Mozilla Firefox Multiple Vulnerabilities (Dec 2015) - Mac OS X

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

Mozilla Firefox Information Disclosure Vulnerability (CNVD-2015-08323)

Mozilla Firefox is a free and open source browser developed by the Mozilla Foundation in conjunction with the open source community for the Windows, Linux and MacOS X platforms. An information disclosure vulnerability exists in versions of Mozilla Firefox prior to 43.0, which allows remote...

CVE-2015-7211

Mozilla Firefox before 43.0 mishandles the number sign character in a data: URI, which allows remote attackers to spoof web sites via unspecified vectors...

Design/Logic Flaw

Mozilla Firefox before 43.0 mishandles the number sign character in a data: URI, which allows remote attackers to spoof web sites via unspecified vectors...

CVE-2015-7097

WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than CVE-2015-7048, CVE-2015-7095, CVE-2015-7096,...

USN-2825-1 oxide-qt vulnerabilities

Multiple use-after-free bugs were discovered in the application cache implementation in Chromium. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service via application crash, or execute arbitrary code with the...

Spoofing

Microsoft Edge misparses HTTP responses, which allows remote attackers to redirect users to arbitrary web sites via unspecified vectors, aka "Microsoft Edge Spoofing Vulnerability."...

Google Updates Chrome, Extends Safe Browsing to Chrome for Android

Google yesterday released an update for the Chrome browser that patches seven vulnerabilities and also updates Adobe Flash Player. It also announced that Google Safe Browsing has been extended to Chrome for Android. The Chrome browser update is the second in less than a week; on Dec 1, Chrome 47...

Adele strong, the fans said personal information due to the ticket being leaked-and the vulnerability and early warning-the black bar safety net

! Silence after three years, the 2 5-year-old soul singer Adele bring new album the 2 5 on the strong back, the album was released the first week of the mad sweep of the Anglo-American sales record, the critics said: even if she sold the tape, it will also become a sales champion. And buy Adele...

CVE-2015-4112

The Management Console in BlackBerry Enterprise Server BES 12 before 12.2 does not properly restrict use of FRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site, related to a "cross frame scripting" issue...

CVE-2015-6374

The web interface in Cisco Firepower Extensible Operating System 1.11.160 on Firepower 9000 devices does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a crafted web site, aka Bug ID...

Unable to log in to PVS console, error: The domain/user does not have access to the Farm

When a domain user tries to log in to the PVS console, gets error: "The domain/user does not have access to the Farm." The environment may or may not have multiple PVS sites and/or multiple domains. The domain user has been added to the "Farm Administrators" under the Security tab on the Farm...

Mozilla Firefox HTTP Authentication Information Disclosure Vulnerability

Mozilla Firefox is an open source web browser. Mozilla Firefox uses NTLM v1 to perform HTTP authentication with a security vulnerability that allows remote attackers to build specially crafted Web sites to trick users into parsing for sensitive domain information...

The vulnerability of the Oracle Fusion Middleware software allows a perpetrator to modify data.

The vulnerability of the Oracle WebCenter Sites component of the Oracle Fusion Middleware software is related to errors in the code. Exploiting this vulnerability could allow a malicious actor to remotely modify data...

phpmyadmin: content spoofing

This vulnerability allows an attacker to perform a content spoofing attack using the phpMyAdmin's redirection mechanism to external sites. This vulnerability is not considered to be critical since the spoofed content is escaped and no HTML injection is possible...

Oracle WebCenter Sites Multiple Vulnerabilities (October 2015 CPU)

The version Oracle WebCenter Sites installed on the remote host is missing security patches from the October 2015 Critical Patch Update CPU. It is, therefore, affected by multiple vulnerabilities : - A flaw exists in the bundled SpringSource Spring Framework that allows a remote attacker to execu...

phpMyAdmin -- Content spoofing vulnerability

The phpMyAdmin development team reports: This vulnerability allows an attacker to perform a content spoofing attack using the phpMyAdmin's redirection mechanism to external sites. We consider this vulnerability to be non critical since the spoofed content is escaped and no HTML injection is...

Mozilla Firefox Same Origin Policy Bypass Vulnerability

Mozilla Firefox is a free and open source browser developed by the Mozilla Foundation in conjunction with the open source community for the Windows, Linux and MacOS X platforms. A same-origin policy bypass vulnerability exists in versions of Mozilla Firefox prior to 41.0.2. It allows remote...

Vulnerability in Oracle Fusion Middleware WebCenter Sites Component

Oracle Fusion Middleware is a suite of business innovation platforms for enterprise and cloud environments from Oracle Corporation. Oracle WebCenter Sites is a web experience management component that enables marketers and business users to create and manage interactive social online experiences ...

CVE-2015-4799

Technical details about CVE-2015-4799 are not publicly provided in the supplied documents. No affected products, root cause, or remediation details are specified. Monitor for updates from Oracle and security feeds.