cve.nowby Sazabi

CVEs published September 24, 2015

30 CVEs were published on September 24, 2015: 0 critical, 0 high. Browse them by severity, product and exploitation status.

Published: 30
Critical: 0
High: 0
Medium: 0
Low: 0
Unrated: 30
Now in CISA KEV: 0
Fix available: 0

Medium, low and unrated 30

CVE-2015-6303The Cisco Spark application 2015-07-04 for mobile operating systems does not properly verify X.509 certificates from SSL servers, which…UnratedSep 24, 2015
CVE-2015-6304Cross-site request forgery (CSRF) vulnerability in Cisco TelePresence Server software 3.0(2.24) allows remote attackers to hijack the…UnratedSep 24, 2015
CVE-2015-4476Mozilla Firefox before 41.0 on Android allows user-assisted remote attackers to spoof address-bar attributes by leveraging lack of…UnratedSep 24, 2015
CVE-2015-4500Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allow remote…UnratedSep 24, 2015
CVE-2015-4501Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 41.0 allow remote attackers to cause a denial of…UnratedSep 24, 2015
CVE-2015-4502js/src/proxy/Proxy.cpp in Mozilla Firefox before 41.0 mishandles certain receiver arguments, which allows remote attackers to bypass…UnratedSep 24, 2015
CVE-2015-4503The TCP Socket API implementation in Mozilla Firefox before 41.0 mishandles array boundaries that were established with a…UnratedSep 24, 2015
CVE-2015-4504The lut_inverse_interp16 function in the QCMS library in Mozilla Firefox before 41.0 allows remote attackers to obtain sensitive…UnratedSep 24, 2015
CVE-2015-4505updater.exe in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 on Windows allows local users to write to arbitrary files by…UnratedSep 24, 2015
CVE-2015-4506Buffer overflow in the vp9_init_context_buffers function in libvpx, as used in Mozilla Firefox before 41.0 and Firefox ESR 38.x before…UnratedSep 24, 2015
CVE-2015-4507The SavedStacks class in the JavaScript implementation in Mozilla Firefox before 41.0, when the Debugger API is enabled, allows remote…UnratedSep 24, 2015
CVE-2015-4508Mozilla Firefox before 41.0, when reader mode is enabled, allows remote attackers to spoof the relationship between address-bar URLs and…UnratedSep 24, 2015
CVE-2015-4509Use-after-free vulnerability in the HTMLVideoElement interface in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allows…UnratedSep 24, 2015
CVE-2015-4510Race condition in the WorkerPrivate::NotifyFeatures function in Mozilla Firefox before 41.0 allows remote attackers to execute arbitrary…UnratedSep 24, 2015
CVE-2015-4511Heap-based buffer overflow in the nestegg_track_codec_data function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allows…UnratedSep 24, 2015
CVE-2015-4512gfx/2d/DataSurfaceHelpers.cpp in Mozilla Firefox before 41.0 on Linux improperly attempts to use the Cairo library with 32-bit color-depth…UnratedSep 24, 2015
CVE-2015-4516Mozilla Firefox before 41.0 allows remote attackers to bypass certain ECMAScript 5 (aka ES5) API protection mechanisms and modify…UnratedSep 24, 2015
CVE-2015-4517NetworkUtils.cpp in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to cause a denial of service…UnratedSep 24, 2015
CVE-2015-4519Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allow user-assisted remote attackers to bypass intended access restrictions…UnratedSep 24, 2015
CVE-2015-4520Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allow remote attackers to bypass CORS preflight protection mechanisms by…UnratedSep 24, 2015
CVE-2015-4521The ConvertDialogOptions function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to cause a…UnratedSep 24, 2015
CVE-2015-4522The nsUnicodeToUTF8::GetMaxLength function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to…UnratedSep 24, 2015
CVE-2015-7174The nsAttrAndChildArray::GrowBy function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to…UnratedSep 24, 2015
CVE-2015-7175The XULContentSinkImpl::AddText function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to…UnratedSep 24, 2015
CVE-2015-7176The AnimationThread function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 uses an incorrect argument to the sscanf…UnratedSep 24, 2015

Show all 30 entriesShow fewer entries