CVE Vulnerability Catalog

Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7 allow remote attackers to execute arbitrary code via crafted WebGL content constructed with the Cesium JavaScript library.

A use-after-free vulnerability in the nsDocLoader::OnProgress function in Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7 allows remote attackers to execute arbitrary code via vectors that trigger a FireOnStateChange event.

A use-after-free vulnerability in the FontTableRec destructor in Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7 on Windows allows remote attackers to execute arbitrary code via crafted use of fonts in MathML content.

Use-after-free vulnerability in the MediaInputPort class in Mozilla Firefox before 31.0 and Thunderbird before 31.0 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) by leveraging incorrect Web Audio control-message ordering.

The mozilla::dom::AudioBufferSourceNodeEngine::CopyFromInputBuffer function in Mozilla Firefox before 31.0 and Thunderbird before 31.0 does not properly allocate Web Audio buffer memory, allowing remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) via crafted audio content.

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 31.0 and Thunderbird before 31.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

A use-after-free vulnerability in the CERT_DestroyCertificate function in libnss3.so in Mozilla Network Security Services (NSS) 3.x, as used in Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7, allows remote attackers to execute arbitrary code via vectors that trigger certain improper removal of an NSSCertificate structure from a trust domain.

There is a buffer overflow in the HVM graphics console support in Citrix XenServer 6.2 Service Pack 1 and earlier, which may lead to unspecified impacts.

The org.picketlink.common.util.DocumentUtil.getDocumentBuilderFactory method in PicketLink, as used in Red Hat JBoss Enterprise Application Platform (JBEAP) 5.2.0 and 6.2.4, expands entity references, allowing remote attackers to read arbitrary code and possibly have other unspecified impacts related to an XML External Entity (XXE) issue.

Gitlist before 0.5.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the file name in the URI of a request for a (1) blame, (2) file, or (3) stats page.

Elasticsearch Logstash versions 1.0.14 through 1.4.x before 1.4.2 allow remote attackers to execute arbitrary commands via a crafted event in (1) zabbix.rb or (2) nagios_nsca.rb in outputs.

Gitlist allows remote attackers to execute arbitrary commands via shell metacharacters in a file name to Source/.

CVE-2014-5017 is an SQL injection vulnerability in the LimeSurvey application in the participantsaction.php file, allowing remote attackers to execute arbitrary SQL commands via the sidx parameter in a JSON request.

Multiple SQL injection vulnerabilities in models/gallery.php in the Youtube Gallery (com_youtubegallery) component versions 4.x through 4.1.7, and possibly 3.x, for Joomla! allow remote attackers to execute arbitrary SQL commands via the (1) listid or (2) themeid parameter to index.php.

The WebMediaPlayerAndroid::load function in Google Chrome before version 36.0.1985.122 on Android does not properly handle redirects, allowing remote attackers to bypass the Same Origin Policy via a crafted website hosting a video stream.

The auto-format feature in the Request_Curl class in FuelPHP versions 1.1 through 1.7.1 allows remote attackers to execute arbitrary code via a crafted response.

Cybozu Garoon 3.7 before SP4 allows remote authenticated users to bypass intended access restrictions and execute arbitrary code or cause a denial of service via an API call.

The CGI component in Cybozu Garoon versions 3.1.0 through 3.7 SP3 allows remote attackers to execute arbitrary commands via unspecified vectors.

The BrowseFolder method in the bwocxrun ActiveX control in Advantech WebAccess before version 7.2 allows remote attackers to read arbitrary files via a crafted call.