Lucene search
+L

7 matches found

BDU FSTEC
BDU FSTEC
•added 2015/07/21 12:00 a.m.•12 views

The vulnerability of the Firefox browser, which allows a hacker to execute arbitrary code on the client side

The vulnerability of the CSPService::ShouldLoad function in Firefox browsers is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code on the client side by manipulating the DOM objects...

10CVSS7.5AI score0.05787EPSS
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
•added 2015/07/07 12:00 a.m.•41 views

Firefox < 39.0 Multiple Vulnerabilities (Mac OS X) (Logjam)

The version of Firefox installed on the remote Mac OS X host is prior to 39.0. It is, therefore, affected by multiple vulnerabilities : - A security downgrade vulnerability exists due to a flaw in Network Security Services NSS. When a client allows for a ECDHEECDSA exchange, but the server does n...

10CVSS7.5AI score0.9986EPSS
SaveExploits2References35
Prion
Prion
•added 2015/07/06 2:01 a.m.•28 views

Design/Logic Flaw

Use-after-free vulnerability in the CSPService::ShouldLoad function in the microtask implementation in Mozilla Firefox before 39.0, Firefox ESR 38.x before 38.1, and Thunderbird before 38.1 allows remote attackers to execute arbitrary code by leveraging client-side JavaScript that triggers remova...

10CVSS7.9AI score0.05787EPSS
SaveExploits0References14Affected Software4
Cvelist
Cvelist
•added 2015/07/06 1:00 a.m.•39 views

CVE-2015-2731

Use-after-free vulnerability in the CSPService::ShouldLoad function in the microtask implementation in Mozilla Firefox before 39.0, Firefox ESR 38.x before 38.1, and Thunderbird before 38.1 allows remote attackers to execute arbitrary code by leveraging client-side JavaScript that triggers remova...

5.2AI score0.05787EPSS
SaveExploits0References14
CVE
CVE
•added 2015/07/06 1:00 a.m.•170 views

CVE-2015-2731

CVE-2015-2731 is a use-after-free vulnerability in the CSPService::ShouldLoad function of Firefox’s microtask implementation (and affects Thunderbird). An attacker could trigger removal of a DOM object via client-side JavaScript based on a Content Policy, leading to remote code execution. Affecte...

10CVSS7AI score0.05787EPSS
SaveExploits0References14Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/07/06 12:00 a.m.•4 views

CVE-2015-2731: Undefined Security Weakness

Use-after-free vulnerability in the CSPService::ShouldLoad function in the microtask implementation in Mozilla Firefox before 39.0, Firefox ESR 38.x before 38.1, and Thunderbird before 38.1 allows remote attackers to execute arbitrary code by leveraging client-side JavaScript that triggers remova...

10CVSS6.8AI score0.05787EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2015/07/05 12:00 a.m.•25 views

CVE-2015-2731

Use-after-free vulnerability in the CSPService::ShouldLoad function in the microtask implementation in Mozilla Firefox before 39.0, Firefox ESR 38.x before 38.1, and Thunderbird before 38.1 allows remote attackers to execute arbitrary code by leveraging client-side JavaScript that triggers remova...

10CVSS6.3AI score0.05787EPSS
SaveExploits0References6
Rows per page
Query Builder