Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
o.org/glsa/201504-01 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.ubuntu.com/usn/USN-2151-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=982909 - http://www.debian.org/security/2014/dsa-2881 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html - http://rhn.redhat.com/errata/RHSA-2014-0316.html - http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html - http://www.mozilla.org/security/announce/2014/mfsa2014-29.html
CVE ID: CVE-2014-1512 State: PUBLISHED Published: 2014-03-19T10:00:00 Last Updated: 2024-08-06T09:42:36.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the TypeObject class in the JavaScript engine in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to execute arbitrary code by triggering extensive memory consumption while garbage collection is occurring, as demonstrated by improper handling of BumpChunk objects. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2014/mfsa2014-30.html - http://rhn.redhat.co
E Program Container: References: - http://www.mozilla.org/security/announce/2014/mfsa2014-30.html - http://rhn.redhat.com/errata/RHSA-2014-0310.html - https://bugzilla.mozilla.org/show_bug.cgi?id=982957 - http://www.debian.org/security/2014/dsa-2911 - https://security.gentoo.org/glsa/201504-01 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.ubuntu.com/usn/USN-2151-1 - http://www.debian.org/security/2014/dsa-2881 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html - http://rhn.redhat.com/errata/RHSA-2014-0316.html - http://lists.opensuse.org/opens
rity-announce/2014-03/msg00017.html - http://rhn.redhat.com/errata/RHSA-2014-0316.html - http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html - http://archives.neohapsis.com/archives/bugtraq/2014-03/0145.html - http://www.securityfocus.com/bid/66209
CVE ID: CVE-2014-1513 State: PUBLISHED Published: 2014-03-19T10:00:00 Last Updated: 2024-08-06T09:42:36.222Z Vendors: n/a Products: n/a Problem Types: n/a Description: TypedArrayObject.cpp in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 does not prevent a zero-length transition during use of an ArrayBuffer object, which allows remote attackers to execute arbitrary code or cause a denial of service (heap-based out-of-bounds write or read) via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2014/mfsa2014-31.html - http://rhn.redhat.com/errata/RHSA-2014-
: References: - http://www.mozilla.org/security/announce/2014/mfsa2014-31.html - http://rhn.redhat.com/errata/RHSA-2014-0310.html - http://www.securityfocus.com/bid/66203 - http://www.debian.org/security/2014/dsa-2911 - https://security.gentoo.org/glsa/201504-01 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.ubuntu.com/usn/USN-2151-1 - http://www.debian.org/security/2014/dsa-2881 - https://bugzilla.mozilla.org/show_bug.cgi?id=982974 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html - http://rhn.redhat.com/errata/RHSA-2014-0316.html - http://li
suse.org/opensuse-security-announce/2014-03/msg00017.html - http://rhn.redhat.com/errata/RHSA-2014-0316.html - http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html
CVE ID: CVE-2014-1514 State: PUBLISHED Published: 2014-03-19T10:00:00 Last Updated: 2024-08-06T09:42:36.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: vmtypedarrayobject.cpp in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 does not validate the length of the destination array before a copy operation, which allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds write and application crash) by triggering incorrect use of the TypedArrayObject class. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0310.html - http://www.de
l Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0310.html - http://www.debian.org/security/2014/dsa-2911 - https://security.gentoo.org/glsa/201504-01 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.ubuntu.com/usn/USN-2151-1 - http://www.mozilla.org/security/announce/2014/mfsa2014-32.html - http://www.debian.org/security/2014/dsa-2881 - https://bugzilla.mozilla.org/show_bug.cgi?id=983344 - http://www.securityfocus.com/bid/66240 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html - http://rhn.redhat.co
yfocus.com/bid/66240 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html - http://rhn.redhat.com/errata/RHSA-2014-0316.html - http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html
CVE ID: CVE-2014-1515 State: PUBLISHED Published: 2014-03-25T01:00:00 Last Updated: 2024-08-06T09:42:36.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 28.0.1 on Android processes a file: URL by copying a local file onto the SD card, which allows attackers to obtain sensitive information from the Firefox profile directory via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2014-03/0153.html - https://www.mozilla.org/security/announce/2014/mfsa2014-33.html - https://bugzilla.mozilla.org/show_bug.cgi?id=945429
CVE ID: CVE-2014-1516 State: PUBLISHED Published: 2014-03-29T20:00:00 Last Updated: 2024-08-06T09:42:36.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: The saltProfileName function in base/GeckoProfileDirectories.java in Mozilla Firefox through 28.0.1 on Android relies on Android's weak approach to seeding the Math.random function, which makes it easier for attackers to bypass a profile-randomization protection mechanism via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://www.slideshare.net/ibmsecurity/overtaking-firefox-profiles-vulnerabilities-in-firefox-for-android - http://archives.neohapsis.com/archives/bugtraq/2014-03/0153.
g-firefox-profiles-vulnerabilities-in-firefox-for-android - http://archives.neohapsis.com/archives/bugtraq/2014-03/0153.html - http://securityintelligence.com/vulnerabilities-firefox-android-overtaking-firefox-profiles/
CVE ID: CVE-2014-1517 State: PUBLISHED Published: 2014-04-20T01:00:00 Last Updated: 2024-08-06T09:42:36.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: The login form in Bugzilla 2.x, 3.x, 4.x before 4.4.3, and 4.5.x before 4.5.3 does not properly handle a correctly authenticated but unintended login attempt, which makes it easier for remote authenticated users to obtain sensitive information by arranging for a victim to login to the attacker's account and then submit a vulnerability report, related to a "login CSRF" issue. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=713926 - http://www.bugzilla.org/security/4.
ogram Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=713926 - http://www.bugzilla.org/security/4.0.11/ - http://lists.fedoraproject.org/pipermail/package-announce/2014-April/132281.html - http://git.mozilla.org/?p=bugzilla/bugzilla.git%3Ba=commit%3Bh=0e390970ba51b14a5dc780be7c6f0d6d7baa67e3 - http://lists.fedoraproject.org/pipermail/package-announce/2014-April/132309.html - http://www.securitytracker.com/id/1030128
CVE ID: CVE-2014-1518 State: PUBLISHED Published: 2014-04-30T10:00:00 Last Updated: 2024-08-06T09:42:36.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0448.html - http://www.securityfocus.com/bid/67123 - http://lists.fedoraproject.org/pipermail/package-anno
ata/RHSA-2014-0448.html - http://www.securityfocus.com/bid/67123 - http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132332.html - http://lists.opensuse.org/opensuse-updates/2014-05/msg00013.html - http://lists.opensuse.org/opensuse-updates/2014-05/msg00010.html - http://lists.opensuse.org/opensuse-updates/2014-05/msg00033.html - https://bugzilla.mozilla.org/show_bug.cgi?id=992968 - https://bugzilla.mozilla.org/show_bug.cgi?id=952022 - http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00015.html - https://security.gentoo.org/glsa/201504-01 - http://secunia.com/advisories/59866 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - ht
ttp://secunia.com/advisories/59866 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://lists.opensuse.org/opensuse-updates/2014-05/msg00040.html - http://www.ubuntu.com/usn/USN-2189-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=944353 - http://rhn.redhat.com/errata/RHSA-2014-0449.html - https://bugzilla.mozilla.org/show_bug.cgi?id=986678 - http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00006.html - http://www.debian.org/security/2014/dsa-2918 - https://bugzilla.mozilla.org/show_bug.cgi?id=980537 - https://bugzilla.mozilla.org/show_bug.cgi?id=966630 - http://www.debian.org/security/2014/dsa-2924 - http://www.ubuntu.com/usn/USN-2185-1 -
zilla.org/show_bug.cgi?id=966630 - http://www.debian.org/security/2014/dsa-2924 - http://www.ubuntu.com/usn/USN-2185-1 - http://www.securitytracker.com/id/1030164 - https://bugzilla.mozilla.org/show_bug.cgi?id=991471 - http://www.securitytracker.com/id/1030163 - http://www.mozilla.org/security/announce/2014/mfsa2014-34.html - https://bugzilla.mozilla.org/show_bug.cgi?id=993546 - https://bugzilla.mozilla.org/show_bug.cgi?id=986843 - http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132437.html
CVE ID: CVE-2014-1519 State: PUBLISHED Published: 2014-04-30T10:00:00 Last Updated: 2024-08-06T09:42:36.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=953104 - http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132332.html - https://bugzilla.mozilla.org/show_bug.cgi?id=990794 - http://lists
org/pipermail/package-announce/2014-May/132332.html - https://bugzilla.mozilla.org/show_bug.cgi?id=990794 - http://lists.opensuse.org/opensuse-updates/2014-05/msg00010.html - http://lists.opensuse.org/opensuse-updates/2014-05/msg00033.html - https://bugzilla.mozilla.org/show_bug.cgi?id=996883 - https://security.gentoo.org/glsa/201504-01 - http://secunia.com/advisories/59866 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - https://bugzilla.mozilla.org/show_bug.cgi?id=919592 - https://bugzilla.mozilla.org/show_bug.cgi?id=977955 - https://bugzilla.mozilla.org/show_bug.cgi?id=946658 - https://bugzilla.mozilla.org/show_bug.cgi?id=986864 - http://www.ubuntu.com/us
illa.mozilla.org/show_bug.cgi?id=946658 - https://bugzilla.mozilla.org/show_bug.cgi?id=986864 - http://www.ubuntu.com/usn/USN-2185-1 - http://www.securitytracker.com/id/1030164 - http://www.securitytracker.com/id/1030163 - http://www.mozilla.org/security/announce/2014/mfsa2014-34.html - https://bugzilla.mozilla.org/show_bug.cgi?id=995607 - http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132437.html
CVE ID: CVE-2014-1520 State: PUBLISHED Published: 2014-04-30T10:00:00 Last Updated: 2024-08-06T09:42:36.281Z Vendors: n/a Products: n/a Problem Types: n/a Description: maintenservice_installer.exe in the Maintenance Service Installer in Mozilla Firefox before 29.0 and Firefox ESR 24.x before 24.5 on Windows allows local users to gain privileges by placing a Trojan horse DLL file into a temporary directory at an unspecified point in the update process. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=961676 - http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132332.html - https://security.gentoo.org/glsa/201504-01 -
//lists.fedoraproject.org/pipermail/package-announce/2014-May/132332.html - https://security.gentoo.org/glsa/201504-01 - http://secunia.com/advisories/59866 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.securitytracker.com/id/1030163 - http://www.mozilla.org/security/announce/2014/mfsa2014-35.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132437.html - http://seclists.org/fulldisclosure/2021/Mar/14 - http://packetstormsecurity.com/files/161696/Mozilla-Arbitrary-Code-Execution-Privilege-Escalation.html
CVE ID: CVE-2014-1521 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-1522 State: PUBLISHED Published: 2014-04-30T10:00:00 Last Updated: 2024-08-06T09:42:36.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mozilla::dom::OscillatorNodeEngine::ComputeCustom function in the Web Audio subsystem in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read, memory corruption, and application crash) via crafted content. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2014/mfsa2014-36.html - http://lists.opensuse.org/opensuse-updates/2014-05/msg00010.html - http://lists.opensuse.org
nce/2014/mfsa2014-36.html - http://lists.opensuse.org/opensuse-updates/2014-05/msg00010.html - http://lists.opensuse.org/opensuse-updates/2014-05/msg00033.html - https://security.gentoo.org/glsa/201504-01 - http://secunia.com/advisories/59866 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - https://bugzilla.mozilla.org/show_bug.cgi?id=995289 - http://www.ubuntu.com/usn/USN-2185-1 - http://www.securitytracker.com/id/1030164 - http://www.securitytracker.com/id/1030163 - http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132437.html
CVE ID: CVE-2014-1523 State: PUBLISHED Published: 2014-04-30T10:00:00 Last Updated: 2024-08-06T09:42:36.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the read_u32 function in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted JPEG image. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0448.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132332.html - http://lists.opensuse.org/opensuse-updates/2014-
sts.fedoraproject.org/pipermail/package-announce/2014-May/132332.html - http://lists.opensuse.org/opensuse-updates/2014-05/msg00013.html - http://lists.opensuse.org/opensuse-updates/2014-05/msg00010.html - http://lists.opensuse.org/opensuse-updates/2014-05/msg00033.html - http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00015.html - https://security.gentoo.org/glsa/201504-01 - http://www.securitytracker.com/id/1030165 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.securityfocus.com/bid/67129 - http://lists.opensuse.org/opensuse-updates/2014-05/msg00040.html - http://www.ubuntu.com/usn/USN-2189-1 - http://rhn.redhat.com/errata/RHSA
se.org/opensuse-updates/2014-05/msg00040.html - http://www.ubuntu.com/usn/USN-2189-1 - http://rhn.redhat.com/errata/RHSA-2014-0449.html - https://bugzilla.mozilla.org/show_bug.cgi?id=969226 - http://www.mozilla.org/security/announce/2014/mfsa2014-37.html - http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00006.html - http://www.debian.org/security/2014/dsa-2918 - http://www.debian.org/security/2014/dsa-2924 - http://www.ubuntu.com/usn/USN-2185-1 - http://www.securitytracker.com/id/1030164 - http://www.securitytracker.com/id/1030163 - http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132437.html
CVE ID: CVE-2014-1524 State: PUBLISHED Published: 2014-04-30T10:00:00 Last Updated: 2024-08-06T09:42:36.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: The nsXBLProtoImpl::InstallImplementation function in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 does not properly check whether objects are XBL objects, which allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow) via crafted JavaScript code that accesses a non-XBL object as if it were an XBL object. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0448.html - http
Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0448.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132332.html - http://lists.opensuse.org/opensuse-updates/2014-05/msg00013.html - http://lists.opensuse.org/opensuse-updates/2014-05/msg00010.html - https://bugzilla.mozilla.org/show_bug.cgi?id=989183 - http://lists.opensuse.org/opensuse-updates/2014-05/msg00033.html - http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00015.html - http://www.mozilla.org/security/announce/2014/mfsa2014-38.html - https://security.gentoo.org/glsa/201504-01 - http://www.securitytracker.com/id/1030165 - http://secunia.co
014-38.html - https://security.gentoo.org/glsa/201504-01 - http://www.securitytracker.com/id/1030165 - http://secunia.com/advisories/59866 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://lists.opensuse.org/opensuse-updates/2014-05/msg00040.html - http://www.ubuntu.com/usn/USN-2189-1 - http://rhn.redhat.com/errata/RHSA-2014-0449.html - http://www.securityfocus.com/bid/67131 - http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00006.html - http://www.debian.org/security/2014/dsa-2918 - http://www.debian.org/security/2014/dsa-2924 - http://www.ubuntu.com/usn/USN-2185-1 - http://www.securitytracker.com/id/1030164 - http://www.securitytracker
dsa-2924 - http://www.ubuntu.com/usn/USN-2185-1 - http://www.securitytracker.com/id/1030164 - http://www.securitytracker.com/id/1030163 - http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132437.html
CVE ID: CVE-2014-1525 State: PUBLISHED Published: 2014-04-30T10:00:00 Last Updated: 2024-08-06T09:42:36.177Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mozilla::dom::TextTrack::AddCue function in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 does not properly perform garbage collection for Text Track Manager variables, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and heap memory corruption) via a crafted VIDEO element in an HTML document. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2014-05/msg00010.html - http://lists.opensuse.org/opensuse-update
ferences: - http://lists.opensuse.org/opensuse-updates/2014-05/msg00010.html - http://lists.opensuse.org/opensuse-updates/2014-05/msg00033.html - https://security.gentoo.org/glsa/201504-01 - http://secunia.com/advisories/59866 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.mozilla.org/security/announce/2014/mfsa2014-39.html - https://bugzilla.mozilla.org/show_bug.cgi?id=989210 - http://www.ubuntu.com/usn/USN-2185-1 - http://www.securitytracker.com/id/1030164 - http://www.securitytracker.com/id/1030163 - http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132437.html
CVE ID: CVE-2014-1526 State: PUBLISHED Published: 2014-04-30T10:00:00 Last Updated: 2024-08-06T09:42:36.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XrayWrapper implementation in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 allows user-assisted remote attackers to bypass intended access restrictions via a crafted web site that is visited in the debugger, leading to unwrapping operations and calls to DOM methods on the unwrapped objects. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2014-05/msg00010.html - http://lists.opensuse.org/opensuse-updates/2014-05/msg00033.html - http://www.mozilla.org/secur
/2014-05/msg00010.html - http://lists.opensuse.org/opensuse-updates/2014-05/msg00033.html - http://www.mozilla.org/security/announce/2014/mfsa2014-47.html - https://security.gentoo.org/glsa/201504-01 - http://secunia.com/advisories/59866 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - https://bugzilla.mozilla.org/show_bug.cgi?id=988106 - http://www.ubuntu.com/usn/USN-2185-1 - http://www.securitytracker.com/id/1030164 - http://www.securitytracker.com/id/1030163 - http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132437.html
CVE ID: CVE-2014-1527 State: PUBLISHED Published: 2014-04-30T10:00:00 Last Updated: 2024-08-06T09:42:36.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 29.0 on Android allows remote attackers to spoof the address bar via crafted JavaScript code that uses DOM events to prevent the reemergence of the actual address bar after scrolling has taken it off of the screen. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=960146 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.mozilla.org/security/announce/2014/mfsa2014-40.html - http://www.securitytracker.co
tinapr2016-2952098.html - http://www.mozilla.org/security/announce/2014/mfsa2014-40.html - http://www.securitytracker.com/id/1030163 - http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132437.html
CVE ID: CVE-2014-1528 State: PUBLISHED Published: 2014-04-30T10:00:00 Last Updated: 2024-08-06T09:42:36.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sse2_composite_src_x888_8888 function in Pixman, as used in Cairo in Mozilla Firefox 28.0 and SeaMonkey 2.25 on Windows, allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds write and application crash) by painting on a CANVAS element. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2014-05/msg00010.html - http://lists.opensuse.org/opensuse-updates/2014-05/msg00033.html - http://secunia.com/advisories/59866 - http://www.ora