Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-38484 State: PUBLISHED Published: 2021-10-19T12:11:01.863576Z Last Updated: 2024-09-16T23:05:39.987Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: InHand Networks Products: IR615 Router Problem Types: CWE-434 Description: InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 do not have a filter or signature check to detect or prevent an upload of malicious files to the server, which may allow an attacker, acting as an administrator, to upload malicious files. This could result in cross-site scripting, deletion of system files, and remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https
etion of system files, and remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-280-05
CVE ID: CVE-2021-38485 State: PUBLISHED Published: 2021-10-22T13:23:38.936836Z Last Updated: 2024-09-16T20:58:26.040Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Emerson Products: WirelessHART Gateway Problem Types: CWE-20 Description: The affected product is vulnerable to improper input validation in the restore file. This enables an attacker to provide malicious config files to replace any file on disk. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-278-02
CVE ID: CVE-2021-38486 State: PUBLISHED Published: 2021-10-19T12:11:22.154322Z Last Updated: 2024-09-16T16:32:46.172Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: InHand Networks Products: IR615 Router Problem Types: CWE-285 Description: InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 cloud portal allows for self-registration of the affected product without any requirements to create an account, which may allow an attacker to have full control over the product and execute code within the internal network to which the product is connected. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisori
uct is connected. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-280-05
CVE ID: CVE-2021-38487 State: PUBLISHED Published: 2022-05-05T15:18:41.000Z Last Updated: 2025-06-23T12:13:04.553Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H) Vendors: RTI Products: Connext Professional, Connext Micro Problem Types: CWE-406, CWE-923 Description: RTI Connext Professional versions 4.1 to 6.1.0, and Connext Micro versions 2.4 and later are vulnerable when an attacker sends a specially crafted packet to flood target devices with unwanted traffic. This may result in a denial-of-service condition and information exposure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.rti.com/vulnerabilities/#cve-202
lyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.rti.com/vulnerabilities/#cve-2021-38487 - https://www.cisa.gov/uscert/ics/advisories/icsa-21-315-02 - https://support.rti.com/s/login/?ec=302&startURL=%2Fs%2F
CVE ID: CVE-2021-38488 State: PUBLISHED Published: 2021-11-03T19:05:54.595979Z Last Updated: 2024-09-17T03:13:03.362Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: Delta Electronics Products: DIALink Problem Types: CWE-79 Description: Delta Electronics DIALink versions 1.2.4.0 and prior is vulnerable to cross-site scripting because an authenticated attacker can inject arbitrary JavaScript code into the parameter comment of the API events, which may allow an attacker to remotely execute code. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-294-02
CVE ID: CVE-2021-38490 State: PUBLISHED Published: 2021-08-10T21:22:22 Last Updated: 2024-08-04T01:44:22.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: Altova MobileTogether Server before 7.3 SP1 allows XML exponential entity expansion, a different vulnerability than CVE-2021-37425. Additional Analyst Notes: - CVE Program Container: References: - https://www.redteam-pentesting.de/advisories/rt-sa-2021-002
CVE ID: CVE-2021-38491 State: PUBLISHED Published: 2021-11-03T00:04:02 Last Updated: 2024-08-04T01:44:22.837Z Vendors: Mozilla Products: Firefox Problem Types: Mixed-Content-Blocking was unable to check opaque origins Description: Mixed-content checks were unable to analyze opaque origins which led to some mixed content being loaded. This vulnerability affects Firefox < 92. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2021-38/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1551886 - https://security.gentoo.org/glsa/202202-03
CVE ID: CVE-2021-38492 State: PUBLISHED Published: 2021-11-03T00:03:56 Last Updated: 2024-08-04T01:44:22.943Z Vendors: Mozilla Products: Firefox, Thunderbird, Firefox ESR Problem Types: Navigating to `mk:` URL scheme could load Internet Explorer Description: When delegating navigations to the operating system, Firefox would accept the `mk` scheme which might allow attackers to launch pages and execute scripts in Internet Explorer in unprivileged mode. *This bug only affects Firefox for Windows. Other operating systems are unaffected.*. This vulnerability affects Firefox < 92, Thunderbird < 91.1, Thunderbird < 78.14, Firefox ESR < 78.14, and Firefox ESR < 91.1. Additional Analyst Notes: - CVE
2, Thunderbird < 91.1, Thunderbird < 78.14, Firefox ESR < 78.14, and Firefox ESR < 91.1. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2021-40/ - https://www.mozilla.org/security/advisories/mfsa2021-41/ - https://www.mozilla.org/security/advisories/mfsa2021-38/ - https://www.mozilla.org/security/advisories/mfsa2021-42/ - https://www.mozilla.org/security/advisories/mfsa2021-39/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1721107 - https://security.gentoo.org/glsa/202208-14
CVE ID: CVE-2021-38493 State: PUBLISHED Published: 2021-11-03T00:03:49 Last Updated: 2024-08-04T01:44:22.825Z Vendors: Mozilla Products: Firefox ESR, Thunderbird, Firefox Problem Types: Memory safety bugs fixed in Firefox 92, Firefox ESR 78.14 and Firefox ESR 91.1 Description: Mozilla developers reported memory safety bugs present in Firefox 91 and Firefox ESR 78.13. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 78.14, Thunderbird < 78.14, and Firefox < 92. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.
derbird < 78.14, and Firefox < 92. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2021-38/ - https://www.mozilla.org/security/advisories/mfsa2021-42/ - https://www.mozilla.org/security/advisories/mfsa2021-39/ - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1723391%2C1724101%2C1724107 - https://security.gentoo.org/glsa/202202-03 - https://security.gentoo.org/glsa/202208-14
CVE ID: CVE-2021-38494 State: PUBLISHED Published: 2021-11-03T00:03:42 Last Updated: 2024-08-04T01:44:23.464Z Vendors: Mozilla Products: Firefox Problem Types: Memory safety bugs fixed in Firefox 92 Description: Mozilla developers reported memory safety bugs present in Firefox 91. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 92. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2021-38/ - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1723920%2C1725638
CVE ID: CVE-2021-38495 State: PUBLISHED Published: 2021-11-03T00:03:36 Last Updated: 2024-08-04T01:44:22.823Z Vendors: Mozilla Products: Thunderbird, Firefox ESR Problem Types: Memory safety bugs fixed in Thunderbird 91.1 Description: Mozilla developers reported memory safety bugs present in Thunderbird 78.13.0. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird < 91.1 and Firefox ESR < 91.1. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2021-40/ - https://www.mozilla.org/security/a
m Container: References: - https://www.mozilla.org/security/advisories/mfsa2021-40/ - https://www.mozilla.org/security/advisories/mfsa2021-41/ - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1723391%2C1723920%2C1724101%2C1724107 - https://security.gentoo.org/glsa/202202-03 - https://security.gentoo.org/glsa/202208-14
CVE ID: CVE-2021-38496 State: PUBLISHED Published: 2021-11-03T00:03:29 Last Updated: 2024-08-04T01:44:23.406Z Vendors: Mozilla Products: Thunderbird, Firefox ESR, Firefox Problem Types: Use-after-free in MessageTask Description: During operations on MessageTasks, a task may have been removed while it was still scheduled, resulting in memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird < 78.15, Thunderbird < 91.2, Firefox ESR < 91.2, Firefox ESR < 78.15, and Firefox < 93. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2021-47/ - https://www.mozilla.org/security/advisories/mfsa2021-45/ -
- https://www.mozilla.org/security/advisories/mfsa2021-47/ - https://www.mozilla.org/security/advisories/mfsa2021-45/ - https://www.mozilla.org/security/advisories/mfsa2021-43/ - https://www.mozilla.org/security/advisories/mfsa2021-46/ - https://www.mozilla.org/security/advisories/mfsa2021-44/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1725335 - https://www.debian.org/security/2022/dsa-5034 - https://lists.debian.org/debian-lts-announce/2022/01/msg00001.html
CVE ID: CVE-2021-38497 State: PUBLISHED Published: 2021-11-03T00:03:22 Last Updated: 2024-08-04T01:44:22.835Z Vendors: Mozilla Products: Firefox, Thunderbird, Firefox ESR Problem Types: Validation message could have been overlaid on another origin Description: Through use of reportValidity() and window.open(), a plain-text validation message could have been overlaid on another origin, leading to possible user confusion and spoofing attacks. This vulnerability affects Firefox < 93, Thunderbird < 91.2, and Firefox ESR < 91.2. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2021-47/ - https://www.mozilla.org/security/advisories/mf
References: - https://www.mozilla.org/security/advisories/mfsa2021-47/ - https://www.mozilla.org/security/advisories/mfsa2021-45/ - https://www.mozilla.org/security/advisories/mfsa2021-43/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1726621
CVE ID: CVE-2021-38498 State: PUBLISHED Published: 2021-11-03T00:03:15 Last Updated: 2024-08-04T01:44:22.834Z Vendors: Mozilla Products: Firefox, Thunderbird, Firefox ESR Problem Types: Use-after-free of nsLanguageAtomService object Description: During process shutdown, a document could have caused a use-after-free of a languages service object, leading to memory corruption and a potentially exploitable crash. This vulnerability affects Firefox < 93, Thunderbird < 91.2, and Firefox ESR < 91.2. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2021-47/ - https://www.mozilla.org/security/advisories/mfsa2021-45/ - https://www.mozill
lla.org/security/advisories/mfsa2021-47/ - https://www.mozilla.org/security/advisories/mfsa2021-45/ - https://www.mozilla.org/security/advisories/mfsa2021-43/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1729642
CVE ID: CVE-2021-38499 State: PUBLISHED Published: 2021-11-03T00:03:08 Last Updated: 2024-08-04T01:44:22.995Z Vendors: Mozilla Products: Firefox Problem Types: Memory safety bugs fixed in Firefox 93 Description: Mozilla developers reported memory safety bugs present in Firefox 92. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 93. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2021-43/ - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1667102%2C1723170%2C1725356%2C1727364
CVE ID: CVE-2021-38500 State: PUBLISHED Published: 2021-11-03T00:03:02 Last Updated: 2024-08-04T01:44:22.823Z Vendors: Mozilla Products: Thunderbird, Firefox ESR, Firefox Problem Types: Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15, and Firefox ESR 91.2 Description: Mozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird < 78.15, Thunderbird < 91.2, Firefox ESR < 91.2, Firefox ESR < 78.15, and Firefox < 93. Additional Analyst Notes: - CVE Program Conta
derbird < 91.2, Firefox ESR < 91.2, Firefox ESR < 78.15, and Firefox < 93. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2021-47/ - https://www.mozilla.org/security/advisories/mfsa2021-45/ - https://www.mozilla.org/security/advisories/mfsa2021-43/ - https://www.mozilla.org/security/advisories/mfsa2021-46/ - https://www.mozilla.org/security/advisories/mfsa2021-44/ - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1725854%2C1728321 - https://www.debian.org/security/2022/dsa-5034 - https://lists.debian.org/debian-lts-announce/2022/01/msg00001.html
CVE ID: CVE-2021-38501 State: PUBLISHED Published: 2021-11-03T00:02:56 Last Updated: 2024-08-04T01:44:22.811Z Vendors: Mozilla Products: Firefox, Thunderbird, Firefox ESR Problem Types: Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2 Description: Mozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 93, Thunderbird < 91.2, and Firefox ESR < 91.2. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisorie
ESR < 91.2. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2021-47/ - https://www.mozilla.org/security/advisories/mfsa2021-45/ - https://www.mozilla.org/security/advisories/mfsa2021-43/ - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1685354%2C1715755%2C1723176
CVE ID: CVE-2021-38502 State: PUBLISHED Published: 2021-11-03T00:02:49 Last Updated: 2024-08-04T01:44:22.910Z Vendors: Mozilla Products: Thunderbird Problem Types: Downgrade attack on SMTP STARTTLS connections Description: Thunderbird ignored the configuration to require STARTTLS security for an SMTP connection. A MITM could perform a downgrade attack to intercept transmitted messages, or could take control of the authenticated session to execute SMTP commands chosen by the MITM. If an unprotected authentication method was configured, the MITM could obtain the authentication credentials, too. This vulnerability affects Thunderbird < 91.2. Additional Analyst Notes: - CVE Program Container: Re
n credentials, too. This vulnerability affects Thunderbird < 91.2. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2021-47/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1733366 - https://www.debian.org/security/2022/dsa-5034 - https://lists.debian.org/debian-lts-announce/2022/01/msg00001.html
CVE ID: CVE-2021-38503 State: PUBLISHED Published: 2021-12-08T21:22:07 Last Updated: 2024-08-04T01:44:23.381Z Vendors: Mozilla Products: Firefox, Thunderbird, Firefox ESR Problem Types: iframe sandbox rules did not apply to XSLT stylesheets Description: The iframe sandbox rules were not correctly applied to XSLT stylesheets, allowing an iframe to bypass restrictions such as executing scripts or navigating the top-level frame. This vulnerability affects Firefox < 94, Thunderbird < 91.3, and Firefox ESR < 91.3. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2021-49/ - https://www.mozilla.org/security/advisories/mfsa2021-50/ - ht
https://www.mozilla.org/security/advisories/mfsa2021-49/ - https://www.mozilla.org/security/advisories/mfsa2021-50/ - https://www.mozilla.org/security/advisories/mfsa2021-48/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1729517 - https://www.debian.org/security/2021/dsa-5026 - https://lists.debian.org/debian-lts-announce/2021/12/msg00030.html - https://www.debian.org/security/2022/dsa-5034 - https://lists.debian.org/debian-lts-announce/2022/01/msg00001.html - https://security.gentoo.org/glsa/202202-03 - https://security.gentoo.org/glsa/202208-14
CVE ID: CVE-2021-38504 State: PUBLISHED Published: 2021-12-08T21:21:59 Last Updated: 2024-08-04T01:44:23.396Z Vendors: Mozilla Products: Firefox, Thunderbird, Firefox ESR Problem Types: Use-after-free in file picker dialog Description: When interacting with an HTML input element's file picker dialog with webkitdirectory set, a use-after-free could have resulted, leading to memory corruption and a potentially exploitable crash. This vulnerability affects Firefox < 94, Thunderbird < 91.3, and Firefox ESR < 91.3. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2021-49/ - https://www.mozilla.org/security/advisories/mfsa2021-50/ - h
https://www.mozilla.org/security/advisories/mfsa2021-49/ - https://www.mozilla.org/security/advisories/mfsa2021-50/ - https://www.mozilla.org/security/advisories/mfsa2021-48/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1730156 - https://www.debian.org/security/2021/dsa-5026 - https://lists.debian.org/debian-lts-announce/2021/12/msg00030.html - https://www.debian.org/security/2022/dsa-5034 - https://lists.debian.org/debian-lts-announce/2022/01/msg00001.html - https://security.gentoo.org/glsa/202202-03 - https://security.gentoo.org/glsa/202208-14
CVE ID: CVE-2021-38505 State: PUBLISHED Published: 2021-12-08T21:21:53 Last Updated: 2024-08-04T01:44:23.530Z Vendors: Mozilla Products: Firefox, Thunderbird, Firefox ESR Problem Types: Windows 10 Cloud Clipboard may have recorded sensitive user data Description: Microsoft introduced a new feature in Windows 10 known as Cloud Clipboard which, if enabled, will record data copied to the clipboard to the cloud, and make it available on other computers in certain scenarios. Applications that wish to prevent copied data from being recorded in Cloud History must use specific clipboard formats; and Firefox before versions 94 and ESR 91.3 did not implement them. This could have caused sensitive data
board formats; and Firefox before versions 94 and ESR 91.3 did not implement them. This could have caused sensitive data to be recorded to a user's Microsoft account. *This bug only affects Firefox for Windows 10+ with Cloud Clipboard enabled. Other operating systems are unaffected.*. This vulnerability affects Firefox < 94, Thunderbird < 91.3, and Firefox ESR < 91.3. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2021-49/ - https://www.mozilla.org/security/advisories/mfsa2021-50/ - https://www.mozilla.org/security/advisories/mfsa2021-48/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1730194
CVE ID: CVE-2021-38506 State: PUBLISHED Published: 2021-12-08T21:21:47 Last Updated: 2024-08-04T01:44:22.919Z Vendors: Mozilla Products: Firefox, Thunderbird, Firefox ESR Problem Types: Firefox could be coaxed into going into fullscreen mode without notification or warning Description: Through a series of navigations, Firefox could have entered fullscreen mode without notification or warning to the user. This could lead to spoofing attacks on the browser UI including phishing. This vulnerability affects Firefox < 94, Thunderbird < 91.3, and Firefox ESR < 91.3. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2021-49/ - https://w
alyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2021-49/ - https://www.mozilla.org/security/advisories/mfsa2021-50/ - https://www.mozilla.org/security/advisories/mfsa2021-48/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1730750 - https://www.debian.org/security/2021/dsa-5026 - https://lists.debian.org/debian-lts-announce/2021/12/msg00030.html - https://www.debian.org/security/2022/dsa-5034 - https://lists.debian.org/debian-lts-announce/2022/01/msg00001.html - https://security.gentoo.org/glsa/202202-03 - https://security.gentoo.org/glsa/202208-14
CVE ID: CVE-2021-38507 State: PUBLISHED Published: 2021-12-08T21:21:41 Last Updated: 2024-08-04T01:44:23.527Z Vendors: Mozilla Products: Firefox, Thunderbird, Firefox ESR Problem Types: Opportunistic Encryption in HTTP2 could be used to bypass the Same-Origin-Policy on services hosted on other ports Description: The Opportunistic Encryption feature of HTTP2 (RFC 8164) allows a connection to be transparently upgraded to TLS while retaining the visual properties of an HTTP connection, including being same-origin with unencrypted connections on port 80. However, if a second encrypted port on the same IP address (e.g. port 8443) did not opt-in to opportunistic encryption; a network attacker coul
crypted port on the same IP address (e.g. port 8443) did not opt-in to opportunistic encryption; a network attacker could forward a connection from the browser to port 443 to port 8443, causing the browser to treat the content of port 8443 as same-origin with HTTP. This was resolved by disabling the Opportunistic Encryption feature, which had low usage. This vulnerability affects Firefox < 94, Thunderbird < 91.3, and Firefox ESR < 91.3. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2021-49/ - https://www.mozilla.org/security/advisories/mfsa2021-50/ - https://www.mozilla.org/security/advisories/mfsa2021-48/ - https://bugzilla.
illa.org/security/advisories/mfsa2021-50/ - https://www.mozilla.org/security/advisories/mfsa2021-48/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1730935 - https://www.debian.org/security/2021/dsa-5026 - https://lists.debian.org/debian-lts-announce/2021/12/msg00030.html - https://www.debian.org/security/2022/dsa-5034 - https://lists.debian.org/debian-lts-announce/2022/01/msg00001.html - https://security.gentoo.org/glsa/202202-03 - https://security.gentoo.org/glsa/202208-14
CVE ID: CVE-2021-38508 State: PUBLISHED Published: 2021-12-08T21:21:35 Last Updated: 2024-08-04T01:44:23.522Z Vendors: Mozilla Products: Firefox, Thunderbird, Firefox ESR Problem Types: Permission Prompt could be overlaid, resulting in user confusion and potential spoofing Description: By displaying a form validity message in the correct location at the same time as a permission prompt (such as for geolocation), the validity message could have obscured the prompt, resulting in the user potentially being tricked into granting the permission. This vulnerability affects Firefox < 94, Thunderbird < 91.3, and Firefox ESR < 91.3. Additional Analyst Notes: - CVE Program Container: References: - htt