Mozilla Firefox and Firefox ESR Memory Misreference Vulnerability (CNVD-2017-22580)

Mozilla Firefox and Firefox ESR are both browser products developed by the Mozilla Foundation in the U.S. Firefox is an open source web browser; Firefox ESR is an extended support version of Firefox. A memory misreference vulnerability exists in Mozilla Firefox versions prior to 55 and Firefox ES...

Mozilla Firefox and Firefox ESR Information Disclosure Vulnerability (CNVD-2017-22569)

Mozilla Firefox and Firefox ESR are both browser products developed by the Mozilla Foundation in the U.S. Firefox is an open source web browser; Firefox ESR is an extended support version of Firefox. An information disclosure vulnerability exists in Mozilla Firefox versions prior to 55 and Firefo...

Mozilla: Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3 (MFSA 2017-19)

Memory safety bugs were reported in Firefox 54, Firefox ESR 52.2, and Thunderbird 52.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird 52.3, Firefox...

Mozilla: Use-after-free in WebSockets during disconnection (MFSA 2017-19)

A use-after-free vulnerability can occur in WebSockets when the object holding the connection is freed before the disconnection operation is finished. This results in an exploitable crash. This vulnerability affects Thunderbird 52.3, Firefox ESR 52.3, and Firefox 55...

Oracle PeopleSoft Enterprise PeopleTools Unauthorized Access Vulnerability (CNVD-2017-28380)

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle Corporation, and PeopleSoft Enterprise PeopleTools is one of the tools and technology components that transforms the way organizations manage, use, and maintain their PeopleSoft software. PeopleSoft...

UBUNTU-CVE-2017-7783

If a long user name is used in a username/password combination in a site URL such as " http://UserName:[email protected]", the resulting modal prompt will hang in a non-responsive state or crash, causing a denial of service. This vulnerability affects Firefox 55...

CVE-2017-10252

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Updates Change Assistant. Supported versions that are affected are 8.54 and 8.55. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where...

CVE-2017-10250

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Tuxedo. Supported versions that are affected are 8.54 and 8.55. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterpri...

CVE-2017-10045

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Integration Broker. Supported versions that are affected are 8.54 and 8.55. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2017-10027

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Fluid Homepage & Navigation. Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2017-10021

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: PIA Search. Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

IrfanView buffer overflow vulnerability (CNVD-2017-14207)

IrfanView is an image viewer that supports image browsing, image editing, image format conversion and more. A buffer overflow vulnerability exists in the TOOLS plugin version 4.50 used in IrfanView version 4.44 32-bit. An attacker can exploit this vulnerability with the help of specially crafted...

IrfanView Buffer Overflow Vulnerability (CNVD-2017-14208)

IrfanView is an image viewer that supports image browsing, image editing, image format conversion and more. A buffer overflow vulnerability exists in the TOOLS plugin version 4.50 used in IrfanView version 4.44 32-bit. An attacker can exploit this vulnerability to execute arbitrary code or cause ...

IrfanView buffer overflow vulnerability (CNVD-2017-14205)

IrfanView is an image viewer that supports image browsing, image editing, image format conversion and more. A buffer overflow vulnerability exists in the TOOLS plugin version 4.50 used in IrfanView version 4.44 32-bit. An attacker can exploit this vulnerability to execute arbitrary code or cause ...

Unspecified Vulnerability in Mozilla Firefox and Firefox ESR for Windows

Mozilla Firefox for Windows is an open source web browser for the Windows platform from the Mozilla Foundation in the U.S. Firefox ESR for Windows is an extended support version of Firefox for the Windows platform. A security vulnerability exists in Windows-based versions of Mozilla Firefox prior...

Drupal File Upload Vulnerability

Drupal is a free, open-source content management system developed in the PHP language and maintained by the Drupal community. A security vulnerability exists in Drupal versions 7.x prior to 7.56 and 8.x prior to 8.3.4. An attacker can exploit this vulnerability to bypass security restrictions and...

Unspecified Vulnerability in Mozilla Firefox and Firefox ESR for Windows (CNVD-2017-12555)

Mozilla Firefox for Windows is an open source web browser for the Windows platform from the Mozilla Foundation in the U.S. Firefox ESR for Windows is an extended support version of Firefox for the Windows platform. A security vulnerability exists in Mozilla Firefox versions prior to 54 and Firefo...

Mozilla Firefox and Firefox ESR Denial of Service Vulnerability (CNVD-2017-12558)

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the U.S. Firefox ESR is an extended support version of Firefox. A denial of service vulnerability exists in versions of Mozilla Firefox prior to 54 and Firefox ESR prior to 52.2. An attacker can exploit this...

Mozilla Firefox and Firefox ESR Graphite 2 Arbitrary Code Execution Vulnerability (CNVD-2017-12545)

Mozilla Firefox and Firefox ESR are both browser products developed by the Mozilla Foundation in the U.S. Firefox is an open source web browser; Firefox ESR is an extended support version of Firefox.Graphite is a suite of enterprise-class open source system monitoring tools data plotting written ...

Mozilla Firefox Spoofing Vulnerability (CNVD-2017-10713)

Mozilla Firefox for Android is an open source web browser based on the Android platform from the US-based Mozilla Foundation. A spoofing vulnerability exists in previous versions of Mozilla Firefox 54 for Android. An attacker can exploit the vulnerability to spoof the contents of the address bar...