8125 matches found
Race condition
Race condition in the JPEGEncoder function in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allows remote attackers to execute arbitrary code or cause a denial of service heap-based buffer overflow via vectors involving a CANVAS element and crafted JavaScript code...
CVE-2015-7189
Race condition in the JPEGEncoder function in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allows remote attackers to execute arbitrary code or cause a denial of service heap-based buffer overflow via vectors involving a CANVAS element and crafted JavaScript code...
CVE-2015-7192
The accessibility-tools feature in Mozilla Firefox before 42.0 on OS X improperly interacts with the implementation of the TABLE element, which allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code by using an NSAccessibilityIndexAttribute value...
CVE-2015-7192: Undefined Security Weakness
The accessibility-tools feature in Mozilla Firefox before 42.0 on OS X improperly interacts with the implementation of the TABLE element, which allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code by using an NSAccessibilityIndexAttribute value...
CVE-2015-7189: Improper Restriction of Operations within the Bounds of a Memory Buffer
Race condition in the JPEGEncoder function in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allows remote attackers to execute arbitrary code or cause a denial of service heap-based buffer overflow via vectors involving a CANVAS element and crafted JavaScript code...
CVE-2015-7189
Race condition in the JPEGEncoder function in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allows remote attackers to execute arbitrary code or cause a denial of service heap-based buffer overflow via vectors involving a CANVAS element and crafted JavaScript code...
Cisco Unified Border Element Denial of Service Vulnerability
Cisco Unified Border Element is an intelligent unified communications network border component from Cisco. A denial of service vulnerability exists in Cisco Unified Border Element. Due to the failure of the session initialization protocol to properly handle messages, a remote attacker exploiting...
CVE-2015-6031
Buffer overflow in the IGDstartelt function in igddescparse.c in the MiniUPnP client aka MiniUPnPc before 1.9.20150917 allows remote UPNP servers to cause a denial of service application crash and possibly execute arbitrary code via an "oversized" XML element name...
DEBIAN-CVE-2015-6031
Buffer overflow in the IGDstartelt function in igddescparse.c in the MiniUPnP client aka MiniUPnPc before 1.9.20150917 allows remote UPNP servers to cause a denial of service application crash and possibly execute arbitrary code via an "oversized" XML element name...
Buffer overflow
Buffer overflow in the IGDstartelt function in igddescparse.c in the MiniUPnP client aka MiniUPnPc before 1.9.20150917 allows remote UPNP servers to cause a denial of service application crash and possibly execute arbitrary code via an "oversized" XML element name...
CVE-2015-6031
Buffer overflow in the IGDstartelt function in igddescparse.c in the MiniUPnP client aka MiniUPnPc before 1.9.20150917 allows remote UPNP servers to cause a denial of service application crash and possibly execute arbitrary code via an "oversized" XML element name...
CVE-2015-6031
CVE-2015-6031 : A buffer overflow exists in MiniUPnP Client (MiniUPnPc) in the IGDstartelt function within igd_desc_parse.c. Versions before 1.9.20150917 are affected, allowing remote UPNP servers to crash the application and potentially execute arbitrary code via an oversized XML element name. S...
CVE-2015-6031
Buffer overflow in the IGDstartelt function in igddescparse.c in the MiniUPnP client aka MiniUPnPc before 1.9.20150917 allows remote UPNP servers to cause a denial of service application crash and possibly execute arbitrary code via an "oversized" XML element name...
CVE-2009-2844
cfg80211 in net/wireless/scan.c in the Linux kernel 2.6.30-rc1 and other versions before 2.6.31-rc6 allows remote attackers to cause a denial of service crash via a sequence of beacon frames in which one frame omits an SSID Information Element IE and the subsequent frame contains an SSID IE, whic...
Allen-Bradley MicroLogix Arbitrary File Insertion Vulnerability
Allen-Bradley MicroLogix is a programmable logic controller PLC from Rockwell Automation. An arbitrary file insertion vulnerability exists in Allen-Bradley MicroLogix 1100 before B FRN 15.000 and 1400 before B FRN 15.003. It allows an authenticated remote user to insert the contents of an arbitra...
The vulnerabilities of Microsoft Excel editors, programs for viewing Xls and Xlsx files (Excel Viewer), the Microsoft SharePoint Server corporate application suite, and the Microsoft Office Compatibility Pack enable a hacker to execute arbitrary code.
The vulnerability of Microsoft Excel editors, the Xls and Xlsx file viewers, Microsoft SharePoint Server, and the Microsoft Office Compatibility Pack are related to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely by...
The vulnerability of Google Chrome browser allows a violator to circumvent existing access restrictions.
The vulnerability of the Blink component in Google Chrome exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass existing access restrictions by using a specially crafted HTML document containing an IFRAME element...
CVE-2015-6491
Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allow remote authenticated users to insert the content of an arbitrary file into a FRAME element via unspecified vectors...
Code injection
Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allow remote authenticated users to insert the content of an arbitrary file into a FRAME element via unspecified vectors...
CVE-2015-6491
Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allow remote authenticated users to insert the content of an arbitrary file into a FRAME element via unspecified vectors...