Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ldap, (16) fonts, (17) file, (18) desktop, (19) cgi, (20) bookmarks, or (21) ar scheme, which is not properly handled in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://ubuntu.com/usn/usn-2414-1 - http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html - http://seclists.org/fulldisclosure/2014/Nov/54 - http://www.securityfocus.com/bid/71190 - https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-8600/
CVE ID: CVE-2014-8601 State: PUBLISHED Published: 2014-12-10T15:00:00 Last Updated: 2024-08-06T13:26:02.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: PowerDNS Recursor before 3.6.2 does not limit delegation chaining, which allows remote attackers to cause a denial of service ("performance degradations") via a large or infinite number of referrals, as demonstrated by resolving domains hosted by ezdns.it. Additional Analyst Notes: - CVE Program Container: References: - http://doc.powerdns.com/md/security/powerdns-advisory-2014-02/ - http://www.debian.org/security/2014/dsa-3096 - http://www.securitytracker.com/id/1031310 - http://cert.ssi.gouv.fr/site/CERTFR-2014-AVI-512/index
urity/2014/dsa-3096 - http://www.securitytracker.com/id/1031310 - http://cert.ssi.gouv.fr/site/CERTFR-2014-AVI-512/index.html - http://www.securityfocus.com/bid/71545 - http://www.kb.cert.org/vuls/id/264212
CVE ID: CVE-2014-8602 State: PUBLISHED Published: 2014-12-11T02:00:00 Last Updated: 2024-08-06T13:26:02.484Z Vendors: n/a Products: n/a Problem Types: n/a Description: iterator.c in NLnet Labs Unbound before 1.5.1 does not limit delegation chaining, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a large or infinite number of referrals. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/71589 - http://unbound.net/downloads/patch_cve_2014_8602.diff - http://cert.ssi.gouv.fr/site/CERTFR-2014-AVI-512/index.html - http://www.debian.org/security/2014/dsa-3097 - http://www.oracle.com/technetwork/topics/secur
-2014-AVI-512/index.html - http://www.debian.org/security/2014/dsa-3097 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://www.kb.cert.org/vuls/id/264212 - https://unbound.net/downloads/CVE-2014-8602.txt - http://www.ubuntu.com/usn/USN-2484-1
CVE ID: CVE-2014-8603 State: PUBLISHED Published: 2015-06-10T18:00:00 Last Updated: 2024-08-06T13:26:01.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: cloner.functions.php in the XCloner plugin 3.1.1 for WordPress and 3.5.1 for Joomla! allows remote administrators to execute arbitrary code via shell metacharacters in the (1) file name when creating a backup or vectors related to the (2) $_CONFIG[tarpath], (3) $exclude, (4) $_CONFIG['tarcompress'], (5) $_CONFIG['filename'], (6) $_CONFIG['exfile_tar'], (7) $_CONFIG[sqldump], (8) $_CONFIG['mysql_host'], (9) $_CONFIG['mysql_pass'], (10) $_CONFIG['mysql_user'], (11) $database_name, or (12) $sqlfile variable. Additional Analyst No
CONFIG['mysql_pass'], (10) $_CONFIG['mysql_user'], (11) $database_name, or (12) $sqlfile variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.vapid.dhs.org/advisories/wordpress/plugins/Xcloner-v3.1.1/ - http://www.vapid.dhs.org/advisory.php?v=110
CVE ID: CVE-2014-8604 State: PUBLISHED Published: 2015-06-10T18:00:00 Last Updated: 2024-08-06T13:25:59.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XCloner plugin 3.1.1 for WordPress and 3.5.1 for Joomla! returns the MySQL password in cleartext to a text box in the configuration panel, which allows remote attackers to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vapid.dhs.org/advisories/wordpress/plugins/Xcloner-v3.1.1/ - http://www.vapid.dhs.org/advisory.php?v=110
CVE ID: CVE-2014-8605 State: PUBLISHED Published: 2015-06-10T18:00:00 Last Updated: 2024-08-06T13:26:02.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XCloner plugin 3.1.1 for WordPress and 3.5.1 for Joomla! stores database backup files with predictable names under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to a backup file in administrators/backups/. Additional Analyst Notes: - CVE Program Container: References: - http://www.vapid.dhs.org/advisories/wordpress/plugins/Xcloner-v3.1.1/ - http://www.vapid.dhs.org/advisory.php?v=110
CVE ID: CVE-2014-8606 State: PUBLISHED Published: 2015-06-10T18:00:00 Last Updated: 2024-08-06T13:26:02.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the XCloner plugin 3.1.1 for WordPress and 3.5.1 for Joomla! allows remote administrators to read arbitrary files via a .. (dot dot) in the file parameter in a json_return action in the xcloner_show page to wp-admin/admin-ajax.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vapid.dhs.org/advisories/wordpress/plugins/Xcloner-v3.1.1/ - http://www.vapid.dhs.org/advisory.php?v=110
CVE ID: CVE-2014-8607 State: PUBLISHED Published: 2015-06-10T18:00:00 Last Updated: 2024-08-06T13:26:00.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XCloner plugin 3.1.1 for WordPress and 3.5.1 for Joomla! provides the MySQL username and password on the command line, which allows local users to obtain sensitive information via the ps command. Additional Analyst Notes: - CVE Program Container: References: - http://www.vapid.dhs.org/advisories/wordpress/plugins/Xcloner-v3.1.1/ - http://www.vapid.dhs.org/advisory.php?v=110
CVE ID: CVE-2014-8608 State: PUBLISHED Published: 2014-12-12T15:00:00 Last Updated: 2024-08-06T13:26:02.241Z Vendors: n/a Products: n/a Problem Types: n/a Description: The K7Sentry.sys kernel mode driver (aka K7AV Sentry Device Driver) before 12.8.0.119, as used in multiple K7 Computing products, allows local users to cause a denial of service (NULL pointer dereference) as demonstrated by a filename containing "crashme$$". Additional Analyst Notes: - CVE Program Container: References: - https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-8608/ - http://packetstormsecurity.com/files/129470/K7-Computing-Multiple-Products-Null-Pointer-Dereference.htm
cve-2014-8608/ - http://packetstormsecurity.com/files/129470/K7-Computing-Multiple-Products-Null-Pointer-Dereference.html - http://www.securityfocus.com/bid/71615 - http://seclists.org/fulldisclosure/2014/Dec/45
CVE ID: CVE-2014-8609 State: PUBLISHED Published: 2014-12-15T17:27:00 Last Updated: 2024-08-06T13:26:02.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: The addAccount method in src/com/android/settings/accounts/AddAccountSettings.java in the Settings application in Android before 5.0.0 does not properly create a PendingIntent, which allows attackers to use the SYSTEM uid for broadcasting an intent with arbitrary component, action, or category information via a third-party authenticator in a crafted application, aka Bug 17356824. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/129281/Android-Settings-Pendingintent-Leak.html
VE Program Container: References: - http://packetstormsecurity.com/files/129281/Android-Settings-Pendingintent-Leak.html - http://xteam.baidu.com/?p=158 - http://seclists.org/fulldisclosure/2014/Nov/81 - https://android.googlesource.com/platform/packages/apps/Settings/+/f5d3e74ecc2b973941d8adbe40c6b23094b5abb7
CVE ID: CVE-2014-8610 State: PUBLISHED Published: 2014-12-15T17:27:00 Last Updated: 2024-08-06T13:26:02.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: AndroidManifest.xml in Android before 5.0.0 does not require the SEND_SMS permission for the SmsReceiver receiver, which allows attackers to send stored SMS messages, and consequently transmit arbitrary new draft SMS messages or trigger additional per-message charges from a network operator for old messages, via a crafted application that broadcasts an intent with the com.android.mms.transaction.MESSAGE_SENT action, aka Bug 17671795. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/joswr1ght/
action, aka Bug 17671795. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/joswr1ght/drozer-modules/blob/master/whfs/smsdraftsend.py - http://xteam.baidu.com/?p=164 - http://seclists.org/fulldisclosure/2014/Nov/85 - http://seclists.org/fulldisclosure/2014/Dec/8 - http://packetstormsecurity.com/files/129282/Android-SMS-Resend.html - https://android.googlesource.com/platform/packages/apps/Mms/+/008d6202fca4002a7dfe333f22377faa73585c67
CVE ID: CVE-2014-8611 State: PUBLISHED Published: 2015-09-18T10:00:00 Last Updated: 2024-08-06T13:26:02.241Z Vendors: n/a Products: n/a Problem Types: n/a Description: The __sflush function in fflush.c in stdio in libc in FreeBSD 10.1 and the kernel in Apple iOS before 9 mishandles failures of the write system call, which allows context-dependent attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow) via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - https://www.freebsd.org/security/advisories/FreeBSD-SA-14:27.stdio.asc - https://support.apple.com/HT205212 - http://lists.apple.com/archives/security-announce/2015/
reeBSD-SA-14:27.stdio.asc - https://support.apple.com/HT205212 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html - https://svnweb.freebsd.org/base?view=revision&revision=275665 - https://support.apple.com/HT205267 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00001.html
CVE ID: CVE-2014-8612 State: PUBLISHED Published: 2015-02-02T16:00:00 Last Updated: 2024-08-06T13:26:02.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple array index errors in the Stream Control Transmission Protocol (SCTP) module in FreeBSD 10.1 before p5, 10.0 before p17, 9.3 before p9, and 8.4 before p23 allow local users to (1) gain privileges via the stream id to the setsockopt function, when setting the SCTIP_SS_VALUE option, or (2) read arbitrary kernel memory via the stream id to the getsockopt function, when getting the SCTP_SS_PRIORITY option. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/534563/100/0/
n. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/534563/100/0/threaded - http://seclists.org/fulldisclosure/2015/Jan/107 - http://www.coresecurity.com/advisories/freebsd-kernel-multiple-vulnerabilities - https://www.freebsd.org/security/advisories/FreeBSD-SA-15:02.kmem.asc - http://www.securityfocus.com/bid/72342 - http://www.securitytracker.com/id/1031648
CVE ID: CVE-2014-8613 State: PUBLISHED Published: 2015-02-02T16:00:00 Last Updated: 2024-08-06T13:26:02.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sctp module in FreeBSD 10.1 before p5, 10.0 before p17, 9.3 before p9, and 8.4 before p23 allows remote attackers to cause a denial of service (NULL pointer dereference and kernel panic) via a crafted RE_CONFIG chunk. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/72345 - https://www.freebsd.org/security/advisories/FreeBSD-SA-15:03.sctp.asc - http://www.securitytracker.com/id/1031649
CVE ID: CVE-2014-8614 State: REJECTED Published: 2015-02-08T23:00:00 Last Updated: 2015-02-08T22:57:01 Description: No description available.
CVE ID: CVE-2014-8615 State: REJECTED Published: 2015-02-08T23:00:00 Last Updated: 2015-02-08T22:57:01 Description: No description available.
CVE ID: CVE-2014-8616 State: PUBLISHED Published: 2015-05-12T19:00:00 Last Updated: 2024-08-06T13:26:01.097Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Fortinet FortiOS 5.2.x before 5.2.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to the (1) user group or (2) vpn template menus. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032261 - http://www.fortiguard.com/advisory/FG-IR-15-005/ - http://www.securitytracker.com/id/1032265 - http://www.securitytracker.com/id/1032264 - http://www.securitytracker.com/id/1032262
CVE ID: CVE-2014-8617 State: PUBLISHED Published: 2015-03-04T19:00:00 Last Updated: 2024-08-06T13:26:02.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Web Action Quarantine Release feature in the WebGUI in Fortinet FortiMail before 4.3.9, 5.0.x before 5.0.8, 5.1.x before 5.1.5, and 5.2.x before 5.2.3 allows remote attackers to inject arbitrary web script or HTML via the release parameter to module/releasecontrol. Additional Analyst Notes: - CVE Program Container: References: - http://www.fortiguard.com/advisory/FG-IR-15-005/ - http://seclists.org/fulldisclosure/2015/Mar/5 - http://www.securitytracker.com/id/1031859
CVE ID: CVE-2014-8618 State: PUBLISHED Published: 2015-05-12T19:00:00 Last Updated: 2024-08-06T13:26:02.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the theme login page in Fortinet FortiADC D models before 4.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.fortiguard.com/advisory/FG-IR-15-005/ - http://www.securitytracker.com/id/1032265
CVE ID: CVE-2014-8619 State: PUBLISHED Published: 2015-05-12T19:00:00 Last Updated: 2024-08-06T13:26:01.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the autolearn configuration page in Fortinet FortiWeb 5.1.2 through 5.3.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.fortiguard.com/advisory/FG-IR-15-005/ - http://www.securitytracker.com/id/1032307
CVE ID: CVE-2014-8621 State: PUBLISHED Published: 2017-10-16T15:00:00 Last Updated: 2024-08-06T13:26:02.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Store Locator plugin 2.3 through 3.11 for WordPress allows remote attackers to execute arbitrary SQL commands via the sl_custom_field parameter to sl-xml.php. Additional Analyst Notes: - CVE Program Container: References: - https://g0blin.co.uk/cve-2014-8621/ - https://wpvulndb.com/vulnerabilities/8241
CVE ID: CVE-2014-8622 State: PUBLISHED Published: 2014-11-05T23:00:00Z Last Updated: 2024-09-17T03:59:16.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in compfight-search.php in the Compfight plugin 1.4 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the search-value parameter. Additional Analyst Notes: - CVE Program Container: References: - http://wordpress.org/plugins/compfight/changelog/ - http://packetstormsecurity.com/files/127430/WordPress-Compfight-1.4-Cross-Site-Scripting.html - http://downloads.wordpress.org/plugin/compfight.1.5.zip
CVE ID: CVE-2014-8625 State: PUBLISHED Published: 2015-01-20T15:00:00 Last Updated: 2024-08-06T13:26:02.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple format string vulnerabilities in the parse_error_msg function in parsehelp.c in dpkg before 1.17.22 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in the (1) package or (2) architecture name. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2014/q4/551 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98551 - http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157387.html - http
mcloud.com/vulnerabilities/98551 - http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157387.html - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=768485 - http://seclists.org/oss-sec/2014/q4/539 - https://bugs.launchpad.net/ubuntu/+source/dpkg/+bug/1389135 - http://seclists.org/oss-sec/2014/q4/622
CVE ID: CVE-2014-8626 State: PUBLISHED Published: 2014-11-23T02:00:00 Last Updated: 2024-08-06T13:26:01.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the date_from_ISO8601 function in ext/xmlrpc/libxmlrpc/xmlrpc.c in PHP before 5.2.7 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code by including a timezone field in a date, leading to improper XML-RPC encoding. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-1824.html - https://bugs.php.net/bug.php?id=45226 - http://rhn.redhat.com/errata/RHSA-2014-1825.html - http://git.php.net/?p=p
tml - https://bugs.php.net/bug.php?id=45226 - http://rhn.redhat.com/errata/RHSA-2014-1825.html - http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=c818d0d01341907fee82bdb81cab07b7d93bb9db - http://php.net/ChangeLog-5.php - https://bugzilla.redhat.com/show_bug.cgi?id=1155607 - http://www.securityfocus.com/bid/70928 - http://openwall.com/lists/oss-security/2014/11/06/3
CVE ID: CVE-2014-8627 State: PUBLISHED Published: 2014-11-24T15:00:00 Last Updated: 2024-08-06T13:26:02.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: PolarSSL 1.3.8 does not properly negotiate the signature algorithm to use, which allows remote attackers to conduct downgrade attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2014-11/msg00079.html - https://polarssl.org/tech-updates/releases/polarssl-1.3.9-released - http://secunia.com/advisories/61220
CVE ID: CVE-2014-8628 State: PUBLISHED Published: 2015-08-24T15:00:00 Last Updated: 2024-08-06T13:26:02.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in PolarSSL before 1.2.12 and 1.3.x before 1.3.9 allows remote attackers to cause a denial of service (memory consumption) via a large number of crafted X.509 certificates. NOTE: this identifier has been SPLIT per ADT3 due to different affected versions. See CVE-2014-9744 for the ClientHello message issue. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2014-11/msg00079.html - http://www.debian.org/security/2014/dsa-3116 - https://polarssl.org/tech-updates
pensuse-updates/2014-11/msg00079.html - http://www.debian.org/security/2014/dsa-3116 - https://polarssl.org/tech-updates/releases/polarssl-1.3.9-released - https://polarssl.org/tech-updates/releases/polarssl-1.2.12-released
CVE ID: CVE-2014-8629 State: PUBLISHED Published: 2014-11-19T15:00:00 Last Updated: 2024-08-06T13:26:02.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Page visualization agents in Pandora FMS 5.1 SP1 and earlier allows remote attackers to inject arbitrary web script or HTML via the refr parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Nov/35 - http://packetstormsecurity.com/files/129112/Pandora-FMS-5.1SP1-Cross-Site-Scripting.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/98704 - http://blog.pandorafms.org/?p=3271
CVE ID: CVE-2014-8630 State: PUBLISHED Published: 2015-02-01T15:00:00 Last Updated: 2024-08-06T13:26:02.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bugzilla before 4.0.16, 4.1.x and 4.2.x before 4.2.12, 4.3.x and 4.4.x before 4.4.7, and 5.x before 5.0rc1 allows remote authenticated users to execute arbitrary commands by leveraging the editcomponents privilege and triggering crafted input to a two-argument Perl open call, as demonstrated by shell metacharacters in a product name. Additional Analyst Notes: - CVE Program Container: References: - http://advisories.mageia.org/MGASA-2015-0048.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1079065 - http://lists.fedoraproje
sories.mageia.org/MGASA-2015-0048.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1079065 - http://lists.fedoraproject.org/pipermail/package-announce/2015-February/149921.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-February/149925.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:030 - https://security.gentoo.org/glsa/201607-11 - http://www.bugzilla.org/security/4.0.15/
CVE ID: CVE-2014-8631 State: PUBLISHED Published: 2014-12-11T11:00:00 Last Updated: 2024-08-06T13:26:01.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 34.0 and SeaMonkey before 2.31 supports native-interface passing, which allows remote attackers to bypass intended DOM object restrictions via a call to an unspecified method. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=821573 - https://security.gentoo.org/glsa/201504-01 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.mozilla.org/security/announ
http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.mozilla.org/security/announce/2014/mfsa2014-91.html
CVE ID: CVE-2014-8632 State: PUBLISHED Published: 2014-12-11T11:00:00 Last Updated: 2024-08-06T13:26:02.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: The structured-clone implementation in Mozilla Firefox before 34.0 and SeaMonkey before 2.31 does not properly interact with XrayWrapper property filtering, which allows remote attackers to bypass intended DOM object restrictions by leveraging property availability after XrayWrapper removal. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201504-01 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.mozilla.org/security/announce/2014/mf
w.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.mozilla.org/security/announce/2014/mfsa2014-91.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1050340
CVE ID: CVE-2014-8634 State: PUBLISHED Published: 2015-01-14T11:00:00 Last Updated: 2024-08-06T13:26:02.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 35.0, Firefox ESR 31.x before 31.4, Thunderbird before 31.4, and SeaMonkey before 2.32 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-0046.html - http://secunia.com/advisories/62242 - http://www.securitytracker.com/id/1031533 - http://www.u
ata/RHSA-2015-0046.html - http://secunia.com/advisories/62242 - http://www.securitytracker.com/id/1031533 - http://www.ubuntu.com/usn/USN-2460-1 - http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00002.html - http://www.securityfocus.com/bid/72049 - http://secunia.com/advisories/62304 - http://linux.oracle.com/errata/ELSA-2015-0047.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/99955 - http://secunia.com/advisories/62259 - https://bugzilla.mozilla.org/show_bug.cgi?id=1111737 - http://secunia.com/advisories/62250 - http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00033.html - http://secunia.com/advisories/62237 - http://lists.opensuse.org/opensuse-se