Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
gzilla.mozilla.org/show_bug.cgi?id=688208 - http://www.securitytracker.com/id?1026803 - http://www.securityfocus.com/bid/52466 - http://secunia.com/advisories/48553 - http://secunia.com/advisories/48561 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15143 - http://www.securitytracker.com/id?1026801 - http://www.securitytracker.com/id?1026804
CVE ID: CVE-2012-0464 State: PUBLISHED Published: 2012-03-14T19:00:00 Last Updated: 2024-08-06T18:23:30.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the browser engine in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allows remote attackers to execute arbitrary code via vectors involving an empty argument to the array.join function in conjunction with the triggering of garbage collection. Additional Analyst Notes: - CVE Program Container: References: - http://www.zdnet.com/blog/security/mozilla-kn
llection. Additional Analyst Notes: - CVE Program Container: References: - http://www.zdnet.com/blog/security/mozilla-knew-of-pwn2own-bug-before-cansecwest/10757 - http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html - http://secunia.com/advisories/48402 - https://bugzilla.mozilla.org/show_bug.cgi?id=735104 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:031 - http://pwn2own.zerodayinitiative.com/status.html - http://secunia.com/advisories/48624 - http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html - http://www.ubuntu.com/usn/USN-1400-5 - http://secunia.com/advisories/48414 - http://secunia.com/advisories/48359 - http://secunia.com/advisories/
/USN-1400-5 - http://secunia.com/advisories/48414 - http://secunia.com/advisories/48359 - http://secunia.com/advisories/48823 - http://www.ubuntu.com/usn/USN-1401-1 - http://www.ubuntu.com/usn/USN-1400-4 - http://www.zdnet.com/blog/security/researchers-hack-into-newest-firefox-with-zero-day-flaw/10663 - http://secunia.com/advisories/48629 - https://bugzilla.mozilla.org/show_bug.cgi?id=720079 - http://www.ubuntu.com/usn/USN-1400-3 - http://rhn.redhat.com/errata/RHSA-2012-0387.html - http://secunia.com/advisories/48496 - http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00015.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14170 - htt
12-03/msg00015.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14170 - http://www.mozilla.org/security/announce/2012/mfsa2012-19.html - http://www.ubuntu.com/usn/USN-1400-2 - http://www.securityfocus.com/bid/52465 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:032 - http://www.securitytracker.com/id?1026803 - http://secunia.com/advisories/48495 - http://secunia.com/advisories/48553 - http://www.ubuntu.com/usn/USN-1400-1 - http://secunia.com/advisories/48561 - http://rhn.redhat.com/errata/RHSA-2012-0388.html - http://www.securitytracker.com/id?1026801 - http://www.securitytracker.com/id?1026804 - http://secunia.com/advisories/48513
CVE ID: CVE-2012-0465 State: PUBLISHED Published: 2012-04-27T20:00:00 Last Updated: 2024-08-06T18:23:31.040Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bugzilla 3.5.x and 3.6.x before 3.6.9, 3.7.x and 4.0.x before 4.0.6, and 4.1.x and 4.2.x before 4.2.1, when the inbound_proxies option is enabled, does not properly validate the X-Forwarded-For HTTP header, which allows remote attackers to bypass the lockout policy via a series of authentication requests with (1) different IP address strings in this header or (2) a long string in this header. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=728639 - http://lists.fedo
st Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=728639 - http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079604.html - http://archives.neohapsis.com/archives/bugtraq/2012-04/0135.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079481.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079432.html
CVE ID: CVE-2012-0466 State: PUBLISHED Published: 2012-04-27T20:00:00 Last Updated: 2024-08-06T18:23:31.018Z Vendors: n/a Products: n/a Problem Types: n/a Description: template/en/default/list/list.js.tmpl in Bugzilla 2.x and 3.x before 3.6.9, 3.7.x and 4.0.x before 4.0.6, and 4.1.x and 4.2.x before 4.2.1 does not properly handle multiple logins, which allows remote attackers to conduct cross-site scripting (XSS) attacks and obtain sensitive bug information via a crafted web page. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079604.html - http://archives.neohapsis.com/archives/bugtraq/2012-04/0135.html - h
g/pipermail/package-announce/2012-May/079604.html - http://archives.neohapsis.com/archives/bugtraq/2012-04/0135.html - https://bugzilla.mozilla.org/show_bug.cgi?id=745397 - http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079481.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079432.html
CVE ID: CVE-2012-0467 State: PUBLISHED Published: 2012-04-25T10:00:00 Last Updated: 2024-08-06T18:23:31.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=732951 - http://www.securityfocus.com/bid/53223 - htt
tainer: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=732951 - http://www.securityfocus.com/bid/53223 - https://bugzilla.mozilla.org/show_bug.cgi?id=723453 - https://bugzilla.mozilla.org/show_bug.cgi?id=706381 - http://secunia.com/advisories/48922 - https://bugzilla.mozilla.org/show_bug.cgi?id=740595 - https://bugzilla.mozilla.org/show_bug.cgi?id=732941 - https://bugzilla.mozilla.org/show_bug.cgi?id=720305 - https://bugzilla.mozilla.org/show_bug.cgi?id=714614 - https://bugzilla.mozilla.org/show_bug.cgi?id=737384 - https://bugzilla.mozilla.org/show_bug.cgi?id=708825 - https://bugzilla.mozilla.org/show_bug.cgi?id=737875 - http://www.mozilla.org/security/announce/2012/mfsa2012-20.h
8825 - https://bugzilla.mozilla.org/show_bug.cgi?id=737875 - http://www.mozilla.org/security/announce/2012/mfsa2012-20.html - http://secunia.com/advisories/49055 - http://www.debian.org/security/2012/dsa-2458 - https://bugzilla.mozilla.org/show_bug.cgi?id=716556 - http://secunia.com/advisories/48920 - https://bugzilla.mozilla.org/show_bug.cgi?id=737129 - https://bugzilla.mozilla.org/show_bug.cgi?id=733282 - https://bugzilla.mozilla.org/show_bug.cgi?id=735943 - https://bugzilla.mozilla.org/show_bug.cgi?id=735073 - http://www.debian.org/security/2012/dsa-2457 - http://www.debian.org/security/2012/dsa-2464 - https://bugzilla.mozilla.org/show_bug.cgi?id=736609 - http://www.mandriva.com/security/
ian.org/security/2012/dsa-2464 - https://bugzilla.mozilla.org/show_bug.cgi?id=736609 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:081 - https://bugzilla.mozilla.org/show_bug.cgi?id=736589 - https://bugzilla.mozilla.org/show_bug.cgi?id=733979 - http://secunia.com/advisories/48972 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:066 - https://bugzilla.mozilla.org/show_bug.cgi?id=737182 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17074 - https://bugzilla.mozilla.org/show_bug.cgi?id=680456 - http://secunia.com/advisories/49047 - https://bugzilla.mozilla.org/show_bug.cgi?id=726502 - https://bugzilla.mozilla.org/show_bug.cg
ia.com/advisories/49047 - https://bugzilla.mozilla.org/show_bug.cgi?id=726502 - https://bugzilla.mozilla.org/show_bug.cgi?id=726332
CVE ID: CVE-2012-0468 State: PUBLISHED Published: 2012-04-25T10:00:00 Last Updated: 2024-08-06T18:23:31.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: The browser engine in Mozilla Firefox 4.x through 11.0, Thunderbird 5.0 through 11.0, and SeaMonkey before 2.9 allows remote attackers to cause a denial of service (assertion failure and memory corruption) or possibly execute arbitrary code via vectors related to jsval.h and the js::array_shift function. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=714616 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16771 - http://www.m
?id=714616 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16771 - http://www.mozilla.org/security/announce/2012/mfsa2012-20.html - http://secunia.com/advisories/49055 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:081 - http://secunia.com/advisories/48972 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:066 - http://secunia.com/advisories/49047 - http://www.securityfocus.com/bid/53221
CVE ID: CVE-2012-0469 State: PUBLISHED Published: 2012-04-25T10:00:00 Last Updated: 2024-08-06T18:23:31.062Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the mozilla::dom::indexedDB::IDBKeyRange::cycleCollection::Trace function in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allows remote attackers to execute arbitrary code via vectors related to crafted IndexedDB data. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=738985 - http://www.mozilla.org/security/announce/2012/mfsa
: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=738985 - http://www.mozilla.org/security/announce/2012/mfsa2012-22.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16734 - http://secunia.com/advisories/49055 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:081 - http://secunia.com/advisories/48972 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:066 - http://secunia.com/advisories/49047 - http://www.securityfocus.com/bid/53220
CVE ID: CVE-2012-0470 State: PUBLISHED Published: 2012-04-25T10:00:00 Last Updated: 2024-08-06T18:23:31.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the nsSVGFEDiffuseLightingElement::LightPixel function in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allows remote attackers to cause a denial of service (invalid gfxImageSurface free operation) or possibly execute arbitrary code by leveraging the use of "different number systems." Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce
mber systems." Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2012/mfsa2012-23.html - http://secunia.com/advisories/48922 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16989 - https://bugzilla.mozilla.org/show_bug.cgi?id=734288 - http://secunia.com/advisories/49055 - http://www.debian.org/security/2012/dsa-2458 - http://secunia.com/advisories/48920 - http://www.debian.org/security/2012/dsa-2457 - http://www.debian.org/security/2012/dsa-2464 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:081 - http://secunia.com/advisories/48972 - http://www.securityfocus.com/bid/53225 - http:/
y/advisories?name=MDVSA-2012:081 - http://secunia.com/advisories/48972 - http://www.securityfocus.com/bid/53225 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:066 - http://secunia.com/advisories/49047
CVE ID: CVE-2012-0471 State: PUBLISHED Published: 2012-04-25T10:00:00 Last Updated: 2024-08-06T18:23:31.025Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allows remote attackers to inject arbitrary web script or HTML via a multibyte character set. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=715319 - http://secunia.com/advisories/48922 - http://www.mozilla.org/security/announce/2012/mfsa2012-24.html - https://oval.ci
- http://secunia.com/advisories/48922 - http://www.mozilla.org/security/announce/2012/mfsa2012-24.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16961 - http://secunia.com/advisories/49055 - http://www.debian.org/security/2012/dsa-2458 - http://secunia.com/advisories/48920 - http://www.securityfocus.com/bid/53219 - http://www.debian.org/security/2012/dsa-2457 - http://www.debian.org/security/2012/dsa-2464 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:081 - http://secunia.com/advisories/48972 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:066 - http://secunia.com/advisories/49047
CVE ID: CVE-2012-0472 State: PUBLISHED Published: 2012-04-25T10:00:00 Last Updated: 2024-08-06T18:23:31.010Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cairo-dwrite implementation in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9, when certain Windows Vista and Windows 7 configurations are used, does not properly restrict font-rendering attempts, which allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securi
bitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/53218 - http://www.mozilla.org/security/announce/2012/mfsa2012-25.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17067 - http://secunia.com/advisories/49055 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:081 - http://secunia.com/advisories/48972 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:066 - https://bugzilla.mozilla.org/show_bug.cgi?id=744480
CVE ID: CVE-2012-0473 State: PUBLISHED Published: 2012-04-25T10:00:00 Last Updated: 2024-08-06T18:23:30.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WebGLBuffer::FindMaxUshortElement function in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 calls the FindMaxElementInSubArray function with incorrect template arguments, which allows remote attackers to obtain sensitive information from video memory via a crafted WebGL.drawElements call. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%
nal Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16113 - http://www.mozilla.org/security/announce/2012/mfsa2012-26.html - http://www.securityfocus.com/bid/53231 - http://secunia.com/advisories/49055 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:081 - https://bugzilla.mozilla.org/show_bug.cgi?id=743475 - http://secunia.com/advisories/48972 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:066 - http://secunia.com/advisories/49047
CVE ID: CVE-2012-0474 State: PUBLISHED Published: 2012-04-25T10:00:00 Last Updated: 2024-08-06T18:23:31.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the docshell implementation in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allows remote attackers to inject arbitrary web script or HTML via vectors related to short-circuited page loads, aka "Universal XSS (UXSS)." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/53228 - https://bugzilla.mozilla.org/show_bug.cgi?id=737307
m Container: References: - http://www.securityfocus.com/bid/53228 - https://bugzilla.mozilla.org/show_bug.cgi?id=737307 - http://www.mozilla.org/security/announce/2012/mfsa2012-27.html - http://secunia.com/advisories/49055 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:081 - http://secunia.com/advisories/48972 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:066 - http://secunia.com/advisories/49047 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16107 - https://bugzilla.mozilla.org/show_bug.cgi?id=687745
CVE ID: CVE-2012-0475 State: PUBLISHED Published: 2012-04-25T10:00:00 Last Updated: 2024-08-06T18:23:31.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox 4.x through 11.0, Thunderbird 5.0 through 11.0, and SeaMonkey before 2.9 do not properly construct the Origin and Sec-WebSocket-Origin HTTP headers, which might allow remote attackers to bypass an IPv6 literal ACL via a cross-site (1) XMLHttpRequest or (2) WebSocket operation involving a nonstandard port number and an IPv6 address that contains certain zero fields. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/75153 - https://oval.cisecurit
CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/75153 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16279 - https://bugzilla.mozilla.org/show_bug.cgi?id=694576 - http://secunia.com/advisories/49055 - http://www.securityfocus.com/bid/53230 - http://secunia.com/advisories/48972 - http://secunia.com/advisories/49047 - http://www.mozilla.org/security/announce/2012/mfsa2012-28.html
CVE ID: CVE-2012-0477 State: PUBLISHED Published: 2012-04-25T10:00:00 Last Updated: 2024-08-06T18:23:31.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allow remote attackers to inject arbitrary web script or HTML via the (1) ISO-2022-KR or (2) ISO-2022-CN character set. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48922 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16889 - ht
com/advisories/48922 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16889 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75154 - http://www.securityfocus.com/bid/53229 - https://bugzilla.mozilla.org/show_bug.cgi?id=718573 - http://www.mozilla.org/security/announce/2012/mfsa2012-29.html - http://secunia.com/advisories/49055 - http://www.debian.org/security/2012/dsa-2458 - http://secunia.com/advisories/48920 - http://www.debian.org/security/2012/dsa-2457 - http://www.debian.org/security/2012/dsa-2464 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:081 - http://secunia.com/advisories/48972 - http://www.mandriva.com/security/advisor
security/advisories?name=MDVSA-2012:081 - http://secunia.com/advisories/48972 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:066 - http://secunia.com/advisories/49047
CVE ID: CVE-2012-0478 State: PUBLISHED Published: 2012-04-25T10:00:00 Last Updated: 2024-08-06T18:23:31.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: The texImage2D implementation in the WebGL subsystem in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 does not properly restrict JSVAL_TO_OBJECT casts, which might allow remote attackers to execute arbitrary code via a crafted web page. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2012/mfsa2012-30.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/7
http://www.mozilla.org/security/announce/2012/mfsa2012-30.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/75155 - http://secunia.com/advisories/49055 - http://www.securityfocus.com/bid/53227 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16893 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:081 - http://secunia.com/advisories/48972 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:066 - http://secunia.com/advisories/49047 - https://bugzilla.mozilla.org/show_bug.cgi?id=727547
CVE ID: CVE-2012-0479 State: PUBLISHED Published: 2012-04-25T10:00:00 Last Updated: 2024-08-06T18:23:31.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allow remote attackers to spoof the address bar via an https URL for invalid (1) RSS or (2) Atom XML content. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=714631 - http://secunia.com/advisories/48922 - http://www.mozilla.org/security/announce/2012/mfsa2012-33.html - http://www.securityfocus.com/bid/53224 - ht
ies/48922 - http://www.mozilla.org/security/announce/2012/mfsa2012-33.html - http://www.securityfocus.com/bid/53224 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17011 - http://secunia.com/advisories/49055 - http://www.debian.org/security/2012/dsa-2458 - http://secunia.com/advisories/48920 - http://www.debian.org/security/2012/dsa-2457 - http://www.debian.org/security/2012/dsa-2464 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:081 - http://secunia.com/advisories/48972 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:066 - http://secunia.com/advisories/49047 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75156
CVE ID: CVE-2012-0484 State: PUBLISHED Published: 2012-01-18T22:00:00 Last Updated: 2024-08-06T18:23:31.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x, 5.1.x, and 5.5.x allows remote authenticated users to affect confidentiality via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1397-1 - http://www.securityfocus.com/bid/51515 - http://secunia.com/advisories/53372 - http://security.gentoo.org/glsa/glsa-201308-06.xml - http://secunia.com/advisories/48250 - http://osvdb.org/78372 - http://lists.opensuse.org/opensuse-security-announce/201
http://secunia.com/advisories/48250 - http://osvdb.org/78372 - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00007.html - http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=659687 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72525 - http://www.debian.org/security/2012/dsa-2429