Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-2806 State: PUBLISHED Published: 2016-04-30T17:00:00 Last Updated: 2024-08-05T23:32:21.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 46.0 and Firefox ESR 45.x before 45.1 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1253099 - https://bugzilla.mozilla.org/show_bug.cgi?id=1242810 - http://www.mozilla.org/security/announce/2016/mfsa2016-39.html - http://lists.opensu
zilla.org/show_bug.cgi?id=1242810 - http://www.mozilla.org/security/announce/2016/mfsa2016-39.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00005.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1242668 - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://rhn.redhat.com/errata/RHSA-2016-0695.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1231919 - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1258231 - http://www.securitytracker.com/id/1035692 - https://bugzilla.mozilla.org/show_bug.cgi?id=1255949 - http://lists.opensuse.org/opensuse-security-
ker.com/id/1035692 - https://bugzilla.mozilla.org/show_bug.cgi?id=1255949 - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1254122 - http://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1260439 - http://www.ubuntu.com/usn/USN-2936-2 - https://bugzilla.mozilla.org/show_bug.cgi?id=1212328 - https://bugzilla.mozilla.org/show_bug.cgi?id=1238592 - http://www.debian.org/security/2016/dsa-3601 - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html - https://security.gentoo.org/glsa/201701-15 - https://bugzilla.mozilla.org/show_bug.cgi?id=1256065
016-07/msg00007.html - https://security.gentoo.org/glsa/201701-15 - https://bugzilla.mozilla.org/show_bug.cgi?id=1256065 - https://bugzilla.mozilla.org/show_bug.cgi?id=1228882 - http://www.ubuntu.com/usn/USN-2936-1 - http://www.ubuntu.com/usn/USN-2936-3 - https://bugzilla.mozilla.org/show_bug.cgi?id=1251922
CVE ID: CVE-2016-2807 State: PUBLISHED Published: 2016-04-30T17:00:00 Last Updated: 2024-08-05T23:32:20.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 46.0, Firefox ESR 38.x before 38.8, and Firefox ESR 45.x before 45.1 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1252707 - http://www.debian.org/security/2016/dsa-3576 - http://www.mozilla.org/security/announce/2016/mfsa2016-39.htm
d=1252707 - http://www.debian.org/security/2016/dsa-3576 - http://www.mozilla.org/security/announce/2016/mfsa2016-39.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1254622 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00005.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://rhn.redhat.com/errata/RHSA-2016-0695.html - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html - http://www.securitytracker.com/id/1035692 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00057.html - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html - https://bugzilla.mozilla.org/sho
057.html - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1254876 - http://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html - http://www.ubuntu.com/usn/USN-2936-2 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00054.html - http://www.ubuntu.com/usn/USN-2973-1 - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html - https://security.gentoo.org/glsa/201701-15 - http://www.debian.org/security/2016/dsa-3559 - https://bugzilla.mozilla.org/show_bug.cgi?id=1187420 - http://www.ubuntu.com/usn/USN-2936-1 - http://www.ubuntu.com/usn/USN-2936-3 - http://lists.opensuse.org/opensus
187420 - http://www.ubuntu.com/usn/USN-2936-1 - http://www.ubuntu.com/usn/USN-2936-3 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00023.html - http://rhn.redhat.com/errata/RHSA-2016-1041.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1254164
CVE ID: CVE-2016-2808 State: PUBLISHED Published: 2016-04-30T17:00:00 Last Updated: 2024-08-05T23:32:21.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: The watch implementation in the JavaScript engine in Mozilla Firefox before 46.0, Firefox ESR 38.x before 38.8, and Firefox ESR 45.x before 45.1 allows remote attackers to execute arbitrary code or cause a denial of service (generation-count overflow, out-of-bounds HashMap write access, and application crash) via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00005.html - http://www.oracle.com/technetwork/topics/security/linux
.opensuse.org/opensuse-security-announce/2016-05/msg00005.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://rhn.redhat.com/errata/RHSA-2016-0695.html - http://www.securitytracker.com/id/1035692 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00057.html - http://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html - http://www.ubuntu.com/usn/USN-2936-2 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00054.html - http://www.mozilla.org/security/announce/2016/mfsa2016-47.html - https://security.gentoo.org/glsa/201701-15 - http://www.debian.org/security/2016/dsa-3559 - http://www.ubuntu.com/usn/USN-2936-1
ecurity.gentoo.org/glsa/201701-15 - http://www.debian.org/security/2016/dsa-3559 - http://www.ubuntu.com/usn/USN-2936-1 - http://www.ubuntu.com/usn/USN-2936-3 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00023.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1246061
CVE ID: CVE-2016-2809 State: PUBLISHED Published: 2016-04-30T17:00:00 Last Updated: 2024-08-05T23:32:21.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Mozilla Maintenance Service updater in Mozilla Firefox before 46.0 on Windows allows user-assisted remote attackers to delete arbitrary files by leveraging certain local file execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035692 - https://bugzilla.mozilla.org/show_bug.cgi?id=1212939 - http://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html - https://security.gentoo.org/glsa/201701-15 - http://www.mozilla.org/security/announce/2016/mfsa2016-40.html
CVE ID: CVE-2016-2810 State: PUBLISHED Published: 2016-04-30T17:00:00 Last Updated: 2024-08-05T23:32:21.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 46.0 on Android before 5.0 allows attackers to bypass intended Signature access requirements via a crafted application that leverages content-provider permissions, as demonstrated by reading the browser history or a saved password. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2016/mfsa2016-41.html - http://www.securitytracker.com/id/1035692 - http://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html - https://bugzilla.mozilla.org/show_bu
com/id/1035692 - http://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1229681 - https://security.gentoo.org/glsa/201701-15
CVE ID: CVE-2016-2811 State: PUBLISHED Published: 2016-04-30T17:00:00 Last Updated: 2024-08-05T23:32:21.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the ServiceWorkerInfo class in the Service Worker subsystem in Mozilla Firefox before 46.0 allows remote attackers to execute arbitrary code via vectors related to the BeginReading method. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00005.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1252330 - http://www.securitytracker.com/id/1035692 - http://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html - htt
330 - http://www.securitytracker.com/id/1035692 - http://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html - http://www.ubuntu.com/usn/USN-2936-2 - https://security.gentoo.org/glsa/201701-15 - http://www.mozilla.org/security/announce/2016/mfsa2016-42.html - http://www.ubuntu.com/usn/USN-2936-1 - http://www.ubuntu.com/usn/USN-2936-3
CVE ID: CVE-2016-2812 State: PUBLISHED Published: 2016-04-30T17:00:00 Last Updated: 2024-08-05T23:32:21.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the get implementation in the ServiceWorkerManager class in the Service Worker subsystem in Mozilla Firefox before 46.0 allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00005.html - http://www.securitytracker.com/id/1035692 - http://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html
005.html - http://www.securitytracker.com/id/1035692 - http://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html - http://www.ubuntu.com/usn/USN-2936-2 - https://bugzilla.mozilla.org/show_bug.cgi?id=1261776 - https://security.gentoo.org/glsa/201701-15 - http://www.mozilla.org/security/announce/2016/mfsa2016-42.html - http://www.ubuntu.com/usn/USN-2936-1 - http://www.ubuntu.com/usn/USN-2936-3
CVE ID: CVE-2016-2813 State: PUBLISHED Published: 2016-04-30T17:00:00 Last Updated: 2024-08-05T23:32:21.345Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 46.0 on Android does not properly restrict JavaScript access to orientation and motion data, which allows remote attackers to obtain sensitive information about a device's physical environment, and possibly discover PIN values, via a crafted web site, a similar issue to CVE-2016-1780. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035692 - https://bugzilla.mozilla.org/show_bug.cgi?id=1197901 - http://lists.opensuse.org/opensuse-updates/2016-05/msg00038
692 - https://bugzilla.mozilla.org/show_bug.cgi?id=1197901 - http://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html - http://www.mozilla.org/security/announce/2016/mfsa2016-43.html - https://security.gentoo.org/glsa/201701-15 - http://dl.acm.org/citation.cfm?id=2714650
CVE ID: CVE-2016-2814 State: PUBLISHED Published: 2016-04-30T17:00:00 Last Updated: 2024-08-05T23:32:21.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the stagefright::SampleTable::parseSampleCencInfo function in libstagefright in Mozilla Firefox before 46.0, Firefox ESR 38.x before 38.8, and Firefox ESR 45.x before 45.1 allows remote attackers to execute arbitrary code via crafted CENC offsets that lead to mismanagement of the sizes table. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00005.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr
rg/opensuse-security-announce/2016-05/msg00005.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://rhn.redhat.com/errata/RHSA-2016-0695.html - http://www.securitytracker.com/id/1035692 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00057.html - http://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html - http://www.ubuntu.com/usn/USN-2936-2 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00054.html - https://security.gentoo.org/glsa/201701-15 - http://www.mozilla.org/security/announce/2016/mfsa2016-44.html - http://www.debian.org/security/2016/dsa-3559 - http://www.ubuntu.com/usn/USN-2936-1 - http://ww
/2016/mfsa2016-44.html - http://www.debian.org/security/2016/dsa-3559 - http://www.ubuntu.com/usn/USN-2936-1 - http://www.ubuntu.com/usn/USN-2936-3 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00023.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1254721
CVE ID: CVE-2016-2815 State: PUBLISHED Published: 2016-06-13T10:00:00 Last Updated: 2024-08-05T23:32:20.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036057 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00016.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1242798 - https://bugzilla.mozilla.org/show_bug.cgi?id=126430
g00016.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1242798 - https://bugzilla.mozilla.org/show_bug.cgi?id=1264300 - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1241896 - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1243466 - https://bugzilla.mozilla.org/show_bug.cgi?id=1271037 - http://www.mozilla.org/security/announce/2016/mfsa2016-49.html - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00014.html - https://bugzilla.mozilla.org/show_bug.
ml - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00014.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1245743 - http://www.ubuntu.com/usn/USN-2993-1 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00055.html - http://www.securityfocus.com/bid/91075
CVE ID: CVE-2016-2816 State: PUBLISHED Published: 2016-04-30T17:00:00 Last Updated: 2024-08-05T23:32:21.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 46.0 allows remote attackers to bypass the Content Security Policy (CSP) protection mechanism via the multipart/x-mixed-replace content type. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00005.html - http://www.securitytracker.com/id/1035692 - http://www.mozilla.org/security/announce/2016/mfsa2016-45.html - http://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html - http://www.ubuntu.com/usn/USN-2936-2 - https://se
l - http://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html - http://www.ubuntu.com/usn/USN-2936-2 - https://security.gentoo.org/glsa/201701-15 - http://www.ubuntu.com/usn/USN-2936-1 - http://www.ubuntu.com/usn/USN-2936-3 - https://bugzilla.mozilla.org/show_bug.cgi?id=1223743
CVE ID: CVE-2016-2817 State: PUBLISHED Published: 2016-04-30T17:00:00 Last Updated: 2024-08-05T23:32:21.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WebExtension sandbox feature in browser/components/extensions/ext-tabs.js in Mozilla Firefox before 46.0 does not properly restrict principal inheritance during chrome.tabs.create and chrome.tabs.update API calls, which allows remote attackers to conduct Universal XSS (UXSS) attacks via a crafted extension that accesses a (1) javascript: or (2) data: URL. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00005.html - http://www.securitytracker.c
References: - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00005.html - http://www.securitytracker.com/id/1035692 - http://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html - http://www.ubuntu.com/usn/USN-2936-2 - https://security.gentoo.org/glsa/201701-15 - http://www.ubuntu.com/usn/USN-2936-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=1227462 - http://www.ubuntu.com/usn/USN-2936-3 - http://www.mozilla.org/security/announce/2016/mfsa2016-46.html
CVE ID: CVE-2016-2818 State: PUBLISHED Published: 2016-06-13T10:00:00 Last Updated: 2024-08-05T23:32:21.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036057 - http://www.debian.org/security/2016/dsa-3647 - https://bugzilla.mozilla.org/show_bug.cgi?id=1234147 - https://bugzilla.mozilla.org/show_bug.cgi?id=126
/2016/dsa-3647 - https://bugzilla.mozilla.org/show_bug.cgi?id=1234147 - https://bugzilla.mozilla.org/show_bug.cgi?id=1265577 - https://access.redhat.com/errata/RHSA-2016:1217 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00016.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1256739 - https://bugzilla.mozilla.org/show_bug.cgi?id=1261752 - https://bugzilla.mozilla.org/show_bug.cgi?id=1269729 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1256968 - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://lists.opensuse.org/opensuse-security-announce/2
m/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1264575 - https://bugzilla.mozilla.org/show_bug.cgi?id=1267130 - https://access.redhat.com/errata/RHSA-2016:1392 - http://www.mozilla.org/security/announce/2016/mfsa2016-49.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1261230 - https://bugzilla.mozilla.org/show_bug.cgi?id=1273202 - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1256493 - https://bugzi
/opensuse-security-announce/2016-07/msg00007.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1256493 - https://bugzilla.mozilla.org/show_bug.cgi?id=1263384 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00014.html - http://www.ubuntu.com/usn/USN-3023-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=1273701 - http://www.ubuntu.com/usn/USN-2993-1 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00055.html - http://www.securityfocus.com/bid/91075 - http://www.debian.org/security/2016/dsa-3600
CVE ID: CVE-2016-2819 State: PUBLISHED Published: 2016-06-13T10:00:00 Last Updated: 2024-08-05T23:32:21.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allows remote attackers to execute arbitrary code via foreign-context HTML5 fragments, as demonstrated by fragments within an SVG element. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036057 - https://access.redhat.com/errata/RHSA-2016:1217 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00016.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr
rg/opensuse-security-announce/2016-06/msg00016.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - https://www.exploit-db.com/exploits/44293/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1270381 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00014.html - http://www.mozilla.org/security/announce/2016/mfsa2016-50.html - http://www.ubuntu.com/usn/USN-2993-1 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00055.html - http://www.securityfocus.com/bid/91075 - http://www.debian.org/security/2016/dsa-3600
CVE ID: CVE-2016-2820 State: PUBLISHED Published: 2016-04-30T17:00:00 Last Updated: 2024-08-05T23:32:21.002Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Firefox Health Reports (aka FHR or about:healthreport) feature in Mozilla Firefox before 46.0 does not properly restrict the origin of events, which makes it easier for remote attackers to modify sharing preferences by leveraging access to the remote-report IFRAME element. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00005.html - http://www.securitytracker.com/id/1035692 - http://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html - h
.html - http://www.securitytracker.com/id/1035692 - http://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html - http://www.ubuntu.com/usn/USN-2936-2 - https://security.gentoo.org/glsa/201701-15 - http://www.ubuntu.com/usn/USN-2936-1 - http://www.ubuntu.com/usn/USN-2936-3 - http://www.mozilla.org/security/announce/2016/mfsa2016-48.html - https://bugzilla.mozilla.org/show_bug.cgi?id=870870
CVE ID: CVE-2016-2821 State: PUBLISHED Published: 2016-06-13T10:00:00 Last Updated: 2024-08-05T23:32:21.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the mozilla::dom::Element class in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2, when contenteditable mode is enabled, allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) by triggering deletion of DOM elements that were created in the editor. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036057 - http://www.mozilla.org/security/announce/2016/mfsa2016-51.html - https://access.
://www.securitytracker.com/id/1036057 - http://www.mozilla.org/security/announce/2016/mfsa2016-51.html - https://access.redhat.com/errata/RHSA-2016:1217 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00016.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00014.html - http://www.ubuntu.com/usn/USN-2993-1 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00055.html - http://www.securityfocus.com/bid/91075 - http://www.debian.org/security/2016/dsa-3600 - https://bugzilla.mozilla.org/show_bug.cgi?id=1271460
CVE ID: CVE-2016-2822 State: PUBLISHED Published: 2016-06-13T10:00:00 Last Updated: 2024-08-05T23:32:21.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allow remote attackers to spoof the address bar via a SELECT element with a persistent menu. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036057 - https://access.redhat.com/errata/RHSA-2016:1217 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00016.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://www.mozilla.org/security/announce/2016/mfsa2016-5
technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://www.mozilla.org/security/announce/2016/mfsa2016-52.html - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00014.html - http://www.ubuntu.com/usn/USN-2993-1 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00055.html - http://www.securityfocus.com/bid/91075 - https://bugzilla.mozilla.org/show_bug.cgi?id=1273129 - http://www.debian.org/security/2016/dsa-3600