restriction Vulnerability in Apple Safari

Apple Safari is an open source WEB browser. A security vulnerability exists in Apple Safari that can be exploited by remote attackers to construct malicious web pages that can be tricked into parsing and can display arbitrary URLs for phishing attacks...

[SECURITY] Fedora 21 Update: firefox-40.0-3.fc21

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

Debian DSA-3333-1 : iceweasel - security update

Multiple security issues have been found in Iceweasel, Debian's version of the Mozilla Firefox web browser: Multiple memory safety errors, integer overflows, buffer overflows, use-after-frees and other implementation errors may lead to the execution of arbitrary code, bypass of the same-origin...

CentOS Update for firefox CESA-2015:1586 centos5

Check the version of firefox SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882244";...

Microsoft Internet Explorer Memory Corruption Vulnerability (CNVD-2015-05212)

Microsoft Internet Explorer is a popular WEB browser. A remote code execution vulnerability exists when Internet Explorer fails to properly access objects in memory. The vulnerability allows an attacker to execute arbitrary code memory corruption in the context of the current user...

RHEL 6 / 7 : firefox (RHSA-2015:1586)

The remote Redhat Enterprise Linux 6 / 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2015:1586 advisory. Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were...

CentOS 5 / 6 / 7 : firefox (CESA-2015:1586)

Updated firefox packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5, 6, and 7. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

Critical: Red Hat Security Advisory: firefox security update

Updated firefox packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5, 6, and 7. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

Microsoft XML Core Services CVE-2015-2471 Man in the Middle Information Disclosure Vulnerability

Description Microsoft XML Core Services is prone to an information-disclosure vulnerability. Attackers can exploit this issue to disclose potentially sensitive information through man-in-the-middle attacks. Technologies Affected Microsoft Office 2007 SP2 Microsoft Windows 7 for 32-bit Systems SP1...

Microsoft XML Core Services CVE-2015-2440 Information Disclosure Vulnerability

Description Microsoft XML Core Services is prone to an information-disclosure vulnerability. An attacker can exploit this issue to gain access to sensitive information that may lead to further attacks. Technologies Affected Microsoft InfoPath 2007 SP3 Microsoft Office 2007 SP2 Microsoft Office 20...

Microsoft System Center Operations Manager CVE-2015-2420 Cross Site Scripting Vulnerability

Description Microsoft System Center Operations Manager is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...

Microsoft Windows UDDI Services CVE-2015-2475 Cross Site Scripting Vulnerability

Description Microsoft Windows UDDI Services is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site...

Microsoft XML Core Services CVE-2015-2434 Man in the Middle Information Disclosure Vulnerability

Description Microsoft XML Core Services is prone to an information-disclosure vulnerability. Attackers can exploit this issue to disclose potentially sensitive information through man-in-the-middle attacks. Technologies Affected Microsoft Office 2007 SP2 Microsoft Windows 7 for 32-bit Systems SP1...

[SECURITY] Fedora 23 Update: firefox-39.0.3-1.fc23

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

RHEL 5 / 6 / 7 : firefox (RHSA-2015:1581)

Updated firefox packages that fix one security issue are now available for Red Hat Enterprise Linux 5, 6, and 7. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

[SECURITY] Fedora 21 Update: firefox-39.0.3-1.fc21

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

Xceedium Xsuite - Multiple Vulnerabilities

Xceedium Xsuite - Multiple Vulnerabilities See also: http://www.modzero.ch/advisories/MZ-15-02-Xceedium-Xsuite.txt --------------------------------------------------------------------- modzero Security Advisory: Multiple Vulnerabilities in Xceedium Xsuite MZ-15-02...

JVN#97971874: Welcart vulnerable to cross-site scripting

Welcart provided by Collne Inc. is a WordPress plugin for creating shopping websites. Welcart contains a cross-site scripting CWE-79 vulnerability due to the processing of uscesreferer parameter in admin.php. Impact If a user views a malicious page while logged into WordPress with this plugin...