Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-3980 State: PUBLISHED Published: 2012-08-29T10:00:00 Last Updated: 2024-08-06T20:21:04.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web console in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, and Thunderbird ESR 10.x before 10.0.7 allows user-assisted remote attackers to execute arbitrary JavaScript code with chrome privileges via a crafted web site that injects this code and triggers an eval operation. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17000 - http://rhn.redhat.com/errata/RHSA-2012-1211.html - h
/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17000 - http://rhn.redhat.com/errata/RHSA-2012-1211.html - http://www.securityfocus.com/bid/55257 - https://bugzilla.mozilla.org/show_bug.cgi?id=771859 - http://www.mozilla.org/security/announce/2012/mfsa2012-72.html - http://www.ubuntu.com/usn/USN-1548-1 - http://www.ubuntu.com/usn/USN-1548-2 - http://rhn.redhat.com/errata/RHSA-2012-1210.html - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html - http://www.xerox.com/download/security/security-bulletin/1628
use.org/opensuse-security-announce/2012-08/msg00028.html - http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf
CVE ID: CVE-2012-3981 State: PUBLISHED Published: 2012-09-04T10:00:00 Last Updated: 2024-08-06T20:21:04.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: Auth/Verify/LDAP.pm in Bugzilla 2.x and 3.x before 3.6.11, 3.7.x and 4.0.x before 4.0.8, 4.1.x and 4.2.x before 4.2.3, and 4.3.x before 4.3.3 does not restrict the characters in a username, which might allow remote attackers to inject data into an LDAP directory via a crafted login attempt. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/85072 - https://bugzilla.mozilla.org/show_bug.cgi?id=785470 - http://www.bugzilla.org/security/3.6.10/ - http://www.mandriva.com/security/advisories?name=MDVS
how_bug.cgi?id=785470 - http://www.bugzilla.org/security/3.6.10/ - http://www.mandriva.com/security/advisories?name=MDVSA-2013:066 - https://bugzilla.mozilla.org/show_bug.cgi?id=785112 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78193
CVE ID: CVE-2012-3982 State: PUBLISHED Published: 2012-10-10T17:00:00 Last Updated: 2024-08-06T20:21:04.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/50904 - http://secunia.com/advisories/50984 - http://secunia.com/advisories/5
eferences: - http://secunia.com/advisories/50904 - http://secunia.com/advisories/50984 - http://secunia.com/advisories/50935 - https://bugzilla.mozilla.org/show_bug.cgi?id=794025 - http://secunia.com/advisories/50856 - http://www.debian.org/security/2012/dsa-2565 - http://secunia.com/advisories/50892 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16612 - http://www.securityfocus.com/bid/55924 - http://www.debian.org/security/2012/dsa-2572 - http://www.mozilla.org/security/announce/2012/mfsa2012-74.html - http://rhn.redhat.com/errata/RHSA-2012-1351.html - http://secunia.com/advisories/50936 - http://secunia.com/advisories/51181 - http://secunia.com/ad
/RHSA-2012-1351.html - http://secunia.com/advisories/50936 - http://secunia.com/advisories/51181 - http://secunia.com/advisories/55318 - http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html - http://www.mandriva.com/security/advisories?name=MDVSA-2012:163 - https://bugzilla.mozilla.org/show_bug.cgi?id=790856 - http://www.ubuntu.com/usn/USN-1611-1 - http://www.debian.org/security/2012/dsa-2569 - https://bugzilla.mozilla.org/show_bug.cgi?id=783502
CVE ID: CVE-2012-3983 State: PUBLISHED Published: 2012-10-10T17:00:00 Last Updated: 2024-08-06T20:21:04.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/50904 - http://secunia.com/advisories/50984 - http://secunia.com/advisories/50935 - https://oval.cisecurity.org/repository/search/definition/oval
m/advisories/50984 - http://secunia.com/advisories/50935 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16901 - http://secunia.com/advisories/50856 - http://secunia.com/advisories/50892 - https://bugzilla.mozilla.org/show_bug.cgi?id=762920 - https://bugzilla.mozilla.org/show_bug.cgi?id=790865 - http://www.mozilla.org/security/announce/2012/mfsa2012-74.html - http://secunia.com/advisories/55318 - http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html - https://bugzilla.mozilla.org/show_bug.cgi?id=634444 - http://www.ubuntu.com/usn/USN-1611-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=768313
CVE ID: CVE-2012-3984 State: PUBLISHED Published: 2012-10-10T17:00:00 Last Updated: 2024-08-06T20:21:04.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly handle navigation away from a web page that has a SELECT element's menu active, which allows remote attackers to spoof page content via vectors involving absolute positioning and scrolling. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/50904 - http://secunia.com/advisories/50984 - http://secunia.com/advisories/50935 - http://secunia.com/advisories/50856 - http://secunia.com/advisories
sories/50984 - http://secunia.com/advisories/50935 - http://secunia.com/advisories/50856 - http://secunia.com/advisories/50892 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16184 - http://www.mozilla.org/security/announce/2012/mfsa2012-75.html - https://bugzilla.mozilla.org/show_bug.cgi?id=575294 - http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html - http://www.ubuntu.com/usn/USN-1611-1
CVE ID: CVE-2012-3985 State: PUBLISHED Published: 2012-10-10T17:00:00 Last Updated: 2024-08-06T20:21:04.211Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly implement the HTML5 Same Origin Policy, which allows remote attackers to conduct cross-site scripting (XSS) attacks by leveraging initial-origin access after document.domain has been set. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/50904 - http://secunia.com/advisories/50984 - http://secunia.com/advisories/50935 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.m
ries/50984 - http://secunia.com/advisories/50935 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16108 - http://secunia.com/advisories/50856 - http://osvdb.org/86106 - http://secunia.com/advisories/50892 - https://bugzilla.mozilla.org/show_bug.cgi?id=655649 - http://www.mozilla.org/security/announce/2012/mfsa2012-76.html - http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html - http://www.ubuntu.com/usn/USN-1611-1
CVE ID: CVE-2012-3986 State: PUBLISHED Published: 2012-10-10T17:00:00 Last Updated: 2024-08-06T20:21:04.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly restrict calls to DOMWindowUtils (aka nsDOMWindowUtils) methods, which allows remote attackers to bypass intended access restrictions via crafted JavaScript code. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=775868 - http://secunia.com/advisories/50904 - http://secunia.com/advisories/50984 - http://sec
illa.org/show_bug.cgi?id=775868 - http://secunia.com/advisories/50904 - http://secunia.com/advisories/50984 - http://secunia.com/advisories/50935 - http://www.mozilla.org/security/announce/2012/mfsa2012-77.html - http://secunia.com/advisories/50856 - http://www.debian.org/security/2012/dsa-2565 - http://secunia.com/advisories/50892 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16834 - http://www.debian.org/security/2012/dsa-2572 - http://rhn.redhat.com/errata/RHSA-2012-1351.html - http://secunia.com/advisories/50936 - http://secunia.com/advisories/51181 - http://secunia.com/advisories/55318 - http://lists.opensuse.org/opensuse-security-announce/2012
a.com/advisories/51181 - http://secunia.com/advisories/55318 - http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html - http://www.mandriva.com/security/advisories?name=MDVSA-2012:163 - http://www.securityfocus.com/bid/55922 - http://www.ubuntu.com/usn/USN-1611-1 - http://www.debian.org/security/2012/dsa-2569
CVE ID: CVE-2012-3987 State: PUBLISHED Published: 2012-10-10T17:00:00 Last Updated: 2024-08-06T20:21:04.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 16.0 on Android assigns chrome privileges to Reader Mode pages, which allows user-assisted remote attackers to bypass intended access restrictions via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/86107 - http://secunia.com/advisories/50856 - https://bugzilla.mozilla.org/show_bug.cgi?id=778582 - http://www.mozilla.org/security/announce/2012/mfsa2012-78.html - http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html
CVE ID: CVE-2012-3988 State: PUBLISHED Published: 2012-10-10T17:00:00 Last Updated: 2024-08-06T20:21:04.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 might allow user-assisted remote attackers to execute arbitrary code via vectors involving use of mozRequestFullScreen to enter full-screen mode, and use of the history.back method for backwards history navigation. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/50904 - http://secunia.com/advisories/5098
t Notes: - CVE Program Container: References: - http://secunia.com/advisories/50904 - http://secunia.com/advisories/50984 - http://secunia.com/advisories/50935 - https://exchange.xforce.ibmcloud.com/vulnerabilities/79149 - http://secunia.com/advisories/50856 - http://secunia.com/advisories/50892 - http://rhn.redhat.com/errata/RHSA-2012-1351.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16334 - http://osvdb.org/86109 - http://secunia.com/advisories/50936 - http://secunia.com/advisories/55318 - https://bugzilla.mozilla.org/show_bug.cgi?id=725770 - http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html - http://www.mandriva.com
bug.cgi?id=725770 - http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html - http://www.mandriva.com/security/advisories?name=MDVSA-2012:163 - http://www.mozilla.org/security/announce/2012/mfsa2012-79.html - http://www.ubuntu.com/usn/USN-1611-1
CVE ID: CVE-2012-3989 State: PUBLISHED Published: 2012-10-10T17:00:00 Last Updated: 2024-08-06T20:21:04.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly perform a cast of an unspecified variable during use of the instanceof operator on a JavaScript object, which allows remote attackers to execute arbitrary code or cause a denial of service (assertion failure) via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/50904 - http://secunia.com/advisories/50984 - http://secunia.com/advisories/50935 - https://bugzilla.mozilla
/advisories/50904 - http://secunia.com/advisories/50984 - http://secunia.com/advisories/50935 - https://bugzilla.mozilla.org/show_bug.cgi?id=783867 - http://secunia.com/advisories/50856 - http://secunia.com/advisories/50892 - http://osvdb.org/86097 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16814 - http://www.mozilla.org/security/announce/2012/mfsa2012-80.html - http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html - http://www.ubuntu.com/usn/USN-1611-1
CVE ID: CVE-2012-3990 State: PUBLISHED Published: 2012-10-10T17:00:00 Last Updated: 2024-08-06T20:21:04.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the IME State Manager implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code via unspecified vectors, related to the nsIContent::GetNameSpaceID function. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/50904 - http://secunia.com/advisories/50984 - http://secunia.com/advisories/50935 - http:/
http://secunia.com/advisories/50904 - http://secunia.com/advisories/50984 - http://secunia.com/advisories/50935 - http://www.mozilla.org/security/announce/2012/mfsa2012-87.html - http://secunia.com/advisories/50856 - http://www.debian.org/security/2012/dsa-2565 - http://secunia.com/advisories/50892 - https://exchange.xforce.ibmcloud.com/vulnerabilities/79172 - http://www.debian.org/security/2012/dsa-2572 - http://rhn.redhat.com/errata/RHSA-2012-1351.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16642 - http://secunia.com/advisories/50936 - http://secunia.com/advisories/51181 - https://bugzilla.mozilla.org/show_bug.cgi?id=787704 - http://secunia
ories/50936 - http://secunia.com/advisories/51181 - https://bugzilla.mozilla.org/show_bug.cgi?id=787704 - http://secunia.com/advisories/55318 - http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html - http://www.mandriva.com/security/advisories?name=MDVSA-2012:163 - http://www.ubuntu.com/usn/USN-1611-1 - http://www.debian.org/security/2012/dsa-2569
CVE ID: CVE-2012-3991 State: PUBLISHED Published: 2012-10-10T17:00:00 Last Updated: 2024-08-06T20:21:04.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly restrict JSAPI access to the GetProperty function, which allows remote attackers to bypass the Same Origin Policy and possibly have unspecified other impact via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/50904 - http://secunia.com/advisories/50984 - http://secunia.com/advisories/50935 - https://
tp://secunia.com/advisories/50904 - http://secunia.com/advisories/50984 - http://secunia.com/advisories/50935 - https://bugzilla.mozilla.org/show_bug.cgi?id=783260 - http://secunia.com/advisories/50856 - http://www.debian.org/security/2012/dsa-2565 - http://secunia.com/advisories/50892 - http://www.securityfocus.com/bid/55930 - http://www.debian.org/security/2012/dsa-2572 - http://rhn.redhat.com/errata/RHSA-2012-1351.html - http://www.mozilla.org/security/announce/2012/mfsa2012-81.html - http://osvdb.org/86098 - http://secunia.com/advisories/50936 - http://secunia.com/advisories/51181 - http://secunia.com/advisories/55318 - http://lists.opensuse.org/opensuse-security-announce/2012-10/msg0001
ories/51181 - http://secunia.com/advisories/55318 - http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html - http://www.mandriva.com/security/advisories?name=MDVSA-2012:163 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16646 - http://www.ubuntu.com/usn/USN-1611-1 - http://www.debian.org/security/2012/dsa-2569
CVE ID: CVE-2012-3992 State: PUBLISHED Published: 2012-10-10T17:00:00 Last Updated: 2024-08-06T20:21:04.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly manage history data, which allows remote attackers to conduct cross-site scripting (XSS) attacks or obtain sensitive POST content via vectors involving a location.hash write operation and history navigation that triggers the loading of a URL into the history object. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/50904
he history object. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/50904 - http://secunia.com/advisories/50984 - http://secunia.com/advisories/50935 - http://www.mozilla.org/security/announce/2012/mfsa2012-84.html - http://secunia.com/advisories/50856 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16987 - http://secunia.com/advisories/50892 - http://www.securityfocus.com/bid/56128 - http://rhn.redhat.com/errata/RHSA-2012-1351.html - http://secunia.com/advisories/50936 - http://secunia.com/advisories/55318 - http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html - http://www.mandriva.c
om/advisories/55318 - http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html - http://www.mandriva.com/security/advisories?name=MDVSA-2012:163 - https://bugzilla.mozilla.org/show_bug.cgi?id=775009 - http://www.ubuntu.com/usn/USN-1611-1
CVE ID: CVE-2012-3993 State: PUBLISHED Published: 2012-10-10T17:00:00 Last Updated: 2024-08-06T20:21:04.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 does not properly interact with failures of InstallTrigger methods, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges via a crafted web site, related to an "XrayWrapper pollution" issue. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/50904 - http
tion" issue. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/50904 - http://secunia.com/advisories/50984 - http://secunia.com/advisories/50935 - http://www.mozilla.org/security/announce/2012/mfsa2012-83.html - http://secunia.com/advisories/50856 - http://secunia.com/advisories/50892 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16718 - http://rhn.redhat.com/errata/RHSA-2012-1351.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/79153 - http://secunia.com/advisories/50936 - http://osvdb.org/86111 - https://bugzilla.mozilla.org/show_bug.cgi?id=768101 - http://secunia.com/advisories/55318 - http:
tp://osvdb.org/86111 - https://bugzilla.mozilla.org/show_bug.cgi?id=768101 - http://secunia.com/advisories/55318 - http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html - http://www.mandriva.com/security/advisories?name=MDVSA-2012:163 - http://www.ubuntu.com/usn/USN-1611-1 - http://www.securityfocus.com/bid/56119
CVE ID: CVE-2012-3994 State: PUBLISHED Published: 2012-10-10T17:00:00 Last Updated: 2024-08-06T20:21:04.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allow remote attackers to conduct cross-site scripting (XSS) attacks via a binary plugin that uses Object.defineProperty to shadow the top object, and leverages the relationship between top.location and the location property. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/50904 - http://secunia.com/advisories/50984 - http://secunia.co
m Container: References: - http://secunia.com/advisories/50904 - http://secunia.com/advisories/50984 - http://secunia.com/advisories/50935 - http://osvdb.org/86110 - http://secunia.com/advisories/50856 - https://bugzilla.mozilla.org/show_bug.cgi?id=765527 - http://secunia.com/advisories/50892 - http://www.securityfocus.com/bid/56118 - http://rhn.redhat.com/errata/RHSA-2012-1351.html - http://secunia.com/advisories/50936 - http://secunia.com/advisories/55318 - http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html - http://www.mandriva.com/security/advisories?name=MDVSA-2012:163 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16798
ries?name=MDVSA-2012:163 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16798 - http://www.ubuntu.com/usn/USN-1611-1 - http://www.mozilla.org/security/announce/2012/mfsa2012-82.html
CVE ID: CVE-2012-3995 State: PUBLISHED Published: 2012-10-10T17:00:00 Last Updated: 2024-08-06T20:21:04.039Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IsCSSWordSpacingSpace function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/50904 - http://secunia.com/advisories/50984 - http://secunia.com/advisories/50935 - http://secunia.com/advisories/50856 - http
- http://secunia.com/advisories/50984 - http://secunia.com/advisories/50935 - http://secunia.com/advisories/50856 - http://secunia.com/advisories/50892 - http://rhn.redhat.com/errata/RHSA-2012-1351.html - https://bugzilla.mozilla.org/show_bug.cgi?id=765621 - http://secunia.com/advisories/50936 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16808 - http://secunia.com/advisories/55318 - http://www.securityfocus.com/bid/56136 - http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/79156 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:163 - http://www.ubuntu.com/usn
.com/vulnerabilities/79156 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:163 - http://www.ubuntu.com/usn/USN-1611-1 - http://www.mozilla.org/security/announce/2012/mfsa2012-85.html
CVE ID: CVE-2012-3996 State: PUBLISHED Published: 2012-07-12T19:00:00Z Last Updated: 2024-09-17T02:16:33.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: TikiWiki CMS/Groupware 8.3 and earlier allows remote attackers to obtain the installation path via a direct request to (1) admin/include_calendar.php, (2) tiki-rss_error.php, or (3) tiki-watershed_service.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/19630 - http://www.exploit-db.com/exploits/19573 - http://www.osvdb.org/83533 - http://info.tiki.org/article191-Tiki-Releases-8-4 - http://archives.neohapsis.com/archives/bugtraq/2012-07/0020.html - http://info.tiki.org/a