opensuse opensuse 12.3 vulnerabilities and exploits

(subscribe to this query)

The mozilla::dom::TextTrack::AddCue function in Mozilla Firefox prior to 29.0 and SeaMonkey prior to 2.26 does not properly perform garbage collection for Text Track Manager variables, which allows remote malicious users to execute arbitrary code or cause a denial of service (use...

Mozilla Firefox Mozilla Seamonkey Canonical Ubuntu Linux 13.10 Canonical Ubuntu Linux 12.10 Canonical Ubuntu Linux 12.04 Canonical Ubuntu Linux 14.04 Opensuse Opensuse 12.3 Opensuse Opensuse 13.1 Fedoraproject Fedora 19

The XrayWrapper implementation in Mozilla Firefox prior to 29.0 and SeaMonkey prior to 2.26 allows user-assisted remote malicious users to bypass intended access restrictions via a crafted web site that is visited in the debugger, leading to unwrapping operations and calls to DOM...

Mozilla Firefox Mozilla Seamonkey Canonical Ubuntu Linux 13.10 Canonical Ubuntu Linux 12.10 Canonical Ubuntu Linux 12.04 Canonical Ubuntu Linux 14.04 Opensuse Opensuse 12.3 Opensuse Opensuse 13.1 Fedoraproject Fedora 19

(1) DL and (2) Fiddle in Ruby 1.9 prior to 1.9.3 patchlevel 426, and 2.0 prior to 2.0.0 patchlevel 195, do not perform taint checking for native functions, which allows context-dependent malicious users to bypass intended $SAFE level restrictions.

Opensuse Opensuse 12.3 Opensuse Opensuse 12.2 Ruby-lang Ruby 2.0.0 Ruby-lang Ruby 1.9.3 Ruby-lang Ruby 2.0 Ruby-lang Ruby 1.9.2 Ruby-lang Ruby 1.9.1 Ruby-lang Ruby 1.9

dbus 1.3.0 prior to 1.6.22 and 1.8.x prior to 1.8.6, when running on Linux 2.6.37-rc4 or later, allows local users to cause a denial of service (system-bus disconnect of other services or applications) by sending a message containing a file descriptor, then exceeding the maximum ...

Freedesktop Dbus Opensuse Opensuse 12.3 Debian Debian Linux 7.0 Mageia Mageia 3.0 Mageia Mageia 4.0 Oracle Solaris 11.3

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox prior to 29.0 and SeaMonkey prior to 2.26 allow remote malicious users to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

Mozilla Firefox Mozilla Seamonkey Canonical Ubuntu Linux 13.10 Canonical Ubuntu Linux 12.10 Canonical Ubuntu Linux 12.04 Canonical Ubuntu Linux 14.04 Opensuse Opensuse 12.3 Opensuse Opensuse 13.1 Fedoraproject Fedora 20 Fedoraproject Fedora 19

Multiple directory traversal vulnerabilities in (1) mod_evhost and (2) mod_simple_vhost in lighttpd prior to 1.4.35 allow remote malicious users to read arbitrary files via a .. (dot dot) in the host name, related to request_check_hostname.

Lighttpd Lighttpd Debian Debian Linux 8.0 Debian Debian Linux 7.0 Debian Debian Linux 6.0 Opensuse Opensuse 12.3 Suse Linux Enterprise Software Development Kit 11 Opensuse Opensuse 11.4 Opensuse Opensuse 13.1 Suse Linux Enterprise High Availability Extension 11 Contec Sv-cpt-mc310 Firmware

2 Github repositories

D-Bus 1.3.0 up to and including 1.6.x prior to 1.6.24 and 1.8.x prior to 1.8.8 allows local users to (1) cause a denial of service (prevention of new connections and connection drop) by queuing the maximum number of file descriptors or (2) cause a denial of service (disconnect) v...

D-bus Project D-bus Freedesktop Dbus 1.8.0 Freedesktop Dbus 1.8.6 Freedesktop Dbus 1.8.4 Freedesktop Dbus 1.8.2 Opensuse Opensuse 12.3

The file-download implementation in Mozilla Firefox prior to 27.0 and SeaMonkey prior to 2.24 does not properly restrict the timing of button selections, which allows remote malicious users to conduct clickjacking attacks, and trigger unintended launching of a downloaded file, vi...

Suse Linux Enterprise Desktop 11 Suse Linux Enterprise Server 11 Opensuse Opensuse 12.3 Suse Linux Enterprise Software Development Kit 11 Opensuse Opensuse 11.4 Opensuse Opensuse 13.1 Oracle Solaris 11.3 Canonical Ubuntu Linux 13.10 Canonical Ubuntu Linux 12.10 Canonical Ubuntu Linux 12.04 Mozilla Seamonkey Mozilla Firefox

The Content Security Policy (CSP) implementation in Mozilla Firefox prior to 27.0 and SeaMonkey prior to 2.24 operates on XSLT stylesheets according to style-src directives instead of script-src directives, which might allow remote malicious users to execute arbitrary XSLT code b...

Mozilla Seamonkey Mozilla Firefox Oracle Solaris 11.3 Canonical Ubuntu Linux 13.10 Canonical Ubuntu Linux 12.10 Canonical Ubuntu Linux 12.04 Suse Linux Enterprise Desktop 11 Suse Linux Enterprise Server 11 Opensuse Opensuse 12.3 Suse Linux Enterprise Software Development Kit 11 Opensuse Opensuse 11.4 Opensuse Opensuse 13.1

python-bugzilla prior to 0.9.0 does not validate X.509 certificates, which allows man-in-the-middle malicious users to spoof Bugzilla servers via a crafted certificate.

Python Bugzilla Project Python-bugzilla 0.7.0 Python Bugzilla Project Python-bugzilla 0.6.0 Python Bugzilla Project Python-bugzilla 0.6.2 Python Bugzilla Project Python-bugzilla 0.6.1 Python Bugzilla Project Python-bugzilla Fedoraproject Fedora 17 Fedoraproject Fedora 18 Opensuse Opensuse 12.3 Opensuse Opensuse 11.4 Opensuse Opensuse 12.2

« PREV 4 5 6 7 8 9 10 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook