PT-2015-2409

Name of the Vulnerable Software and Affected Versions Adobe Acrobat versions affected versions not specified Adobe Acrobat Document Cloud versions affected versions not specified Adobe Reader versions affected versions not specified Adobe Reader Document Cloud versions affected versions not...

PT-2015-2408

Name of the Vulnerable Software and Affected Versions Adobe Acrobat versions affected versions not specified Adobe Acrobat Document Cloud versions affected versions not specified Adobe Reader versions affected versions not specified Adobe Reader Document Cloud versions affected versions not...

PT-2015-2386

Name of the Vulnerable Software and Affected Versions Adobe Acrobat versions affected versions not specified Adobe Acrobat Document Cloud versions affected versions not specified Adobe Reader versions affected versions not specified Adobe Reader Document Cloud versions affected versions not...

PT-2015-2407

Name of the Vulnerable Software and Affected Versions Adobe Acrobat versions affected versions not specified Adobe Acrobat Reader versions affected versions not specified Adobe Acrobat Document Cloud versions affected versions not specified Adobe Reader versions affected versions not specified...

PT-2015-2392

Name of the Vulnerable Software and Affected Versions Adobe Acrobat versions affected versions not specified Adobe Acrobat Document Cloud versions affected versions not specified Adobe Reader versions affected versions not specified Adobe Reader Document Cloud versions affected versions not...

IPython Notebook Arbitrary Code Execution Vulnerability

IPython NotebookIPython is an enhanced version of Python's native interactive shell developed by the IPython team, of which Notebook is a development environment. Arbitrary code execution vulnerability in IPython Notebook versions prior to 3.2.2 and Jupyter Notebook versions 4.0.x prior to 4.0.5...

Mozilla Firefox Arbitrary Code Execution Vulnerability (CNVD-2015-04353)

Mozilla Firefox is a web browser released by Mozilla. A security vulnerability exists in Mozilla Firefox version 38.0 and Firefox ESR version 38.0, which can be exploited by remote attackers to read arbitrary files or execute arbitrary JS code via a constructed website...

UBUNTU-CVE-2015-2727

Mozilla Firefox 38.0 and Firefox ESR 38.0 allow user-assisted remote attackers to read arbitrary files or execute arbitrary JavaScript code with chrome privileges via a crafted web site that is accessed with unspecified mouse and keyboard actions. NOTE: this vulnerability exists because of a...

PT-2015-5859

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions 38.0 Mozilla Firefox ESR version 38.0 Description The issue allows user-assisted remote attackers to read arbitrary files or execute arbitrary JavaScript code with chrome privileges via a crafted web site that is...

Microsoft Active Directory Federation Services CVE-2015-1757 Privilege Escalation Vulnerability

Description Microsoft Active Directory Federation Services is prone to a remote privilege-escalation vulnerability because it fails to sanitize user-supplied input. An attacker can exploit this issue to gain elevated privileges and perform unauthorized actions in the context of the currently...

CVE-2015-3074

Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to bypass intended restrictions on JavaScript API execution via unspecified vectors, a different vulnerability than CVE-2015-3060, CVE-2015-3061, CVE-2015-3062, CVE-2015-3063, CVE-2015-3064,...

mod_cluster: JavaScript code injection is possible via MCMP mod_manager messages

A flaw was found in the way the modcluster manager processed certain MCMP messages. An attacker with access to the network from which MCMP messages are allowed to be sent could use this flaw to execute arbitrary JavaScript code in the modcluster manager web interface...

mod_cluster: JavaScript code injection is possible via MCMP mod_manager messages

A flaw was found in the way the modcluster manager processed certain MCMP messages. An attacker with access to the network from which MCMP messages are allowed to be sent could use this flaw to execute arbitrary JavaScript code in the modcluster manager web interface...

mod_cluster: JavaScript code injection is possible via MCMP mod_manager messages

A flaw was found in the way the modcluster manager processed certain MCMP messages. An attacker with access to the network from which MCMP messages are allowed to be sent could use this flaw to execute arbitrary JavaScript code in the modcluster manager web interface...

Mozilla Firefox/SeaMonkey Same Origin Policy Bypass Elevation of Privilege Vulnerability

Mozilla Firefox/SeaMonkey is a WEB browser/newsgroup client released by Mozilla. A same-origin policy bypass vulnerability exists in Mozilla Firefox/SeaMonkey, which can be exploited to bypass the same-origin policy via anchor navigation and execute arbitrary javascript code with elevated...

Mozilla Firefox ESR Multiple Vulnerabilities-01 (Apr 2015) - Windows

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

UBUNTU-CVE-2015-0801

Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 allow remote attackers to bypass the Same Origin Policy and execute arbitrary JavaScript code with chrome privileges via vectors involving anchor navigation, a similar issue to CVE-2015-0818...

CVE-2015-0816: Undefined Security Weakness

Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 do not properly restrict resource: URLs, which makes it easier for remote attackers to execute arbitrary JavaScript code with chrome privileges by leveraging the ability to bypass the Same Origin Policy, as...

UBUNTU-CVE-2015-0816

Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 do not properly restrict resource: URLs, which makes it easier for remote attackers to execute arbitrary JavaScript code with chrome privileges by leveraging the ability to bypass the Same Origin Policy, as...

Palo Alto Traps Server 3.1.2.1546 - Persistent Cross-Site Scripting

Palo Alto Traps Server 3.1.2.1546 - Persistent Cross-Site Scripting !/usr/bin/ruby =begin ------------------------------------------------------------------------ Product: Palo Alto Traps Server formerly Cyvera Endpoint Protection Vendor: Palo Alto Networks Vulnerable Versions: 3.1.2.1546 Tested...