Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-2690 State: PUBLISHED Published: 2017-08-02T19:00:00 Last Updated: 2024-08-06T05:24:38.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in views/add-license-form.php in the Digium Addons module (digiumaddoninstaller) before 2.11.0.7 for FreePBX allow remote attackers to inject arbitrary web script or HTML via the (1) add_license_key, (2) add_license_first_name, (3) add_license_last_name, (4) add_license_company, (5) add_license_address1, (6) add_license_address2, (7) add_license_city, (8) add_license_state, (9) add_license_post_code, (10) add_license_country, (11) add_license_phone, or (12) add_license_email
d_license_state, (9) add_license_post_code, (10) add_license_country, (11) add_license_phone, or (12) add_license_email parameter in an add-license-form page to admin/config.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB23253 - http://packetstormsecurity.com/files/131591/FreePBX-12.0.43-Cross-Site-Scripting.html - http://www.securityfocus.com/archive/1/535333/100/1100/threaded - http://git.freepbx.org/projects/FREEPBX/repos/digiumaddoninstaller/commits/2aad006024b74c9ff53943d3e68527a3dffac855 - http://www.securityfocus.com/bid/74279
CVE ID: CVE-2015-2692 State: PUBLISHED Published: 2017-06-08T21:00:00 Last Updated: 2024-08-06T05:24:38.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: AdBlock before 2.21 allows remote attackers to block arbitrary resources on arbitrary websites and to disable arbitrary blocking filters. Additional Analyst Notes: - CVE Program Container: References: - https://www.greinr.com/blog/2015/cve-2015-2692-adblock-filter-injection/ - https://github.com/kzar/watchadblock/commit/5b77de6ea77e0eff2aa726d9722d64fb4964b985
CVE ID: CVE-2015-2694 State: PUBLISHED Published: 2015-05-25T19:00:00 Last Updated: 2024-08-06T05:24:38.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kdcpreauth modules in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x before 1.13.2 do not properly track whether a client's request has been validated, which allows remote attackers to bypass an intended preauthentication requirement by providing (1) zero bytes of data or (2) an arbitrary realm name, related to plugins/preauth/otp/main.c and plugins/preauth/pkinit/pkinit_srv.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/krb5/krb5/commit/e3b5a5e5267818c97750b266df50b6a3d4649604 - http:/
E Program Container: References: - https://github.com/krb5/krb5/commit/e3b5a5e5267818c97750b266df50b6a3d4649604 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://www.securityfocus.com/bid/74824 - http://krbdev.mit.edu/rt/Ticket/Display.html?id=8160 - http://www.ubuntu.com/usn/USN-2810-1
CVE ID: CVE-2015-2695 State: PUBLISHED Published: 2015-11-09T02:00:00 Last Updated: 2024-08-06T05:24:38.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an inappropriate context handle, which allows remote attackers to cause a denial of service (incorrect pointer read and process crash) via a crafted SPNEGO packet that is mishandled during a gss_inquire_context call. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00007.html - http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00006.html - https://githu
ounce/2015-11/msg00007.html - http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00006.html - https://github.com/krb5/krb5/commit/b51b33f2bc5d1497ddf5bd107f791c101695000d - https://security.gentoo.org/glsa/201611-14 - http://www.securitytracker.com/id/1034084 - http://krbdev.mit.edu/rt/Ticket/Display.html?id=8244 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00022.html - http://www.securityfocus.com/bid/90687 - http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00014.html - http://www.debian.org/security/2015/dsa-3395 - http://www.ubuntu.com/usn/USN-2810-1
CVE ID: CVE-2015-2696 State: PUBLISHED Published: 2015-11-09T02:00:00 Last Updated: 2024-08-06T05:24:38.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an inappropriate context handle, which allows remote attackers to cause a denial of service (incorrect pointer read and process crash) via a crafted IAKERB packet that is mishandled during a gss_inquire_context call. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/krb5/krb5/commit/e04f0283516e80d2f93366e0d479d13c9b5c8c2a - http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00006.html - https://security.g
3366e0d479d13c9b5c8c2a - http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00006.html - https://security.gentoo.org/glsa/201611-14 - http://www.securityfocus.com/bid/90675 - http://www.securitytracker.com/id/1034084 - http://krbdev.mit.edu/rt/Ticket/Display.html?id=8244 - http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00022.html - http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00014.html - http://www.debian.org/security/2015/dsa-3395 - http://www.ubuntu.com/usn/USN-2810-1
CVE ID: CVE-2015-2697 State: PUBLISHED Published: 2015-11-09T02:00:00 Last Updated: 2024-08-06T05:24:38.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: The build_principal_va function in lib/krb5/krb/bld_princ.c in MIT Kerberos 5 (aka krb5) before 1.14 allows remote authenticated users to cause a denial of service (out-of-bounds read and KDC crash) via an initial '\0' character in a long realm field within a TGS request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/krb5/krb5/commit/f0c094a1b745d91ef2f9a4eae2149aac026a5789 - http://www.securityfocus.com/bid/77581 - http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00006.html
89 - http://www.securityfocus.com/bid/77581 - http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00006.html - https://security.gentoo.org/glsa/201611-14 - http://www.securitytracker.com/id/1034084 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00022.html - http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00014.html - http://krbdev.mit.edu/rt/Ticket/Display.html?id=8252 - http://www.debian.org/security/2015/dsa-3395 - http://www.ubuntu.com/usn/USN-2810-1
CVE ID: CVE-2015-2698 State: PUBLISHED Published: 2015-11-13T02:00:00 Last Updated: 2024-08-06T05:24:38.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: The iakerb_gss_export_sec_context function in lib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka krb5) 1.14 pre-release 2015-09-14 improperly accesses a certain pointer, which allows remote authenticated users to cause a denial of service (memory corruption) or possibly have unspecified other impact by interacting with an application that calls the gss_export_sec_context function. NOTE: this vulnerability exists because of an incorrect fix for CVE-2015-2696. Additional Analyst Notes: - CVE Program Container: References: - https:/
because of an incorrect fix for CVE-2015-2696. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/krb5/krb5/commit/3db8dfec1ef50ddd78d6ba9503185995876a39fd - http://krbdev.mit.edu/rt/Ticket/Display.html?id=8273 - http://lists.opensuse.org/opensuse-updates/2015-11/msg00116.html - http://lists.opensuse.org/opensuse-updates/2015-12/msg00124.html - http://www.ubuntu.com/usn/USN-2810-1
CVE ID: CVE-2015-2701 State: PUBLISHED Published: 2015-03-25T14:00:00 Last Updated: 2024-08-06T05:24:37.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in CS-Cart 4.2.4 allows remote attackers to hijack the authentication of users for requests that change a user password via a request to profiles-update/. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/show/osvdb/119632 - http://www.exploit-db.com/exploits/36358 - http://www.securityfocus.com/bid/72658
CVE ID: CVE-2015-2702 State: PUBLISHED Published: 2015-03-25T14:00:00 Last Updated: 2024-08-06T05:24:38.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Message Log in the Email Security Gateway in Websense TRITON AP-EMAIL before 8.0.0 and V-Series 7.7 appliances allows remote attackers to inject arbitrary web script or HTML via the sender address in an email. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/534909/100/0/threaded - http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0 - http://www.securityfocus.com/bid/73345 - ht
pport/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0 - http://www.securityfocus.com/bid/73345 - http://seclists.org/fulldisclosure/2015/Mar/103 - http://packetstormsecurity.com/files/130898/Websense-Email-Security-Cross-Site-Scripting.html - https://www.securify.nl/advisory/SFY20140905/websense_email_security_vulnerable_to_persistent_cross_site_scripting_in_audit_log_details_view.html
CVE ID: CVE-2015-2703 State: PUBLISHED Published: 2015-03-25T14:00:00 Last Updated: 2024-08-06T05:24:38.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Websense TRITON AP-WEB before 8.0.0 and V-Series 7.7 appliances allow remote attackers to inject arbitrary web script or HTML via the (1) ws-userip in the ws-encdata parameter to cve-bin/moreBlockInfo.cgi in the Data Security block page or (2) admin_msg parameter to configure/ssl_ui/eva-config/client-cert-import_wsoem.html in the Content Gateway, which is not properly handled in an error message. Additional Analyst Notes: - CVE Program Container: References: - https://www.
not properly handled in an error message. Additional Analyst Notes: - CVE Program Container: References: - https://www.securify.nl/advisory/SFY20140910/cross_site_scripting_vulnerability_in_websense_data_security_block_page.html - http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0 - http://seclists.org/fulldisclosure/2015/Mar/106 - http://seclists.org/fulldisclosure/2015/Mar/108 - http://www.securityfocus.com/archive/1/534914/100/0/threaded - https://www.securify.nl/advisory/SFY20140916/error_messages_of_websense_content_gateway_are_vulnerable_to_cross_site_scripting.html - http://packetstormsecurity.com/files/130902/Websense-Data-Security-C
teway_are_vulnerable_to_cross_site_scripting.html - http://packetstormsecurity.com/files/130902/Websense-Data-Security-Cross-Site-Scripting.html - http://www.securityfocus.com/archive/1/534912/100/0/threaded - http://packetstormsecurity.com/files/130908/Websense-Content-Gateway-Error-Message-Cross-Site-Scripting.html
CVE ID: CVE-2015-2704 State: PUBLISHED Published: 2015-05-18T15:00:00 Last Updated: 2024-08-06T05:24:38.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: realmd allows remote attackers to inject arbitrary configurations in to sssd.conf and smb.conf via a newline character in an LDAP response. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155862.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157358.html - http://www.securityfocus.com/bid/73352 - https://bugs.freedesktop.org/show_bu
il/package-announce/2015-May/157358.html - http://www.securityfocus.com/bid/73352 - https://bugs.freedesktop.org/show_bug.cgi?id=89207
CVE ID: CVE-2015-2706 State: PUBLISHED Published: 2015-04-24T23:00:00 Last Updated: 2024-08-06T05:24:38.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the AsyncPaintWaitEvent::AsyncPaintWaitEvent function in Mozilla Firefox before 37.0.2 allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via a crafted plugin that does not properly complete initialization. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2015-04/msg00044.html - http://www.mozilla.org/security/announce/2015/mfsa2015-45.html - https://security.gentoo.org/glsa/201512-10 - http://www.ubuntu.co
.mozilla.org/security/announce/2015/mfsa2015-45.html - https://security.gentoo.org/glsa/201512-10 - http://www.ubuntu.com/usn/USN-2571-1 - http://www.securityfocus.com/bid/74247 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://lists.opensuse.org/opensuse-updates/2015-04/msg00046.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1141081 - http://www.securitytracker.com/id/1032171
CVE ID: CVE-2015-2708 State: PUBLISHED Published: 2015-05-14T10:00:00 Last Updated: 2024-08-06T05:24:38.136Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2602-1 - http://rhn.redhat.com/errata/RHSA-2015-0988.html - https://www.mozilla.org/en-US/security/known-vulnerabilities/thunderbird/#thun
n.redhat.com/errata/RHSA-2015-0988.html - https://www.mozilla.org/en-US/security/known-vulnerabilities/thunderbird/#thunderbird31.7 - https://bugzilla.mozilla.org/show_bug.cgi?id=1120655 - http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00012.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1143299 - http://www.debian.org/security/2015/dsa-3264 - http://www.debian.org/security/2015/dsa-3260 - http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00000.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.mozilla.org/security/announce/2015/mfsa2015-46.html - http://lists.opensuse.org/opensuse-updates/2015-05/msg00036.ht
www.mozilla.org/security/announce/2015/mfsa2015-46.html - http://lists.opensuse.org/opensuse-updates/2015-05/msg00036.html - http://www.ubuntu.com/usn/USN-2603-1 - http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00054.html - http://rhn.redhat.com/errata/RHSA-2015-1012.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1152177 - https://bugzilla.mozilla.org/show_bug.cgi?id=1151139 - https://security.gentoo.org/glsa/201605-06 - http://www.securityfocus.com/bid/74615
CVE ID: CVE-2015-2709 State: PUBLISHED Published: 2015-05-14T10:00:00 Last Updated: 2024-08-06T05:24:38.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 38.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2602-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=1111251 - https://bugzilla.mozilla.org/show_bug.cgi?id=1117977 - https://www.mozilla.org/en-US/security/known-vulnerabilities/thunderbird/#thun
lla.mozilla.org/show_bug.cgi?id=1117977 - https://www.mozilla.org/en-US/security/known-vulnerabilities/thunderbird/#thunderbird31.7 - https://bugzilla.mozilla.org/show_bug.cgi?id=1153688 - https://bugzilla.mozilla.org/show_bug.cgi?id=1143194 - https://bugzilla.mozilla.org/show_bug.cgi?id=1155474 - http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00000.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1128064 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.mozilla.org/security/announce/2015/mfsa2015-46.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1146101 - https://bugzilla.mozilla.org/show_bug.cgi?id=1135066 - http://lists.
ps://bugzilla.mozilla.org/show_bug.cgi?id=1146101 - https://bugzilla.mozilla.org/show_bug.cgi?id=1135066 - http://lists.opensuse.org/opensuse-updates/2015-05/msg00036.html - http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00054.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1149526 - http://rhn.redhat.com/errata/RHSA-2015-1012.html - https://security.gentoo.org/glsa/201605-06 - http://www.securityfocus.com/bid/74615
CVE ID: CVE-2015-2710 State: PUBLISHED Published: 2015-05-14T10:00:00 Last Updated: 2024-08-06T05:24:38.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the SVGTextFrame class in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allows remote attackers to execute arbitrary code via crafted SVG graphics data in conjunction with a crafted Cascading Style Sheets (CSS) token sequence. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2602-1 - http://rhn.redhat.com/errata/RHSA-2015-0988.html - https://www.mozilla.org/en-US/security/known-vulnerabilities/thunderbird/#thund
.redhat.com/errata/RHSA-2015-0988.html - https://www.mozilla.org/en-US/security/known-vulnerabilities/thunderbird/#thunderbird31.7 - http://www.securityfocus.com/bid/74611 - http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00012.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1149542 - http://www.debian.org/security/2015/dsa-3264 - http://www.debian.org/security/2015/dsa-3260 - http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00000.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://lists.opensuse.org/opensuse-updates/2015-05/msg00036.html - http://www.ubuntu.com/usn/USN-2603-1 - http://lists.opensuse.org/opensuse-s
org/opensuse-updates/2015-05/msg00036.html - http://www.ubuntu.com/usn/USN-2603-1 - http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00054.html - http://rhn.redhat.com/errata/RHSA-2015-1012.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html - http://www.mozilla.org/security/announce/2015/mfsa2015-48.html - https://security.gentoo.org/glsa/201605-06
CVE ID: CVE-2015-2711 State: PUBLISHED Published: 2015-05-14T10:00:00 Last Updated: 2024-08-06T05:24:38.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 38.0 does not recognize a referrer policy delivered by a referrer META element in cases of context-menu navigation and middle-click navigation, which allows remote attackers to obtain sensitive information by reading web-server Referer logs that contain private data in a URL, as demonstrated by a private path component. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2602-1 - http://www.securityfocus.com/bid/74611 - http://www.oracle.com/technetwork/topics/s
tp://www.ubuntu.com/usn/USN-2602-1 - http://www.securityfocus.com/bid/74611 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.mozilla.org/security/announce/2015/mfsa2015-49.html - http://lists.opensuse.org/opensuse-updates/2015-05/msg00036.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1113431 - https://security.gentoo.org/glsa/201605-06
CVE ID: CVE-2015-2712 State: PUBLISHED Published: 2015-05-14T10:00:00 Last Updated: 2024-08-06T05:24:38.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: The asm.js implementation in Mozilla Firefox before 38.0 does not properly determine heap lengths during identification of cases in which bounds checking may be safely skipped, which allows remote attackers to trigger out-of-bounds write operations and possibly execute arbitrary code, or trigger out-of-bounds read operations and possibly obtain sensitive information from process memory, via crafted JavaScript. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2602-1 - http://www.sec
. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2602-1 - http://www.securityfocus.com/bid/74611 - https://bugzilla.mozilla.org/show_bug.cgi?id=1152280 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://lists.opensuse.org/opensuse-updates/2015-05/msg00036.html - https://security.gentoo.org/glsa/201605-06 - http://www.mozilla.org/security/announce/2015/mfsa2015-50.html
CVE ID: CVE-2015-2713 State: PUBLISHED Published: 2015-05-14T10:00:00 Last Updated: 2024-08-06T05:24:38.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the SetBreaks function in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a document containing crafted text in conjunction with a Cascading Style Sheets (CSS) token sequence containing properties related to vertical text. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2602-1 - http://rhn.redhat.com/erra
Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2602-1 - http://rhn.redhat.com/errata/RHSA-2015-0988.html - https://www.mozilla.org/en-US/security/known-vulnerabilities/thunderbird/#thunderbird31.7 - http://www.securityfocus.com/bid/74611 - http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00012.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1153478 - http://www.mozilla.org/security/announce/2015/mfsa2015-51.html - http://www.debian.org/security/2015/dsa-3264 - http://www.debian.org/security/2015/dsa-3260 - http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00000.html - http://www.oracle.com/technetwork/topics/security/bull
s.opensuse.org/opensuse-security-announce/2015-06/msg00000.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://lists.opensuse.org/opensuse-updates/2015-05/msg00036.html - http://www.ubuntu.com/usn/USN-2603-1 - http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00054.html - http://rhn.redhat.com/errata/RHSA-2015-1012.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html - https://security.gentoo.org/glsa/201605-06
CVE ID: CVE-2015-2714 State: PUBLISHED Published: 2015-05-14T10:00:00 Last Updated: 2024-08-06T05:24:38.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 38.0 on Android does not properly restrict writing URL data to the Android logging system, which allows attackers to obtain sensitive information via a crafted application that has a required permission for reading a log, as demonstrated by the READ_LOGS permission for the mixed-content violation log on Android 4.0 and earlier. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/74611 - https://bugzilla.mozilla.org/show_bug.cgi?id=1149094 - http://www.oracle.
es: - http://www.securityfocus.com/bid/74611 - https://bugzilla.mozilla.org/show_bug.cgi?id=1149094 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - https://security.gentoo.org/glsa/201605-06 - http://www.mozilla.org/security/announce/2015/mfsa2015-52.html