Tag
#firefox
File Upload vulnerability in DWSurvey DWSurvey-OSS v.3.2.0 and before allows a remote attacker to execute arbitrary code via the saveimage method and savveFile in the action/UploadAction.java file.
Easy Address Book Web Server version 1.6 suffers from buffer overflow and cross site scripting vulnerabilities.
Debian Linux Security Advisory 5485-1 - Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code.
Innovins CMS version 4.7 suffers from a remote SQL injection vulnerability.
Islam CMS version 1.0 suffers from a remote PHP code injection vulnerability.
Invasor Diagonal CMS version 1.0 suffers from a cross site scripting vulnerability.
InterPhoto version 2.3.0 suffers from a remote shell upload vulnerability.
Plus: Mozilla patches more than a dozen vulnerabilities in Firefox, and enterprise companies Ivanti, Cisco, and SAP roll out a slew of updates to get rid of some high-severity bugs.
Ubuntu Security Notice 6320-1 - Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary code. Lukas Bernhard discovered that Firefox did not properly manage memory when the "UpdateRegExpStatics" attempted to access "initialStringHeap". An attacker could potentially exploit this issue to cause a denial of service.