Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-0425 State: PUBLISHED Published: 2013-12-02T02:00:00 Last Updated: 2024-08-06T18:23:31.011Z Vendors: n/a Products: n/a Problem Types: n/a Description: LanItems.ycp in save_y2logs in yast2-network before 2.24.4 in SUSE YaST writes cleartext Wi-Fi credentials to the y2log log file, which allows context-dependent attackers to obtain sensitive information by reading the (1) WIRELESS_WPA_PASSWORD or (2) WIRELESS_CLIENT_KEY_PASSWORD field. Additional Analyst Notes: - CVE Program Container: References: - https://support.novell.com/security/cve/CVE-2012-0425.html - https://bugzilla.novell.com/show_bug.cgi?id=752464
CVE ID: CVE-2012-0426 State: PUBLISHED Published: 2013-12-02T02:00:00 Last Updated: 2024-08-06T18:23:31.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in sap_suse_cluster_connector before 1.0.0-0.8.1 in SUSE Linux Enterprise for SAP Applications 11 SP2 allows local users to have an unspecified impact via vectors related to a tmp/ directory. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.novell.com/show_bug.cgi?id=777453 - https://support.novell.com/security/cve/CVE-2012-0426.html - https://bugzilla.novell.com/show_bug.cgi?id=778273 - http://download.novell.com/Download?buildid=DshQViDsMLE~ - https://bugzilla.novell.com/show_b
m/show_bug.cgi?id=778273 - http://download.novell.com/Download?buildid=DshQViDsMLE~ - https://bugzilla.novell.com/show_bug.cgi?id=778293 - https://bugzilla.novell.com/show_bug.cgi?id=763793
CVE ID: CVE-2012-0427 State: PUBLISHED Published: 2013-12-02T02:00:00 Last Updated: 2024-08-06T18:23:31.005Z Vendors: n/a Products: n/a Problem Types: n/a Description: yast2-add-on-creator in SUSE inst-source-utils 2008.11.26 before 2008.11.26-0.9.1 and 2012.9.13 before 2012.9.13-0.8.1 allows local users to gain privileges via a crafted (1) file name or (2) directory name. Additional Analyst Notes: - CVE Program Container: References: - https://support.novell.com/security/cve/CVE-2012-0427.html - https://bugzilla.novell.com/show_bug.cgi?id=604730 - http://download.novell.com/Download?buildid=tGCXHQR48E4~
CVE ID: CVE-2012-0428 State: PUBLISHED Published: 2012-12-25T11:00:00 Last Updated: 2024-08-06T18:23:30.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in NetIQ eDirectory 8.8.6.x before 8.8.6.7 and 8.8.7.x before 8.8.7.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1027911 - http://www.novell.com/support/kb/doc.php?id=7011539 - https://bugzilla.novell.com/show_bug.cgi?id=772899 - http://www.novell.com/support/kb/doc.php?id=3426981
CVE ID: CVE-2012-0429 State: PUBLISHED Published: 2012-12-25T11:00:00 Last Updated: 2024-08-06T18:23:30.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: dhost in NetIQ eDirectory 8.8.6.x before 8.8.6.7 and 8.8.7.x before 8.8.7.2 on Windows allows remote authenticated users to cause a denial of service (daemon crash) via crafted characters in an HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1027912 - http://www.novell.com/support/kb/doc.php?id=7011533 - https://bugzilla.novell.com/show_bug.cgi?id=772895 - http://www.novell.com/support/kb/doc.php?id=3426981
CVE ID: CVE-2012-0430 State: PUBLISHED Published: 2012-12-25T11:00:00 Last Updated: 2024-08-06T18:23:31.039Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in NetIQ eDirectory 8.8.6.x before 8.8.6.7 and 8.8.7.x before 8.8.7.2 on Windows allows remote attackers to obtain an administrator cookie and bypass authorization checks via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/support/kb/doc.php?id=7011538 - http://www.securitytracker.com/id?1027910 - http://www.novell.com/support/kb/doc.php?id=3426981 - https://bugzilla.novell.com/show_bug.cgi?id=772898
CVE ID: CVE-2012-0432 State: PUBLISHED Published: 2012-12-25T11:00:00Z Last Updated: 2024-09-16T19:00:30.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the Novell NCP implementation in NetIQ eDirectory 8.8.7.x before 8.8.7.2 allows remote attackers to have an unspecified impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/support/kb/doc.php?id=3426981 - https://bugzilla.novell.com/show_bug.cgi?id=785272
CVE ID: CVE-2012-0433 State: PUBLISHED Published: 2018-06-08T17:00:00Z Last Updated: 2024-09-17T00:46:25.436Z Severity: LOW (CVSS 3.3 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: SUSE Products: crowbar Problem Types: CWE-732 Description: The install-chef-suse.sh script shipped with crowbar before 2012-10-02 is creating files containing confidential data with insecure permissions, allowing local users to read confidential data. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=783195 - https://www.suse.com/security/cve/CVE-2012-0433/
CVE ID: CVE-2012-0434 State: PUBLISHED Published: 2013-12-02T02:00:00 Last Updated: 2024-08-06T18:23:31.027Z Vendors: n/a Products: n/a Problem Types: n/a Description: The server in Crowbar, as used in SUSE Cloud 1.0, uses weak permissions for the production.log file, which has unspecified impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.suse.com/support/update/announcement/2013/suse-ru-20130020-1.html - https://bugzilla.novell.com/show_bug.cgi?id=784857 - https://support.novell.com/security/cve/CVE-2012-0434.html
CVE ID: CVE-2012-0435 State: PUBLISHED Published: 2013-01-26T21:00:00Z Last Updated: 2024-09-16T16:27:44.190Z Vendors: n/a Products: n/a Problem Types: n/a Description: SUSE WebYaST before 1.2 0.2.63-0.6.1 allows remote attackers to modify the hosts list, and subsequently conduct man-in-the-middle attacks, via a crafted /host request on TCP port 4984. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/806908 - http://support.novell.com/security/cve/CVE-2012-0435.html - https://bugzilla.novell.com/show_bug.cgi?id=792712 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00008.html
CVE ID: CVE-2012-0439 State: PUBLISHED Published: 2013-02-24T02:00:00Z Last Updated: 2024-09-17T01:21:06.732Z Vendors: n/a Products: n/a Problem Types: n/a Description: An ActiveX control in gwcls1.dll in the client in Novell GroupWise 8.0 before 8.0.3 HP2 and 2012 before SP1 HP1 allows remote attackers to execute arbitrary code via (1) a pointer argument to the SetEngine method or (2) an XPItem pointer argument to an unspecified method. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.novell.com/show_bug.cgi?id=743674 - https://bugzilla.novell.com/show_bug.cgi?id=712144 - http://www.zerodayinitiative.com/advisories/ZDI-13-008/ - http://www.novell.com/support
ell.com/show_bug.cgi?id=712144 - http://www.zerodayinitiative.com/advisories/ZDI-13-008/ - http://www.novell.com/support/kb/doc.php?id=7011688
CVE ID: CVE-2012-0440 State: PUBLISHED Published: 2012-02-02T18:00:00 Last Updated: 2024-08-06T18:23:31.044Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in jsonrpc.cgi in Bugzilla 3.5.x and 3.6.x before 3.6.8, 3.7.x and 4.0.x before 4.0.4, and 4.1.x and 4.2.x before 4.2rc2 allows remote attackers to hijack the authentication of arbitrary users for requests that use the JSON-RPC API. Additional Analyst Notes: - CVE Program Container: References: - http://www.bugzilla.org/security/3.4.13/ - http://secunia.com/advisories/47814 - http://www.securitytracker.com/id?1026623 - https://bugzilla.mozilla.org/show_bug.cgi?id=718319 - https:/
sories/47814 - http://www.securitytracker.com/id?1026623 - https://bugzilla.mozilla.org/show_bug.cgi?id=718319 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72882
CVE ID: CVE-2012-0441 State: PUBLISHED Published: 2012-06-05T23:00:00 Last Updated: 2024-08-06T18:23:31.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ASN.1 decoder in the QuickDER decoder in Mozilla Network Security Services (NSS) before 3.13.4, as used in Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10, allows remote attackers to cause a denial of service (application crash) via a zero-length item, as demonstrated by (1) a zero-length basic constraint or (2) a zero-length field in an OCSP response. Additional Analyst Notes: - CVE Program Container: References: - http:/
or (2) a zero-length field in an OCSP response. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://www.mozilla.org/security/announce/2012/mfsa2012-39.html - http://secunia.com/advisories/49976 - http://www.ubuntu.com/usn/USN-1540-2 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:088 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16701 - https://bugzilla.mozilla.org/show_bug.cgi?id=715073 - http://www.securityfocus.com/bid/53798 - http://www.debian.org/security/2012/dsa-2490 - http://lists.opensuse.org/opensuse-security-announce/2012
com/bid/53798 - http://www.debian.org/security/2012/dsa-2490 - http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00012.html - http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00015.html - http://secunia.com/advisories/50316 - http://www.ubuntu.com/usn/USN-1540-1
CVE ID: CVE-2012-0442 State: PUBLISHED Published: 2012-02-01T16:00:00 Last Updated: 2024-08-06T18:23:31.011Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=705347 - https://bugzilla.mozilla.org/show_bug.cgi?id=693399 - http://www.debian.org/se
illa.mozilla.org/show_bug.cgi?id=705347 - https://bugzilla.mozilla.org/show_bug.cgi?id=693399 - http://www.debian.org/security/2012/dsa-2402 - http://www.debian.org/security/2012/dsa-2400 - http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00003.html - http://www.mozilla.org/security/announce/2012/mfsa2012-01.html - http://www.mandriva.com/security/advisories?name=MDVSA-2012:013 - http://www.debian.org/security/2012/dsa-2406 - http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00007.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14678 - http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00011.html
CVE ID: CVE-2012-0443 State: PUBLISHED Published: 2012-02-01T16:00:00 Last Updated: 2024-08-06T18:23:31.018Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=711651 - https://bugzilla.mozilla.org/show_bug.cgi?id=665578 - https://bugzilla.mozilla.org/show_bug.cgi?id=712169 - https:
651 - https://bugzilla.mozilla.org/show_bug.cgi?id=665578 - https://bugzilla.mozilla.org/show_bug.cgi?id=712169 - https://bugzilla.mozilla.org/show_bug.cgi?id=695076 - https://bugzilla.mozilla.org/show_bug.cgi?id=714600 - https://bugzilla.mozilla.org/show_bug.cgi?id=684938 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14444 - https://bugzilla.mozilla.org/show_bug.cgi?id=713209 - https://bugzilla.mozilla.org/show_bug.cgi?id=707051 - https://bugzilla.mozilla.org/show_bug.cgi?id=696748 - https://bugzilla.mozilla.org/show_bug.cgi?id=715662 - http://www.mozilla.org/security/announce/2012/mfsa2012-01.html - http://www.mandriva.com/security/advisories?name
5662 - http://www.mozilla.org/security/announce/2012/mfsa2012-01.html - http://www.mandriva.com/security/advisories?name=MDVSA-2012:013 - https://bugzilla.mozilla.org/show_bug.cgi?id=712289 - https://bugzilla.mozilla.org/show_bug.cgi?id=692817 - http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00011.html
CVE ID: CVE-2012-0444 State: PUBLISHED Published: 2012-02-01T16:00:00 Last Updated: 2024-08-06T18:23:31.006Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 do not properly initialize nsChildView data structures, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted Ogg Vorbis file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48043 - http://secunia.com/advisories/48095 - http://www.debian.org/security/2012/dsa-2402
ttp://secunia.com/advisories/48043 - http://secunia.com/advisories/48095 - http://www.debian.org/security/2012/dsa-2402 - http://www.securityfocus.com/bid/51753 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14464 - http://www.debian.org/security/2012/dsa-2400 - http://www.mozilla.org/security/announce/2012/mfsa2012-07.html - http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00003.html - http://www.mandriva.com/security/advisories?name=MDVSA-2012:013 - http://www.debian.org/security/2012/dsa-2406 - http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00007.html - http://www.ubuntu.com/usn/USN-1370-1 - https://exchange.xforce.
e.org/opensuse-security-announce/2012-02/msg00007.html - http://www.ubuntu.com/usn/USN-1370-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72858 - https://bugzilla.mozilla.org/show_bug.cgi?id=719612 - http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00011.html
CVE ID: CVE-2012-0445 State: PUBLISHED Published: 2012-02-01T16:00:00 Last Updated: 2024-08-06T18:23:31.045Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to bypass the HTML5 frame-navigation policy and replace arbitrary sub-frames by creating a form submission target with a sub-frame's name attribute. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=701071 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72835 - http://secunia.com/advisories/49055 - http://osvdb.org/78735 - http://www.mandriva.com/securi
om/vulnerabilities/72835 - http://secunia.com/advisories/49055 - http://osvdb.org/78735 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:013 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14907 - http://www.securityfocus.com/bid/51765 - http://www.mozilla.org/security/announce/2012/mfsa2012-03.html - http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00011.html
CVE ID: CVE-2012-0446 State: PUBLISHED Published: 2012-02-01T16:00:00 Last Updated: 2024-08-06T18:23:31.012Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to inject arbitrary web script or HTML via a (1) web page or (2) Firefox extension, related to improper enforcement of XPConnect security restrictions for frame scripts that call untrusted objects. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/51752 - http://secunia.com/advisories/49055 - https://bugzilla.mozilla.
: References: - http://www.securityfocus.com/bid/51752 - http://secunia.com/advisories/49055 - https://bugzilla.mozilla.org/show_bug.cgi?id=705651 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72837 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:013 - http://www.mozilla.org/security/announce/2012/mfsa2012-05.html - http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00011.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14304
CVE ID: CVE-2012-0447 State: PUBLISHED Published: 2012-02-01T16:00:00 Last Updated: 2024-08-06T18:23:31.002Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaMonkey before 2.7 do not properly initialize data for image/vnd.microsoft.icon images, which allows remote attackers to obtain potentially sensitive information by reading a PNG image that was created through conversion from an ICO image. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=710079 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72856 - https://oval.cisecurity.org/repository/searc
gi?id=710079 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72856 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14912 - http://secunia.com/advisories/49055 - http://www.mozilla.org/security/announce/2012/mfsa2012-06.html - http://www.mandriva.com/security/advisories?name=MDVSA-2012:013 - http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00011.html
CVE ID: CVE-2012-0448 State: PUBLISHED Published: 2012-02-02T18:00:00 Last Updated: 2024-08-06T18:23:31.072Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bugzilla 2.x and 3.x before 3.4.14, 3.5.x and 3.6.x before 3.6.8, 3.7.x and 4.0.x before 4.0.4, and 4.1.x and 4.2.x before 4.2rc2 does not reject non-ASCII characters in e-mail addresses of new user accounts, which makes it easier for remote authenticated users to spoof other user accounts by choosing a similar e-mail address. Additional Analyst Notes: - CVE Program Container: References: - http://www.bugzilla.org/security/3.4.13/ - http://secunia.com/advisories/47814 - https://bugzilla.mozilla.org/show_bug.cgi?id=714472 - htt
a.org/security/3.4.13/ - http://secunia.com/advisories/47814 - https://bugzilla.mozilla.org/show_bug.cgi?id=714472 - http://www.securitytracker.com/id?1026623 - http://www.securityfocus.com/bid/51784 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72877
CVE ID: CVE-2012-0449 State: PUBLISHED Published: 2012-02-01T16:00:00 Last Updated: 2024-08-06T18:23:31.035Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a malformed XSLT stylesheet that is embedded in a document. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2012/mfsa2012-08.html - https://bugzilla.mozilla.org/show_bug.cgi?id=701806 - https://exchange.xforce.ibmcloud
/announce/2012/mfsa2012-08.html - https://bugzilla.mozilla.org/show_bug.cgi?id=701806 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72868 - https://bugzilla.mozilla.org/show_bug.cgi?id=702466 - http://www.debian.org/security/2012/dsa-2402 - http://www.debian.org/security/2012/dsa-2400 - http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00003.html - http://www.mandriva.com/security/advisories?name=MDVSA-2012:013 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14618 - http://www.debian.org/security/2012/dsa-2406 - http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00007.html - http://www.securityfocus.com/bid/51754 -
- http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00007.html - http://www.securityfocus.com/bid/51754 - http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00011.html
CVE ID: CVE-2012-0450 State: PUBLISHED Published: 2012-02-01T16:00:00 Last Updated: 2024-08-06T18:23:31.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox 4.x through 9.0 and SeaMonkey before 2.7 on Linux and Mac OS X set weak permissions for Firefox Recovery Key.html, which might allow local users to read a Firefox Sync key via standard filesystem operations. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2012/mfsa2012-09.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14670 - http://osvdb.org/78741 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72869
val%3Aorg.mitre.oval%3Adef%3A14670 - http://osvdb.org/78741 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72869 - https://bugzilla.mozilla.org/show_bug.cgi?id=716868 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:013 - http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00011.html
CVE ID: CVE-2012-0451 State: PUBLISHED Published: 2012-03-14T19:00:00 Last Updated: 2024-08-06T18:23:30.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allows remote web servers to bypass intended Content Security Policy (CSP) restrictions and possibly conduct cross-site scripting (XSS) attacks via crafted HTTP headers. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html - http://secunia.com/advisories/48402 - htt
ferences: - http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html - http://secunia.com/advisories/48402 - https://bugzilla.mozilla.org/show_bug.cgi?id=717511 - http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html - http://www.ubuntu.com/usn/USN-1400-5 - http://secunia.com/advisories/48359 - http://www.ubuntu.com/usn/USN-1400-4 - http://secunia.com/advisories/48629 - http://www.ubuntu.com/usn/USN-1400-3 - http://rhn.redhat.com/errata/RHSA-2012-0387.html - http://secunia.com/advisories/48496 - http://secunia.com/advisories/49055 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14909 - http://www.mozilla.org/security/annou
.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14909 - http://www.mozilla.org/security/announce/2012/mfsa2012-15.html - http://www.ubuntu.com/usn/USN-1400-2 - http://www.securityfocus.com/bid/52463 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:032 - http://www.securitytracker.com/id?1026803 - http://secunia.com/advisories/48553 - http://www.ubuntu.com/usn/USN-1400-1 - http://secunia.com/advisories/48561 - http://rhn.redhat.com/errata/RHSA-2012-0388.html - http://www.securitytracker.com/id?1026801 - http://www.securitytracker.com/id?1026804 - http://secunia.com/advisories/48513
CVE ID: CVE-2012-0452 State: PUBLISHED Published: 2012-02-11T02:00:00 Last Updated: 2024-08-06T18:23:31.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Mozilla Firefox 10.x before 10.0.1, Thunderbird 10.x before 10.0.1, and SeaMonkey 2.7 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors that trigger failure of an nsXBLDocumentInfo::ReadPrototypeBindings function call, related to the cycle collector's access to a hash table containing a stale XBL binding. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48110 - http://lists.opensus