Skip to content
OpenAdvisories

Archive

30 April 2016

Vulnerabilities first published on this day (UTC), newest first.

19 results · Feed

  • Unscored —

    The Mozilla Maintenance Service updater in Mozilla Firefox before 46.0 on Windows allows user-assisted remote attackers…

  • Unscored —

    The WebExtension sandbox feature in browser/components/extensions/ext-tabs.js in Mozilla Firefox before 46.0 does not p…

  • Unscored —

    Mozilla Firefox before 46.0 on Android does not properly restrict JavaScript access to orientation and motion data, whi…

  • Unscored —

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 46.0, Firefox ESR 38.x before 38.8…

  • Unscored —

    The watch implementation in the JavaScript engine in Mozilla Firefox before 46.0, Firefox ESR 38.x before 38.8, and Fir…

  • Unscored —

    Mozilla Firefox before 46.0 on Android before 5.0 allows attackers to bypass intended Signature access requirements via…

  • Unscored —

    The Firefox Health Reports (aka FHR or about:healthreport) feature in Mozilla Firefox before 46.0 does not properly res…

  • Unscored —

    Use-after-free vulnerability in the ServiceWorkerInfo class in the Service Worker subsystem in Mozilla Firefox before 4…

  • Unscored —

    Mozilla Firefox before 46.0 allows remote attackers to bypass the Content Security Policy (CSP) protection mechanism vi…

  • Unscored —

    Heap-based buffer overflow in the stagefright::SampleTable::parseSampleCencInfo function in libstagefright in Mozilla F…

  • Unscored —

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 46.0 allow remote attackers to cau…

  • Unscored —

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 46.0 and Firefox ESR 45.x before 4…

  • Unscored —

    Unspecified vulnerability in the browser engine in Mozilla Firefox ESR 38.x before 38.8 allows remote attackers to caus…

  • Unscored —

    Race condition in the get implementation in the ServiceWorkerManager class in the Service Worker subsystem in Mozilla F…

  • Unscored —

    The login page in the management screen in LOCKON EC-CUBE 3.0.0 through 3.0.9 allows remote attackers to bypass intende…

  • Unscored —

    Double free vulnerability in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.0…

  • Unscored —

    Cross-site request forgery (CSRF) vulnerability in LOCKON EC-CUBE 3.0.0 through 3.0.9 allows remote attackers to hijack…

  • Unscored —

    The XML parser in Cisco Information Server (CIS) 6.2 allows remote attackers to read arbitrary files or cause a denial …

  • Unscored —

    The management screen in LOCKON EC-CUBE 3.0.7 through 3.0.9 allows remote authenticated users to bypass intended access…