#firefox

Islam CMS version 1.0 suffers from a remote PHP code injection vulnerability.

Invasor Diagonal CMS version 1.0 suffers from a cross site scripting vulnerability.

InterPhoto version 2.3.0 suffers from a remote shell upload vulnerability.

Plus: Mozilla patches more than a dozen vulnerabilities in Firefox, and enterprise companies Ivanti, Cisco, and SAP roll out a slew of updates to get rid of some high-severity bugs.

Ubuntu Security Notice 6320-1 - Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary code. Lukas Bernhard discovered that Firefox did not properly manage memory when the "UpdateRegExpStatics" attempted to access "initialStringHeap". An attacker could potentially exploit this issue to cause a denial of service.

IQ-Medya CMS version 2.0 suffers from a cross site scripting vulnerability.

Mozilla Firefox only stores up to 1024 HSTS entries. When the limit is reached, Firefox discards entries based on their age and recent visits to the domain in question.

ImgHosting version 1.2 suffers from a cross site scripting vulnerability.

imax CMS version 1.0 suffers from a remote SQL injection vulnerability.

i-Gallery version 3.4 suffers from a database disclosure vulnerability.