Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-5557 State: PUBLISHED Published: 2015-02-07T02:00:00 Last Updated: 2024-08-06T17:15:21.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Proxy Bypass Content Rewriter feature in the WebVPN subsystem in Cisco Adaptive Security Appliance (ASA) Software 9.1(.2) and earlier allows remote authenticated users to cause a denial of service (device crash or error-recovery event) via an HTTP request that triggers a rewrite, aka Bug ID CSCug91577. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/72529 - http://tools.cisco.com/security/center/viewAlert.x?alertId=37383 - http://tools.cisco.com/security/center/content/Cisc
- http://tools.cisco.com/security/center/viewAlert.x?alertId=37383 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5557 - https://exchange.xforce.ibmcloud.com/vulnerabilities/100694
CVE ID: CVE-2013-5558 State: PUBLISHED Published: 2013-11-08T02:00:00Z Last Updated: 2024-09-16T22:45:57.716Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WIL-A module in Cisco TelePresence VX Clinical Assistant 1.2 before 1.21 changes the admin password to an empty password upon a reboot, which makes it easier for remote attackers to obtain access via the administrative interface, aka Bug ID CSCuj17238. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20131106-tvxca
CVE ID: CVE-2013-5559 State: PUBLISHED Published: 2013-11-04T15:00:00 Last Updated: 2024-08-06T17:15:21.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Active Template Library (ATL) framework in the VPNAPI COM module in Cisco AnyConnect Secure Mobility Client 2.x allows user-assisted remote attackers to execute arbitrary code via a crafted HTML document, aka Bug ID CSCuj58139. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5559
CVE ID: CVE-2013-5560 State: PUBLISHED Published: 2013-11-13T15:00:00Z Last Updated: 2024-09-16T20:52:37.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IPv6 implementation in Cisco Adaptive Security Appliance (ASA) Software 9.1.3 and earlier, when NAT64 or NAT66 is enabled, does not properly process NAT rules, which allows remote attackers to cause a denial of service (device reload) via crafted packets, aka Bug ID CSCue34342. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5560 - http://tools.cisco.com/security/center/viewAlert.x?alertId=31716
CVE ID: CVE-2013-5561 State: PUBLISHED Published: 2013-11-04T15:00:00Z Last Updated: 2024-09-17T01:10:37.225Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Safe Search enforcement feature in Cisco Adaptive Security Appliance (ASA) CX Context-Aware Security Software does not properly perform filtering, which allows remote attackers to bypass intended policy restrictions via unspecified vectors, aka Bug ID CSCui94622. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5561
CVE ID: CVE-2013-5562 State: PUBLISHED Published: 2013-11-06T11:00:00Z Last Updated: 2024-09-17T00:26:35.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ITM web server in Cisco Prime Central for Hosted Collaboration Solution (HCS) allows remote attackers to cause a denial of service (temporary HTTP service outage) via a flood of TCP packets, aka Bug ID CSCuh36313. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5562
CVE ID: CVE-2013-5563 State: PUBLISHED Published: 2013-11-06T11:00:00Z Last Updated: 2024-09-16T16:48:48.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Query/NewQueryResult.jsp in Cisco Security Monitoring, Analysis and Response System (CS-MARS) allows remote attackers to inject arbitrary web script or HTML via the isnowLatency parameter, aka Bug ID CSCul16173. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-11/0016.html - http://research.smartnetsecurity.net/advisory/-smt-sa-2013-02-cisco-mars-cross-site-scripting-vulnerability
CVE ID: CVE-2013-5564 State: PUBLISHED Published: 2013-11-04T15:00:00Z Last Updated: 2024-09-17T02:32:45.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Java process in the Impact server in Cisco Prime Central for Hosted Collaboration Solution (HCS) allows remote attackers to cause a denial of service (process crash) via a flood of TCP packets, aka Bug ID CSCug57345. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5564
CVE ID: CVE-2013-5565 State: PUBLISHED Published: 2013-11-08T02:00:00Z Last Updated: 2024-09-17T02:11:21.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OSPFv3 functionality in Cisco IOS XR 5.1 allows remote attackers to cause a denial of service (process crash) via a malformed LSA Type-1 packet, aka Bug ID CSCuj82176. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=31675 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5565
CVE ID: CVE-2013-5566 State: PUBLISHED Published: 2013-11-08T02:00:00Z Last Updated: 2024-09-16T17:14:03.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco NX-OS 5.0 and earlier on MDS 9000 devices allows remote attackers to cause a denial of service (supervisor CPU consumption) via Authentication Header (AH) authentication in a Virtual Router Redundancy Protocol (VRRP) frame, aka Bug ID CSCte27874. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5566 - http://tools.cisco.com/security/center/viewAlert.x?alertId=31663
CVE ID: CVE-2013-5567 State: PUBLISHED Published: 2014-07-14T21:00:00 Last Updated: 2024-08-06T17:15:21.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Adaptive Security Appliance (ASA) Software 8.4(.6) and earlier, when using an unsupported configuration with overlapping criteria for filtering and inspection, allows remote attackers to cause a denial of service (traffic loop and device crash) via a packet that triggers multiple matches, aka Bug ID CSCui45606. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5567 - http://tools.cisco.com/security/center/viewAlert.x?alertId=34911
ity/center/content/CiscoSecurityNotice/CVE-2013-5567 - http://tools.cisco.com/security/center/viewAlert.x?alertId=34911 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94445 - http://www.securitytracker.com/id/1030555 - http://www.securityfocus.com/bid/68504
CVE ID: CVE-2013-5568 State: PUBLISHED Published: 2013-11-13T15:00:00Z Last Updated: 2024-09-17T03:19:06.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: The auto-update implementation in Cisco Adaptive Security Appliance (ASA) Software 9.0.3.6 and earlier allows remote attackers to cause a denial of service (device reload) via crafted update data, aka Bug ID CSCui33308. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=31693 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5568
CVE ID: CVE-2013-5569 State: PUBLISHED Published: 2013-08-23T15:00:00 Last Updated: 2024-08-06T17:15:21.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Slideshare extension 0.1.0 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-005/ - http://osvdb.org/90417 - https://exchange.xforce.ibmcloud.com/vulnerabilities/82219
CVE ID: CVE-2013-5570 State: PUBLISHED Published: 2013-08-23T15:00:00 Last Updated: 2024-08-06T17:15:21.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Javascript and CSS Optimizer extension before 1.1.14 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/53253 - http://typo3.org/extensions/repository/view/js_css_optimizer - https://exchange.xforce.ibmcloud.com/vulnerabilities/81583 - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-002/
CVE ID: CVE-2013-5571 State: PUBLISHED Published: 2020-01-07T13:13:17 Last Updated: 2024-08-06T17:15:21.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: HMailServer 5.3.x and prior: Memory Corruption which could cause DOS Additional Analyst Notes: - CVE Program Container: References: - http://www.securiteam.com/securitynews/5QP3O0UAKA.html
CVE ID: CVE-2013-5572 State: PUBLISHED Published: 2013-10-01T01:00:00 Last Updated: 2024-08-06T17:15:21.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zabbix 2.0.5 allows remote authenticated users to discover the LDAP bind password by leveraging management-console access and reading the ldap_bind_password value in the HTML source code. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2013-09/0149.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132377.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132376.html
CVE ID: CVE-2013-5573 State: PUBLISHED Published: 2013-12-31T15:00:00 Last Updated: 2024-08-06T17:15:21.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the default markup formatter in Jenkins 1.523 allows remote attackers to inject arbitrary web script or HTML via the Description field in the user configuration. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/64414 - http://www.osvdb.org/101187 - http://seclists.org/bugtraq/2013/Dec/104 - http://seclists.org/fulldisclosure/2013/Dec/159 - http://www.exploit-db.com/exploits/30408 - http://packetstormsecurity.com/files/124513 - https://
closure/2013/Dec/159 - http://www.exploit-db.com/exploits/30408 - http://packetstormsecurity.com/files/124513 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89872
CVE ID: CVE-2013-5575 State: REJECTED Published: 2013-09-26T10:00:00Z Last Updated: 2024-09-16T20:17:36.856Z Description: No description available.
CVE ID: CVE-2013-5576 State: PUBLISHED Published: 2013-10-09T14:44:00 Last Updated: 2024-08-06T17:15:21.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: administrator/components/com_media/helpers/media.php in the media manager in Joomla! 2.5.x before 2.5.14 and 3.x before 3.1.5 allows remote authenticated users or remote attackers to bypass intended access restrictions and upload files with dangerous extensions via a filename with a trailing . (dot), as exploited in the wild in August 2013. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/27610 - http://developer.joomla.org/security/563-20130801-core-unauthorised-uploads.html
://www.exploit-db.com/exploits/27610 - http://developer.joomla.org/security/563-20130801-core-unauthorised-uploads.html - http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEdit&tracker_item_id=31626 - http://www.kb.cert.org/vuls/id/639620 - http://seclists.org/oss-sec/2013/q3/486 - https://github.com/joomla/joomla-cms/commit/1ed07e257a2c0794ba19e864f7c5101e7e8c41d2 - https://github.com/joomla/joomla-cms/commit/fa5645208eefd70f521cd2e4d53d5378622133d8 - http://seclists.org/oss-sec/2013/q3/484 - http://www.cso.com.au/article/523528/joomla_patches_file_manager_vulnerability_responsible_hijacked_websites/
CVE ID: CVE-2013-5578 State: PUBLISHED Published: 2013-08-25T01:00:00Z Last Updated: 2024-09-16T22:45:53.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the ToDot method in the WINGRAPHVIZLib.NEATO ActiveX control in WinGraphviz.dll in StarUML allows remote attackers to execute arbitrary code via a long argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/27317/
CVE ID: CVE-2013-5580 State: PUBLISHED Published: 2013-10-01T19:00:00Z Last Updated: 2024-09-16T20:12:43.097Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) Conn_StartLogin and (2) cb_Read_Resolver_Result functions in conn.c in ngIRCd 18 through 20.2, when the configuration option NoticeAuth is enabled, does not properly handle the return code for the Handle_Write function, which allows remote attackers to cause a denial of service (assertion failure and server crash) via unspecified vectors, related to a "notice auth" message not being sent to a new client. Additional Analyst Notes: - CVE Program Container: References: - http://arthur.barton.de/pipermail/ngircd-ml/2013-A
ent. Additional Analyst Notes: - CVE Program Container: References: - http://arthur.barton.de/pipermail/ngircd-ml/2013-August/000645.html - http://osvdb.org/96590 - http://freecode.com/projects/ngircd/releases/357245 - http://secunia.com/advisories/54567 - http://arthur.barton.de/cgi-bin/gitweb.cgi?p=ngircd.git%3Ba=commit%3Bh=309122017ebc6fff039a7cab1b82f632853d82d5 - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/115047.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/115077.html
CVE ID: CVE-2013-5581 State: REJECTED Published: 2020-02-19T14:45:31 Last Updated: 2020-02-19T14:45:31 Description: No description available.
CVE ID: CVE-2013-5582 State: PUBLISHED Published: 2020-02-11T18:29:15 Last Updated: 2024-08-06T17:15:21.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ammyy Admin 3.2 and earlier stores the client ID at a fixed memory location, which might make it easier for user-assisted remote attackers to bypass authentication by running a local program that extracts a field from the AA_v3.2.exe file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/530827
CVE ID: CVE-2013-5583 State: PUBLISHED Published: 2013-12-29T02:00:00 Last Updated: 2024-08-06T17:15:21.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in libraries/idna_convert/example.php in Joomla! 3.1.5 allows remote attackers to inject arbitrary web script or HTML via the lang parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/61600 - http://disse.cting.org/2013/08/05/joomla-core-3_1_5_reflected-xss-vulnerability/
CVE ID: CVE-2013-5586 State: PUBLISHED Published: 2013-09-25T14:00:00 Last Updated: 2024-08-06T17:15:21.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in wikka.php in WikkaWiki before 1.3.4-p1 allows remote attackers to inject arbitrary web script or HTML via the wakka parameter to sql/. Additional Analyst Notes: - CVE Program Container: References: - https://wush.net/trac/wikka/ticket/1152 - https://exchange.xforce.ibmcloud.com/vulnerabilities/87013 - https://wush.net/trac/wikka/changeset/1896 - http://packetstormsecurity.com/files/123196 - https://wush.net/trac/wikka/changeset/1900 - http://seclists.org/bugtraq/2013/Sep/47 - http://
curity.com/files/123196 - https://wush.net/trac/wikka/changeset/1900 - http://seclists.org/bugtraq/2013/Sep/47 - http://docs.wikkawiki.org/WhatsNew134 - http://archives.neohapsis.com/archives/bugtraq/2013-09/0048.html - http://osvdb.org/97183 - http://www.securityfocus.com/bid/62325 - http://secunia.com/advisories/54790 - https://www.htbridge.com/advisory/HTB23170 - https://wush.net/trac/wikka/ticket/1153
CVE ID: CVE-2013-5587 State: PUBLISHED Published: 2013-08-23T16:00:00Z Last Updated: 2024-09-16T19:19:35.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Request Tracker (RT) 4.x before 4.0.13, when MakeClicky is configured, allows remote attackers to inject arbitrary web script or HTML via a URL in a ticket. NOTE: this issue has been SPLIT from CVE-2013-3371 due to different affected versions. Additional Analyst Notes: - CVE Program Container: References: - http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000228.html - http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000226.html - http://lists.bestpractical
May/000228.html - http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000226.html - http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000227.html - http://secunia.com/advisories/53505 - http://www.debian.org/security/2012/dsa-2670 - http://secunia.com/advisories/53522
CVE ID: CVE-2013-5588 State: PUBLISHED Published: 2013-08-29T10:00:00 Last Updated: 2024-08-06T17:15:21.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.8b and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the step parameter to install/index.php or (2) the id parameter to cacti/host.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/62001 - http://secunia.com/advisories/54652 - http://www.debian.org/security/2013/dsa-2747 - http://bugs.cacti.net/view.php?id=2383 - http://lists.opensuse.org/opensuse-updates/2015-03/msg00034.html
CVE ID: CVE-2013-5589 State: PUBLISHED Published: 2013-08-29T10:00:00 Last Updated: 2024-08-06T17:15:21.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in cacti/host.php in Cacti 0.8.8b and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/54652 - http://www.debian.org/security/2013/dsa-2747 - http://bugs.cacti.net/view.php?id=2383 - http://lists.opensuse.org/opensuse-updates/2015-03/msg00034.html - http://www.securityfocus.com/bid/62005
CVE ID: CVE-2013-5590 State: PUBLISHED Published: 2013-10-30T10:00:00 Last Updated: 2024-08-06T17:15:21.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before 2.22 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00005.html - https:/
VE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00005.html - https://bugzilla.mozilla.org/show_bug.cgi?id=860123 - https://security.gentoo.org/glsa/201504-01 - http://www.mozilla.org/security/announce/2013/mfsa2013-93.html - https://bugzilla.mozilla.org/show_bug.cgi?id=893572 - http://rhn.redhat.com/errata/RHSA-2013-1480.html - http://rhn.redhat.com/errata/RHSA-2013-1476.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19001 - http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00006.html - http://www.debian.org/security/2013/dsa-2788 - http://lists.opensuse.org/opensuse-security-anno
/2013-11/msg00006.html - http://www.debian.org/security/2013/dsa-2788 - http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00014.html - http://www.debian.org/security/2013/dsa-2797
CVE ID: CVE-2013-5591 State: PUBLISHED Published: 2013-10-30T10:00:00 Last Updated: 2024-08-06T17:15:21.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the browser engine in Mozilla Firefox before 25.0, Firefox ESR 24.x before 24.1, Thunderbird before 24.1, and SeaMonkey before 2.22 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=859892 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19015 - http:/
ug.cgi?id=859892 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19015 - http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00005.html - https://security.gentoo.org/glsa/201504-01 - http://www.mozilla.org/security/announce/2013/mfsa2013-93.html - http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00006.html
CVE ID: CVE-2013-5592 State: PUBLISHED Published: 2013-10-30T10:00:00 Last Updated: 2024-08-06T17:15:21.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 25.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=912534 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19148 - http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00005.html - h
ion/oval%3Aorg.mitre.oval%3Adef%3A19148 - http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00005.html - https://security.gentoo.org/glsa/201504-01 - https://bugzilla.mozilla.org/show_bug.cgi?id=880544 - http://www.mozilla.org/security/announce/2013/mfsa2013-93.html - http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00006.html - https://bugzilla.mozilla.org/show_bug.cgi?id=887921 - https://bugzilla.mozilla.org/show_bug.cgi?id=886102
CVE ID: CVE-2013-5593 State: PUBLISHED Published: 2013-10-30T10:00:00 Last Updated: 2024-08-06T17:15:21.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SELECT element implementation in Mozilla Firefox before 25.0, Firefox ESR 24.x before 24.1, Thunderbird before 24.1, and SeaMonkey before 2.22 does not properly restrict the nature or placement of HTML within a dropdown menu, which allows remote attackers to spoof the address bar or conduct clickjacking attacks via vectors that trigger navigation off of a page containing this element. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00005.html
otes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00005.html - https://security.gentoo.org/glsa/201504-01 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19263 - http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00006.html - https://bugzilla.mozilla.org/show_bug.cgi?id=868327 - http://www.mozilla.org/security/announce/2013/mfsa2013-94.html
CVE ID: CVE-2013-5594 State: PUBLISHED Published: 2020-02-18T12:18:52 Last Updated: 2024-08-06T17:15:21.417Z Vendors: Mozilla Products: Firefox Problem Types: modification of anonymous content Description: Mozilla Firefox before 25 allows modification of anonymous content of pluginProblem.xml binding Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=914618 - https://nki.gov.hu/en/figyelmeztetesek/serulekenysegek/mozilla-firefox-tobbszoros-serulekenysege-2/