Lucene search
+L

95 matches found

zdt
zdt
added 2016/08/03 12:00 a.m.34 views

Wireshark 2.0.0 < 2.0.4 - CORBA IDL Dissectors Denial of Service

Exploit for multiple platform in category dos / poc GIOP capture Build Information: Version 2.0.3 v2.0.3-0-geed34f0 from master-2.0 Copyright 1998-2016 Gerald Combs and contributors. License GPLv2+: GNU GPL version 2 or later This is free software; see the source for copying conditions. There is ...

4.3CVSS6.3AI score0.06444EPSS
SaveExploits2
BDU FSTEC
BDU FSTEC
added 2016/07/05 12:00 a.m.10 views

The vulnerability of the Mozilla SeaMonkey software package, which allows a malicious individual to execute arbitrary code.

Mozilla SeaMonkey software contains a vulnerability related to errors in the implementation of the Web IDL technology. Exploiting this vulnerability allows malicious actors operating remotely to execute arbitrary JavaScript code with Chrome privileges, by using a fragment of IDL to trigger the...

9.3CVSS7.5AI score0.82339EPSS
SaveExploits6References5
BDU FSTEC
BDU FSTEC
added 2016/07/05 12:00 a.m.10 views

The vulnerability of the Firefox ESR browser, which allows a malicious individual to execute arbitrary code

The Mozilla Firefox ESR browser contains a vulnerability related to errors in the implementation of the Web IDL technology. Exploiting this vulnerability allows malicious actors operating remotely to execute arbitrary JavaScript code with Chrome privileges, by using a fragment of IDL to trigger a...

9.3CVSS7.5AI score0.82339EPSS
SaveExploits6References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/07/05 12:00 a.m.10 views

The vulnerability of the Thunderbird email client, which allows a malicious actor to execute arbitrary code

Mozilla Thunderbird’s email client contains a vulnerability related to errors in the implementation of the Web IDL technology. Exploiting this vulnerability allows malicious actors operating remotely to execute arbitrary JavaScript code with Chrome privileges, using a fragment of IDL to trigger a...

9.3CVSS7.5AI score0.82339EPSS
SaveExploits6References5Affected Software1
Fedora
Fedora
added 2016/02/23 7:50 p.m.31 views

[SECURITY] Fedora 22 Update: gdl-0.9.5-10.fc22

A free IDL Interactive Data Language compatible incremental compiler i.e. runs IDL programs. IDL is a registered trademark of Research Systems Inc...

5.5CVSS2.4AI score0.01541EPSS
SaveExploits0
RedHat Linux
RedHat Linux
added 2014/03/19 5:26 p.m.19 views

Mozilla: Privilege escalation using WebIDL-implemented APIs (MFSA 2014-29)

Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allow remote attackers to bypass the popup blocker via unspecified vectors...

9.8CVSS6.9AI score0.83633EPSS
SaveExploits6References5
RedHat Linux
RedHat Linux
added 2014/03/19 5:26 p.m.18 views

Mozilla: Privilege escalation using WebIDL-implemented APIs (MFSA 2014-29)

The Web IDL implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to execute arbitrary JavaScript code with chrome privileges by using an IDL fragment to trigger a window.open call...

9.8CVSS7.3AI score0.82339EPSS
SaveExploits6References5
NVD
NVD
added 2014/03/19 10:55 a.m.24 views

CVE-2014-1510

The Web IDL implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to execute arbitrary JavaScript code with chrome privileges by using an IDL fragment to trigger a window.open call...

9.8CVSS9.5AI score0.82339EPSS
SaveExploits6References14
ATTACKERKB
ATTACKERKB
added 2014/03/19 10:55 a.m.8 views

CVE-2014-1510

The Web IDL implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to execute arbitrary JavaScript code with chrome privileges by using an IDL fragment to trigger a window.open call...

9.8CVSS8AI score0.82339EPSS
SaveExploits6References16
Prion
Prion
added 2014/03/19 10:55 a.m.35 views

Design/Logic Flaw

The Web IDL implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to execute arbitrary JavaScript code with chrome privileges by using an IDL fragment to trigger a window.open call...

7.5CVSS7.7AI score0.82339EPSS
SaveExploits6References14Affected Software17
CVE
CVE
added 2014/03/19 10:00 a.m.207 views

CVE-2014-1510

CVE-2014-1510 is a WebIDL-related remote code execution in Mozilla Firefox family (Firefox, Thunderbird, SeaMonkey) where an IDL fragment can trigger window.open with chrome privileges. Affected products and versions are Mozilla Firefox (pre-28.0 and ESR 24.x before 24.4 for some branches), Thund...

9.8CVSS9.2AI score0.82339EPSS
SaveExploits6References14Affected Software3
Cvelist
Cvelist
added 2014/03/19 10:00 a.m.42 views

CVE-2014-1510

The Web IDL implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to execute arbitrary JavaScript code with chrome privileges by using an IDL fragment to trigger a window.open call...

9.7AI score0.82339EPSS
SaveExploits6References14
UbuntuCve
UbuntuCve
added 2014/03/18 12:00 a.m.56 views

CVE-2014-1510

The Web IDL implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to execute arbitrary JavaScript code with chrome privileges by using an IDL fragment to trigger a window.open call...

9.8CVSS7.2AI score0.82339EPSS
SaveExploits6References4
Check Point Advisories
Check Point Advisories
added 2012/10/14 12:00 a.m.12 views

Samba DCE RPC IDL Parser Out-of-bounds Array Access (CVE-2012-1182)

An out-of-bounds array access vulnerability has been reported in Samba...

9.4AI score0.74371EPSS
SaveExploits9
securityvulns
securityvulns
added 2008/10/14 12:00 a.m.85 views

CA BrightStor ARCServe BackUp Message Engine Remote Command Injection Vulnerability

CA BrightStor ARCServe BackUp Message Engine Remote Command Injection Vulnerability by cocoruderfrankruderathotmail.com http://ruder.cdut.net Summary: CA BrightStor ARCServe BackUp is an overall data backup solution. The RPC interface of CA BrightStor ARCServe BackUp does not handle user's input...

10CVSS0.2AI score0.80542EPSS
SaveExploits6
Rows per page
Query Builder