Oracle

Solaris

546 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2015-4492

  • EPSS 3.54%
  • Veröffentlicht 16.08.2015 01:59:20
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Use-after-free vulnerability in the XMLHttpRequest::Open implementation in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 might allow remote attackers to execute arbitrary code via a SharedWorker object that makes recursive calls to the...

6.8

CVE-2015-4491

  • EPSS 8.08%
  • Veröffentlicht 16.08.2015 01:59:19
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Integer overflow in the make_filter_table function in pixops/pixops.c in gdk-pixbuf before 2.31.5, as used in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 on Linux, Google Chrome on Linux, and other products, allows remote attackers t...

4.3

CVE-2015-4490

  • EPSS 0.74%
  • Veröffentlicht 16.08.2015 01:59:18
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The nsCSPHostSrc::permits function in dom/security/nsCSPUtils.cpp in Mozilla Firefox before 40.0 does not implement the Content Security Policy Level 2 exceptions for the blob, data, and filesystem URL schemes during wildcard source-expression matchi...

7.5

CVE-2015-4489

  • EPSS 3.09%
  • Veröffentlicht 16.08.2015 01:59:17
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The nsTArray_Impl class in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 might allow remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging a se...

7.5

CVE-2015-4488

  • EPSS 2.67%
  • Veröffentlicht 16.08.2015 01:59:16
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Use-after-free vulnerability in the StyleAnimationValue class in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 allows remote attackers to have an unspecified impact by leveraging a StyleAnimationValue::operator ...

7.5

CVE-2015-4487

  • EPSS 3.74%
  • Veröffentlicht 16.08.2015 01:59:15
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The nsTSubstring::ReplacePrep function in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 might allow remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via...

10

CVE-2015-4486

  • EPSS 2.19%
  • Veröffentlicht 16.08.2015 01:59:14
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The decrease_ref_count function in libvpx in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via malformed WebM video data.

10

CVE-2015-4485

  • EPSS 9.75%
  • Veröffentlicht 16.08.2015 01:59:13
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Heap-based buffer overflow in the resize_context_buffers function in libvpx in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code via malformed WebM video data.

5

CVE-2015-4484

  • EPSS 2.47%
  • Veröffentlicht 16.08.2015 01:59:12
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The js::jit::AssemblerX86Shared::lock_addl function in the JavaScript implementation in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to cause a denial of service (application crash) by leveraging the use of sha...

4.3

CVE-2015-4483

  • EPSS 0.6%
  • Veröffentlicht 16.08.2015 01:59:11
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Mozilla Firefox before 40.0 allows man-in-the-middle attackers to bypass a mixed-content protection mechanism via a feed: URL in a POST request.