Skip to content
OpenAdvisories

Archive

25 February 2015

Vulnerabilities first published on this day (UTC), newest first.

23 results · Feed

  • Unscored —

    Cross-site request forgery (CSRF) vulnerability in Ilch CMS allows remote attackers to hijack the authentication of adm…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Login.aspx in UNIT4 Prosoft HRMS before 8.14.330.43 allows remote attackers…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in Visualware MyConnection Server 8.2b allow remote attackers to in…

  • Unscored —
    CVE-2015-2084 Public exploit

    Cross-site request forgery (CSRF) vulnerability in the Easy Social Icons plugin before 1.2.3 for WordPress allows remot…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in Vanilla Forums before 2.0.18.13 and 2.1.x before 2.1.1 allow rem…

  • Unscored —

    Multiple use-after-free vulnerabilities in OpenType Sanitiser, as used in Mozilla Firefox before 36.0, might allow remo…

  • Unscored —

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 36.0 allow remote attackers to cau…

  • Unscored —

    Mozilla Firefox before 36.0 allows user-assisted remote attackers to read arbitrary files or execute arbitrary JavaScri…

  • Unscored —

    The nsTransformedTextRun::SetCapitalization function in Mozilla Firefox before 36.0 allows remote attackers to execute …

  • Unscored —

    The Form Autocompletion feature in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31…

  • Unscored —

    The mozilla::layers::BufferTextureClient::AllocateForSurface function in Mozilla Firefox before 36.0 allows remote atta…

  • Unscored —

    The UITour::onPageEvent function in Mozilla Firefox before 36.0 does not ensure that an API call originates from a fore…

  • Unscored —

    Mozilla Firefox before 36.0 does not properly restrict transitions of JavaScript objects from a non-extensible state to…

  • Unscored —

    Double free vulnerability in the nsXMLHttpRequest::GetResponse function in Mozilla Firefox before 36.0, when a nonstand…

  • Unscored —

    Stack-based buffer underflow in the mozilla::MP3FrameParser::ParseBuffer function in Mozilla Firefox before 36.0 allows…

  • Unscored —

    Use-after-free vulnerability in the mozilla::dom::IndexedDB::IDBObjectStore::CreateIndex function in Mozilla Firefox be…

  • Unscored —

    The WebGL implementation in Mozilla Firefox before 36.0 does not properly allocate memory for copying an unspecified st…

  • Unscored —

    Heap-based buffer overflow in the mozilla::gfx::CopyRect function in Mozilla Firefox before 36.0, Firefox ESR 31.x befo…

  • Unscored —

    Buffer overflow in libstagefright in Mozilla Firefox before 36.0 allows remote attackers to execute arbitrary code via …

  • Unscored —

    The WebRTC subsystem in Mozilla Firefox before 36.0 recognizes turns: and stuns: URIs but accesses the TURN or STUN ser…

  • Unscored —

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5…

  • Unscored —

    Multiple untrusted search path vulnerabilities in updater.exe in Mozilla Firefox before 36.0, Firefox ESR 31.x before 3…

  • Unscored —

    Mozilla Firefox before 36.0 does not properly recognize the equivalence of domain names with and without a trailing . (…