Lucene search
K

2151 matches found

NVD
NVD
added 2013/05/16 11:45 a.m.22 views

CVE-2013-1670

The Chrome Object Wrapper COW implementation in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 does not prevent acquisition of chrome privileges during calls to content level constructors, which allows remote attacker...

4.3CVSS7.3AI score0.21901EPSS
Exploits4References17
Prion
Prion
added 2013/05/16 11:45 a.m.18 views

Cross site scripting

The Chrome Object Wrapper COW implementation in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 does not prevent acquisition of chrome privileges during calls to content level constructors, which allows remote attacker...

4.3CVSS5.9AI score0.21901EPSS
Exploits4References17Affected Software4
CVE
CVE
added 2013/05/16 10:0 a.m.161 views

CVE-2013-1670

CVE-2013-1670 affects Mozilla Firefox < 21.0, Firefox ESR < 17.0.6, Thunderbird

4.3CVSS8.1AI score0.21901EPSS
Exploits4References17Affected Software1
Metasploit
Metasploit
added 2013/05/16 4:52 a.m.29 views

Firefox 17.0.1 Flash Privileged Code Injection

This exploit gains remote code execution on Firefox 17 and 17.0.1, provided the user has installed Flash. No memory corruption is used. First, a Flash object is cloned into the anonymous content of the SVG "use" element in the This module requires Metasploit: https://metasploit.com/download Curre...

9.3CVSS0.3AI score0.87365EPSS
Exploits5
RedHat Linux
RedHat Linux
added 2013/05/14 6:31 p.m.4 views

Mozilla: Privileged access for content level constructor (MFSA 2013-42)

The Chrome Object Wrapper COW implementation in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 does not prevent acquisition of chrome privileges during calls to content level constructors, which allows remote attacker...

4.3CVSS7.2AI score0.21901EPSS
Exploits4References5
RedHat Linux
RedHat Linux
added 2013/05/14 5:49 p.m.3 views

OpenJDK: Wrapper.convert insufficient type checks (Libraries, 8009049)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2013-1488 a...

9.3CVSS6.7AI score0.06119EPSS
Exploits6References4
UbuntuCve
UbuntuCve
added 2013/05/14 12:0 a.m.26 views

CVE-2013-1670

The Chrome Object Wrapper COW implementation in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 does not prevent acquisition of chrome privileges during calls to content level constructors, which allows remote attacker...

4.3CVSS6.8AI score0.21901EPSS
Exploits4References4
ATTACKERKB
ATTACKERKB
added 2013/04/18 6:55 p.m.3 views

CVE-2013-0133

Untrusted search path vulnerability in /usr/local/psa/admin/sbin/wrapper in Parallels Plesk Panel 11.0.9 allows local users to gain privileges via a crafted PATH environment variable...

7.2CVSS5.5AI score0.00192EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2013/04/18 6:55 p.m.2 views

CVE-2013-0132

The suexec implementation in Parallels Plesk Panel 11.0.9 contains a cgi-wrapper whitelist entry, which allows user-assisted remote attackers to execute arbitrary PHP code via a request containing crafted environment variables...

6.8CVSS6.1AI score0.00509EPSS
Exploits0References2
RedHat Linux
RedHat Linux
added 2013/04/18 6:18 p.m.2 views

OpenJDK: Wrapper.convert insufficient type checks (Libraries, 8009049)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2013-1488 a...

10CVSS6.7AI score0.86252EPSS
Exploits10References4
Cvelist
Cvelist
added 2013/04/18 6:0 p.m.20 views

CVE-2013-0132

The suexec implementation in Parallels Plesk Panel 11.0.9 contains a cgi-wrapper whitelist entry, which allows user-assisted remote attackers to execute arbitrary PHP code via a request containing crafted environment variables...

7.5AI score0.00509EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2013/04/15 12:0 a.m.28 views

CentOS Update for stunnel CESA-2013:0714 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.6CVSS8.5AI score0.0201EPSS
Exploits0References2
RedHat Linux
RedHat Linux
added 2013/04/08 5:43 p.m.22 views

Moderate: Red Hat Security Advisory: stunnel security update

An updated stunnel package that fixes one security issue is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

6.6CVSS7.5AI score0.0201EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2013/04/08 12:0 a.m.36 views

Mozilla Firefox Multiple Vulnerabilities -01 Apr13 (Windows)

This host is installed with Mozilla Firefox and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillafirefoxmultvuln01apr13win.nasl 6086 2017-05-09 09:03:30Z teissa $ Mozilla Firefox Multiple Vulnerabilities -01 Apr13 Windows Authors: Thanga Prakash S Copyright: Copyrigh...

10CVSS0.5AI score0.03049EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2013/04/08 12:0 a.m.72 views

Mozilla Thunderbird ESR Multiple Vulnerabilities -01 (Apr 2013) - Mac OS X

Mozilla Thunderbird ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7.2AI score0.03049EPSS
Exploits0References11
OpenVAS
OpenVAS
added 2013/04/08 12:0 a.m.273 views

Mozilla Thunderbird ESR Multiple Vulnerabilities -01 Apr13 (Mac OS X)

This host is installed with Mozilla Thunderbird ESR and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillathunderbirdesrmultvuln01apr13macosx.nasl 6074 2017-05-05 09:03:14Z teissa $ Mozilla Thunderbird ESR Multiple Vulnerabilities -01 Apr13 Mac OS X Authors: Thanga...

10CVSS0.8AI score0.03049EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2013/04/08 12:0 a.m.33 views

Mozilla SeaMonkey Multiple Vulnerabilities -01 Apr13 (Mac OS X)

This host is installed with Mozilla SeaMonkey and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillaseamonkeymultvuln01apr13macosx.nasl 6065 2017-05-04 09:03:08Z teissa $ Mozilla SeaMonkey Multiple Vulnerabilities -01 Apr13 Mac OS X Authors: Thanga Prakash S Copyright...

10CVSS1.1AI score0.03049EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2013/04/08 12:0 a.m.37 views

Mozilla Thunderbird Multiple Vulnerabilities -01 Apr13 (Mac OS X)

This host is installed with Mozilla Thunderbird and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillathunderbirdmultvuln01apr13macosx.nasl 6065 2017-05-04 09:03:08Z teissa $ Mozilla Thunderbird Multiple Vulnerabilities -01 Apr13 Mac OS X Authors: Thanga Prakash S...

10CVSS0.5AI score0.03049EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2013/04/08 12:0 a.m.41 views

Mozilla SeaMonkey Multiple Vulnerabilities -01 Apr13 (Windows)

This host is installed with Mozilla SeaMonkey and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillaseamonkeymultvuln01apr13win.nasl 6104 2017-05-11 09:03:48Z teissa $ Mozilla SeaMonkey Multiple Vulnerabilities -01 Apr13 Windows Authors: Thanga Prakash S Copyright:...

10CVSS0.9AI score0.03049EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2013/04/08 12:0 a.m.25 views

Mozilla Firefox ESR Multiple Vulnerabilities -01 (Apr 2013) - Windows

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7.1AI score0.03049EPSS
Exploits0References11
Rows per page
Query Builder