Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-23970 State: PUBLISHED Published: 2021-02-26T01:57:08 Last Updated: 2024-08-03T19:14:09.857Z Vendors: Mozilla Products: Firefox Problem Types: Multithreaded WASM triggered assertions validating separation of script domains Description: Context-specific code was included in a shared jump table; resulting in assertions being triggered in multithreaded wasm code. This vulnerability affects Firefox < 86. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2021-07/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1681724 - https://security.gentoo.org/glsa/202104-10
CVE ID: CVE-2021-23971 State: PUBLISHED Published: 2021-02-26T01:55:29 Last Updated: 2024-08-03T19:14:09.872Z Vendors: Mozilla Products: Firefox Problem Types: A website's Referrer-Policy could have been be overridden, potentially resulting in the full URL being sent as a Referrer Description: When processing a redirect with a conflicting Referrer-Policy, Firefox would have adopted the redirect's Referrer-Policy. This would have potentially resulted in more information than intended by the original origin being provided to the destination of the redirect. This vulnerability affects Firefox < 86. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security
affects Firefox < 86. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2021-07/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1678545 - https://security.gentoo.org/glsa/202104-10
CVE ID: CVE-2021-23972 State: PUBLISHED Published: 2021-02-26T01:54:22 Last Updated: 2024-08-03T19:14:09.988Z Vendors: Mozilla Products: Firefox Problem Types: HTTP Auth phishing warning was omitted when a redirect is cached Description: One phishing tactic on the web is to provide a link with HTTP Auth. For example 'https://www.phishingtarget.com@evil.com'. To mitigate this type of attack, Firefox will display a warning dialog; however, this warning dialog would not have been displayed if evil.com used a redirect that was cached by the browser. This vulnerability affects Firefox < 86. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisorie
irefox < 86. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2021-07/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1683536 - https://security.gentoo.org/glsa/202104-10
CVE ID: CVE-2021-23973 State: PUBLISHED Published: 2021-02-26T01:53:22 Last Updated: 2024-08-03T19:14:10.000Z Vendors: Mozilla Products: Firefox, Thunderbird, Firefox ESR Problem Types: MediaError message property could have leaked information about cross-origin resources Description: When trying to load a cross-origin resource in an audio/video context a decoding error may have resulted, and the content of that error may have revealed information about the resource. This vulnerability affects Firefox < 86, Thunderbird < 78.8, and Firefox ESR < 78.8. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2021-07/ - https://www.mozilla
s: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2021-07/ - https://www.mozilla.org/security/advisories/mfsa2021-09/ - https://www.mozilla.org/security/advisories/mfsa2021-08/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1690976 - https://lists.debian.org/debian-lts-announce/2021/03/msg00000.html - https://www.debian.org/security/2021/dsa-4866 - https://security.gentoo.org/glsa/202104-10 - https://security.gentoo.org/glsa/202104-09
CVE ID: CVE-2021-23974 State: PUBLISHED Published: 2021-02-26T01:51:50 Last Updated: 2024-08-03T19:14:09.876Z Vendors: Mozilla Products: Firefox Problem Types: noscript elements could have led to an HTML Sanitizer bypass Description: The DOMParser API did not properly process '<noscript>' elements for escaping. This could be used as an mXSS vector to bypass an HTML Sanitizer. This vulnerability affects Firefox < 86. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2021-07/ - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1528997%2C1683627 - https://security.gentoo.org/glsa/202104-10
CVE ID: CVE-2021-23975 State: PUBLISHED Published: 2021-02-26T01:49:49 Last Updated: 2024-08-03T19:14:09.886Z Vendors: Mozilla Products: Firefox Problem Types: about:memory Measure function caused an incorrect pointer operation Description: The developer page about:memory has a Measure function for exploring what object types the browser has allocated and their sizes. When this function was invoked we incorrectly called the sizeof function, instead of using the API method that checks for invalid pointers. This vulnerability affects Firefox < 86. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2021-07/ - https://bugzilla.mozilla
CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2021-07/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1685145 - https://security.gentoo.org/glsa/202104-10
CVE ID: CVE-2021-23976 State: PUBLISHED Published: 2021-02-26T01:48:46 Last Updated: 2024-08-03T19:14:09.968Z Vendors: Mozilla Products: Firefox Problem Types: Local spoofing of web manifests for arbitrary pages in Firefox for Android Description: When accepting a malicious intent from other installed apps, Firefox for Android accepted manifests from arbitrary file paths and allowed declaring webapp manifests for other origins. This could be used to gain fullscreen access for UI spoofing and could also lead to cross-origin attacks on targeted websites. Note: This issue is a different issue from CVE-2020-26954 and only affected Firefox for Android. Other operating systems are unaffected. This
different issue from CVE-2020-26954 and only affected Firefox for Android. Other operating systems are unaffected. This vulnerability affects Firefox < 86. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2021-07/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1684627 - https://security.gentoo.org/glsa/202104-10
CVE ID: CVE-2021-23977 State: PUBLISHED Published: 2021-02-26T02:13:06 Last Updated: 2024-08-03T19:14:10.022Z Vendors: Mozilla Products: Firefox Problem Types: Malicious application could read sensitive data from Firefox for Android's application directories Description: Firefox for Android suffered from a time-of-check-time-of-use vulnerability that allowed a malicious application to read sensitive data from application directories. Note: This issue is only affected Firefox for Android. Other operating systems are unaffected. This vulnerability affects Firefox < 86. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2021-07/ - ht
onal Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2021-07/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1684761 - https://security.gentoo.org/glsa/202104-10
CVE ID: CVE-2021-23978 State: PUBLISHED Published: 2021-02-26T15:28:11 Last Updated: 2024-08-03T19:14:10.000Z Vendors: Mozilla Products: Firefox, Thunderbird, Firefox ESR Problem Types: Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8 Description: Mozilla developers reported memory safety bugs present in Firefox 85 and Firefox ESR 78.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 86, Thunderbird < 78.8, and Firefox ESR < 78.8. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisorie
ESR < 78.8. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2021-07/ - https://www.mozilla.org/security/advisories/mfsa2021-09/ - https://www.mozilla.org/security/advisories/mfsa2021-08/ - https://bugzilla.mozilla.org/buglist.cgi?bug_id=786797%2C1682928%2C1687391%2C1687597 - https://lists.debian.org/debian-lts-announce/2021/03/msg00000.html - https://www.debian.org/security/2021/dsa-4866 - https://security.gentoo.org/glsa/202104-10 - https://security.gentoo.org/glsa/202104-09
CVE ID: CVE-2021-23979 State: PUBLISHED Published: 2021-02-26T15:28:35 Last Updated: 2024-08-03T19:14:10.038Z Vendors: Mozilla Products: Firefox Problem Types: Memory safety bugs fixed in Firefox 86 Description: Mozilla developers reported memory safety bugs present in Firefox 85. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 86. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2021-07/ - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1663222%2C1666607%2C1672120%2C1678463%2C1678927
dvisories/mfsa2021-07/ - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1663222%2C1666607%2C1672120%2C1678463%2C1678927%2C1679560%2C1681297%2C1681684%2C1683490%2C1684377%2C1684902
CVE ID: CVE-2021-23980 State: PUBLISHED Published: 2023-02-16T00:00:00.000Z Last Updated: 2025-03-19T15:18:23.189Z Vendors: Mozilla Products: Mozilla Bleach Problem Types: mutation XSS via allowed math or svg; p or br; and style, title, noscript, script, textarea, noframes, iframe, or xmp tags with strip_comments=False Description: A mutation XSS affects users calling bleach.clean with all of: svg or math in the allowed tags p or br in allowed tags style, title, noscript, script, textarea, noframes, iframe, or xmp in allowed tags the keyword argument strip_comments=False Note: none of the above tags are in the default allowed tags and strip_comments defaults to True. Additional Analyst Notes
te: none of the above tags are in the default allowed tags and strip_comments defaults to True. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/mozilla/bleach/security/advisories/GHSA-vv2x-vrpj-qqpq - https://bugzilla.mozilla.org/show_bug.cgi?id=CVE-2021-23980
CVE ID: CVE-2021-23981 State: PUBLISHED Published: 2021-03-31T13:42:17 Last Updated: 2024-08-03T19:14:09.984Z Vendors: Mozilla Products: Firefox ESR, Firefox, Thunderbird Problem Types: Texture upload into an unbound backing buffer resulted in an out-of-bound read Description: A texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the buffer used to unpack it, resulting in memory corruption and a potentially exploitable information leak or crash. This vulnerability affects Firefox ESR < 78.9, Firefox < 87, and Thunderbird < 78.9. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2021-10/ - ht
onal Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2021-10/ - https://www.mozilla.org/security/advisories/mfsa2021-12/ - https://www.mozilla.org/security/advisories/mfsa2021-11/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1692832
CVE ID: CVE-2021-23982 State: PUBLISHED Published: 2021-03-31T13:42:04 Last Updated: 2024-08-03T19:14:09.972Z Vendors: Mozilla Products: Firefox ESR, Firefox, Thunderbird Problem Types: Internal network hosts could have been probed by a malicious webpage Description: Using techniques that built on the slipstream research, a malicious webpage could have scanned both an internal network's hosts as well as services running on the user's local machine utilizing WebRTC connections. This vulnerability affects Firefox ESR < 78.9, Firefox < 87, and Thunderbird < 78.9. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2021-10/ - https://w
alyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2021-10/ - https://www.mozilla.org/security/advisories/mfsa2021-12/ - https://www.mozilla.org/security/advisories/mfsa2021-11/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1677046
CVE ID: CVE-2021-23983 State: PUBLISHED Published: 2021-03-31T13:41:49 Last Updated: 2024-08-03T19:14:10.006Z Vendors: Mozilla Products: Firefox Problem Types: Transitions for invalid ::marker properties resulted in memory corruption Description: By causing a transition on a parent node by removing a CSS rule, an invalid property for a marker could have been applied, resulting in memory corruption and a potentially exploitable crash. This vulnerability affects Firefox < 87. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2021-10/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1692684
CVE ID: CVE-2021-23984 State: PUBLISHED Published: 2021-03-31T13:41:34 Last Updated: 2024-08-03T19:14:10.003Z Vendors: Mozilla Products: Firefox ESR, Firefox, Thunderbird Problem Types: Malicious extensions could have spoofed popup information Description: A malicious extension could have opened a popup window lacking an address bar. The title of the popup lacking an address bar should not be fully controllable, but in this situation was. This could have been used to spoof a website and attempt to trick the user into providing credentials. This vulnerability affects Firefox ESR < 78.9, Firefox < 87, and Thunderbird < 78.9. Additional Analyst Notes: - CVE Program Container: References: - http
ESR < 78.9, Firefox < 87, and Thunderbird < 78.9. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2021-10/ - https://www.mozilla.org/security/advisories/mfsa2021-12/ - https://www.mozilla.org/security/advisories/mfsa2021-11/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1693664
CVE ID: CVE-2021-23985 State: PUBLISHED Published: 2021-03-31T13:41:20 Last Updated: 2024-08-03T19:14:09.968Z Vendors: Mozilla Products: Firefox Problem Types: Devtools remote debugging feature could have been enabled without indication to the user Description: If an attacker is able to alter specific about:config values (for example malware running on the user's computer), the Devtools remote debugging feature could have been enabled in a way that was unnoticable to the user. This would have allowed a remote attacker (able to make a direct network connection to the victim) to monitor the user's browsing activity and (plaintext) network traffic. This was addressed by providing a visual cue w
to monitor the user's browsing activity and (plaintext) network traffic. This was addressed by providing a visual cue when Devtools has an open network socket. This vulnerability affects Firefox < 87. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2021-10/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1659129
CVE ID: CVE-2021-23986 State: PUBLISHED Published: 2021-03-31T13:41:04 Last Updated: 2024-08-03T19:14:09.955Z Vendors: Mozilla Products: Firefox Problem Types: A malicious extension could have performed credential-less same origin policy violations Description: A malicious extension with the 'search' permission could have installed a new search engine whose favicon referenced a cross-origin URL. The response to this cross-origin request could have been read by the extension, allowing a same-origin policy bypass by the extension, which should not have cross-origin permissions. This cross-origin request was made without cookies, so the sensitive information disclosed by the violation was limit
s. This cross-origin request was made without cookies, so the sensitive information disclosed by the violation was limited to local-network resources or resources that perform IP-based authentication. This vulnerability affects Firefox < 87. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2021-10/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1692623
CVE ID: CVE-2021-23987 State: PUBLISHED Published: 2021-03-31T13:40:44 Last Updated: 2024-08-03T19:14:10.026Z Vendors: Mozilla Products: Firefox ESR, Firefox, Thunderbird Problem Types: Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9 Description: Mozilla developers and community members reported memory safety bugs present in Firefox 86 and Firefox ESR 78.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 78.9, Firefox < 87, and Thunderbird < 78.9. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.
efox < 87, and Thunderbird < 78.9. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2021-10/ - https://www.mozilla.org/security/advisories/mfsa2021-12/ - https://www.mozilla.org/security/advisories/mfsa2021-11/ - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1513519%2C1683439%2C1690169%2C1690718
CVE ID: CVE-2021-23988 State: PUBLISHED Published: 2021-03-31T13:40:02 Last Updated: 2024-08-03T19:14:10.049Z Vendors: Mozilla Products: Firefox Problem Types: Memory safety bugs fixed in Firefox 87 Description: Mozilla developers reported memory safety bugs present in Firefox 86. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 87. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2021-10/ - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1684994%2C1686653
CVE ID: CVE-2021-23991 State: PUBLISHED Published: 2021-06-24T13:27:10 Last Updated: 2024-08-03T19:14:10.003Z Vendors: Mozilla Products: Thunderbird Problem Types: An attacker may use Thunderbird's OpenPGP key refresh mechanism to poison an existing key Description: If a Thunderbird user has previously imported Alice's OpenPGP key, and Alice has extended the validity period of her key, but Alice's updated key has not yet been imported, an attacker may send an email containing a crafted version of Alice's key with an invalid subkey, Thunderbird might subsequently attempt to use the invalid subkey, and will fail to send encrypted email to Alice. This vulnerability affects Thunderbird < 78.9.1.
use the invalid subkey, and will fail to send encrypted email to Alice. This vulnerability affects Thunderbird < 78.9.1. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2021-13/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1673240
CVE ID: CVE-2021-23992 State: PUBLISHED Published: 2021-06-24T13:26:45 Last Updated: 2024-08-03T19:14:10.020Z Vendors: Mozilla Products: Thunderbird Problem Types: A crafted OpenPGP key with an invalid user ID could be used to confuse the user Description: Thunderbird did not check if the user ID associated with an OpenPGP key has a valid self signature. An attacker may create a crafted version of an OpenPGP key, by either replacing the original user ID, or by adding another user ID. If Thunderbird imports and accepts the crafted key, the Thunderbird user may falsely conclude that the false user ID belongs to the correspondent. This vulnerability affects Thunderbird < 78.9.1. Additional Anal
de that the false user ID belongs to the correspondent. This vulnerability affects Thunderbird < 78.9.1. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2021-13/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1666236
CVE ID: CVE-2021-23993 State: PUBLISHED Published: 2021-06-24T13:26:39 Last Updated: 2024-08-03T19:14:10.002Z Vendors: Mozilla Products: Thunderbird Problem Types: Inability to send encrypted OpenPGP email after importing a crafted OpenPGP key Description: An attacker may perform a DoS attack to prevent a user from sending encrypted email to a correspondent. If an attacker creates a crafted OpenPGP key with a subkey that has an invalid self signature, and the Thunderbird user imports the crafted key, then Thunderbird may try to use the invalid subkey, but the RNP library rejects it from being used, causing encryption to fail. This vulnerability affects Thunderbird < 78.9.1. Additional Analys
jects it from being used, causing encryption to fail. This vulnerability affects Thunderbird < 78.9.1. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2021-13/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1666360
CVE ID: CVE-2021-23994 State: PUBLISHED Published: 2021-06-24T13:26:33 Last Updated: 2024-08-03T19:14:10.073Z Vendors: Mozilla Products: Firefox ESR, Thunderbird, Firefox Problem Types: Out of bound write due to lazy initialization Description: A WebGL framebuffer was not initialized early enough, resulting in memory corruption and an out of bound write. This vulnerability affects Firefox ESR < 78.10, Thunderbird < 78.10, and Firefox < 88. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2021-14/ - https://www.mozilla.org/security/advisories/mfsa2021-16/ - https://www.mozilla.org/security/advisories/mfsa2021-15/ - https://bugzil
mozilla.org/security/advisories/mfsa2021-16/ - https://www.mozilla.org/security/advisories/mfsa2021-15/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1699077
CVE ID: CVE-2021-23995 State: PUBLISHED Published: 2021-06-24T13:26:25 Last Updated: 2024-08-03T19:14:10.056Z Vendors: Mozilla Products: Firefox ESR, Thunderbird, Firefox Problem Types: Use-after-free in Responsive Design Mode Description: When Responsive Design Mode was enabled, it used references to objects that were previously freed. We presume that with enough effort this could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 78.10, Thunderbird < 78.10, and Firefox < 88. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2021-14/ - https://www.mozilla.org/security/advisories/mfsa2021-16/ - ht
https://www.mozilla.org/security/advisories/mfsa2021-14/ - https://www.mozilla.org/security/advisories/mfsa2021-16/ - https://www.mozilla.org/security/advisories/mfsa2021-15/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1699835
CVE ID: CVE-2021-23996 State: PUBLISHED Published: 2021-06-24T13:25:39 Last Updated: 2024-08-03T19:14:10.063Z Vendors: Mozilla Products: Firefox Problem Types: Content rendered outside of webpage viewport Description: By utilizing 3D CSS in conjunction with Javascript, content could have been rendered outside the webpage's viewport, resulting in a spoofing attack that could have been used for phishing or other attacks on a user. This vulnerability affects Firefox < 88. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2021-16/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1701834
CVE ID: CVE-2021-23997 State: PUBLISHED Published: 2021-06-24T13:25:34 Last Updated: 2024-08-03T19:14:10.062Z Vendors: Mozilla Products: Firefox Problem Types: Use-after-free when freeing fonts from cache Description: Due to unexpected data type conversions, a use-after-free could have occurred when interacting with the font cache. We presume that with enough effort this could have been exploited to run arbitrary code. This vulnerability affects Firefox < 88. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2021-16/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1701942