Lucene search
+L

798 matches found

CNVD
CNVD
added 2016/03/11 12:00 a.m.8 views

Mozilla Firefox and Firefox ESR Graphite 2 Denial of Service Vulnerability (CNVD-2016-01645)

Mozilla Firefox and Firefox ESR are both browser products developed by the Mozilla Foundation in the U.S. Firefox is an open source web browser; Firefox ESR is an extended support version of Firefox.Graphite is a suite of enterprise-class open source system monitoring tools data plotting written ...

8.8CVSS8.7AI score0.0227EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2016/03/09 5:11 a.m.18 views

Mozilla: Miscellaneous memory safety hazards (rv:38.7) (MFSA 2016-16)

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via unknown vectors...

8.8CVSS7.8AI score0.0299EPSS
SaveExploits0References5
OSV
OSV
added 2016/03/08 12:00 a.m.13 views

UBUNTU-CVE-2016-2794

The graphite2::TtfUtil::CmapSubtable12NextCodepoint function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service buffer over-read or possibly have unspecified other impact via a crafted Graphite...

8.8CVSS7.4AI score0.03466EPSS
SaveExploits0References7
OSV
OSV
added 2016/03/08 12:00 a.m.7 views

UBUNTU-CVE-2016-2798

The graphite2::GlyphCache::Loader::Loader function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service buffer over-read or possibly have unspecified other impact via a crafted Graphite smart font...

8.8CVSS7.4AI score0.0227EPSS
SaveExploits0References7
OSV
OSV
added 2016/03/08 12:00 a.m.7 views

UBUNTU-CVE-2016-2801

The graphite2::TtfUtil::CmapSubtable12Lookup function in TtfUtil.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service buffer over-read or possibly have unspecified other impact via a crafted...

8.8CVSS7.4AI score0.0227EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
added 2016/03/02 12:00 a.m.11 views

The vulnerability of the Firefox browser, which allows a violator to trigger a service failure or cause other effects

The vulnerability of the MoofParser::Metadata function located in moofParser.cpp in the Firefox browser’s libstagefright library is related to a buffer overflow in dynamic memory, caused by a numerical overflow. Exploiting this vulnerability could allow a remote attacker to cause a service failur...

10CVSS8.3AI score0.05645EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/03/02 12:00 a.m.11 views

The vulnerability of the Firefox browser, which allows a violator to trigger a service failure or cause other effects

The vulnerability of the Buffer11::NativeBuffer11::map ANGLE function in the Firefox browser arises due to buffer overflow. Exploiting this vulnerability can allow an attacker to trigger a service failure memory corruption, or possibly cause other adverse effects...

10CVSS8.3AI score0.03721EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
added 2016/02/23 12:00 a.m.10 views

Mozilla Firefox and Firefox ESR Graphite 2 Code.cpp File Denial of Service Vulnerability

Mozilla FirefoxFirefox is an open source web browser; Firefox ESR is an extended support version of Firefox.Graphite is a set of enterprise-class open source system monitoring tools written in Python, using the Django framework , it is through a third-party tools or plug-ins for data collection ,...

9.3CVSS9.2AI score0.0831EPSS
SaveExploits1References1
CVE
CVE
added 2016/02/13 2:00 a.m.126 views

CVE-2016-1526

CVE-2016-1526 concerns Graphite2 Libgraphite’s TtfUtil:LocaLookup in Graphite 2 1.2.4 used by Mozilla Firefox before 43.0 and ESR 38.x before 38.6.1. The bug stems from incorrect validation of a size value in TtfUtil.cpp, enabling remote attackers to trigger an out-of-bounds read, potentially lea...

8.1CVSS7.8AI score0.02254EPSS
SaveExploits0References15Affected Software1
OSV
OSV
added 2016/01/31 6:59 p.m.2 views

CVE-2016-1930

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 44.0 and Firefox ESR 38.x before 38.6 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via unknown vectors...

9.8CVSS7.6AI score0.05992EPSS
SaveExploits0References30
OSV
OSV
added 2016/01/26 12:00 a.m.7 views

UBUNTU-CVE-2016-1931

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 44.0 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via vectors related to uninitialized memory encountered during brotli data...

10CVSS7.7AI score0.05722EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2015/12/29 12:00 a.m.11 views

The vulnerability of the Firefox browser allows attackers to obtain confidential information, increase their privileges, or perform XSS attacks.

The vulnerability of Firefox browsers is related to deficiencies in access control for certain functions. Exploiting this vulnerability allows a malicious actor to enhance their privileges, carry out XSS attacks, or potentially obtain confidential information through a specially crafted website...

4CVSS7AI score0.01779EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/12/29 12:00 a.m.10 views

The vulnerability of the Firefox ESR browser allows a perpetrator to trigger a service failure, obtain confidential information, or carry out other malicious actions.

The vulnerability of the RTPReceiverVideo::ParseRtpPacket function in Firefox and Firefox ESR browsers is caused by a loss of precision in integer arithmetic. Exploiting this vulnerability can allow an attacker to obtain confidential information, cause other effects, or trigger service failures b...

10CVSS7AI score0.03174EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2015/12/29 12:00 a.m.10 views

The vulnerability of the Firefox browser, which allows a violator to trigger a service failure

The vulnerability of the Firefox browser’s HTTP/2 implementation arises from the loss of a significant number of bits. Exploiting this vulnerability allows an attacker to cause a service failure remotely by triggering a “Assertion failure” error message and a premature termination of the service...

5CVSS7AI score0.02888EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/12/29 12:00 a.m.9 views

Firefox browser’s vulnerabilities, which allow a hacker to trigger a service failure or execute arbitrary code

The multiple vulnerabilities in the Firefox browser’s kernel are caused by buffer overflows. Exploiting these vulnerabilities can allow a malicious actor to cause a service failure memory corruption or execute arbitrary code...

10CVSS7.7AI score0.05852EPSS
SaveExploits0References15Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/12/29 12:00 a.m.10 views

The vulnerability of the Firefox browser, which allows a violator to trigger a service failure or cause other effects

The vulnerability of the sDeque::GrowCapacity function xpcom/glue/nsDeque.cpp in the Firefox browser is triggered due to buffer overflows. Exploiting this vulnerability can allow an attacker to cause service interruptions or other effects by changing the size of the deque...

10CVSS7.3AI score0.0451EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/12/29 12:00 a.m.11 views

The vulnerability of the Firefox browser, which allows a violator to trigger a service failure

The vulnerability in the implementation of the HTTP/2 protocol in Firefox browsers arises from the loss of precision in calculations. Exploiting this vulnerability allows a malicious actor to cause a service failure—the appearance of an error message indicating “Assertion failure” or an emergency...

5CVSS7.2AI score0.02888EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/11/20 12:00 a.m.9 views

The vulnerability of the Firefox browser, which allows a violator to obtain confidential information

The vulnerability of the Firefox browser’s URL analysis process is related to the improper recognition of escaped characters in host names within the Location header. Exploiting this vulnerability can allow a malicious actor to access protected information by redirecting users to another website...

5CVSS7.7AI score0.02183EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/11/20 12:00 a.m.12 views

The vulnerability of the Firefox browser allows a violator to circumvent domain restrictions and breach data confidentiality.

The vulnerability of Firefox browsers is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to bypass access controls and compromise data confidentiality using a specially crafted HTML document...

4.3CVSS7.7AI score0.01532EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/11/20 12:00 a.m.8 views

Vulnerabilities in the Firefox and Firefox ESR browsers, which allow a hacker to trigger a service failure or execute arbitrary code.

The multiple vulnerabilities in the Firefox and Firefox ESR browsers are caused by buffer overflows. Exploitation of these vulnerabilities can allow a malicious actor to cause service failures or execute arbitrary code...

7.5CVSS8.3AI score0.04219EPSS
SaveExploits0References13Affected Software2
Rows per page
Query Builder