Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-1448 State: REJECTED Published: 2014-01-15T02:00:00 Last Updated: 2014-01-15T02:57:00 Description: No description available.
CVE ID: CVE-2014-1449 State: PUBLISHED Published: 2014-12-25T21:00:00 Last Updated: 2024-08-06T09:42:35.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Maxthon Cloud Browser application before 4.1.6.2000 for Android allows remote attackers to spoof the address bar via crafted JavaScript code that uses the history API. Additional Analyst Notes: - CVE Program Container: References: - http://www.maxthon.com/android/changelog/ - http://browser-shredders.blogspot.com/2014/01/cve-2014-1449-maxthon-cloud-browser-for.html
CVE ID: CVE-2014-1452 State: PUBLISHED Published: 2014-01-21T15:00:00 Last Updated: 2024-08-06T09:42:35.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in lib/snmpagent.c in bsnmpd, as used in FreeBSD 8.3 through 10.0, allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via a crafted GETBULK PDU request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/64967 - http://www.freebsd.org/security/advisories/FreeBSD-SA-14:01.bsnmpd.asc - http://svnweb.freebsd.org/base?view=revision&amp%3Brevision=260636 - http://secunia.com/advisories/56496 - http://www.s
http://svnweb.freebsd.org/base?view=revision&amp%3Brevision=260636 - http://secunia.com/advisories/56496 - http://www.securitytracker.com/id/1029616
CVE ID: CVE-2014-1453 State: PUBLISHED Published: 2014-04-16T18:00:00 Last Updated: 2024-08-06T09:42:35.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NFS server (nfsserver) in FreeBSD 8.3 through 10.0 does not acquire locks in the proper order when converting a directory file handle to a vnode, which allows remote authenticated users to cause a denial of service (deadlock) via vectors involving a thread that uses the correct locking order. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/66726 - http://www.freebsd.org/security/advisories/FreeBSD-SA-14:05.nfsserver.asc - http://www.debian.org/security/2014/dsa-2952 - http:
ww.freebsd.org/security/advisories/FreeBSD-SA-14:05.nfsserver.asc - http://www.debian.org/security/2014/dsa-2952 - http://secunia.com/advisories/57760 - http://secunia.com/advisories/59034 - http://www.securitytracker.com/id/1030041
CVE ID: CVE-2014-1454 State: PUBLISHED Published: 2020-01-08T13:42:56 Last Updated: 2024-08-06T09:42:35.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pearson eSIS (Enterprise Student Information System) message board has stored XSS due to improper validation of user input Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/92341 - https://www.securityfocus.com/archive/1/531750
CVE ID: CVE-2014-1455 State: PUBLISHED Published: 2014-04-10T14:00:00 Last Updated: 2024-08-06T09:42:35.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the password reset functionality in Pearson eSIS Enterprise Student Information System, possibly 3.3.0.13 and earlier, allows remote attackers to execute arbitrary SQL commands via the new password. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/66689 - http://www.securityfocus.com/archive/1/531751/100/0/threaded
CVE ID: CVE-2014-1456 State: PUBLISHED Published: 2014-02-28T17:00:00 Last Updated: 2024-08-06T09:42:35.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the login page in Open Web Analytics (OWA) before 1.5.6 allows remote attackers to inject arbitrary web script or HTML via the owa_user_id parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/65571 - http://www.secureworks.com/cyber-threat-intelligence/advisories/SWRX-2014-004 - http://www.openwebanalytics.com/?p=384 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91124 - http://secunia.com/advisories/56885
CVE ID: CVE-2014-1457 State: PUBLISHED Published: 2018-03-20T21:00:00 Last Updated: 2024-08-06T09:42:35.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open Web Analytics (OWA) before 1.5.6 improperly generates random nonce values, which makes it easier for remote attackers to bypass a CSRF protection mechanism by leveraging knowledge of an OWA user name. Additional Analyst Notes: - CVE Program Container: References: - https://www.secureworks.com/research/swrx-2014-006 - http://www.openwebanalytics.com/?p=384 - http://www.securityfocus.com/bid/65573 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91125
CVE ID: CVE-2014-1458 State: PUBLISHED Published: 2014-02-04T18:00:00 Last Updated: 2024-08-06T09:42:35.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the web administration interface in FortiGuard FortiWeb 5.0.3 and earlier allows remote authenticated administrators to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.fortiguard.com/advisory/FG-IR-14-001/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/90978
CVE ID: CVE-2014-1459 State: PUBLISHED Published: 2014-02-11T17:00:00 Last Updated: 2024-08-06T09:42:35.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in dg-admin/index.php in doorGets CMS 5.2 and earlier allows remote authenticated administrators to execute arbitrary SQL commands via the _position_down_id parameter. NOTE: this can be leveraged using CSRF to allow remote attackers to execute arbitrary SQL commands. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/doorgets/doorGets/commit/6b81541fc1e5dd1c70614585c1a04d04ccdb3b19 - http://packetstormsecurity.com/files/125078 - http://www.securityfocus.com/archive/1
fc1e5dd1c70614585c1a04d04ccdb3b19 - http://packetstormsecurity.com/files/125078 - http://www.securityfocus.com/archive/1/530931/100/0/threaded - http://www.securityfocus.com/bid/65439 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90967 - https://www.htbridge.com/advisory/HTB23197 - http://www.exploit-db.com/exploits/31521
CVE ID: CVE-2014-1466 State: PUBLISHED Published: 2014-01-15T16:00:00 Last Updated: 2024-08-06T09:42:35.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in CSP MySQL User Manager 2.3 allows remote attackers to execute arbitrary SQL commands via the login field of the login page. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/101867 - http://packetstormsecurity.com/files/124724/cspmysql-sql.txt - http://www.securityfocus.com/bid/64731 - http://secunia.com/advisories/56348 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90210
CVE ID: CVE-2014-1467 State: PUBLISHED Published: 2014-02-14T02:00:00 Last Updated: 2024-08-06T09:42:35.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: BlackBerry Enterprise Service 10 before 10.2.1, Universal Device Service 6, Enterprise Server Express for Domino through 5.0.4, Enterprise Server Express for Exchange through 5.0.4, Enterprise Server for Domino through 5.0.4 MR6, Enterprise Server for Exchange through 5.0.4 MR6, and Enterprise Server for GroupWise through 5.0.4 MR6 log cleartext credentials during exception handling, which might allow context-dependent attackers to obtain sensitive information by reading a log file. Additional Analyst Notes: - CVE Program Cont
-dependent attackers to obtain sensitive information by reading a log file. Additional Analyst Notes: - CVE Program Container: References: - http://www.blackberry.com/btsc/KB35647
CVE ID: CVE-2014-1469 State: PUBLISHED Published: 2014-08-18T10:00:00 Last Updated: 2024-08-06T09:42:35.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: BlackBerry Enterprise Server 5.x before 5.0.4 MR7 and Enterprise Service 10.x before 10.2.2 log cleartext credentials during exception handling, which allows local users to obtain sensitive information by reading the exception log file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/69211 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95264 - http://secunia.com/advisories/60154 - http://www.blackberry.com/btsc/KB36175
CVE ID: CVE-2014-1470 State: REJECTED Published: 2014-08-18T10:00:00 Last Updated: 2017-08-28T12:57:01 Description: No description available.
CVE ID: CVE-2014-1471 State: PUBLISHED Published: 2014-02-04T16:00:00 Last Updated: 2024-08-06T09:42:35.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the StateGetStatesByType function in Kernel/System/State.pm in Open Ticket Request System (OTRS) 3.1.x before 3.1.19, 3.2.x before 3.2.14, and 3.3.x before 3.3.4 allows remote attackers to execute arbitrary SQL commands via vectors related to a ticket search URL. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/OTRS/otrs/commit/0680603a07b8dc37c2ddca6ff14e0236babefc82 - http://www.securityfocus.com/bid/65241 - http://www.openwall.com/lists/oss-security/2014/01/2
c2ddca6ff14e0236babefc82 - http://www.securityfocus.com/bid/65241 - http://www.openwall.com/lists/oss-security/2014/01/29/15 - https://www.otrs.com/security-advisory-2014-02-sql-injection-issue - https://github.com/OTRS/otrs/commit/c4ec9205bde9c49770ddad94c1a980c006164949 - http://osvdb.org/102661 - https://www.otrs.com/release-notes-otrs-help-desk-3-3-4 - http://secunia.com/advisories/56655 - https://github.com/OTRS/otrs/commit/2997b36a7c84e933c4b025930cabe93efc4d261d - http://secunia.com/advisories/56644 - http://www.debian.org/security/2014/dsa-2867
CVE ID: CVE-2014-1472 State: PUBLISHED Published: 2014-01-16T02:00:00 Last Updated: 2024-08-06T09:42:35.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Enterprise Manager in McAfee Vulnerability Manager (MVM) 7.5.5 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/56394 - http://www.securityfocus.com/bid/64795 - http://www.securitytracker.com/id/1029591 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90244 - http://osvdb.org/101940 - https://kc.mcafee.com/corporate/inde
ps://exchange.xforce.ibmcloud.com/vulnerabilities/90244 - http://osvdb.org/101940 - https://kc.mcafee.com/corporate/index?page=content&id=SB10061
CVE ID: CVE-2014-1473 State: PUBLISHED Published: 2014-01-16T02:00:00 Last Updated: 2024-08-06T09:42:35.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the Enterprise Manager in McAfee Vulnerability Manager (MVM) 7.5.5 and earlier allow remote attackers to hijack the authentication of users for requests that modify HTML via unspecified vectors related to the "response web page." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/56394 - http://www.securityfocus.com/bid/64795 - http://www.securitytracker.com/id/1029591 - https://exchange.xforce.ibmcloud.com/vulnerabilities
tyfocus.com/bid/64795 - http://www.securitytracker.com/id/1029591 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90245 - http://osvdb.org/101939 - https://kc.mcafee.com/corporate/index?page=content&id=SB10061
CVE ID: CVE-2014-1474 State: PUBLISHED Published: 2014-07-15T14:00:00 Last Updated: 2024-08-06T09:42:35.491Z Vendors: n/a Products: n/a Problem Types: n/a Description: Algorithmic complexity vulnerability in Email::Address::List before 0.02, as used in RT 4.2.0 through 4.2.2, allows remote attackers to cause a denial of service (CPU consumption) via a string without an address. Additional Analyst Notes: - CVE Program Container: References: - http://blog.bestpractical.com/2014/01/security-vulnerability-in-rt-42.html - https://metacpan.org/changes/release/ALEXMV/Email-Address-List-0.02 - http://lists.bestpractical.com/pipermail/rt-announce/2014-June/000257.html
CVE ID: CVE-2014-1475 State: PUBLISHED Published: 2014-01-24T18:00:00 Last Updated: 2024-08-06T09:42:35.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OpenID module in Drupal 6.x before 6.30 and 7.x before 7.26 allows remote OpenID users to authenticate as other users via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2014/dsa-2847 - http://secunia.com/advisories/56601 - http://www.securityfocus.com/bid/64973 - https://drupal.org/SA-CORE-2014-001 - http://secunia.com/advisories/56260 - http://www.mandriva.com/security/advisories?name=MDVSA-2014:031 - http://www.debian.org/security/2014/dsa-2851
CVE ID: CVE-2014-1476 State: PUBLISHED Published: 2014-01-24T18:00:00 Last Updated: 2024-08-06T09:42:35.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Taxonomy module in Drupal 7.x before 7.26, when upgraded from an earlier version of Drupal, does not properly restrict access to unpublished content, which allows remote authenticated users to obtain sensitive information via a listing page. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2014/dsa-2847 - http://www.securityfocus.com/bid/64973 - https://drupal.org/SA-CORE-2014-001 - http://secunia.com/advisories/56260 - http://www.mandriva.com/security/advisories?name=MDVSA-20
l.org/SA-CORE-2014-001 - http://secunia.com/advisories/56260 - http://www.mandriva.com/security/advisories?name=MDVSA-2014:031
CVE ID: CVE-2014-1477 State: PUBLISHED Published: 2014-02-06T02:00:00 Last Updated: 2024-08-06T09:42:35.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2119-1 - http://download.novell.com/Download?buildid=Y2fux-JW1Qc - http://www.securitytracker.com/id/1029721 - http
/USN-2119-1 - http://download.novell.com/Download?buildid=Y2fux-JW1Qc - http://www.securitytracker.com/id/1029721 - http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00004.html - https://bugzilla.mozilla.org/show_bug.cgi?id=950000 - http://www.securitytracker.com/id/1029717 - http://www.mozilla.org/security/announce/2014/mfsa2014-01.html - https://8pecxstudios.com/?page_id=44080 - http://rhn.redhat.com/errata/RHSA-2014-0132.html - https://bugzilla.mozilla.org/show_bug.cgi?id=953114 - http://secunia.com/advisories/56787 - http://www.securitytracker.com/id/1029720 - http://secunia.com/advisories/56858 - http://www.debian.org/security/2014/dsa-2858 - https://bugzilla.mozilla.org/s
20 - http://secunia.com/advisories/56858 - http://www.debian.org/security/2014/dsa-2858 - https://bugzilla.mozilla.org/show_bug.cgi?id=945334 - http://secunia.com/advisories/56763 - https://bugzilla.mozilla.org/show_bug.cgi?id=925896 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90899 - http://www.ubuntu.com/usn/USN-2102-2 - http://rhn.redhat.com/errata/RHSA-2014-0133.html - https://security.gentoo.org/glsa/201504-01 - http://www.securityfocus.com/bid/65317 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - https://bugzilla.mozilla.org/show_bug.cgi?id=950438 - https://bugzilla.mozilla.org/show_bug.cgi?id=937132 - http://download.novell.com/Download?bu
rg/show_bug.cgi?id=950438 - https://bugzilla.mozilla.org/show_bug.cgi?id=937132 - http://download.novell.com/Download?buildid=VYQsgaFpQ2k - http://secunia.com/advisories/56888 - http://lists.fedoraproject.org/pipermail/package-announce/2014-February/129218.html - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html - http://secunia.com/advisories/56761 - https://bugzilla.mozilla.org/show_bug.cgi?id=921470 - http://osvdb.org/102864 - http://lists.fedoraproject.org/pipermail/package-announce/2014-February/127966.html - https://bugzilla.mozilla.org/show_bug.cgi?id=937697 - https://bugzilla.mozilla.org/show_bug.cgi?id=945939 - http://lists.opensuse.org/opensuse-security-ann
ug.cgi?id=937697 - https://bugzilla.mozilla.org/show_bug.cgi?id=945939 - http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00010.html - http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00005.html - http://www.ubuntu.com/usn/USN-2102-1 - http://secunia.com/advisories/56767 - http://secunia.com/advisories/56706 - https://bugzilla.mozilla.org/show_bug.cgi?id=951366 - https://bugzilla.mozilla.org/show_bug.cgi?id=936808
CVE ID: CVE-2014-1478 State: PUBLISHED Published: 2014-02-06T02:00:00 Last Updated: 2024-08-06T09:42:35.438Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 27.0 and SeaMonkey before 2.24 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the MPostWriteBarrier class in js/src/jit/MIR.h and stack alignment in js/src/jit/AsmJS.cpp in OdinMonkey, and unknown other vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029721 - https://bugzilla.mozi
Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029721 - https://bugzilla.mozilla.org/show_bug.cgi?id=922603 - http://osvdb.org/102865 - http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00004.html - http://www.securityfocus.com/bid/65324 - http://www.securitytracker.com/id/1029717 - https://bugzilla.mozilla.org/show_bug.cgi?id=946733 - http://www.mozilla.org/security/announce/2014/mfsa2014-01.html - https://bugzilla.mozilla.org/show_bug.cgi?id=925308 - https://8pecxstudios.com/?page_id=44080 - https://bugzilla.mozilla.org/show_bug.cgi?id=911707 - http://secunia.com/advisories/56922 - http://secunia.com/advisories/56787 - http://www.sec
.org/show_bug.cgi?id=911707 - http://secunia.com/advisories/56922 - http://secunia.com/advisories/56787 - http://www.securitytracker.com/id/1029720 - https://bugzilla.mozilla.org/show_bug.cgi?id=950452 - https://bugzilla.mozilla.org/show_bug.cgi?id=938431 - http://www.ubuntu.com/usn/USN-2102-2 - https://security.gentoo.org/glsa/201504-01 - https://bugzilla.mozilla.org/show_bug.cgi?id=945585 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - https://bugzilla.mozilla.org/show_bug.cgi?id=916635 - https://bugzilla.mozilla.org/show_bug.cgi?id=867597 - https://bugzilla.mozilla.org/show_bug.cgi?id=944321 - https://bugzilla.mozilla.org/show_bug.cgi?id=942152 - https:/
97 - https://bugzilla.mozilla.org/show_bug.cgi?id=944321 - https://bugzilla.mozilla.org/show_bug.cgi?id=942152 - https://bugzilla.mozilla.org/show_bug.cgi?id=942940 - http://secunia.com/advisories/56888 - https://bugzilla.mozilla.org/show_bug.cgi?id=924348 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html - https://bugzilla.mozilla.org/show_bug.cgi?id=953373 - https://bugzilla.mozilla.org/show_bug.cgi?id=911845 - https://bugzilla.mozilla.org/show_bug.cgi?id=939472 - https://bugzilla.mozilla.org/show_bug.cgi?id=932162 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90900 - http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00005.html - http://www
loud.com/vulnerabilities/90900 - http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00005.html - http://www.ubuntu.com/usn/USN-2102-1 - http://secunia.com/advisories/56767 - https://bugzilla.mozilla.org/show_bug.cgi?id=944278 - https://bugzilla.mozilla.org/show_bug.cgi?id=944851 - http://secunia.com/advisories/56706
CVE ID: CVE-2014-1479 State: PUBLISHED Published: 2014-02-06T02:00:00 Last Updated: 2024-08-06T09:42:35.791Z Vendors: n/a Products: n/a Problem Types: n/a Description: The System Only Wrapper (SOW) implementation in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 does not prevent certain cloning operations, which allows remote attackers to bypass intended restrictions on XUL content via vectors involving XBL content scopes. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2119-1 - http://download.novell.com/Download?buildid=Y2fux-JW1Qc - http://www.securitytracker.com/id/1029721 - http
/USN-2119-1 - http://download.novell.com/Download?buildid=Y2fux-JW1Qc - http://www.securitytracker.com/id/1029721 - http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00004.html - http://www.securitytracker.com/id/1029717 - https://8pecxstudios.com/?page_id=44080 - http://rhn.redhat.com/errata/RHSA-2014-0132.html - http://secunia.com/advisories/56922 - http://secunia.com/advisories/56787 - http://www.securitytracker.com/id/1029720 - http://secunia.com/advisories/56858 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90898 - http://osvdb.org/102866 - http://www.debian.org/security/2014/dsa-2858 - http://secunia.com/advisories/56763 - http://www.ubuntu.com/usn/USN-2102-2 - h
//www.debian.org/security/2014/dsa-2858 - http://secunia.com/advisories/56763 - http://www.ubuntu.com/usn/USN-2102-2 - http://rhn.redhat.com/errata/RHSA-2014-0133.html - https://security.gentoo.org/glsa/201504-01 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.securityfocus.com/bid/65320 - http://www.mozilla.org/security/announce/2014/mfsa2014-02.html - https://bugzilla.mozilla.org/show_bug.cgi?id=911864 - http://download.novell.com/Download?buildid=VYQsgaFpQ2k - http://secunia.com/advisories/56888 - http://lists.fedoraproject.org/pipermail/package-announce/2014-February/129218.html - http://lists.opensuse.org/opensuse-security-announce/2014-03/m
rg/pipermail/package-announce/2014-February/129218.html - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html - http://secunia.com/advisories/56761 - http://lists.fedoraproject.org/pipermail/package-announce/2014-February/127966.html - http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00010.html - http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00005.html - http://www.ubuntu.com/usn/USN-2102-1 - http://secunia.com/advisories/56767 - http://secunia.com/advisories/56706
CVE ID: CVE-2014-1480 State: PUBLISHED Published: 2014-02-06T02:00:00 Last Updated: 2024-08-06T09:42:35.492Z Vendors: n/a Products: n/a Problem Types: n/a Description: The file-download implementation in Mozilla Firefox before 27.0 and SeaMonkey before 2.24 does not properly restrict the timing of button selections, which allows remote attackers to conduct clickjacking attacks, and trigger unintended launching of a downloaded file, via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00004.html - http://www.securitytracker.com/id/1029717 - http://www.mozilla.org/security/announce/2014/mfsa2014
14-02/msg00004.html - http://www.securitytracker.com/id/1029717 - http://www.mozilla.org/security/announce/2014/mfsa2014-03.html - http://www.securitytracker.com/id/1029720 - http://www.ubuntu.com/usn/USN-2102-2 - https://security.gentoo.org/glsa/201504-01 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://secunia.com/advisories/56888 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/90897 - http://osvdb.org/102867 - https://bugzilla.mozilla.org/show_bug.cgi?id=916726 - http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00010.html - http://www.ubuntu.com/usn/U