Archive
25 February 2015
Vulnerabilities first published on this day (UTC), newest first.
23 results · Feed
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in Ilch CMS allows remote attackers to hijack the authentication of adm…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Login.aspx in UNIT4 Prosoft HRMS before 8.14.330.43 allows remote attackers…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Visualware MyConnection Server 8.2b allow remote attackers to in…
-
Unscored —CVE-2015-2084 Public exploit
Cross-site request forgery (CSRF) vulnerability in the Easy Social Icons plugin before 1.2.3 for WordPress allows remot…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Vanilla Forums before 2.0.18.13 and 2.1.x before 2.1.1 allow rem…
-
Unscored —
Multiple use-after-free vulnerabilities in OpenType Sanitiser, as used in Mozilla Firefox before 36.0, might allow remo…
-
Unscored —
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 36.0 allow remote attackers to cau…
-
Unscored —
Mozilla Firefox before 36.0 allows user-assisted remote attackers to read arbitrary files or execute arbitrary JavaScri…
-
Unscored —
The nsTransformedTextRun::SetCapitalization function in Mozilla Firefox before 36.0 allows remote attackers to execute …
-
Unscored —
The Form Autocompletion feature in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31…
-
Unscored —
The mozilla::layers::BufferTextureClient::AllocateForSurface function in Mozilla Firefox before 36.0 allows remote atta…
-
Unscored —
The UITour::onPageEvent function in Mozilla Firefox before 36.0 does not ensure that an API call originates from a fore…
-
Unscored —
Mozilla Firefox before 36.0 does not properly restrict transitions of JavaScript objects from a non-extensible state to…
-
Unscored —
Double free vulnerability in the nsXMLHttpRequest::GetResponse function in Mozilla Firefox before 36.0, when a nonstand…
-
Unscored —
Stack-based buffer underflow in the mozilla::MP3FrameParser::ParseBuffer function in Mozilla Firefox before 36.0 allows…
-
Unscored —
Use-after-free vulnerability in the mozilla::dom::IndexedDB::IDBObjectStore::CreateIndex function in Mozilla Firefox be…
-
Unscored —
The WebGL implementation in Mozilla Firefox before 36.0 does not properly allocate memory for copying an unspecified st…
-
Unscored —
Heap-based buffer overflow in the mozilla::gfx::CopyRect function in Mozilla Firefox before 36.0, Firefox ESR 31.x befo…
-
Unscored —
Buffer overflow in libstagefright in Mozilla Firefox before 36.0 allows remote attackers to execute arbitrary code via …
-
Unscored —
The WebRTC subsystem in Mozilla Firefox before 36.0 recognizes turns: and stuns: URIs but accesses the TURN or STUN ser…
-
Unscored —
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5…
-
Unscored —
Multiple untrusted search path vulnerabilities in updater.exe in Mozilla Firefox before 36.0, Firefox ESR 31.x before 3…
-
Unscored —
Mozilla Firefox before 36.0 does not properly recognize the equivalence of domain names with and without a trailing . (…