Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=214095 - http://secunia.com/advisories/31639 - http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html - http://secunia.com/advisories/36108 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:188 - http://secunia.com/advisories/31379 - http://support.avaya.com/elmodocs2/security/ASA-2008-401.htm - http://www.vupen.com/english/advisories/2009/0320 - http://www.securityfocus.com/archive/1/507985/100/0/threaded - http://www.redhat.com/support/errata/RHSA-2008-0864.html - http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html - http://tomcat.apache.org/security-6.html - http://se
sts.opensuse.org/opensuse-security-announce/2009-02/msg00002.html - http://tomcat.apache.org/security-6.html - http://secunia.com/advisories/57126 - http://secunia.com/advisories/32222 - http://secunia.com/advisories/31891 - http://secunia.com/advisories/33797 - https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=209500 - http://www.securityfocus.com/archive/1/505556/100/0/threaded - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00712.html - http://www.vupen.com/english/advisories/2008/2305 - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00859.html - http://www.securityfocus.com/archive/1/504351/100/0/threaded - http://t
-package-announce/2008-September/msg00859.html - http://www.securityfocus.com/archive/1/504351/100/0/threaded - http://tomcat.apache.org/security-5.html - http://secunia.com/advisories/35474 - http://www.vupen.com/english/advisories/2008/2780 - http://secunia.com/advisories/31381 - http://marc.info/?l=bugtraq&m=123376588623823&w=2 - http://marc.info/?l=bugtraq&m=139344343412337&w=2 - http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html - http://support.apple.com/kb/HT3216 - http://www.vupen.com/english/advisories/2009/0503 - http://www.vupen.com/english/advisories/2009/3316 - http://marc.info/?l=bugtraq&m=123376588623823&w=2 - https://exchange.xforce.ibmcloud.com/vulnerab
advisories/2009/3316 - http://marc.info/?l=bugtraq&m=123376588623823&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44155 - http://www.securityfocus.com/archive/1/495021/100/0/threaded - http://secunia.com/advisories/32266 - http://www.redhat.com/support/errata/RHSA-2008-0648.html - https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/t
html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2008-1233 State: PUBLISHED Published: 2008-03-27T10:00:00 Last Updated: 2024-08-07T08:17:34.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Mozilla Firefox before 2.0.0.13, Thunderbird before 2.0.0.13, and SeaMonkey before 1.1.9 allows remote attackers to execute arbitrary code via "XPCNativeWrapper pollution." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/490196/100/0/threaded - http://secunia.com/advisories/29541 - http://secunia.com/advisories/29539 - http://www.mozilla.org/security/announce/2008/mfsa2008-14.html - http://www.vupen.com/english/advisories/2008/0999/references
/www.mozilla.org/security/announce/2008/mfsa2008-14.html - http://www.vupen.com/english/advisories/2008/0999/references - http://secunia.com/advisories/30620 - http://secunia.com/advisories/29560 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41443 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11078 - http://www.debian.org/security/2008/dsa-1532 - http://secunia.com/advisories/30327 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1 - http://www.ubuntu.com/usn/usn-592-1 - http://secunia.com/advisories/29616 - http://www.securitytracker.com/id?1019694 - http://secunia.com/advisories/29550 - http://secunia.com/advisories/29645
- http://www.securitytracker.com/id?1019694 - http://secunia.com/advisories/29550 - http://secunia.com/advisories/29645 - http://www.ubuntu.com/usn/usn-605-1 - http://secunia.com/advisories/29607 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:155 - http://www.vupen.com/english/advisories/2008/1793/references - http://www.debian.org/security/2008/dsa-1574 - http://secunia.com/advisories/29558 - http://secunia.com/advisories/29548 - http://secunia.com/advisories/30370 - http://rhn.redhat.com/errata/RHSA-2008-0208.html - http://secunia.com/advisories/29526 - http://www.vupen.com/english/advisories/2008/2091/refe
rrata/RHSA-2008-0208.html - http://secunia.com/advisories/29526 - http://www.vupen.com/english/advisories/2008/2091/references - http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00002.html - http://www.us-cert.gov/cas/techalerts/TA08-087A.html - http://secunia.com/advisories/29391 - http://secunia.com/advisories/30192 - http://www.kb.cert.org/vuls/id/466521 - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.447313 - http://www.redhat.com/support/errata/RHSA-2008-0209.html - http://www.securityfocus.com/bid/28448 - http://www.redhat.com/support/errata/RHSA-2008-0207.html - http://secunia.com/advisories/30016 - http://www.debian.org/s
http://www.redhat.com/support/errata/RHSA-2008-0207.html - http://secunia.com/advisories/30016 - http://www.debian.org/security/2008/dsa-1534 - https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00058.html - http://secunia.com/advisories/29547 - http://secunia.com/advisories/30105 - http://secunia.com/advisories/30094 - http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0128 - http://secunia.com/advisories/31043 - https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00074.html - http://www.vupen.com/english/advisories/2008/0998/references - http://www.debian.org/security/2008/dsa-1535 - http://www.mandri
www.vupen.com/english/advisories/2008/0998/references - http://www.debian.org/security/2008/dsa-1535 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:080
CVE ID: CVE-2008-1234 State: PUBLISHED Published: 2008-03-27T10:00:00 Last Updated: 2024-08-07T08:17:34.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 2.0.0.13, Thunderbird before 2.0.0.13, and SeaMonkey before 1.1.9 allows remote attackers to inject arbitrary web script or HTML via event handlers, aka "Universal XSS using event handlers." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/490196/100/0/threaded - http://secunia.com/advisories/29541 - http://secunia.com/advisories/29539 - http://www.mozilla.org/security/announce/2008/mfsa2008-14.html - http:
ies/29541 - http://secunia.com/advisories/29539 - http://www.mozilla.org/security/announce/2008/mfsa2008-14.html - http://www.vupen.com/english/advisories/2008/0999/references - http://secunia.com/advisories/30620 - http://secunia.com/advisories/29560 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41455 - http://www.debian.org/security/2008/dsa-1532 - http://secunia.com/advisories/30327 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1 - http://www.ubuntu.com/usn/usn-592-1 - http://secunia.com/advisories/29616 - http://www.securitytracker.com/id?1019694 - http://secunia.com/advisories/29550 - http://secunia.com/advisories/29645 - http://www.ubuntu.com/usn/usn-605-1
19694 - http://secunia.com/advisories/29550 - http://secunia.com/advisories/29645 - http://www.ubuntu.com/usn/usn-605-1 - http://secunia.com/advisories/29607 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:155 - http://www.vupen.com/english/advisories/2008/1793/references - http://www.debian.org/security/2008/dsa-1574 - http://secunia.com/advisories/29558 - http://secunia.com/advisories/29548 - http://secunia.com/advisories/30370 - http://rhn.redhat.com/errata/RHSA-2008-0208.html - http://secunia.com/advisories/29526 - http://www.vupen.com/english/advisories/2008/2091/references - http://lists.opensuse.org/open
nia.com/advisories/29526 - http://www.vupen.com/english/advisories/2008/2091/references - http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00002.html - http://www.us-cert.gov/cas/techalerts/TA08-087A.html - http://secunia.com/advisories/29391 - http://secunia.com/advisories/30192 - http://www.kb.cert.org/vuls/id/466521 - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.447313 - http://www.redhat.com/support/errata/RHSA-2008-0209.html - http://www.securityfocus.com/bid/28448 - http://www.redhat.com/support/errata/RHSA-2008-0207.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9551 - http:/
SA-2008-0207.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9551 - http://secunia.com/advisories/30016 - http://www.debian.org/security/2008/dsa-1534 - https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00058.html - http://secunia.com/advisories/29547 - http://secunia.com/advisories/30105 - http://secunia.com/advisories/30094 - http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0128 - http://secunia.com/advisories/31043 - https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00074.html - http://www.vupen.com/english/advisories/2008/0998/references - http://ww
edora-package-announce/2008-May/msg00074.html - http://www.vupen.com/english/advisories/2008/0998/references - http://www.debian.org/security/2008/dsa-1535 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:080
CVE ID: CVE-2008-1235 State: PUBLISHED Published: 2008-03-27T10:00:00 Last Updated: 2024-08-07T08:17:34.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Mozilla Firefox before 2.0.0.13, Thunderbird before 2.0.0.13, and SeaMonkey before 1.1.9 allows remote attackers to execute arbitrary code via unknown vectors that cause JavaScript to execute with the wrong principal, aka "Privilege escalation via incorrect principals." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/490196/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10980 - http://se
00/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10980 - http://secunia.com/advisories/29541 - http://secunia.com/advisories/29539 - http://www.mozilla.org/security/announce/2008/mfsa2008-14.html - http://www.vupen.com/english/advisories/2008/0999/references - http://secunia.com/advisories/30620 - http://secunia.com/advisories/29560 - http://www.debian.org/security/2008/dsa-1532 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41457 - http://secunia.com/advisories/30327 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1 - http://www.ubuntu.com/usn/usn-592-1 - http://secunia.com/advisories/29616 - http://www.security
assetkey=1-26-238492-1 - http://www.ubuntu.com/usn/usn-592-1 - http://secunia.com/advisories/29616 - http://www.securitytracker.com/id?1019694 - http://secunia.com/advisories/29550 - http://secunia.com/advisories/29645 - http://www.ubuntu.com/usn/usn-605-1 - http://secunia.com/advisories/29607 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:155 - http://www.vupen.com/english/advisories/2008/1793/references - http://www.debian.org/security/2008/dsa-1574 - http://secunia.com/advisories/29558 - http://secunia.com/advisories/29548 - http://secunia.com/advisories/30370 - http://rhn.redhat.com/errata/RHSA-2008-0208.h
ttp://secunia.com/advisories/29548 - http://secunia.com/advisories/30370 - http://rhn.redhat.com/errata/RHSA-2008-0208.html - http://secunia.com/advisories/29526 - http://www.vupen.com/english/advisories/2008/2091/references - http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00002.html - http://www.us-cert.gov/cas/techalerts/TA08-087A.html - http://secunia.com/advisories/29391 - http://secunia.com/advisories/30192 - http://www.kb.cert.org/vuls/id/466521 - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.447313 - http://www.redhat.com/support/errata/RHSA-2008-0209.html - http://www.securityfocus.com/bid/28448 - http://www.redhat.com/
tp://www.redhat.com/support/errata/RHSA-2008-0209.html - http://www.securityfocus.com/bid/28448 - http://www.redhat.com/support/errata/RHSA-2008-0207.html - http://secunia.com/advisories/30016 - http://www.debian.org/security/2008/dsa-1534 - https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00058.html - http://secunia.com/advisories/29547 - http://secunia.com/advisories/30105 - http://secunia.com/advisories/30094 - http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0128 - http://secunia.com/advisories/31043 - https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00074.html - http://www.vupen.com/english/
s/31043 - https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00074.html - http://www.vupen.com/english/advisories/2008/0998/references - http://www.debian.org/security/2008/dsa-1535 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:080
CVE ID: CVE-2008-1236 State: PUBLISHED Published: 2008-03-27T10:00:00 Last Updated: 2024-08-07T08:17:33.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.13, Thunderbird before 2.0.0.13, and SeaMonkey before 1.1.9 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors related to the layout engine. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/490196/100/0/threaded - http://www.securitytracker.com/id?1019695 - http://secunia.com/advisories/29541 - http://secunia.com/advisories/29539 - http://ww
w.securitytracker.com/id?1019695 - http://secunia.com/advisories/29541 - http://secunia.com/advisories/29539 - http://www.vupen.com/english/advisories/2008/0999/references - http://www.mozilla.org/security/announce/2008/mfsa2008-15.html - http://secunia.com/advisories/30620 - http://secunia.com/advisories/29560 - http://www.debian.org/security/2008/dsa-1532 - http://secunia.com/advisories/30327 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1 - http://www.ubuntu.com/usn/usn-592-1 - http://secunia.com/advisories/29616 - http://secunia.com/advisories/29550 - http://secunia.com/advisories/29645 - http://www.ubuntu.com/usn/usn-605-1 - http://secunia.com/advisories/29607 - http
- http://secunia.com/advisories/29645 - http://www.ubuntu.com/usn/usn-605-1 - http://secunia.com/advisories/29607 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:155 - http://www.vupen.com/english/advisories/2008/1793/references - http://www.debian.org/security/2008/dsa-1574 - http://secunia.com/advisories/29558 - http://secunia.com/advisories/29548 - http://secunia.com/advisories/30370 - http://rhn.redhat.com/errata/RHSA-2008-0208.html - http://secunia.com/advisories/29526 - http://www.vupen.com/english/advisories/2008/2091/references - http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00002.html
com/english/advisories/2008/2091/references - http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00002.html - http://www.us-cert.gov/cas/techalerts/TA08-087A.html - http://secunia.com/advisories/29391 - http://secunia.com/advisories/30192 - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.447313 - http://www.redhat.com/support/errata/RHSA-2008-0209.html - http://www.securityfocus.com/bid/28448 - http://www.redhat.com/support/errata/RHSA-2008-0207.html - http://secunia.com/advisories/30016 - http://www.debian.org/security/2008/dsa-1534 - https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00058.html - http://secunia.com
rity/2008/dsa-1534 - https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00058.html - http://secunia.com/advisories/29547 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11788 - http://secunia.com/advisories/30105 - http://secunia.com/advisories/30094 - http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0128 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41445 - http://secunia.com/advisories/31043 - https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00074.html - http://www.vupen.com/english/advisories/2008/0998/references - http://www.debian.org/security/
/2008-May/msg00074.html - http://www.vupen.com/english/advisories/2008/0998/references - http://www.debian.org/security/2008/dsa-1535 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:080
CVE ID: CVE-2008-1237 State: PUBLISHED Published: 2008-03-27T10:00:00 Last Updated: 2024-08-07T08:17:34.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.13, Thunderbird before 2.0.0.13, and SeaMonkey before 1.1.9 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors related to the JavaScript engine. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/490196/100/0/threaded - http://www.securitytracker.com/id?1019695 - http://secunia.com/advisories/29541 - http://secunia.com/advisories/29539 - http:
//www.securitytracker.com/id?1019695 - http://secunia.com/advisories/29541 - http://secunia.com/advisories/29539 - http://www.vupen.com/english/advisories/2008/0999/references - http://lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html - http://www.mozilla.org/security/announce/2008/mfsa2008-15.html - http://secunia.com/advisories/30620 - http://secunia.com/advisories/29560 - http://www.debian.org/security/2008/dsa-1532 - http://secunia.com/advisories/30327 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1 - http://www.ubuntu.com/usn/usn-592-1 - http://secunia.com/advisories/29616 - http://secunia.com/advisories/29550 - http://secunia.com/advisories/29645 -
92-1 - http://secunia.com/advisories/29616 - http://secunia.com/advisories/29550 - http://secunia.com/advisories/29645 - http://www.ubuntu.com/usn/usn-605-1 - http://secunia.com/advisories/29607 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:155 - http://www.vupen.com/english/advisories/2008/1793/references - http://www.debian.org/security/2008/dsa-1574 - http://secunia.com/advisories/29558 - http://secunia.com/advisories/29548 - http://secunia.com/advisories/30370 - http://rhn.redhat.com/errata/RHSA-2008-0208.html - http://secunia.com/advisories/29526 - http://www.vupen.com/english/advisories/2008/2091/refere
ata/RHSA-2008-0208.html - http://secunia.com/advisories/29526 - http://www.vupen.com/english/advisories/2008/2091/references - http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00002.html - http://www.us-cert.gov/cas/techalerts/TA08-087A.html - http://secunia.com/advisories/29391 - http://secunia.com/advisories/30192 - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.447313 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41446 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9651 - http://www.redhat.com/support/errata/RHSA-2008-0209.html - http://www.securityfocus.com/bid/28448 - http://
def%3A9651 - http://www.redhat.com/support/errata/RHSA-2008-0209.html - http://www.securityfocus.com/bid/28448 - http://www.redhat.com/support/errata/RHSA-2008-0207.html - http://secunia.com/advisories/30016 - http://www.debian.org/security/2008/dsa-1534 - https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00058.html - http://secunia.com/advisories/29547 - http://secunia.com/advisories/30105 - http://secunia.com/advisories/30094 - http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0128 - http://secunia.com/advisories/31043 - https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00074.html - http://www.vup
a.com/advisories/31043 - https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00074.html - http://www.vupen.com/english/advisories/2008/0998/references - http://www.debian.org/security/2008/dsa-1535 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:080
CVE ID: CVE-2008-1238 State: PUBLISHED Published: 2008-03-27T10:00:00 Last Updated: 2024-08-07T08:17:33.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 2.0.0.13 and SeaMonkey before 1.1.9, when generating the HTTP Referer header, does not list the entire URL when it contains Basic Authentication credentials without a username, which makes it easier for remote attackers to bypass application protection mechanisms that rely on Referer headers, such as with some Cross-Site Request Forgery (CSRF) mechanisms. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/490196/100/0/threaded - http://secunia.com/advi
Program Container: References: - http://www.securityfocus.com/archive/1/490196/100/0/threaded - http://secunia.com/advisories/29541 - http://secunia.com/advisories/29539 - http://www.securitytracker.com/id?1019703 - http://secunia.com/advisories/30620 - http://secunia.com/advisories/29560 - http://www.debian.org/security/2008/dsa-1532 - http://secunia.com/advisories/30327 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1 - http://www.ubuntu.com/usn/usn-592-1 - http://secunia.com/advisories/29616 - http://secunia.com/advisories/29550 - http://secunia.com/advisories/29645 - http://secunia.com/advisories/29607 - http://www.vupen.com/english/advisories/2008/1793/references - h
dvisories/29645 - http://secunia.com/advisories/29607 - http://www.vupen.com/english/advisories/2008/1793/references - http://secunia.com/advisories/29558 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9889 - http://rhn.redhat.com/errata/RHSA-2008-0208.html - http://secunia.com/advisories/29526 - http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00002.html - http://www.us-cert.gov/cas/techalerts/TA08-087A.html - http://secunia.com/advisories/29391 - http://www.redhat.com/support/errata/RHSA-2008-0209.html - http://www.securityfocus.com/bid/28448 - http://www.redhat.com/support/errata/RHSA-2008-0207.html - https://exchange.xforce.ibmclou