<?xml version='1.0' encoding='UTF-8'?>
<nvd xmlns:cpe-lang="http://cpe.mitre.org/language/2.0" xmlns:vuln="http://scap.nist.gov/schema/vulnerability/0.4" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:scap-core="http://scap.nist.gov/schema/scap-core/0.1" xmlns="http://scap.nist.gov/schema/feed/vulnerability/2.0" xmlns:patch="http://scap.nist.gov/schema/patch/0.1" xmlns:cvss="http://scap.nist.gov/schema/cvss-v2/0.2" nvd_xml_version="2.0" pub_date="2014-05-03T08:01:20" xsi:schemaLocation="http://scap.nist.gov/schema/patch/0.1 http://nvd.nist.gov/schema/patch_0.1.xsd http://scap.nist.gov/schema/scap-core/0.1 http://nvd.nist.gov/schema/scap-core_0.1.xsd http://scap.nist.gov/schema/feed/vulnerability/2.0 http://nvd.nist.gov/schema/nvd-cve-feed_2.0.xsd">
  <entry id="CVE-2001-1593">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:gnu:a2ps:4.10.3"/>
        <cpe-lang:fact-ref name="cpe:/a:gnu:a2ps:4.12"/>
        <cpe-lang:fact-ref name="cpe:/a:gnu:a2ps:4.10.4"/>
        <cpe-lang:fact-ref name="cpe:/a:gnu:a2ps:4.14"/>
        <cpe-lang:fact-ref name="cpe:/a:gnu:a2ps:4.13b"/>
        <cpe-lang:fact-ref name="cpe:/a:gnu:a2ps:4.13"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:gnu:a2ps:4.13</vuln:product>
      <vuln:product>cpe:/a:gnu:a2ps:4.10.4</vuln:product>
      <vuln:product>cpe:/a:gnu:a2ps:4.12</vuln:product>
      <vuln:product>cpe:/a:gnu:a2ps:4.10.3</vuln:product>
      <vuln:product>cpe:/a:gnu:a2ps:4.13b</vuln:product>
      <vuln:product>cpe:/a:gnu:a2ps:4.14</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2001-1593</vuln:cve-id>
    <vuln:published-datetime>2014-04-05T17:55:06.097-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-30T21:20:51.027-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>2.1</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-07T11:31:06.027-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-59"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1060630" xml:lang="en">https://bugzilla.redhat.com/show_bug.cgi?id=1060630</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=737385" xml:lang="en">https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=737385</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>DEBIAN</vuln:source>
      <vuln:reference href="http://www.debian.org/security/2014/dsa-2892" xml:lang="en">DSA-2892</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://seclists.org/oss-sec/2014/q1/257" xml:lang="en">[oss-security] 20140205 Re: CVE request: a2ps insecure temporary file use</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://seclists.org/oss-sec/2014/q1/253" xml:lang="en">[oss-security] 20140204 Re: CVE request: a2ps insecure temporary file use</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://seclists.org/oss-sec/2014/q1/237" xml:lang="en">[oss-security] 20140205 Re: CVE request: a2ps insecure temporary file use</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://pkgs.fedoraproject.org/cgit/a2ps.git/plain/a2ps-4.13-security.patch" xml:lang="en">http://pkgs.fedoraproject.org/cgit/a2ps.git/plain/a2ps-4.13-security.patch</vuln:reference>
    </vuln:references>
    <vuln:summary>The tempname_ensure function in lib/routines.h in a2ps 4.14 and earlier, as used by the spy_user function and possibly other functions, allows local users to modify arbitrary files via a symlink attack on a temporary file.</vuln:summary>
  </entry>
  <entry id="CVE-2010-5105">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:blender:blender:2.63a"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:blender:blender:2.63a</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2010-5105</vuln:cve-id>
    <vuln:published-datetime>2014-04-27T16:55:23.383-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-28T13:07:11.647-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>3.3</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-28T13:07:11.413-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-59"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://developer.blender.org/T22509" xml:lang="en">https://developer.blender.org/T22509</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=584621" xml:lang="en">https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=584621</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://www.openwall.com/lists/oss-security/2012/09/07/13" xml:lang="en">[oss-security] 20120907 Re: CVE-2010 Request -- blender: Insecure temporary  file use by creating file string in undo save quit Blender kernel routine  (re-occurrence of CVE-2008-1103)</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://www.openwall.com/lists/oss-security/2012/09/06/3" xml:lang="en">[oss-security] 20120906 CVE-2010 Request -- blender: Insecure temporary  file use by creating file string in undo save quit Blender kernel routine  (re-occurrence of CVE-2008-1103)</vuln:reference>
    </vuln:references>
    <vuln:summary>The undo save quit routine in the kernel in Blender 2.5, 2.63a, and earlier allows local users to overwrite arbitrary files via a symlink attack on the quit.blend temporary file.  NOTE: this issue might be a regression of CVE-2008-1103.</vuln:summary>
  </entry>
  <entry id="CVE-2011-3152">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/o:canonical:ubuntu_linux:8.04:-:lts"/>
        <cpe-lang:fact-ref name="cpe:/o:canonical:ubuntu_linux:10.04:-:lts"/>
        <cpe-lang:fact-ref name="cpe:/o:canonical:ubuntu_linux:10.10"/>
        <cpe-lang:fact-ref name="cpe:/o:canonical:ubuntu_linux:11.04"/>
        <cpe-lang:fact-ref name="cpe:/o:canonical:ubuntu_linux:11.10"/>
        <cpe-lang:fact-ref name="cpe:/a:canonical:update-manager:1%3a0.87.24"/>
        <cpe-lang:fact-ref name="cpe:/a:canonical:update-manager:1%3a0.134.7"/>
        <cpe-lang:fact-ref name="cpe:/a:canonical:update-manager:1%3a0.142.19"/>
        <cpe-lang:fact-ref name="cpe:/a:canonical:update-manager:1%3a0.150"/>
        <cpe-lang:fact-ref name="cpe:/a:canonical:update-manager:1%3a0.152.25"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:canonical:update-manager:1%3a0.87.24</vuln:product>
      <vuln:product>cpe:/o:canonical:ubuntu_linux:11.04</vuln:product>
      <vuln:product>cpe:/o:canonical:ubuntu_linux:11.10</vuln:product>
      <vuln:product>cpe:/o:canonical:ubuntu_linux:10.04:-:lts</vuln:product>
      <vuln:product>cpe:/o:canonical:ubuntu_linux:10.10</vuln:product>
      <vuln:product>cpe:/a:canonical:update-manager:1%3a0.142.19</vuln:product>
      <vuln:product>cpe:/a:canonical:update-manager:1%3a0.152.25</vuln:product>
      <vuln:product>cpe:/o:canonical:ubuntu_linux:8.04:-:lts</vuln:product>
      <vuln:product>cpe:/a:canonical:update-manager:1%3a0.134.7</vuln:product>
      <vuln:product>cpe:/a:canonical:update-manager:1%3a0.150</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2011-3152</vuln:cve-id>
    <vuln:published-datetime>2014-04-27T16:55:23.463-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-28T13:31:19.020-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.4</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-28T13:31:18.910-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugs.launchpad.net/ubuntu/%2Bsource/update-manager/%2Bbug/881548" xml:lang="en">https://bugs.launchpad.net/ubuntu/%2Bsource/update-manager/%2Bbug/881548</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="http://xforce.iss.net/xforce/xfdb/71494" xml:lang="en">ubuntu-update-gpg-sec-bypass(71494)</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>UBUNTU</vuln:source>
      <vuln:reference href="http://www.ubuntu.com/usn/USN-1284-1" xml:lang="en">USN-1284-1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/50833" xml:lang="en">50833</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>OSVDB</vuln:source>
      <vuln:reference href="http://www.osvdb.org/77642" xml:lang="en">77642</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/47024" xml:lang="en">47024</vuln:reference>
    </vuln:references>
    <vuln:summary>DistUpgrade/DistUpgradeFetcherCore.py in Update Manager before 1:0.87.31.1, 1:0.134.x before 1:0.134.11.1, 1:0.142.x before 1:0.142.23.1, 1:0.150.x before 1:0.150.5.1, and 1:0.152.x before 1:0.152.25.5 on Ubuntu 8.04 through 11.10 does not verify the GPG signature before extracting an upgrade tarball, which allows man-in-the-middle attackers to (1) create or overwrite arbitrary files via a directory traversal attack using a crafted tar file, or (2) bypass authentication via a crafted meta-release file.</vuln:summary>
  </entry>
  <entry id="CVE-2011-3602">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:litech:router_advertisement_daemon:1.8.1"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:litech:router_advertisement_daemon:1.8.1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2011-3602</vuln:cve-id>
    <vuln:published-datetime>2014-04-27T17:55:05.430-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-28T14:30:28.767-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.4</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-28T14:30:28.733-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-22"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://github.com/reubenhwk/radvd/commit/92e22ca23e52066da2258df8c76a2dca8a428bcc" xml:lang="en">https://github.com/reubenhwk/radvd/commit/92e22ca23e52066da2258df8c76a2dca8a428bcc</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>UBUNTU</vuln:source>
      <vuln:reference href="http://www.ubuntu.com/usn/USN-1257-1" xml:lang="en">USN-1257-1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://www.openwall.com/lists/oss-security/2011/10/06/3" xml:lang="en">[oss-security] 20111007 radvd 1.8.2 released with security fixes</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.litech.org/radvd/CHANGES" xml:lang="en">http://www.litech.org/radvd/CHANGES</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>DEBIAN</vuln:source>
      <vuln:reference href="http://www.debian.org/security/2011/dsa-2323" xml:lang="en">DSA-2323</vuln:reference>
    </vuln:references>
    <vuln:summary>Directory traversal vulnerability in device-linux.c in the router advertisement daemon (radvd) before 1.8.2 allows local users to overwrite arbitrary files, and remote attackers to overwrite certain files, via a .. (dot dot) in an interface name.  NOTE: this can be leveraged with a symlink to overwrite arbitrary files.</vuln:summary>
  </entry>
  <entry id="CVE-2011-3603">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:litech:router_advertisement_daemon:1.8.1"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:litech:router_advertisement_daemon:1.8.1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2011-3603</vuln:cve-id>
    <vuln:published-datetime>2014-04-27T17:55:05.507-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-28T15:12:37.730-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.4</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-28T15:12:37.653-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-20"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://access.redhat.com/security/cve/CVE-2011-3603" xml:lang="en">https://access.redhat.com/security/cve/CVE-2011-3603</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://www.openwall.com/lists/oss-security/2011/10/06/3" xml:lang="en">[oss-security] 20111007 radvd 1.8.2 released with security fixes</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.litech.org/radvd/CHANGES" xml:lang="en">http://www.litech.org/radvd/CHANGES</vuln:reference>
    </vuln:references>
    <vuln:summary>The router advertisement daemon (radvd) before 1.8.2 does not properly handle errors in the privsep_init function, which causes the radvd daemon to run as root and has an unspecified impact.</vuln:summary>
  </entry>
  <entry id="CVE-2012-3415">
    <vuln:cve-id>CVE-2012-3415</vuln:cve-id>
    <vuln:published-datetime>2014-04-27T18:55:05.723-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-27T18:55:05.817-04:00</vuln:last-modified-datetime>
    <vuln:summary>** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2012-2401.  Reason: This candidate is a duplicate of CVE-2012-2401.  Notes: All CVE users should reference CVE-2012-2401 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage.</vuln:summary>
  </entry>
  <entry id="CVE-2012-4230">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:tinymce:tinymce:3.5.8"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:tinymce:tinymce:3.5.8</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2012-4230</vuln:cve-id>
    <vuln:published-datetime>2014-04-25T10:15:30.360-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-25T13:19:18.890-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-25T13:19:18.827-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-264"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="http://xforce.iss.net/xforce/xfdb/82744" xml:lang="en">tinymce-htmlentities-xss(82744)</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/58424" xml:lang="en">58424</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.madirish.net/554" xml:lang="en">http://www.madirish.net/554</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>FULLDISC</vuln:source>
      <vuln:reference href="http://seclists.org/fulldisclosure/2013/Mar/114" xml:lang="en">20130311 XSS Vulnerability in TinyMCE</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://packetstormsecurity.com/files/120750/TinyMCE-3.5.8-Cross-Site-Scripting.html" xml:lang="en">http://packetstormsecurity.com/files/120750/TinyMCE-3.5.8-Cross-Site-Scripting.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>OSVDB</vuln:source>
      <vuln:reference href="http://osvdb.org/91130" xml:lang="en">91130</vuln:reference>
    </vuln:references>
    <vuln:summary>The bbcode plugin in TinyMCE 3.5.8 does not properly enforce the TinyMCE security policy for the (1) encoding directive and (2) valid_elements attribute, which allows attackers to conduct cross-site scripting (XSS) attacks via application-specific vectors, as demonstrated using a textarea element.</vuln:summary>
  </entry>
  <entry id="CVE-2012-4410">
    <vuln:cve-id>CVE-2012-4410</vuln:cve-id>
    <vuln:published-datetime>2014-04-26T20:55:05.530-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-26T20:55:05.717-04:00</vuln:last-modified-datetime>
    <vuln:summary>** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none.</vuln:summary>
  </entry>
  <entry id="CVE-2013-0296">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:zlib:pigz:2.2.4-1"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:zlib:pigz:2.2.4-1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-0296</vuln:cve-id>
    <vuln:published-datetime>2014-04-27T17:55:05.570-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-28T15:28:07.040-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.4</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-28T15:28:06.977-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-264"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=700608" xml:lang="en">https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=700608</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://www.openwall.com/lists/oss-security/2013/02/16/3" xml:lang="en">[oss-security] 20130215 Re: CVE# request: pigz creates temp file with insecure  permissions</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://www.openwall.com/lists/oss-security/2013/02/15/4" xml:lang="en">[oss-security] 20130215 CVE# request: pigz creates temp file with insecure permissions</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://mail.zlib.net/pipermail/pigz-announce_zlib.net/2012-July/000006.html" xml:lang="en">[pigz-announce] 20120728 pigz version 2.2.5 released</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-updates/2013-03/msg00106.html" xml:lang="en">openSUSE-SU-2013:0540</vuln:reference>
    </vuln:references>
    <vuln:summary>Race condition in pigz before 2.2.5 uses permissions derived from the umask when compressing a file before setting that file's permissions to match those of the original file, which might allow local users to bypass intended access permissions while compression is occurring.</vuln:summary>
  </entry>
  <entry id="CVE-2013-1804">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:php-fusion:php-fusion:7.02.04"/>
        <cpe-lang:fact-ref name="cpe:/a:php-fusion:php-fusion:7.02.01"/>
        <cpe-lang:fact-ref name="cpe:/a:php-fusion:php-fusion:7.02.02"/>
        <cpe-lang:fact-ref name="cpe:/a:php-fusion:php-fusion:7.02.03"/>
        <cpe-lang:fact-ref name="cpe:/a:php-fusion:php-fusion:7.02.05"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:php-fusion:php-fusion:7.02.01</vuln:product>
      <vuln:product>cpe:/a:php-fusion:php-fusion:7.02.05</vuln:product>
      <vuln:product>cpe:/a:php-fusion:php-fusion:7.02.04</vuln:product>
      <vuln:product>cpe:/a:php-fusion:php-fusion:7.02.03</vuln:product>
      <vuln:product>cpe:/a:php-fusion:php-fusion:7.02.02</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-1804</vuln:cve-id>
    <vuln:published-datetime>2014-04-29T16:55:08.747-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-30T08:03:32.140-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-30T08:03:32.077-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.waraxe.us/advisory-97.html" xml:lang="en">http://www.waraxe.us/advisory-97.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.php-fusion.co.uk/news.php?readmore=569" xml:lang="en">http://www.php-fusion.co.uk/news.php?readmore=569</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://www.openwall.com/lists/oss-security/2013/03/03/2" xml:lang="en">[oss-security] 20130302 Re: CVE request: PHP-Fusion waraxe-2013-SA#097</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://www.openwall.com/lists/oss-security/2013/03/03/1" xml:lang="en">[oss-security] 20130303 CVE request: PHP-Fusion waraxe-2013-SA#097</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/52403" xml:lang="en">52403</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>FULLDISC</vuln:source>
      <vuln:reference href="http://seclists.org/fulldisclosure/2013/Feb/154" xml:lang="en">20130228 [waraxe-2013-SA#097] - Multiple Vulnerabilities in PHP-Fusion 7.02.05</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://packetstormsecurity.com/files/120598/PHP-Fusion-7.02.05-XSS-LFI-SQL-Injection.html" xml:lang="en">http://packetstormsecurity.com/files/120598/PHP-Fusion-7.02.05-XSS-LFI-SQL-Injection.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>OSVDB</vuln:source>
      <vuln:reference href="http://osvdb.org/90708" xml:lang="en">90708</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>OSVDB</vuln:source>
      <vuln:reference href="http://osvdb.org/90707" xml:lang="en">90707</vuln:reference>
    </vuln:references>
    <vuln:summary>Multiple cross-site scripting (XSS) vulnerabilities in PHP-Fusion before 7.02.06 allow remote attackers to inject arbitrary web script or HTML via the (1) highlight parameter to forum/viewthread.php; or remote authenticated users with certain permissions to inject arbitrary web script or HTML via the (2) user_list or (3) user_types parameter to messages.php; (4) message parameter to infusions/shoutbox_panel/shoutbox_admin.php; (5) message parameter to administration/news.php; (6) panel_list parameter to administration/panel_editor.php; (7) HTTP User Agent string to administration/phpinfo.php; (8) "__BBCODE__" parameter to administration/bbcodes.php; errorMessage parameter to (9) article_cats.php, (10) download_cats.php, (11) news_cats.php, or (12) weblink_cats.php in administration/, when error is 3; or (13) body or (14) body2 parameter to administration/articles.php.</vuln:summary>
  </entry>
  <entry id="CVE-2013-1805">
    <vuln:cve-id>CVE-2013-1805</vuln:cve-id>
    <vuln:published-datetime>2014-04-30T19:58:26.217-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-30T19:58:26.313-04:00</vuln:last-modified-datetime>
    <vuln:summary>** REJECT **  DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-1806. Reason: This issue was MERGED into CVE-2013-1806 in accordance with CVE content decisions, because it is the same type of vulnerability and affects the same versions.  Notes: All CVE users should reference CVE-2013-1806 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.</vuln:summary>
  </entry>
  <entry id="CVE-2013-1806">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:php-fusion:php-fusion:7.02.05"/>
        <cpe-lang:fact-ref name="cpe:/a:php-fusion:php-fusion:7.02.03"/>
        <cpe-lang:fact-ref name="cpe:/a:php-fusion:php-fusion:7.02.02"/>
        <cpe-lang:fact-ref name="cpe:/a:php-fusion:php-fusion:7.02.01"/>
        <cpe-lang:fact-ref name="cpe:/a:php-fusion:php-fusion:7.02.04"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:php-fusion:php-fusion:7.02.01</vuln:product>
      <vuln:product>cpe:/a:php-fusion:php-fusion:7.02.05</vuln:product>
      <vuln:product>cpe:/a:php-fusion:php-fusion:7.02.04</vuln:product>
      <vuln:product>cpe:/a:php-fusion:php-fusion:7.02.03</vuln:product>
      <vuln:product>cpe:/a:php-fusion:php-fusion:7.02.02</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-1806</vuln:cve-id>
    <vuln:published-datetime>2014-04-30T19:58:26.547-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-05-01T11:27:44.810-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-05-01T11:27:44.747-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-22"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.php-fusion.co.uk/news.php?readmore=569" xml:lang="en">http://www.php-fusion.co.uk/news.php?readmore=569</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.waraxe.us/advisory-97.html" xml:lang="en">http://www.waraxe.us/advisory-97.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>OSVDB</vuln:source>
      <vuln:reference href="http://www.osvdb.org/90696" xml:lang="en">90696</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>OSVDB</vuln:source>
      <vuln:reference href="http://www.osvdb.org/90694" xml:lang="en">90694</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>OSVDB</vuln:source>
      <vuln:reference href="http://www.osvdb.org/90692" xml:lang="en">90692</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://www.openwall.com/lists/oss-security/2013/03/03/2" xml:lang="en">[oss-security] 20130302 Re: CVE request: PHP-Fusion waraxe-2013-SA#097</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://www.openwall.com/lists/oss-security/2013/03/03/1" xml:lang="en">[oss-security] 20130303 CVE request: PHP-Fusion waraxe-2013-SA#097</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>FULLDISC</vuln:source>
      <vuln:reference href="http://seclists.org/fulldisclosure/2013/Feb/154" xml:lang="en">20130228 [waraxe-2013-SA#097] - Multiple Vulnerabilities in PHP-Fusion 7.02.05</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://packetstormsecurity.com/files/120598/PHP-Fusion-7.02.05-XSS-LFI-SQL-Injection.html" xml:lang="en">http://packetstormsecurity.com/files/120598/PHP-Fusion-7.02.05-XSS-LFI-SQL-Injection.html</vuln:reference>
    </vuln:references>
    <vuln:summary>Multiple directory traversal vulnerabilities in PHP-Fusion before 7.02.06 allow remote authenticated users to include and execute arbitrary files via a .. (dot dot) in the (1) user_theme parameter to maincore.php; or remote authenticated administrators to delete arbitrary files via the (2) enable parameter to administration/user_fields.php or (3) file parameter to administration/db_backup.php.</vuln:summary>
  </entry>
  <entry id="CVE-2013-1807">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:php-fusion:php-fusion:7.02.05"/>
        <cpe-lang:fact-ref name="cpe:/a:php-fusion:php-fusion:7.02.03"/>
        <cpe-lang:fact-ref name="cpe:/a:php-fusion:php-fusion:7.02.02"/>
        <cpe-lang:fact-ref name="cpe:/a:php-fusion:php-fusion:7.02.01"/>
        <cpe-lang:fact-ref name="cpe:/a:php-fusion:php-fusion:7.02.04"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:php-fusion:php-fusion:7.02.01</vuln:product>
      <vuln:product>cpe:/a:php-fusion:php-fusion:7.02.05</vuln:product>
      <vuln:product>cpe:/a:php-fusion:php-fusion:7.02.04</vuln:product>
      <vuln:product>cpe:/a:php-fusion:php-fusion:7.02.03</vuln:product>
      <vuln:product>cpe:/a:php-fusion:php-fusion:7.02.02</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-1807</vuln:cve-id>
    <vuln:published-datetime>2014-04-30T19:58:26.593-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-05-01T11:35:01.293-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-05-01T11:35:01.247-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-264"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.php-fusion.co.uk/news.php?readmore=569" xml:lang="en">http://www.php-fusion.co.uk/news.php?readmore=569</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.waraxe.us/advisory-97.html" xml:lang="en">http://www.waraxe.us/advisory-97.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>OSVDB</vuln:source>
      <vuln:reference href="http://www.osvdb.org/90691" xml:lang="en">90691</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://www.openwall.com/lists/oss-security/2013/03/03/2" xml:lang="en">[oss-security] 20130302 Re: CVE request: PHP-Fusion waraxe-2013-SA#097</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://www.openwall.com/lists/oss-security/2013/03/03/1" xml:lang="en">[oss-security] 20130303 CVE request: PHP-Fusion waraxe-2013-SA#097</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>FULLDISC</vuln:source>
      <vuln:reference href="http://seclists.org/fulldisclosure/2013/Feb/154" xml:lang="en">20130228 [waraxe-2013-SA#097] - Multiple Vulnerabilities in PHP-Fusion 7.02.05</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://packetstormsecurity.com/files/120598/PHP-Fusion-7.02.05-XSS-LFI-SQL-Injection.html" xml:lang="en">http://packetstormsecurity.com/files/120598/PHP-Fusion-7.02.05-XSS-LFI-SQL-Injection.html</vuln:reference>
    </vuln:references>
    <vuln:summary>PHP-Fusion before 7.02.06 stores backup files with predictable filenames in an unrestricted directory under the web document root, which might allow remote attackers to obtain sensitive information via a direct request to the backup file in administration/db_backups/.</vuln:summary>
  </entry>
  <entry id="CVE-2013-2025">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:ushahidi:ushahidi_platform:2.5"/>
        <cpe-lang:fact-ref name="cpe:/a:ushahidi:ushahidi_platform:2.6"/>
        <cpe-lang:fact-ref name="cpe:/a:ushahidi:ushahidi_platform:2.6.1"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:ushahidi:ushahidi_platform:2.6.1</vuln:product>
      <vuln:product>cpe:/a:ushahidi:ushahidi_platform:2.5</vuln:product>
      <vuln:product>cpe:/a:ushahidi:ushahidi_platform:2.6</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-2025</vuln:cve-id>
    <vuln:published-datetime>2014-04-25T13:12:02.957-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-25T14:01:53.777-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-25T14:01:53.513-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://wiki.ushahidi.com/display/WIKI/1+May+2013+-+CVE-2013-2025" xml:lang="en">https://wiki.ushahidi.com/display/WIKI/1+May+2013+-+CVE-2013-2025</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="PATCH">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://github.com/rjmackay/Ushahidi_Web/commit/593719ff805a302e3ab2f2e535c875f90a04ea56" xml:lang="en">https://github.com/rjmackay/Ushahidi_Web/commit/593719ff805a302e3ab2f2e535c875f90a04ea56</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://github.com/ushahidi/Ushahidi_Web/pull/1056" xml:lang="en">https://github.com/ushahidi/Ushahidi_Web/pull/1056</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://github.com/ushahidi/Ushahidi_Web/issues/1009" xml:lang="en">https://github.com/ushahidi/Ushahidi_Web/issues/1009</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/59410" xml:lang="en">59410</vuln:reference>
    </vuln:references>
    <vuln:summary>Cross-site scripting (XSS) vulnerability in Ushahidi Platform 2.5.x through 2.6.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2013-2073">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:transifex:transifex:0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:transifex:transifex:0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:transifex:transifex:0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:transifex:transifex:0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:transifex:transifex:0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:transifex:transifex:0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:transifex:transifex:0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:transifex:transifex:0.1"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:transifex:transifex:0.4</vuln:product>
      <vuln:product>cpe:/a:transifex:transifex:0.3</vuln:product>
      <vuln:product>cpe:/a:transifex:transifex:0.2</vuln:product>
      <vuln:product>cpe:/a:transifex:transifex:0.1</vuln:product>
      <vuln:product>cpe:/a:transifex:transifex:0.8</vuln:product>
      <vuln:product>cpe:/a:transifex:transifex:0.7</vuln:product>
      <vuln:product>cpe:/a:transifex:transifex:0.6</vuln:product>
      <vuln:product>cpe:/a:transifex:transifex:0.5</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-2073</vuln:cve-id>
    <vuln:published-datetime>2014-05-01T21:59:22.203-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-05-02T10:49:01.703-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-05-02T10:49:01.483-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-20"/>
    <vuln:references xml:lang="en" reference_type="PATCH">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://www.openwall.com/lists/oss-security/2013/05/22/14" xml:lang="en">[oss-security] 20130522 CVE-2013-2073 transifex-client: Does not validate HTTPS server certificate (fixed in transifex-client v0.9)</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="PATCH">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://blog.transifex.com/post/51072109836/new-version-of-the-transifex-client-has-been-released" xml:lang="en">http://blog.transifex.com/post/51072109836/new-version-of-the-transifex-client-has-been-released</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.redhat.com/show_bug.cgi?id=952194" xml:lang="en">https://bugzilla.redhat.com/show_bug.cgi?id=952194</vuln:reference>
    </vuln:references>
    <vuln:summary>Transifex command-line client before 0.9 does not validate X.509 certificates, which allows man-in-the-middle attackers to spoof a Transifex server via an arbitrary certificate.</vuln:summary>
  </entry>
  <entry id="CVE-2013-3069">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="AND">
        <cpe-lang:logical-test negate="false" operator="OR">
          <cpe-lang:fact-ref name="cpe:/o:netgear:wndr4700_firmware:1.0.0.34"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test negate="false" operator="OR">
          <cpe-lang:fact-ref name="cpe:/h:netgear:wndr4700:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/o:netgear:wndr4700_firmware:1.0.0.34</vuln:product>
      <vuln:product>cpe:/h:netgear:wndr4700:-</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-3069</vuln:cve-id>
    <vuln:published-datetime>2014-04-25T13:12:03.097-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-25T14:07:16.803-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>3.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-25T14:07:16.757-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://securityevaluators.com/knowledge/case_studies/routers/Vulnerability_Catalog.pdf" xml:lang="en">http://securityevaluators.com/knowledge/case_studies/routers/Vulnerability_Catalog.pdf</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>OSVDB</vuln:source>
      <vuln:reference href="http://osvdb.org/92557" xml:lang="en">92557</vuln:reference>
    </vuln:references>
    <vuln:summary>Multiple cross-site scripting (XSS) vulnerabilities in NETGEAR WNDR4700 with firmware 1.0.0.34 allow remote authenticated users to inject arbitrary web script or HTML via the (1) UserName or (2) Password to the NAS User Setup page, (3) deviceName to USB_advanced.htm, or (4) Network Key to the Wireless Setup page.</vuln:summary>
  </entry>
  <entry id="CVE-2013-4121">
    <vuln:cve-id>CVE-2013-4121</vuln:cve-id>
    <vuln:published-datetime>2014-05-01T06:55:05.973-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-05-01T06:55:16.863-04:00</vuln:last-modified-datetime>
    <vuln:summary>** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was a site-specific issue.  Notes: none.</vuln:summary>
  </entry>
  <entry id="CVE-2013-4145">
    <vuln:cve-id>CVE-2013-4145</vuln:cve-id>
    <vuln:published-datetime>2014-04-27T00:32:01.577-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-27T00:32:01.670-04:00</vuln:last-modified-datetime>
    <vuln:summary>** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2012-3414.  Reason: This candidate is a duplicate of CVE-2012-3414.  Notes: All CVE users should reference CVE-2012-3414 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage.</vuln:summary>
  </entry>
  <entry id="CVE-2013-4285">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:dkorunic:pam_s%2fkey:-"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:dkorunic:pam_s%2fkey:-</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-4285</vuln:cve-id>
    <vuln:published-datetime>2014-04-28T10:09:05.783-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-29T07:09:09.007-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>2.1</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-29T07:09:08.947-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-255"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="http://security.gentoo.org/glsa/glsa-201402-12.xml" xml:lang="en">GLSA-201402-12</vuln:reference>
    </vuln:references>
    <vuln:summary>A certain Gentoo patch for the PAM S/Key module does not properly clear credentials from memory, which allows local users to obtain sensitive information by reading system memory.</vuln:summary>
  </entry>
  <entry id="CVE-2013-4336">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:joachim_noreiko:flag_module:7.x-3.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:joachim_noreiko:flag_module:7.x-3.0:beta1"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:joachim_noreiko:flag_module:7.x-3.0:rc1</vuln:product>
      <vuln:product>cpe:/a:joachim_noreiko:flag_module:7.x-3.0:beta1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-4336</vuln:cve-id>
    <vuln:published-datetime>2014-04-27T18:55:05.850-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-28T15:32:53.987-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-28T15:32:53.940-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://drupal.org/node/2076221" xml:lang="en">https://drupal.org/node/2076221</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://drupal.org/node/2075287" xml:lang="en">https://drupal.org/node/2075287</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://www.openwall.com/lists/oss-security/2013/09/11/9" xml:lang="en">[oss-security] 20130911 Re: CVE request for Drupal contrib modules</vuln:reference>
    </vuln:references>
    <vuln:summary>Cross-site scripting (XSS) vulnerability in the admin page in the Flag module 7.x-3.x before 7.x-3.1 for Drupal allows remote authenticated users with the "Administer flags" permission to inject arbitrary web script or HTML via the flag name.</vuln:summary>
  </entry>
  <entry id="CVE-2013-4337">
    <vuln:cve-id>CVE-2013-4337</vuln:cve-id>
    <vuln:published-datetime>2014-04-27T16:55:23.493-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-27T16:55:23.587-04:00</vuln:last-modified-datetime>
    <vuln:summary>** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2013-5965.  Reason: This candidate is a duplicate of CVE-2013-5965.  Notes: All CVE users should reference CVE-2013-5965 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage.</vuln:summary>
  </entry>
  <entry id="CVE-2013-4565">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:debian:ppthtml:0.5.1"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:debian:ppthtml:0.5.1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-4565</vuln:cve-id>
    <vuln:published-datetime>2014-04-25T13:12:03.423-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-25T14:25:05.913-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-25T14:25:05.820-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-119"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=729279" xml:lang="en">https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=729279</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="http://xforce.iss.net/xforce/xfdb/88885" xml:lang="en">ppthtml-cve20134565-bo(88885)</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://seclists.org/oss-sec/2013/q4/279" xml:lang="en">[oss-security] 20131113 Re: CVE request: ppthtml heap-based buffer overflow</vuln:reference>
    </vuln:references>
    <vuln:summary>Heap-based buffer overflow in the __OLEdecode function in ppthtml 0.5.1 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted .ppt file.</vuln:summary>
  </entry>
  <entry id="CVE-2013-4722">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:ddsn:cm3_acora_content_management_system:6.0.6%2f1a"/>
        <cpe-lang:fact-ref name="cpe:/a:ddsn:cm3_acora_content_management_system:6.0.2%2f1a"/>
        <cpe-lang:fact-ref name="cpe:/a:ddsn:cm3_acora_content_management_system:5.5.7%2f12b"/>
        <cpe-lang:fact-ref name="cpe:/a:ddsn:cm3_acora_content_management_system:5.5.0%2f1b-p1"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:ddsn:cm3_acora_content_management_system:6.0.6%2f1a</vuln:product>
      <vuln:product>cpe:/a:ddsn:cm3_acora_content_management_system:5.5.7%2f12b</vuln:product>
      <vuln:product>cpe:/a:ddsn:cm3_acora_content_management_system:6.0.2%2f1a</vuln:product>
      <vuln:product>cpe:/a:ddsn:cm3_acora_content_management_system:5.5.0%2f1b-p1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-4722</vuln:cve-id>
    <vuln:published-datetime>2014-04-25T13:12:03.673-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-25T14:34:34.400-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-25T14:34:34.353-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.digitalsec.net/stuff/explt+advs/CM3.AcoraCMS.v6.txt" xml:lang="en">http://www.digitalsec.net/stuff/explt+advs/CM3.AcoraCMS.v6.txt</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://packetstormsecurity.com/files/122954/CM3-AcoraCMS-XSS-CSRF-Redirection-Disclosure.html" xml:lang="en">http://packetstormsecurity.com/files/122954/CM3-AcoraCMS-XSS-CSRF-Redirection-Disclosure.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>OSVDB</vuln:source>
      <vuln:reference href="http://osvdb.org/96661" xml:lang="en">96661</vuln:reference>
    </vuln:references>
    <vuln:summary>Multiple cross-site scripting (XSS) vulnerabilities in Admin/login/default.asp in DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other versions allow remote attackers to inject arbitrary web script or HTML via the (1) username, (2) url, (3) qstr parameter.</vuln:summary>
  </entry>
  <entry id="CVE-2013-4723">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:ddsn:cm3_acora_content_management_system:6.0.6%2f1a"/>
        <cpe-lang:fact-ref name="cpe:/a:ddsn:cm3_acora_content_management_system:6.0.2%2f1a"/>
        <cpe-lang:fact-ref name="cpe:/a:ddsn:cm3_acora_content_management_system:5.5.7%2f12b"/>
        <cpe-lang:fact-ref name="cpe:/a:ddsn:cm3_acora_content_management_system:5.5.0%2f1b-p1"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:ddsn:cm3_acora_content_management_system:6.0.6%2f1a</vuln:product>
      <vuln:product>cpe:/a:ddsn:cm3_acora_content_management_system:5.5.7%2f12b</vuln:product>
      <vuln:product>cpe:/a:ddsn:cm3_acora_content_management_system:6.0.2%2f1a</vuln:product>
      <vuln:product>cpe:/a:ddsn:cm3_acora_content_management_system:5.5.0%2f1b-p1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-4723</vuln:cve-id>
    <vuln:published-datetime>2014-04-25T13:12:03.720-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-25T14:38:24.733-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-25T14:38:23.813-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-20"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.digitalsec.net/stuff/explt+advs/CM3.AcoraCMS.v6.txt" xml:lang="en">http://www.digitalsec.net/stuff/explt+advs/CM3.AcoraCMS.v6.txt</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://packetstormsecurity.com/files/122954/CM3-AcoraCMS-XSS-CSRF-Redirection-Disclosure.html" xml:lang="en">http://packetstormsecurity.com/files/122954/CM3-AcoraCMS-XSS-CSRF-Redirection-Disclosure.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>OSVDB</vuln:source>
      <vuln:reference href="http://osvdb.org/96662" xml:lang="en">96662</vuln:reference>
    </vuln:references>
    <vuln:summary>Open redirect vulnerability in DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other versions allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the l parameter to track.aspx.</vuln:summary>
  </entry>
  <entry id="CVE-2013-4726">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:ddsn:cm3_acora_content_management_system:5.5.0%2f1b-p1"/>
        <cpe-lang:fact-ref name="cpe:/a:ddsn:cm3_acora_content_management_system:5.5.7%2f12b"/>
        <cpe-lang:fact-ref name="cpe:/a:ddsn:cm3_acora_content_management_system:6.0.2%2f1a"/>
        <cpe-lang:fact-ref name="cpe:/a:ddsn:cm3_acora_content_management_system:6.0.6%2f1a"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:ddsn:cm3_acora_content_management_system:6.0.6%2f1a</vuln:product>
      <vuln:product>cpe:/a:ddsn:cm3_acora_content_management_system:5.5.7%2f12b</vuln:product>
      <vuln:product>cpe:/a:ddsn:cm3_acora_content_management_system:6.0.2%2f1a</vuln:product>
      <vuln:product>cpe:/a:ddsn:cm3_acora_content_management_system:5.5.0%2f1b-p1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-4726</vuln:cve-id>
    <vuln:published-datetime>2014-04-25T13:12:03.767-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-25T14:38:34.813-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-25T14:38:34.780-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-352"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.digitalsec.net/stuff/explt+advs/CM3.AcoraCMS.v6.txt" xml:lang="en">http://www.digitalsec.net/stuff/explt+advs/CM3.AcoraCMS.v6.txt</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://packetstormsecurity.com/files/122954/CM3-AcoraCMS-XSS-CSRF-Redirection-Disclosure.html" xml:lang="en">http://packetstormsecurity.com/files/122954/CM3-AcoraCMS-XSS-CSRF-Redirection-Disclosure.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>OSVDB</vuln:source>
      <vuln:reference href="http://osvdb.org/96665" xml:lang="en">96665</vuln:reference>
    </vuln:references>
    <vuln:summary>Cross-site request forgery (CSRF) vulnerability in DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other versions, allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2013-5349">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:google:picasa:3.9.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:google:picasa:3.9.0</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-5349</vuln:cve-id>
    <vuln:published-datetime>2014-01-08T19:55:02.880-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-25T09:38:37.810-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-01-14T08:31:37.000-05:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-119"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://support.google.com/picasa/answer/53209" xml:lang="en">https://support.google.com/picasa/answer/53209</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1029527" xml:lang="en">1029527</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://secunia.com/secunia_research/2013-14/" xml:lang="en">http://secunia.com/secunia_research/2013-14/</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/55555" xml:lang="en">55555</vuln:reference>
    </vuln:references>
    <vuln:summary>Integer underflow in Picasa3.exe in Google Picasa before 3.9.0 Build 137.69 allows remote attackers to execute arbitrary code via a crafted JPEG tag that triggers a heap-based buffer overflow, as demonstrated using a Canon RAW CR2 file with a large JPEG tag value and a small size.</vuln:summary>
  </entry>
  <entry id="CVE-2013-5357">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:google:picasa:3.9.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:google:picasa:3.9.0</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-5357</vuln:cve-id>
    <vuln:published-datetime>2014-01-08T19:55:02.927-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-25T09:38:54.730-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-01-14T08:32:17.000-05:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-119"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://support.google.com/picasa/answer/53209" xml:lang="en">https://support.google.com/picasa/answer/53209</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1029527" xml:lang="en">1029527</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://secunia.com/secunia_research/2013-14/" xml:lang="en">http://secunia.com/secunia_research/2013-14/</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/55555" xml:lang="en">55555</vuln:reference>
    </vuln:references>
    <vuln:summary>Integer overflow in Picasa3.exe in Google Picasa before 3.9.0 Build 137.69 allows remote attackers to execute arbitrary code via a long TIFF tag that triggers a heap-based buffer overflow, as demonstrated using a Canon RAW CR2 file with a long TIFF StripByteCounts tag.</vuln:summary>
  </entry>
  <entry id="CVE-2013-5358">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:google:picasa:3.9.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:google:picasa:3.9.0</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-5358</vuln:cve-id>
    <vuln:published-datetime>2014-01-08T19:55:02.957-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-25T09:39:34.187-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-01-14T08:32:43.000-05:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-119"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://support.google.com/picasa/answer/53209" xml:lang="en">https://support.google.com/picasa/answer/53209</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1029527" xml:lang="en">1029527</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://secunia.com/secunia_research/2013-14/" xml:lang="en">http://secunia.com/secunia_research/2013-14/</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/55555" xml:lang="en">55555</vuln:reference>
    </vuln:references>
    <vuln:summary>Picasa3.exe in Google Picasa before 3.9.0 Build 137.69 allows remote attackers to trigger memory corruption via a crafted TIFF tag, as demonstrated using a KDC file with a DSLR-A100 model and certain sequences of tags.</vuln:summary>
  </entry>
  <entry id="CVE-2013-5359">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:google:picasa:3.9.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:google:picasa:3.9.0</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-5359</vuln:cve-id>
    <vuln:published-datetime>2014-01-08T19:55:02.987-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-25T09:39:49.623-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-01-14T08:33:05.000-05:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-119"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://support.google.com/picasa/answer/53209" xml:lang="en">https://support.google.com/picasa/answer/53209</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1029527" xml:lang="en">1029527</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://secunia.com/secunia_research/2013-14/" xml:lang="en">http://secunia.com/secunia_research/2013-14/</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/55555" xml:lang="en">55555</vuln:reference>
    </vuln:references>
    <vuln:summary>Stack-based buffer overflow in Picasa3.exe in Google Picasa before 3.9.0 Build 137.69 might allow remote attackers to execute arbitrary code via a crafted RAW file, as demonstrated using a KDC file with a certain size.</vuln:summary>
  </entry>
  <entry id="CVE-2013-5660">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:powersoftware:winarchiver:3.2"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:powersoftware:winarchiver:3.2</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-5660</vuln:cve-id>
    <vuln:published-datetime>2014-04-25T13:12:03.847-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-25T14:44:00.477-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-25T14:44:00.370-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-119"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/59626" xml:lang="en">59626</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>FULLDISC</vuln:source>
      <vuln:reference href="http://seclists.org/fulldisclosure/2013/Sep/8" xml:lang="en">20130902 list of vulnerabilities discovered by realpentesting</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://realpentesting.blogspot.com.es/p/blog-page_3.html" xml:lang="en">http://realpentesting.blogspot.com.es/p/blog-page_3.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://packetstormsecurity.com/files/121512/Winarchiver-3.2-Buffer-Overflow.html" xml:lang="en">http://packetstormsecurity.com/files/121512/Winarchiver-3.2-Buffer-Overflow.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>OSVDB</vuln:source>
      <vuln:reference href="http://osvdb.org/show/osvdb/92992" xml:lang="en">92992</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://osvdb.org/ref/92/winarchiver-overflow.txt" xml:lang="en">http://osvdb.org/ref/92/winarchiver-overflow.txt</vuln:reference>
    </vuln:references>
    <vuln:summary>Buffer overflow in Power Software WinArchiver 3.2 allows remote attackers to execute arbitrary code via a crafted .zip file.</vuln:summary>
  </entry>
  <entry id="CVE-2013-5954">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:openx:openx:2.8.9"/>
        <cpe-lang:fact-ref name="cpe:/a:openx:openx:2.8.8"/>
        <cpe-lang:fact-ref name="cpe:/a:openx:openx:2.8.7"/>
        <cpe-lang:fact-ref name="cpe:/a:openx:openx:2.8.6"/>
        <cpe-lang:fact-ref name="cpe:/a:openx:openx:2.8"/>
        <cpe-lang:fact-ref name="cpe:/a:openx:openx:2.8.1"/>
        <cpe-lang:fact-ref name="cpe:/a:openx:openx:2.8.10"/>
        <cpe-lang:fact-ref name="cpe:/a:openx:openx:2.8.11"/>
        <cpe-lang:fact-ref name="cpe:/a:openx:openx:2.8.2"/>
        <cpe-lang:fact-ref name="cpe:/a:openx:openx:2.8.3"/>
        <cpe-lang:fact-ref name="cpe:/a:openx:openx:2.8.4"/>
        <cpe-lang:fact-ref name="cpe:/a:openx:openx:2.8.5"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:openx:openx:2.8.10</vuln:product>
      <vuln:product>cpe:/a:openx:openx:2.8.11</vuln:product>
      <vuln:product>cpe:/a:openx:openx:2.8.9</vuln:product>
      <vuln:product>cpe:/a:openx:openx:2.8.1</vuln:product>
      <vuln:product>cpe:/a:openx:openx:2.8.6</vuln:product>
      <vuln:product>cpe:/a:openx:openx:2.8.5</vuln:product>
      <vuln:product>cpe:/a:openx:openx:2.8.8</vuln:product>
      <vuln:product>cpe:/a:openx:openx:2.8.7</vuln:product>
      <vuln:product>cpe:/a:openx:openx:2.8.2</vuln:product>
      <vuln:product>cpe:/a:openx:openx:2.8.4</vuln:product>
      <vuln:product>cpe:/a:openx:openx:2.8.3</vuln:product>
      <vuln:product>cpe:/a:openx:openx:2.8</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-5954</vuln:cve-id>
    <vuln:published-datetime>2014-04-25T10:15:30.453-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-25T13:38:00.707-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-25T13:38:00.627-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-352"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="http://xforce.iss.net/xforce/xfdb/91889" xml:lang="en">openx-cve20135954-csrf(91889)</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/66251" xml:lang="en">66251</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>FULLDISC</vuln:source>
      <vuln:reference href="http://seclists.org/fulldisclosure/2014/Mar/270" xml:lang="en">20140315 [CVE-2013-5954] Multiple Cross Site Request Forgery Vulnerabilities in OpenX 2.8.11</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://packetstormsecurity.com/files/125735" xml:lang="en">http://packetstormsecurity.com/files/125735</vuln:reference>
    </vuln:references>
    <vuln:summary>Multiple cross-site request forgery (CSRF) vulnerabilities in OpenX 2.8.11 and earlier allow remote attackers to hijack the authentication of administrators for requests that delete (1) users via admin/agency-user-unlink.php, (2) advertisers via admin/advertiser-delete.php, (3) banners via admin/banner-delete.php, (4) campaigns via admin/campaign-delete.php, (5) channels via admin/channel-delete.php, (6) affiliate websites via admin/affiliate-delete.php, or (7) zones via admin/zone-delete.php.</vuln:summary>
  </entry>
  <entry id="CVE-2013-5956">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:joomlaboat:com_youtubegallery:3.4.0::~~~joomla%21~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:joomlaboat:com_youtubegallery:3.4.0::~~~joomla%21~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-5956</vuln:cve-id>
    <vuln:published-datetime>2014-04-25T10:15:30.483-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-25T13:42:55.557-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-25T13:42:55.510-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>FULLDISC</vuln:source>
      <vuln:reference href="http://seclists.org/fulldisclosure/2014/Mar/288" xml:lang="en">20140315 Re: XSS Vulnerability in the Youtube Gallery	3.4.0 Component</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>FULLDISC</vuln:source>
      <vuln:reference href="http://seclists.org/fulldisclosure/2014/Mar/264" xml:lang="en">20140315 XSS Vulnerability in the Youtube Gallery 3.4.0 Component</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://packetstormsecurity.com/files/125732/Joomla-Youtube-Gallery-3.4.0-Cross-Site-Scripting.html" xml:lang="en">http://packetstormsecurity.com/files/125732/Joomla-Youtube-Gallery-3.4.0-Cross-Site-Scripting.html</vuln:reference>
    </vuln:references>
    <vuln:summary>Cross-site scripting (XSS) vulnerability in includes/flvthumbnail.php in the Youtube Gallery (com_youtubegallery) component 3.4.0 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the videofile parameter.</vuln:summary>
  </entry>
  <entry id="CVE-2013-6053">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:openjpeg:openjpeg:1.5.1"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:openjpeg:openjpeg:1.5.1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-6053</vuln:cve-id>
    <vuln:published-datetime>2014-04-27T18:55:05.910-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-28T13:38:17.750-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-28T13:38:17.720-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-20"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://code.google.com/p/openjpeg/issues/detail?id=297" xml:lang="en">https://code.google.com/p/openjpeg/issues/detail?id=297</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1036493" xml:lang="en">https://bugzilla.redhat.com/show_bug.cgi?id=1036493</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/64121" xml:lang="en">64121</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://seclists.org/oss-sec/2013/q4/412" xml:lang="en">[oss-security] 20131204 Fwd: [vs] multiple issues in openjpeg</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://openjpeg.googlecode.com/svn/tags/version.1.5.2/NEWS" xml:lang="en">http://openjpeg.googlecode.com/svn/tags/version.1.5.2/NEWS</vuln:reference>
    </vuln:references>
    <vuln:summary>OpenJPEG 1.5.1 allows remote attackers to obtain sensitive information via unspecified vectors that trigger a heap-based out-of-bounds read.</vuln:summary>
  </entry>
  <entry id="CVE-2013-6323">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:7.0"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:7.0.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:7.0.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:7.0.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:7.0.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:7.0.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:7.0.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:7.0.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:7.0.0.16"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:7.0.0.17"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:7.0.0.18"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:7.0.0.19"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:7.0.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:7.0.0.21"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:7.0.0.22"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:7.0.0.23"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:7.0.0.24"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:7.0.0.25"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:7.0.0.27"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:7.0.0.29"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:7.0.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:7.0.0.31"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:7.0.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:7.0.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:7.0.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:7.0.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:7.0.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:7.0.0.9"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:8.0.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:8.0.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:8.0.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:8.0.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:8.0.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:8.0.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:8.0.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:8.0.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:8.0.0.8"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_virtual_enterprise:7.0"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_virtual_enterprise:7.0.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_virtual_enterprise:7.0.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_virtual_enterprise:7.0.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_virtual_enterprise:7.0.0.4"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:8.5.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:8.5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:8.5.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:8.5.5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:8.5.5.1"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:ibm:websphere_virtual_enterprise:7.0</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:8.0.0.4</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:8.0.0.3</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:8.0.0.2</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:7.0.0.4</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:7.0.0.27</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:7.0.0.5</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:7.0.0.29</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:7.0.0.3</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:7.0.0.8</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:7.0.0.9</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:8.0.0.0</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:7.0.0.6</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:7.0.0.7</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:8.5.0.0</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:8.0.0.8</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:8.5.0.1</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:8.0.0.7</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:8.0.0.1</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:8.5.0.2</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:8.0.0.6</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:8.0.0.5</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:8.5.5.1</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:7.0.0.15</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:8.5.5.0</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:7.0.0.2</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:7.0.0.12</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:7.0.0.1</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:7.0.0.11</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:7.0.0.14</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:7.0.0.13</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:7.0.0.16</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:7.0.0.18</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:7.0.0.10</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:7.0.0.17</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:7.0.0.19</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:7.0.0.31</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:7.0</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_virtual_enterprise:7.0.0.2</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_virtual_enterprise:7.0.0.1</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:7.0.0.25</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:7.0.0.24</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:7.0.0.23</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:7.0.0.22</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_virtual_enterprise:7.0.0.3</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_virtual_enterprise:7.0.0.4</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:7.0.0.21</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-6323</vuln:cve-id>
    <vuln:published-datetime>2014-05-01T13:29:56.683-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-05-02T09:23:52.843-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>3.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-05-02T09:23:52.467-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="http://xforce.iss.net/xforce/xfdb/88903" xml:lang="en">ibm-was-cve20136323-xss(88903)</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21669554" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21669554</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>AIXAPAR</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg1PI04880" xml:lang="en">PI04880</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>AIXAPAR</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg1PI04777" xml:lang="en">PI04777</vuln:reference>
    </vuln:references>
    <vuln:summary>Cross-site scripting (XSS) vulnerability in the Administration Console in IBM WebSphere Application Server (WAS) 7.x before 7.0.0.33, 8.x before 8.0.0.9, and 8.5.x before 8.5.5.2, and WebSphere Virtual Enterprise 7.x before 7.0.0.5, allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.</vuln:summary>
  </entry>
  <entry id="CVE-2013-6445">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:redhat:enterprise_mrg:2.5"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:redhat:enterprise_mrg:2.5</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-6445</vuln:cve-id>
    <vuln:published-datetime>2014-04-30T10:22:05.813-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-30T14:08:06.413-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-30T14:08:06.383-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1030158" xml:lang="en">1030158</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2014-0441.html" xml:lang="en">RHSA-2014:0441</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2014-0440.html" xml:lang="en">RHSA-2014:0440</vuln:reference>
    </vuln:references>
    <vuln:summary>Cumin (aka MRG Management Console), as used in Red Hat Enterprise MRG 2.5, uses the DES-based crypt function to hash passwords, which makes it easier for attackers to obtain sensitive information via a brute-force attack.</vuln:summary>
  </entry>
  <entry id="CVE-2013-6887">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:openjpeg:openjpeg:1.5.1"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:openjpeg:openjpeg:1.5.1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-6887</vuln:cve-id>
    <vuln:published-datetime>2014-04-27T16:55:23.633-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-28T13:35:53.213-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.4</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-28T13:35:53.200-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-20"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/57285" xml:lang="en">57285</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://seclists.org/oss-sec/2013/q4/412" xml:lang="en">[oss-security] 20131204 Fwd: [vs] multiple issues in openjpeg</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://openjpeg.googlecode.com/svn/tags/version.1.5.2/NEWS" xml:lang="en">http://openjpeg.googlecode.com/svn/tags/version.1.5.2/NEWS</vuln:reference>
    </vuln:references>
    <vuln:summary>OpenJPEG 1.5.1 allows remote attackers to cause a denial of service via unspecified vectors that trigger NULL pointer dereferences, division-by-zero, and other errors.</vuln:summary>
  </entry>
  <entry id="CVE-2013-6990">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:fortinet:fortiauthenticator:2.2"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:fortinet:fortiauthenticator:2.2</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-6990</vuln:cve-id>
    <vuln:published-datetime>2014-04-30T10:22:05.860-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-30T14:49:29.310-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-30T14:49:29.247-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:security-protection>ALLOWS_ADMIN_ACCESS</vuln:security-protection>
    <vuln:cwe id="CWE-264"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.fortiguard.com/advisory/FG-IR-13-016/" xml:lang="en">http://www.fortiguard.com/advisory/FG-IR-13-016/</vuln:reference>
    </vuln:references>
    <vuln:summary>FortiGuard FortiAuthenticator before 3.0 allows remote administrators to gain privileges via the command line interface.</vuln:summary>
  </entry>
  <entry id="CVE-2013-7060">
    <vuln:cve-id>CVE-2013-7060</vuln:cve-id>
    <vuln:published-datetime>2014-05-02T10:55:05.340-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-05-02T10:55:05.340-04:00</vuln:last-modified-datetime>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://plone.org/security/20131210/path-leak" xml:lang="en">https://plone.org/security/20131210/path-leak</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://www.openwall.com/lists/oss-security/2013/12/12/3" xml:lang="en">[oss-security] 20131211 Re: CVE request for Plone</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://www.openwall.com/lists/oss-security/2013/12/10/15" xml:lang="en">[oss-security] 20131210 CVE request for Plone</vuln:reference>
    </vuln:references>
    <vuln:summary>Products/CMFPlone/FactoryTool.py in Plone 3.3 through 4.3.2 allows remote attackers to obtain the installation path via vectors related to a file object for unspecified documentation which is initialized in class scope.</vuln:summary>
  </entry>
  <entry id="CVE-2013-7061">
    <vuln:cve-id>CVE-2013-7061</vuln:cve-id>
    <vuln:published-datetime>2014-05-02T10:55:05.417-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-05-02T10:55:05.417-04:00</vuln:last-modified-datetime>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://plone.org/security/20131210/catalogue-exposure" xml:lang="en">https://plone.org/security/20131210/catalogue-exposure</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://www.openwall.com/lists/oss-security/2013/12/12/3" xml:lang="en">[oss-security] 20131211 Re: CVE request for Plone</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://www.openwall.com/lists/oss-security/2013/12/10/15" xml:lang="en">[oss-security] 20131210 CVE request for Plone</vuln:reference>
    </vuln:references>
    <vuln:summary>Products/CMFPlone/CatalogTool.py in Plone 3.3 through 4.3.2 allows remote administrators to bypass restrictions and obtain sensitive information via an unspecified search API.</vuln:summary>
  </entry>
  <entry id="CVE-2013-7063">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:invitation_project:invitation:7.x-2.1::~~~drupal~~"/>
        <cpe-lang:fact-ref name="cpe:/a:invitation_project:invitation:7.x-2.0::~~~drupal~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:invitation_project:invitation:7.x-2.1::~~~drupal~~</vuln:product>
      <vuln:product>cpe:/a:invitation_project:invitation:7.x-2.0::~~~drupal~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-7063</vuln:cve-id>
    <vuln:published-datetime>2014-04-29T10:38:43.827-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-29T12:40:09.997-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-29T12:40:09.747-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-264"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://drupal.org/node/2140097" xml:lang="en">https://drupal.org/node/2140097</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://www.openwall.com/lists/oss-security/2013/12/12/1" xml:lang="en">[oss-security] 20131211 Re: CVE request for Drupal core, and contributed modules</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://www.openwall.com/lists/oss-security/2013/12/06/7" xml:lang="en">[oss-security] 20131206 CVE request for Drupal core, and contributed modules</vuln:reference>
    </vuln:references>
    <vuln:summary>The Invitation module 7.x-2.x for Drupal does not properly check permissions, which allows remote attackers to obtain sensitive information via unspecified default views.</vuln:summary>
  </entry>
  <entry id="CVE-2013-7064">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:freelance-it-consultant:eu_cookie_compliance:7.x-1.11::~~~drupal~~"/>
        <cpe-lang:fact-ref name="cpe:/a:freelance-it-consultant:eu_cookie_compliance:7.x-1.10::~~~drupal~~"/>
        <cpe-lang:fact-ref name="cpe:/a:freelance-it-consultant:eu_cookie_compliance:7.x-1.9::~~~drupal~~"/>
        <cpe-lang:fact-ref name="cpe:/a:freelance-it-consultant:eu_cookie_compliance:7.x-1.8::~~~drupal~~"/>
        <cpe-lang:fact-ref name="cpe:/a:freelance-it-consultant:eu_cookie_compliance:7.x-1.7::~~~drupal~~"/>
        <cpe-lang:fact-ref name="cpe:/a:freelance-it-consultant:eu_cookie_compliance:7.x-1.6::~~~drupal~~"/>
        <cpe-lang:fact-ref name="cpe:/a:freelance-it-consultant:eu_cookie_compliance:7.x-1.2::~~~drupal~~"/>
        <cpe-lang:fact-ref name="cpe:/a:freelance-it-consultant:eu_cookie_compliance:7.x-1.1::~~~drupal~~"/>
        <cpe-lang:fact-ref name="cpe:/a:freelance-it-consultant:eu_cookie_compliance:7.x-1.0::~~~drupal~~"/>
        <cpe-lang:fact-ref name="cpe:/a:freelance-it-consultant:eu_cookie_compliance:7.x-1.x:dev:~~~drupal~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:freelance-it-consultant:eu_cookie_compliance:7.x-1.1::~~~drupal~~</vuln:product>
      <vuln:product>cpe:/a:freelance-it-consultant:eu_cookie_compliance:7.x-1.2::~~~drupal~~</vuln:product>
      <vuln:product>cpe:/a:freelance-it-consultant:eu_cookie_compliance:7.x-1.x:dev:~~~drupal~~</vuln:product>
      <vuln:product>cpe:/a:freelance-it-consultant:eu_cookie_compliance:7.x-1.0::~~~drupal~~</vuln:product>
      <vuln:product>cpe:/a:freelance-it-consultant:eu_cookie_compliance:7.x-1.6::~~~drupal~~</vuln:product>
      <vuln:product>cpe:/a:freelance-it-consultant:eu_cookie_compliance:7.x-1.7::~~~drupal~~</vuln:product>
      <vuln:product>cpe:/a:freelance-it-consultant:eu_cookie_compliance:7.x-1.10::~~~drupal~~</vuln:product>
      <vuln:product>cpe:/a:freelance-it-consultant:eu_cookie_compliance:7.x-1.8::~~~drupal~~</vuln:product>
      <vuln:product>cpe:/a:freelance-it-consultant:eu_cookie_compliance:7.x-1.11::~~~drupal~~</vuln:product>
      <vuln:product>cpe:/a:freelance-it-consultant:eu_cookie_compliance:7.x-1.9::~~~drupal~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-7064</vuln:cve-id>
    <vuln:published-datetime>2014-04-29T10:38:43.843-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-29T13:09:54.353-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>2.1</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>HIGH</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-29T13:09:54.257-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://drupal.org/node/2140123" xml:lang="en">https://drupal.org/node/2140123</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="PATCH">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://drupal.org/node/2139875" xml:lang="en">https://drupal.org/node/2139875</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://www.openwall.com/lists/oss-security/2013/12/12/1" xml:lang="en">[oss-security] 20131211 Re: CVE request for Drupal core, and contributed modules</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://www.openwall.com/lists/oss-security/2013/12/06/7" xml:lang="en">[oss-security] 20131206 CVE request for Drupal core, and contributed modules</vuln:reference>
    </vuln:references>
    <vuln:summary>Cross-site scripting (XSS) vulnerability in the EU Cookie Compliance module 7.x-1.x before 7.x-1.12 for Drupal allows remote authenticated administrators with the "Administer EU Cookie Compliance popup" permission to inject arbitrary web script or HTML via unspecified configuration values.</vuln:summary>
  </entry>
  <entry id="CVE-2013-7065">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:organic_groups_project:organic_groups:7.x-2.2::~~~drupal~~"/>
        <cpe-lang:fact-ref name="cpe:/a:organic_groups_project:organic_groups:7.x-2.1::~~~drupal~~"/>
        <cpe-lang:fact-ref name="cpe:/a:organic_groups_project:organic_groups:7.x-2.0:-:~~~drupal~~"/>
        <cpe-lang:fact-ref name="cpe:/a:organic_groups_project:organic_groups:7.x-2.0:rc4:~~~drupal~~"/>
        <cpe-lang:fact-ref name="cpe:/a:organic_groups_project:organic_groups:7.x-2.0:rc3:~~~drupal~~"/>
        <cpe-lang:fact-ref name="cpe:/a:organic_groups_project:organic_groups:7.x-2.0:rc2:~~~drupal~~"/>
        <cpe-lang:fact-ref name="cpe:/a:organic_groups_project:organic_groups:7.x-2.0:rc1:~~~drupal~~"/>
        <cpe-lang:fact-ref name="cpe:/a:organic_groups_project:organic_groups:7.x-2.0:beta4:~~~drupal~~"/>
        <cpe-lang:fact-ref name="cpe:/a:organic_groups_project:organic_groups:7.x-2.0:beta3:~~~drupal~~"/>
        <cpe-lang:fact-ref name="cpe:/a:organic_groups_project:organic_groups:7.x-2.0:beta2:~~~drupal~~"/>
        <cpe-lang:fact-ref name="cpe:/a:organic_groups_project:organic_groups:7.x-2.0:beta1:~~~drupal~~"/>
        <cpe-lang:fact-ref name="cpe:/a:organic_groups_project:organic_groups:7.x-2.0:alpha3:~~~drupal~~"/>
        <cpe-lang:fact-ref name="cpe:/a:organic_groups_project:organic_groups:7.x-2.0:alpha2:~~~drupal~~"/>
        <cpe-lang:fact-ref name="cpe:/a:organic_groups_project:organic_groups:7.x-2.0:alpha1:~~~drupal~~"/>
        <cpe-lang:fact-ref name="cpe:/a:organic_groups_project:organic_groups:7.x-2.x:dev:~~~drupal~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:organic_groups_project:organic_groups:7.x-2.0:alpha1:~~~drupal~~</vuln:product>
      <vuln:product>cpe:/a:organic_groups_project:organic_groups:7.x-2.x:dev:~~~drupal~~</vuln:product>
      <vuln:product>cpe:/a:organic_groups_project:organic_groups:7.x-2.0:alpha3:~~~drupal~~</vuln:product>
      <vuln:product>cpe:/a:organic_groups_project:organic_groups:7.x-2.0:alpha2:~~~drupal~~</vuln:product>
      <vuln:product>cpe:/a:organic_groups_project:organic_groups:7.x-2.0:beta4:~~~drupal~~</vuln:product>
      <vuln:product>cpe:/a:organic_groups_project:organic_groups:7.x-2.0:-:~~~drupal~~</vuln:product>
      <vuln:product>cpe:/a:organic_groups_project:organic_groups:7.x-2.0:rc2:~~~drupal~~</vuln:product>
      <vuln:product>cpe:/a:organic_groups_project:organic_groups:7.x-2.0:beta2:~~~drupal~~</vuln:product>
      <vuln:product>cpe:/a:organic_groups_project:organic_groups:7.x-2.2::~~~drupal~~</vuln:product>
      <vuln:product>cpe:/a:organic_groups_project:organic_groups:7.x-2.0:rc1:~~~drupal~~</vuln:product>
      <vuln:product>cpe:/a:organic_groups_project:organic_groups:7.x-2.0:beta3:~~~drupal~~</vuln:product>
      <vuln:product>cpe:/a:organic_groups_project:organic_groups:7.x-2.1::~~~drupal~~</vuln:product>
      <vuln:product>cpe:/a:organic_groups_project:organic_groups:7.x-2.0:rc4:~~~drupal~~</vuln:product>
      <vuln:product>cpe:/a:organic_groups_project:organic_groups:7.x-2.0:rc3:~~~drupal~~</vuln:product>
      <vuln:product>cpe:/a:organic_groups_project:organic_groups:7.x-2.0:beta1:~~~drupal~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-7065</vuln:cve-id>
    <vuln:published-datetime>2014-04-29T10:38:43.857-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-29T13:30:10.003-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-29T13:30:09.517-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-264"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://drupal.org/node/2140217" xml:lang="en">https://drupal.org/node/2140217</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="PATCH">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://drupal.org/node/2140209" xml:lang="en">https://drupal.org/node/2140209</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://www.openwall.com/lists/oss-security/2013/12/12/1" xml:lang="en">[oss-security] 20131211 Re: CVE request for Drupal core, and contributed modules</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://www.openwall.com/lists/oss-security/2013/12/06/7" xml:lang="en">[oss-security] 20131206 CVE request for Drupal core, and contributed modules</vuln:reference>
    </vuln:references>
    <vuln:summary>The Organic Groups (OG) module 7.x-2.x before 7.x-2.3 for Drupal allows remote attackers to bypass access restriction and post to arbitrary groups via a group audience field, as demonstrated by the og_group_ref field.</vuln:summary>
  </entry>
  <entry id="CVE-2013-7066">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:entity_reference_project:entityreference:7.x-1.0:-"/>
        <cpe-lang:fact-ref name="cpe:/a:entity_reference_project:entityreference:7.x-1.0:rc5"/>
        <cpe-lang:fact-ref name="cpe:/a:entity_reference_project:entityreference:7.x-1.0:rc4"/>
        <cpe-lang:fact-ref name="cpe:/a:entity_reference_project:entityreference:7.x-1.0:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:entity_reference_project:entityreference:7.x-1.0:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:entity_reference_project:entityreference:7.x-1.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:entity_reference_project:entityreference:7.x-1.0:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:entity_reference_project:entityreference:7.x-1.0:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:entity_reference_project:entityreference:7.x-1.0:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:entity_reference_project:entityreference:7.x-1.0:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:entity_reference_project:entityreference:7.x-1.0:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:entity_reference_project:entityreference:7.x-1.0:alpha2"/>
        <cpe-lang:fact-ref name="cpe:/a:entity_reference_project:entityreference:7.x-1.0:alpha1"/>
        <cpe-lang:fact-ref name="cpe:/a:entity_reference_project:entityreference:7.x-1.x:dev"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:entity_reference_project:entityreference:7.x-1.x:dev</vuln:product>
      <vuln:product>cpe:/a:entity_reference_project:entityreference:7.x-1.0:rc5</vuln:product>
      <vuln:product>cpe:/a:entity_reference_project:entityreference:7.x-1.0:-</vuln:product>
      <vuln:product>cpe:/a:entity_reference_project:entityreference:7.x-1.0:beta5</vuln:product>
      <vuln:product>cpe:/a:entity_reference_project:entityreference:7.x-1.0:beta4</vuln:product>
      <vuln:product>cpe:/a:entity_reference_project:entityreference:7.x-1.0:alpha2</vuln:product>
      <vuln:product>cpe:/a:entity_reference_project:entityreference:7.x-1.0:beta3</vuln:product>
      <vuln:product>cpe:/a:entity_reference_project:entityreference:7.x-1.0:rc3</vuln:product>
      <vuln:product>cpe:/a:entity_reference_project:entityreference:7.x-1.0:beta1</vuln:product>
      <vuln:product>cpe:/a:entity_reference_project:entityreference:7.x-1.0:alpha1</vuln:product>
      <vuln:product>cpe:/a:entity_reference_project:entityreference:7.x-1.0:rc2</vuln:product>
      <vuln:product>cpe:/a:entity_reference_project:entityreference:7.x-1.0:rc4</vuln:product>
      <vuln:product>cpe:/a:entity_reference_project:entityreference:7.x-1.0:beta2</vuln:product>
      <vuln:product>cpe:/a:entity_reference_project:entityreference:7.x-1.0:rc1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-7066</vuln:cve-id>
    <vuln:published-datetime>2014-04-29T10:38:43.907-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-29T13:45:04.283-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-29T13:45:04.080-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-264"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://drupal.org/node/2140237" xml:lang="en">https://drupal.org/node/2140237</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="PATCH">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://drupal.org/node/2140229" xml:lang="en">https://drupal.org/node/2140229</vuln:reference>
    </vuln:references>
    <vuln:summary>The Entity reference module 7.x-1.x before 7.x-1.1-rc1 for Drupal allows remote attackers to read private nodes titles by leveraging edit permissions to a node that references a private node.</vuln:summary>
  </entry>
  <entry id="CVE-2013-7068">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:organic_groups_project:organic_groups:7.x-2.2::~~~drupal~~"/>
        <cpe-lang:fact-ref name="cpe:/a:organic_groups_project:organic_groups:7.x-2.1::~~~drupal~~"/>
        <cpe-lang:fact-ref name="cpe:/a:organic_groups_project:organic_groups:7.x-2.0:-:~~~drupal~~"/>
        <cpe-lang:fact-ref name="cpe:/a:organic_groups_project:organic_groups:7.x-2.0:rc4:~~~drupal~~"/>
        <cpe-lang:fact-ref name="cpe:/a:organic_groups_project:organic_groups:7.x-2.0:rc3:~~~drupal~~"/>
        <cpe-lang:fact-ref name="cpe:/a:organic_groups_project:organic_groups:7.x-2.0:rc2:~~~drupal~~"/>
        <cpe-lang:fact-ref name="cpe:/a:organic_groups_project:organic_groups:7.x-2.0:rc1:~~~drupal~~"/>
        <cpe-lang:fact-ref name="cpe:/a:organic_groups_project:organic_groups:7.x-2.0:beta4:~~~drupal~~"/>
        <cpe-lang:fact-ref name="cpe:/a:organic_groups_project:organic_groups:7.x-2.0:beta3:~~~drupal~~"/>
        <cpe-lang:fact-ref name="cpe:/a:organic_groups_project:organic_groups:7.x-2.0:beta2:~~~drupal~~"/>
        <cpe-lang:fact-ref name="cpe:/a:organic_groups_project:organic_groups:7.x-2.0:beta1:~~~drupal~~"/>
        <cpe-lang:fact-ref name="cpe:/a:organic_groups_project:organic_groups:7.x-2.0:alpha3:~~~drupal~~"/>
        <cpe-lang:fact-ref name="cpe:/a:organic_groups_project:organic_groups:7.x-2.0:alpha2:~~~drupal~~"/>
        <cpe-lang:fact-ref name="cpe:/a:organic_groups_project:organic_groups:7.x-2.0:alpha1:~~~drupal~~"/>
        <cpe-lang:fact-ref name="cpe:/a:organic_groups_project:organic_groups:7.x-2.x:dev:~~~drupal~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:organic_groups_project:organic_groups:7.x-2.0:alpha1:~~~drupal~~</vuln:product>
      <vuln:product>cpe:/a:organic_groups_project:organic_groups:7.x-2.x:dev:~~~drupal~~</vuln:product>
      <vuln:product>cpe:/a:organic_groups_project:organic_groups:7.x-2.0:alpha3:~~~drupal~~</vuln:product>
      <vuln:product>cpe:/a:organic_groups_project:organic_groups:7.x-2.0:alpha2:~~~drupal~~</vuln:product>
      <vuln:product>cpe:/a:organic_groups_project:organic_groups:7.x-2.0:beta4:~~~drupal~~</vuln:product>
      <vuln:product>cpe:/a:organic_groups_project:organic_groups:7.x-2.0:-:~~~drupal~~</vuln:product>
      <vuln:product>cpe:/a:organic_groups_project:organic_groups:7.x-2.0:rc2:~~~drupal~~</vuln:product>
      <vuln:product>cpe:/a:organic_groups_project:organic_groups:7.x-2.0:beta2:~~~drupal~~</vuln:product>
      <vuln:product>cpe:/a:organic_groups_project:organic_groups:7.x-2.2::~~~drupal~~</vuln:product>
      <vuln:product>cpe:/a:organic_groups_project:organic_groups:7.x-2.0:rc1:~~~drupal~~</vuln:product>
      <vuln:product>cpe:/a:organic_groups_project:organic_groups:7.x-2.0:beta3:~~~drupal~~</vuln:product>
      <vuln:product>cpe:/a:organic_groups_project:organic_groups:7.x-2.1::~~~drupal~~</vuln:product>
      <vuln:product>cpe:/a:organic_groups_project:organic_groups:7.x-2.0:rc4:~~~drupal~~</vuln:product>
      <vuln:product>cpe:/a:organic_groups_project:organic_groups:7.x-2.0:rc3:~~~drupal~~</vuln:product>
      <vuln:product>cpe:/a:organic_groups_project:organic_groups:7.x-2.0:beta1:~~~drupal~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-7068</vuln:cve-id>
    <vuln:published-datetime>2014-04-29T10:38:43.907-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-29T13:52:47.283-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.9</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-29T13:52:47.157-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-264"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://drupal.org/node/2140217" xml:lang="en">https://drupal.org/node/2140217</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="PATCH">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://drupal.org/node/2140209" xml:lang="en">https://drupal.org/node/2140209</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://www.openwall.com/lists/oss-security/2013/12/12/1" xml:lang="en">[oss-security] 20131211 Re: CVE request for Drupal core, and contributed modules</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://www.openwall.com/lists/oss-security/2013/12/06/7" xml:lang="en">[oss-security] 20131206 CVE request for Drupal core, and contributed modules</vuln:reference>
    </vuln:references>
    <vuln:summary>The Organic Groups (OG) module 7.x-2.x before 7.x-2.3 for Drupal allows remote authenticated users to bypass group restrictions on nodes with all groups set to optional input via an empty group field.</vuln:summary>
  </entry>
  <entry id="CVE-2013-7110">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:transifex:transifex:0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:transifex:transifex:0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:transifex:transifex:0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:transifex:transifex:0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:transifex:transifex:0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:transifex:transifex:0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:transifex:transifex:0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:transifex:transifex:0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:transifex:transifex:0.1"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:transifex:transifex:0.4</vuln:product>
      <vuln:product>cpe:/a:transifex:transifex:0.3</vuln:product>
      <vuln:product>cpe:/a:transifex:transifex:0.2</vuln:product>
      <vuln:product>cpe:/a:transifex:transifex:0.1</vuln:product>
      <vuln:product>cpe:/a:transifex:transifex:0.8</vuln:product>
      <vuln:product>cpe:/a:transifex:transifex:0.7</vuln:product>
      <vuln:product>cpe:/a:transifex:transifex:0.6</vuln:product>
      <vuln:product>cpe:/a:transifex:transifex:0.5</vuln:product>
      <vuln:product>cpe:/a:transifex:transifex:0.9</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-7110</vuln:cve-id>
    <vuln:published-datetime>2014-05-01T21:59:22.280-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-05-02T10:52:37.023-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-05-02T10:52:30.287-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-20"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://github.com/transifex/transifex-client/issues/42" xml:lang="en">https://github.com/transifex/transifex-client/issues/42</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://www.openwall.com/lists/oss-security/2013/12/15/3" xml:lang="en">[oss-security] 20131215 Re: CVE-2013-2073 transifex-client: Does not validate HTTPS server certificate (fixed in transifex-client v0.9)</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://www.openwall.com/lists/oss-security/2013/12/13/5" xml:lang="en">[oss-security] 20131213 Re: CVE-2013-2073 transifex-client: Does not validate HTTPS server certificate (fixed in transifex-client v0.9)</vuln:reference>
    </vuln:references>
    <vuln:summary>Transifex command-line client before 0.10 does not validate X.509 certificates for data transfer connections, which allows man-in-the-middle attackers to spoof a Transifex server via an arbitrary certificate.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-2073.</vuln:summary>
  </entry>
  <entry id="CVE-2013-7111">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:basespace_ruby_sdk_project:basespace_ruby_sdk:0.1.7::~~~ruby~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:basespace_ruby_sdk_project:basespace_ruby_sdk:0.1.7::~~~ruby~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-7111</vuln:cve-id>
    <vuln:published-datetime>2014-04-29T10:38:46.250-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-29T13:59:23.673-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-29T13:59:23.610-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-200"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.vapid.dhs.org/advisories/bio-basespace-sdk.html" xml:lang="en">http://www.vapid.dhs.org/advisories/bio-basespace-sdk.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://www.openwall.com/lists/oss-security/2013/12/15/5" xml:lang="en">[oss-security] 20131215 Re: Bio Basespace SDK 0.1.7 Ruby Gem exposes API Key via command line</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://www.openwall.com/lists/oss-security/2013/12/14/2" xml:lang="en">[oss-security] 20131214 Bio Basespace SDK 0.1.7 Ruby Gem exposes API Key via command line</vuln:reference>
    </vuln:references>
    <vuln:summary>The put_call function in the API client (api/api_client.rb) in the BaseSpace Ruby SDK (aka bio-basespace-sdk) gem 0.1.7 for Ruby uses the API_KEY on the command line, which allows remote attackers to obtain sensitive information by listing the processes.</vuln:summary>
  </entry>
  <entry id="CVE-2013-7134">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:phusion:juvia:-"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:phusion:juvia:-</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-7134</vuln:cve-id>
    <vuln:published-datetime>2014-04-29T10:38:46.437-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-29T14:13:53.343-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-29T14:13:53.247-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-255"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://github.com/phusion/juvia/issues/55" xml:lang="en">https://github.com/phusion/juvia/issues/55</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://www.openwall.com/lists/oss-security/2013/12/18/1" xml:lang="en">[oss-security] 20131217 Re: CVE request: Juvia secret token handling</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://www.openwall.com/lists/oss-security/2013/12/16/3" xml:lang="en">[oss-security] 20131216 CVE request: Juvia secret token handling</vuln:reference>
    </vuln:references>
    <vuln:summary>Juvia uses the same secret key for all installations, which allows remote attackers to have unspecified impact by leveraging the secret key in app/config/initializers/secret_token.rb, related to cookies.</vuln:summary>
  </entry>
  <entry id="CVE-2013-7220">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.7.92"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.7.91"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.7.5"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.7.4.1"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.7.4"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.7.3.1"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.7.3"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.7.2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.7.2"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.7.1"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.6.3.1"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.6.3"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.6.2"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.6.1"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.6.0"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.5.92"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.5.91"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.5.90"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.5.4"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.5.3"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.5.2"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.4.2"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.4.1"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.4.0"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.3.92"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.3.91"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.3.90"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.3.5"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.3.3"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.3.2"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.2.2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.2.2"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.1.92"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.1.91.1"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.1.91"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.1.90.1"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.1.90"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.0.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.0.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.0.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.6.3</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.7.3.1</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.7.2.1</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.0.1</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.0.2</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.5.90</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.2.2</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.5.91</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.2.1</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.5.92</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.3.90</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.7.1</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.3.91</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.3.92</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.6.3.1</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.1.90</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.6.0</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.1.90.1</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.6.1</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.6.2</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.4.1</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.4.2</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.4.0</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.0.0.1</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.0.0.2</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.1.91.1</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.1.3</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.1.4</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.1.92</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.1.91</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.5.4</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.7.4.1</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.3.2</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.2.0</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.3.3</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.7.2</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.7.92</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.3.5</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.7.3</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.7.91</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.0.0</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.7.4</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.5.2</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.7.5</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.5.3</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.2.2.1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-7220</vuln:cve-id>
    <vuln:published-datetime>2014-04-29T10:38:46.967-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-29T14:53:47.390-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.6</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-29T14:53:45.750-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://github.com/o2platform/DefCon_RESTing/tree/master/Live-Demos/Neo4j" xml:lang="en">https://github.com/o2platform/DefCon_RESTing/tree/master/Live-Demos/Neo4j</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1030431" xml:lang="en">https://bugzilla.redhat.com/show_bug.cgi?id=1030431</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.gnome.org/show_bug.cgi?id=686740" xml:lang="en">https://bugzilla.gnome.org/show_bug.cgi?id=686740</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://www.openwall.com/lists/oss-security/2013/12/27/8" xml:lang="en">[oss-security] 20131227 Re: Two CVE request for gnome-shell/screensaver issues</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://www.openwall.com/lists/oss-security/2013/12/27/6" xml:lang="en">[oss-security] 20131227 Re: Two CVE request for gnome-shell/screensaver issues</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://www.openwall.com/lists/oss-security/2013/12/27/4" xml:lang="en">[oss-security] 20131227 Two CVE request for gnome-shell/screensaver issues</vuln:reference>
    </vuln:references>
    <vuln:summary>js/ui/screenShield.js in GNOME Shell (aka gnome-shell) before 3.8 allows physically proximate attackers to execute arbitrary commands by leveraging an unattended workstation with the keyboard focus on the Activities search.</vuln:summary>
  </entry>
  <entry id="CVE-2013-7221">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.8.0"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.8.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.8.1"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.8.2"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.8.3"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.8.4"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.9.1"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.9.2"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.9.3"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.9.4"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.9.5"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.9.90"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.9.91"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.9.92"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.7.92"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.7.91"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.7.5"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.7.4.1"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.7.4"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.7.3.1"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.7.3"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.7.2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.7.2"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.7.1"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.6.3.1"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.6.3"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.6.2"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.6.1"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.6.0"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.5.92"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.5.91"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.5.90"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.5.4"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.5.3"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.5.2"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.4.2"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.4.1"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.4.0"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.3.92"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.3.91"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.3.90"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.3.5"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.3.3"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.3.2"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.2.2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.2.2"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.1.92"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.1.91.1"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.1.91"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.1.90.1"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.1.90"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.0.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.0.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome-shell:3.0.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.7.3.1</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.8.0</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.7.2.1</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.0.1</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.0.2</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.7.1</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.3.90</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.3.91</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.3.92</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.6.3.1</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.6.0</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.1.90.1</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.6.1</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.6.2</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.4.1</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.4.2</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.4.0</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.9.90</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.1.91.1</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.1.3</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.1.4</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.1.92</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.1.91</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.9.1</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.3.2</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.3.3</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.7.92</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.7.91</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.3.5</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.9.92</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.9.91</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.0.0</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.5.2</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.5.3</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.9.3</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.2.2.1</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.9.2</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.9.5</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.9.4</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.6.3</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.8.4</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.8.3</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.8.2</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.8.1</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.5.90</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.5.91</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.2.2</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.5.92</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.2.1</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.1.90</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.0.0.1</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.0.0.2</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.5.4</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.7.4.1</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.2.0</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.7.2</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.7.3</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.7.4</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.7.5</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome-shell:3.8.0.1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-7221</vuln:cve-id>
    <vuln:published-datetime>2014-04-29T10:38:47.170-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-29T15:03:18.770-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.6</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-29T15:03:17.957-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-264"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://git.gnome.org/browse/gnome-shell/commit/js/ui/main.js?id=efdf1ff755943fba1f8a9aaeff77daa3ed338088" xml:lang="en">https://git.gnome.org/browse/gnome-shell/commit/js/ui/main.js?id=efdf1ff755943fba1f8a9aaeff77daa3ed338088</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.gnome.org/show_bug.cgi?id=708313" xml:lang="en">https://bugzilla.gnome.org/show_bug.cgi?id=708313</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://www.openwall.com/lists/oss-security/2013/12/27/8" xml:lang="en">[oss-security] 20131227 Re: Two CVE request for gnome-shell/screensaver issues</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://www.openwall.com/lists/oss-security/2013/12/27/4" xml:lang="en">[oss-security] 20131227 Two CVE request for gnome-shell/screensaver issues</vuln:reference>
    </vuln:references>
    <vuln:summary>The automatic screen lock functionality in GNOME Shell (aka gnome-shell) before 3.10 does not prevent access to the "Enter a Command" dialog, which allows physically proximate attackers to execute arbitrary commands by leveraging an unattended workstation.</vuln:summary>
  </entry>
  <entry id="CVE-2013-7234">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:2.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:2.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:2.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:2.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:2.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:2.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:2.0:rc5"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:2.0:rc4"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:2.0:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:2.0:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:2.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:2.0:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:2.0:beta3.1"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:2.0:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:2.0:beta2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:2.0:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:2.0:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1.9"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1.8"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1.7"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1.6"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1.17"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1.16"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1.15"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1.14"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1.13"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1.12"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1.11"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1.10"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0.23"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0.22"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0.21"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0.20"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0.19"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0.18"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0.17"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0.16"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0:beta4.1"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0.20</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0.22</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0.21</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0.23</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:2.0:beta3.1</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0.17</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1:beta4</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0:beta4</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0.16</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:2.0:beta2.1</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0.19</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0:beta6</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0.18</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1:beta1</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1:beta2</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1:beta3</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0.4</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0.3</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0.6</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0.5</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0.8</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0.7</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0.9</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1.7</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1.6</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1.9</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1.8</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1.3</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1.2</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1.5</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1.4</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0:rc2</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1.1</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0:rc1</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1:rc2</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1:rc1</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1:rc3</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:2.0:beta1</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:2.0:beta3</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:2.0:beta2</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0:beta4.1</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:2.0:beta4</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0.1</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0.2</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:2.0.4</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1.12</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:2.0.5</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1.11</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:2.0.2</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:2.0:rc5</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1.10</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:2.0.3</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:2.0:rc3</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1.16</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:2.0:rc4</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1.15</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:2.0.6</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:2.0:rc1</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1.14</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:2.0:rc2</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1.13</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:2.0.1</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0.14</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0.15</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1.17</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0.12</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0.13</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0.10</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0:beta5</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-7234</vuln:cve-id>
    <vuln:published-datetime>2014-04-29T10:38:47.607-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-30T07:14:53.417-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-30T07:14:52.947-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-20"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://www.openwall.com/lists/oss-security/2013/12/30/3" xml:lang="en">[oss-security] 20131229 Re: CVE request: SMF 1.1.19, 2.0.6</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://www.openwall.com/lists/oss-security/2013/12/30/1" xml:lang="en">[oss-security] 20131230 CVE request: SMF 1.1.19, 2.0.6</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.jakoblell.com/blog/2013/12/13/multiple-vulnerabilities-in-smf-forum-software/" xml:lang="en">http://www.jakoblell.com/blog/2013/12/13/multiple-vulnerabilities-in-smf-forum-software/</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>FULLDISC</vuln:source>
      <vuln:reference href="http://seclists.org/fulldisclosure/2013/Dec/83" xml:lang="en">20131213 Multiple vulnerabilities in SMF forum software</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://download.simplemachines.org/index.php?thanks;filename=smf_2-0-6_changelog.txt" xml:lang="en">http://download.simplemachines.org/index.php?thanks;filename=smf_2-0-6_changelog.txt</vuln:reference>
    </vuln:references>
    <vuln:summary>Simple Machines Forum (SMF) before 1.1.19 and 2.x before 2.0.6 allows remote attackers to conduct clickjacking attacks via an X-Frame-Options header.</vuln:summary>
  </entry>
  <entry id="CVE-2013-7235">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:2.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:2.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:2.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:2.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:2.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:2.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:2.0:rc5"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:2.0:rc4"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:2.0:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:2.0:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:2.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:2.0:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:2.0:beta3.1"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:2.0:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:2.0:beta2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:2.0:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:2.0:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1.9"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1.8"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1.7"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1.6"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1.17"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1.16"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1.15"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1.14"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1.13"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1.12"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1.11"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1.10"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0.23"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0.22"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0.21"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0.20"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0.19"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0.18"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0.17"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0.16"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0:beta4.1"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0.20</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0.22</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0.21</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0.23</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:2.0:beta3.1</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0.17</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1:beta4</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0:beta4</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0.16</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:2.0:beta2.1</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0.19</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0:beta6</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0.18</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1:beta1</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1:beta2</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1:beta3</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0.4</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0.3</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0.6</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0.5</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0.8</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0.7</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0.9</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1.7</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1.6</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1.9</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1.8</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1.3</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1.2</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1.5</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1.4</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0:rc2</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1.1</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0:rc1</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1:rc2</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1:rc1</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1:rc3</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:2.0:beta1</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:2.0:beta3</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:2.0:beta2</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0:beta4.1</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:2.0:beta4</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0.1</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0.2</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:2.0.4</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1.12</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:2.0.5</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1.11</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:2.0.2</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:2.0:rc5</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1.10</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:2.0.3</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:2.0:rc3</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1.16</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:2.0:rc4</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1.15</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:2.0.6</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:2.0:rc1</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1.14</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:2.0:rc2</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1.13</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:2.0.1</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0.14</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0.15</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1.17</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0.12</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0.13</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0.10</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0:beta5</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-7235</vuln:cve-id>
    <vuln:published-datetime>2014-04-29T10:38:47.623-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-30T07:18:45.863-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-30T07:18:45.550-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-20"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://www.openwall.com/lists/oss-security/2013/12/30/3" xml:lang="en">[oss-security] 20131229 Re: CVE request: SMF 1.1.19, 2.0.6</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://www.openwall.com/lists/oss-security/2013/12/30/1" xml:lang="en">[oss-security] 20131230 CVE request: SMF 1.1.19, 2.0.6</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.jakoblell.com/blog/2013/12/13/multiple-vulnerabilities-in-smf-forum-software/" xml:lang="en">http://www.jakoblell.com/blog/2013/12/13/multiple-vulnerabilities-in-smf-forum-software/</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>FULLDISC</vuln:source>
      <vuln:reference href="http://seclists.org/fulldisclosure/2013/Dec/83" xml:lang="en">20131213 Multiple vulnerabilities in SMF forum software</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://download.simplemachines.org/index.php?thanks;filename=smf_2-0-6_changelog.txt" xml:lang="en">http://download.simplemachines.org/index.php?thanks;filename=smf_2-0-6_changelog.txt</vuln:reference>
    </vuln:references>
    <vuln:summary>Simple Machines Forum (SMF) before 1.1.19 and 2.x before 2.0.6 allows remote attackers to impersonate arbitrary users via multiple space characters characters.</vuln:summary>
  </entry>
  <entry id="CVE-2013-7236">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:2.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1.9"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1.8"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1.7"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1.6"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1.17"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1.16"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1.15"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1.14"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1.13"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1.12"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1.11"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1.10"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0.23"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0.22"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0.21"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0.20"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0.19"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0.18"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0.17"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0.16"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0:beta4.1"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:simplemachines:simple_machines_forum:1.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0.20</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0.22</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0.21</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0.23</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1:beta4</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0.17</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0:beta4</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0.16</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0.19</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0:beta6</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0.18</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1:beta1</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1:beta2</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1:beta3</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0.4</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0.3</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0.6</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0.5</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0.8</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0.7</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0.9</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1.7</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1.6</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1.9</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1.8</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1.3</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1.2</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1.5</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1.4</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0:rc2</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1.1</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0:rc1</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1:rc2</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1:rc1</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1:rc3</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0:beta4.1</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0.1</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0.2</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1.12</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1.11</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1.10</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1.16</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1.15</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1.14</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:2.0.6</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1.13</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0.14</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.1.17</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0.15</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0.12</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0.13</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0.10</vuln:product>
      <vuln:product>cpe:/a:simplemachines:simple_machines_forum:1.0:beta5</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-7236</vuln:cve-id>
    <vuln:published-datetime>2014-04-29T10:38:47.657-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-30T07:21:25.227-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-30T07:21:24.960-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-20"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://www.openwall.com/lists/oss-security/2013/12/30/3" xml:lang="en">[oss-security] 20131229 Re: CVE request: SMF 1.1.19, 2.0.6</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://www.openwall.com/lists/oss-security/2013/12/30/1" xml:lang="en">[oss-security] 20131230 CVE request: SMF 1.1.19, 2.0.6</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.jakoblell.com/blog/2013/12/13/multiple-vulnerabilities-in-smf-forum-software/" xml:lang="en">http://www.jakoblell.com/blog/2013/12/13/multiple-vulnerabilities-in-smf-forum-software/</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>FULLDISC</vuln:source>
      <vuln:reference href="http://seclists.org/fulldisclosure/2013/Dec/83" xml:lang="en">20131213 Multiple vulnerabilities in SMF forum software</vuln:reference>
    </vuln:references>
    <vuln:summary>Simple Machines Forum (SMF) 2.0.6, 1.1.19, and earlier allows remote attackers to impersonate arbitrary users via a Unicode homoglyph character in a username.</vuln:summary>
  </entry>
  <entry id="CVE-2013-7259">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:neo4j:neo4j:1.9.2"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:neo4j:neo4j:1.9.2</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-7259</vuln:cve-id>
    <vuln:published-datetime>2014-04-29T10:38:47.797-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-30T07:44:00.303-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-30T07:44:00.240-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-352"/>
    <vuln:cwe id="CWE-78"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://github.com/o2platform/DefCon_RESTing/tree/master/Live-Demos/Neo4j" xml:lang="en">https://github.com/o2platform/DefCon_RESTing/tree/master/Live-Demos/Neo4j</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://www.openwall.com/lists/oss-security/2014/01/03/8" xml:lang="en">[oss-security] 20140103 Re: Neo4J CSRF: Potential CVE candidate</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://www.openwall.com/lists/oss-security/2014/01/03/3" xml:lang="en">[oss-security] 20140103 Neo4J CSRF: Potential CVE candidate</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://blog.diniscruz.com/2013/08/neo4j-csrf-payload-to-start-processes.html" xml:lang="en">http://blog.diniscruz.com/2013/08/neo4j-csrf-payload-to-start-processes.html</vuln:reference>
    </vuln:references>
    <vuln:summary>Multiple cross-site request forgery (CSRF) vulnerabilities in Neo4J 1.9.2 allow remote attackers to hijack the authentication of administrators for requests that execute arbitrary code, as demonstrated by a request to (1) db/data/ext/GremlinPlugin/graphdb/execute_script or (2) db/manage/server/console/.</vuln:summary>
  </entry>
  <entry id="CVE-2013-7260">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:realnetworks:realplayer:17.0.4.60"/>
        <cpe-lang:fact-ref name="cpe:/a:realnetworks:realplayer:8"/>
        <cpe-lang:fact-ref name="cpe:/a:realnetworks:realplayer:7"/>
        <cpe-lang:fact-ref name="cpe:/a:realnetworks:realplayer:6"/>
        <cpe-lang:fact-ref name="cpe:/a:realnetworks:realplayer:5"/>
        <cpe-lang:fact-ref name="cpe:/a:realnetworks:realplayer:4"/>
        <cpe-lang:fact-ref name="cpe:/a:realnetworks:realplayer:2.1.4::enterprise"/>
        <cpe-lang:fact-ref name="cpe:/a:realnetworks:realplayer:2.1.3::enterprise"/>
        <cpe-lang:fact-ref name="cpe:/a:realnetworks:realplayer:2.1.2::enterprise"/>
        <cpe-lang:fact-ref name="cpe:/a:realnetworks:realplayer:16.0.3.51"/>
        <cpe-lang:fact-ref name="cpe:/a:realnetworks:realplayer:16.0.2.32"/>
        <cpe-lang:fact-ref name="cpe:/a:realnetworks:realplayer:16.0.1.18"/>
        <cpe-lang:fact-ref name="cpe:/a:realnetworks:realplayer:16.0.0.282"/>
        <cpe-lang:fact-ref name="cpe:/a:realnetworks:realplayer:16.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:realnetworks:realplayer:15.02.71"/>
        <cpe-lang:fact-ref name="cpe:/a:realnetworks:realplayer:15.0.6.14"/>
        <cpe-lang:fact-ref name="cpe:/a:realnetworks:realplayer:15.0.5.109"/>
        <cpe-lang:fact-ref name="cpe:/a:realnetworks:realplayer:15.0.4.43"/>
        <cpe-lang:fact-ref name="cpe:/a:realnetworks:realplayer:15.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:realnetworks:realplayer:15.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:realnetworks:realplayer:14.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:realnetworks:realplayer:14.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:realnetworks:realplayer:14.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:realnetworks:realplayer:14.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:realnetworks:realplayer:14.0.1.609"/>
        <cpe-lang:fact-ref name="cpe:/a:realnetworks:realplayer:14.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:realnetworks:realplayer:14.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:realnetworks:realplayer:12.0.0.1548"/>
        <cpe-lang:fact-ref name="cpe:/a:realnetworks:realplayer:12.0.0.1444"/>
        <cpe-lang:fact-ref name="cpe:/a:realnetworks:realplayer:11_build_6.0.14.748"/>
        <cpe-lang:fact-ref name="cpe:/a:realnetworks:realplayer:11.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:realnetworks:realplayer:11.1"/>
        <cpe-lang:fact-ref name="cpe:/a:realnetworks:realplayer:11.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:realnetworks:realplayer:11.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:realnetworks:realplayer:11.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:realnetworks:realplayer:11.0.2.2315"/>
        <cpe-lang:fact-ref name="cpe:/a:realnetworks:realplayer:11.0.2.1744"/>
        <cpe-lang:fact-ref name="cpe:/a:realnetworks:realplayer:11.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:realnetworks:realplayer:11.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:realnetworks:realplayer:11.0"/>
        <cpe-lang:fact-ref name="cpe:/a:realnetworks:realplayer:10.5"/>
        <cpe-lang:fact-ref name="cpe:/a:realnetworks:realplayer:10.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:realnetworks:realplayer:12.0.1.1737:-:~-~-~mac_os_x~~"/>
        <cpe-lang:fact-ref name="cpe:/a:realnetworks:realplayer:10.0:10.0.0.305:mac"/>
        <cpe-lang:fact-ref name="cpe:/a:realnetworks:realplayer:10.0:10.0.0.331:mac"/>
        <cpe-lang:fact-ref name="cpe:/a:realnetworks:realplayer:10.0:10.0.0.352:mac"/>
        <cpe-lang:fact-ref name="cpe:/a:realnetworks:realplayer:10.1:10.0.0._481:mac"/>
        <cpe-lang:fact-ref name="cpe:/a:realnetworks:realplayer:10.1:10.0.0.396:mac"/>
        <cpe-lang:fact-ref name="cpe:/a:realnetworks:realplayer:10.1:10.0.0.412:mac"/>
        <cpe-lang:fact-ref name="cpe:/a:realnetworks:realplayer:12.0.0.1701::mac"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:realnetworks:realplayer:12.0.0.1701::mac</vuln:product>
      <vuln:product>cpe:/a:realnetworks:realplayer:7</vuln:product>
      <vuln:product>cpe:/a:realnetworks:realplayer:4</vuln:product>
      <vuln:product>cpe:/a:realnetworks:realplayer:6</vuln:product>
      <vuln:product>cpe:/a:realnetworks:realplayer:5</vuln:product>
      <vuln:product>cpe:/a:realnetworks:realplayer:15.0.4.43</vuln:product>
      <vuln:product>cpe:/a:realnetworks:realplayer:14.0.1.609</vuln:product>
      <vuln:product>cpe:/a:realnetworks:realplayer:15.02.71</vuln:product>
      <vuln:product>cpe:/a:realnetworks:realplayer:8</vuln:product>
      <vuln:product>cpe:/a:realnetworks:realplayer:14.0.0</vuln:product>
      <vuln:product>cpe:/a:realnetworks:realplayer:11.0.2.1744</vuln:product>
      <vuln:product>cpe:/a:realnetworks:realplayer:14.0.4</vuln:product>
      <vuln:product>cpe:/a:realnetworks:realplayer:10.1:10.0.0._481:mac</vuln:product>
      <vuln:product>cpe:/a:realnetworks:realplayer:14.0.5</vuln:product>
      <vuln:product>cpe:/a:realnetworks:realplayer:11.1</vuln:product>
      <vuln:product>cpe:/a:realnetworks:realplayer:10.1:10.0.0.412:mac</vuln:product>
      <vuln:product>cpe:/a:realnetworks:realplayer:12.0.0.1548</vuln:product>
      <vuln:product>cpe:/a:realnetworks:realplayer:14.0.1</vuln:product>
      <vuln:product>cpe:/a:realnetworks:realplayer:14.0.2</vuln:product>
      <vuln:product>cpe:/a:realnetworks:realplayer:11.0</vuln:product>
      <vuln:product>cpe:/a:realnetworks:realplayer:14.0.3</vuln:product>
      <vuln:product>cpe:/a:realnetworks:realplayer:10.1:10.0.0.396:mac</vuln:product>
      <vuln:product>cpe:/a:realnetworks:realplayer:11_build_6.0.14.748</vuln:product>
      <vuln:product>cpe:/a:realnetworks:realplayer:15.0.5.109</vuln:product>
      <vuln:product>cpe:/a:realnetworks:realplayer:10.0:10.0.0.305:mac</vuln:product>
      <vuln:product>cpe:/a:realnetworks:realplayer:16.0.0.282</vuln:product>
      <vuln:product>cpe:/a:realnetworks:realplayer:10.0:10.0.0.352:mac</vuln:product>
      <vuln:product>cpe:/a:realnetworks:realplayer:11.0.4</vuln:product>
      <vuln:product>cpe:/a:realnetworks:realplayer:11.0.5</vuln:product>
      <vuln:product>cpe:/a:realnetworks:realplayer:11.1.3</vuln:product>
      <vuln:product>cpe:/a:realnetworks:realplayer:16.0.2.32</vuln:product>
      <vuln:product>cpe:/a:realnetworks:realplayer:15.0.0</vuln:product>
      <vuln:product>cpe:/a:realnetworks:realplayer:16.0.0</vuln:product>
      <vuln:product>cpe:/a:realnetworks:realplayer:15.0.4</vuln:product>
      <vuln:product>cpe:/a:realnetworks:realplayer:10.0</vuln:product>
      <vuln:product>cpe:/a:realnetworks:realplayer:10.5</vuln:product>
      <vuln:product>cpe:/a:realnetworks:realplayer:17.0.4.60</vuln:product>
      <vuln:product>cpe:/a:realnetworks:realplayer:12.0.1.1737:-:~-~-~mac_os_x~~</vuln:product>
      <vuln:product>cpe:/a:realnetworks:realplayer:12.0.0.1444</vuln:product>
      <vuln:product>cpe:/a:realnetworks:realplayer:11.0.2.2315</vuln:product>
      <vuln:product>cpe:/a:realnetworks:realplayer:2.1.4::enterprise</vuln:product>
      <vuln:product>cpe:/a:realnetworks:realplayer:2.1.3::enterprise</vuln:product>
      <vuln:product>cpe:/a:realnetworks:realplayer:2.1.2::enterprise</vuln:product>
      <vuln:product>cpe:/a:realnetworks:realplayer:16.0.1.18</vuln:product>
      <vuln:product>cpe:/a:realnetworks:realplayer:16.0.3.51</vuln:product>
      <vuln:product>cpe:/a:realnetworks:realplayer:15.0.6.14</vuln:product>
      <vuln:product>cpe:/a:realnetworks:realplayer:11.0.3</vuln:product>
      <vuln:product>cpe:/a:realnetworks:realplayer:10.0:10.0.0.331:mac</vuln:product>
      <vuln:product>cpe:/a:realnetworks:realplayer:11.0.2</vuln:product>
      <vuln:product>cpe:/a:realnetworks:realplayer:11.0.1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-7260</vuln:cve-id>
    <vuln:published-datetime>2014-01-03T15:55:06.383-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-25T09:36:23.007-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-01-06T12:15:40.000-05:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-119"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CERT-VN</vuln:source>
      <vuln:reference href="http://www.kb.cert.org/vuls/id/698278" xml:lang="en">VU#698278</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="http://xforce.iss.net/xforce/xfdb/90160" xml:lang="en">realplayer-cve20137260-bo(90160)</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>EXPLOIT-DB</vuln:source>
      <vuln:reference href="http://www.exploit-db.com/exploits/30468/" xml:lang="en">30468</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://service.real.com/realplayer/security/12202013_player/en/" xml:lang="en">http://service.real.com/realplayer/security/12202013_player/en/</vuln:reference>
    </vuln:references>
    <vuln:summary>Multiple stack-based buffer overflows in RealNetworks RealPlayer before 17.0.4.61 on Windows, and Mac RealPlayer before 12.0.1.1738, allow remote attackers to execute arbitrary code via a long (1) version number or (2) encoding declaration in the XML declaration of an RMP file, a different issue than CVE-2013-6877.</vuln:summary>
  </entry>
  <entry id="CVE-2013-7273">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome_display_manager:3.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome_display_manager:3.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome_display_manager:3.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome_display_manager:3.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome_display_manager:3.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome_display_manager:3.1.90"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome_display_manager:3.1.91"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome_display_manager:3.1.92"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome_display_manager:3.2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome_display_manager:3.2.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome_display_manager:3.2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome_display_manager:3.3.92"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome_display_manager:3.3.92.1"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome_display_manager:3.4.1"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome_display_manager:3.4.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:gnome:gnome_display_manager:3.4.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:gnome:gnome_display_manager:3.1.91</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome_display_manager:3.1.92</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome_display_manager:3.1.2</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome_display_manager:3.4.0</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome_display_manager:3.4.1</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome_display_manager:3.3.92</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome_display_manager:3.4.0.1</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome_display_manager:3.2.0</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome_display_manager:3.2.1.1</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome_display_manager:3.2.1</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome_display_manager:3.0.2</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome_display_manager:3.0.4</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome_display_manager:3.3.92.1</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome_display_manager:3.0.3</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome_display_manager:3.0.0</vuln:product>
      <vuln:product>cpe:/a:gnome:gnome_display_manager:3.1.90</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-7273</vuln:cve-id>
    <vuln:published-datetime>2014-04-29T10:38:49.857-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-30T09:32:45.557-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>2.1</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-30T09:32:45.383-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1050745" xml:lang="en">https://bugzilla.redhat.com/show_bug.cgi?id=1050745</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://bugzilla.gnome.org/show_bug.cgi?id=704284" xml:lang="en">https://bugzilla.gnome.org/show_bug.cgi?id=704284</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=683338" xml:lang="en">https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=683338</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://www.openwall.com/lists/oss-security/2014/01/07/16" xml:lang="en">[oss-security] 20140107 CVE Re: request: lightdm-gtk-greeter - local DOS due to NULL pointer dereference</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://www.openwall.com/lists/oss-security/2014/01/07/10" xml:lang="en">[oss-security] 20140107 CVE Re: request: lightdm-gtk-greeter - local DOS due to NULL pointer dereference</vuln:reference>
    </vuln:references>
    <vuln:summary>GNOME Display Manager (gdm) 3.4.1 and earlier, when disable-user-list is set to true, allows local users to cause a denial of service (unable to login) by pressing the cancel button after entering a user name.</vuln:summary>
  </entry>
  <entry id="CVE-2013-7284">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:malcolm_nooning:pirpc:0.2020::~~~perl~~"/>
        <cpe-lang:fact-ref name="cpe:/a:malcolm_nooning:pirpc:0.2019::~~~perl~~"/>
        <cpe-lang:fact-ref name="cpe:/a:malcolm_nooning:pirpc:0.2018::~~~perl~~"/>
        <cpe-lang:fact-ref name="cpe:/a:malcolm_nooning:pirpc:0.2017::~~~perl~~"/>
        <cpe-lang:fact-ref name="cpe:/a:malcolm_nooning:pirpc:0.2016::~~~perl~~"/>
        <cpe-lang:fact-ref name="cpe:/a:malcolm_nooning:pirpc:0.2014::~~~perl~~"/>
        <cpe-lang:fact-ref name="cpe:/a:malcolm_nooning:pirpc:0.2013::~~~perl~~"/>
        <cpe-lang:fact-ref name="cpe:/a:malcolm_nooning:pirpc:0.2012::~~~perl~~"/>
        <cpe-lang:fact-ref name="cpe:/a:malcolm_nooning:pirpc:0.2011::~~~perl~~"/>
        <cpe-lang:fact-ref name="cpe:/a:malcolm_nooning:pirpc:0.2010::~~~perl~~"/>
        <cpe-lang:fact-ref name="cpe:/a:malcolm_nooning:pirpc:0.2003::~~~perl~~"/>
        <cpe-lang:fact-ref name="cpe:/a:malcolm_nooning:pirpc:0.2002::~~~perl~~"/>
        <cpe-lang:fact-ref name="cpe:/a:malcolm_nooning:pirpc:0.2001::~~~perl~~"/>
        <cpe-lang:fact-ref name="cpe:/a:malcolm_nooning:pirpc:0.2000::~~~perl~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:malcolm_nooning:pirpc:0.2010::~~~perl~~</vuln:product>
      <vuln:product>cpe:/a:malcolm_nooning:pirpc:0.2011::~~~perl~~</vuln:product>
      <vuln:product>cpe:/a:malcolm_nooning:pirpc:0.2001::~~~perl~~</vuln:product>
      <vuln:product>cpe:/a:malcolm_nooning:pirpc:0.2002::~~~perl~~</vuln:product>
      <vuln:product>cpe:/a:malcolm_nooning:pirpc:0.2003::~~~perl~~</vuln:product>
      <vuln:product>cpe:/a:malcolm_nooning:pirpc:0.2000::~~~perl~~</vuln:product>
      <vuln:product>cpe:/a:malcolm_nooning:pirpc:0.2020::~~~perl~~</vuln:product>
      <vuln:product>cpe:/a:malcolm_nooning:pirpc:0.2013::~~~perl~~</vuln:product>
      <vuln:product>cpe:/a:malcolm_nooning:pirpc:0.2012::~~~perl~~</vuln:product>
      <vuln:product>cpe:/a:malcolm_nooning:pirpc:0.2014::~~~perl~~</vuln:product>
      <vuln:product>cpe:/a:malcolm_nooning:pirpc:0.2017::~~~perl~~</vuln:product>
      <vuln:product>cpe:/a:malcolm_nooning:pirpc:0.2016::~~~perl~~</vuln:product>
      <vuln:product>cpe:/a:malcolm_nooning:pirpc:0.2019::~~~perl~~</vuln:product>
      <vuln:product>cpe:/a:malcolm_nooning:pirpc:0.2018::~~~perl~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-7284</vuln:cve-id>
    <vuln:published-datetime>2014-04-29T10:38:49.890-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-30T09:56:04.777-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-30T09:56:04.650-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-94"/>
    <vuln:references xml:lang="en" reference_type="PATCH">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://rt.cpan.org/Public/Bug/Display.html?id=90474" xml:lang="en">https://rt.cpan.org/Public/Bug/Display.html?id=90474</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1051108" xml:lang="en">https://bugzilla.redhat.com/show_bug.cgi?id=1051108</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1030572" xml:lang="en">https://bugzilla.redhat.com/show_bug.cgi?id=1030572</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=734789" xml:lang="en">https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=734789</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://seclists.org/oss-sec/2014/q1/62" xml:lang="en">[oss-security] 20140109 Re: PlRPC Perl module: pre-auth remote code execution, weak crypto</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://seclists.org/oss-sec/2014/q1/56" xml:lang="en">[oss-security] 20140109 PlRPC Perl module: pre-auth remote code execution, weak crypto</vuln:reference>
    </vuln:references>
    <vuln:summary>The PlRPC module, possibly 0.2020 and earlier, for Perl uses the Storable module, which allows remote attackers to execute arbitrary code via a crafted request, which is not properly handled when it is deserialized.</vuln:summary>
  </entry>
  <entry id="CVE-2013-7302">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="AND">
        <cpe-lang:logical-test negate="false" operator="OR">
          <cpe-lang:fact-ref name="cpe:/a:ubercart:ubercart:7.x-3.5"/>
          <cpe-lang:fact-ref name="cpe:/a:ubercart:ubercart:7.x-3.4"/>
          <cpe-lang:fact-ref name="cpe:/a:ubercart:ubercart:7.x-3.3"/>
          <cpe-lang:fact-ref name="cpe:/a:ubercart:ubercart:7.x-3.2"/>
          <cpe-lang:fact-ref name="cpe:/a:ubercart:ubercart:7.x-3.0"/>
          <cpe-lang:fact-ref name="cpe:/a:ubercart:ubercart:7.x-3.0:alpha1"/>
          <cpe-lang:fact-ref name="cpe:/a:ubercart:ubercart:7.x-3.0:alpha2"/>
          <cpe-lang:fact-ref name="cpe:/a:ubercart:ubercart:7.x-3.0:alpha3"/>
          <cpe-lang:fact-ref name="cpe:/a:ubercart:ubercart:7.x-3.0:beta1"/>
          <cpe-lang:fact-ref name="cpe:/a:ubercart:ubercart:7.x-3.0:beta2"/>
          <cpe-lang:fact-ref name="cpe:/a:ubercart:ubercart:7.x-3.0:beta3"/>
          <cpe-lang:fact-ref name="cpe:/a:ubercart:ubercart:7.x-3.0:beta4"/>
          <cpe-lang:fact-ref name="cpe:/a:ubercart:ubercart:7.x-3.0:dev"/>
          <cpe-lang:fact-ref name="cpe:/a:ubercart:ubercart:7.x-3.0:rc1"/>
          <cpe-lang:fact-ref name="cpe:/a:ubercart:ubercart:7.x-3.0:rc2"/>
          <cpe-lang:fact-ref name="cpe:/a:ubercart:ubercart:7.x-3.0:rc3"/>
          <cpe-lang:fact-ref name="cpe:/a:ubercart:ubercart:7.x-3.0:rc4"/>
          <cpe-lang:fact-ref name="cpe:/a:ubercart:ubercart:7.x-3.1"/>
          <cpe-lang:fact-ref name="cpe:/a:ubercart:ubercart:6.x-2.12"/>
          <cpe-lang:fact-ref name="cpe:/a:ubercart:ubercart:6.x-2.11"/>
          <cpe-lang:fact-ref name="cpe:/a:ubercart:ubercart:6.x-2.10"/>
          <cpe-lang:fact-ref name="cpe:/a:ubercart:ubercart:6.x-2.0"/>
          <cpe-lang:fact-ref name="cpe:/a:ubercart:ubercart:6.x-2.0:beta1"/>
          <cpe-lang:fact-ref name="cpe:/a:ubercart:ubercart:6.x-2.0:beta2"/>
          <cpe-lang:fact-ref name="cpe:/a:ubercart:ubercart:6.x-2.0:beta3"/>
          <cpe-lang:fact-ref name="cpe:/a:ubercart:ubercart:6.x-2.0:beta4"/>
          <cpe-lang:fact-ref name="cpe:/a:ubercart:ubercart:6.x-2.0:beta5"/>
          <cpe-lang:fact-ref name="cpe:/a:ubercart:ubercart:6.x-2.0:beta6"/>
          <cpe-lang:fact-ref name="cpe:/a:ubercart:ubercart:6.x-2.0:dev"/>
          <cpe-lang:fact-ref name="cpe:/a:ubercart:ubercart:6.x-2.0:rc1"/>
          <cpe-lang:fact-ref name="cpe:/a:ubercart:ubercart:6.x-2.0:rc2"/>
          <cpe-lang:fact-ref name="cpe:/a:ubercart:ubercart:6.x-2.0:rc3"/>
          <cpe-lang:fact-ref name="cpe:/a:ubercart:ubercart:6.x-2.0:rc4"/>
          <cpe-lang:fact-ref name="cpe:/a:ubercart:ubercart:6.x-2.0:rc5"/>
          <cpe-lang:fact-ref name="cpe:/a:ubercart:ubercart:6.x-2.0:rc6"/>
          <cpe-lang:fact-ref name="cpe:/a:ubercart:ubercart:6.x-2.0:rc7"/>
          <cpe-lang:fact-ref name="cpe:/a:ubercart:ubercart:6.x-2.1"/>
          <cpe-lang:fact-ref name="cpe:/a:ubercart:ubercart:6.x-2.2"/>
          <cpe-lang:fact-ref name="cpe:/a:ubercart:ubercart:6.x-2.3"/>
          <cpe-lang:fact-ref name="cpe:/a:ubercart:ubercart:6.x-2.4"/>
          <cpe-lang:fact-ref name="cpe:/a:ubercart:ubercart:6.x-2.6"/>
          <cpe-lang:fact-ref name="cpe:/a:ubercart:ubercart:6.x-2.7"/>
          <cpe-lang:fact-ref name="cpe:/a:ubercart:ubercart:6.x-2.8"/>
          <cpe-lang:fact-ref name="cpe:/a:ubercart:ubercart:6.x-2.9"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test negate="false" operator="OR">
          <cpe-lang:fact-ref name="cpe:/a:drupal:drupal:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:ubercart:ubercart:7.x-3.0:alpha1</vuln:product>
      <vuln:product>cpe:/a:ubercart:ubercart:7.x-3.4</vuln:product>
      <vuln:product>cpe:/a:ubercart:ubercart:7.x-3.5</vuln:product>
      <vuln:product>cpe:/a:ubercart:ubercart:7.x-3.2</vuln:product>
      <vuln:product>cpe:/a:ubercart:ubercart:7.x-3.3</vuln:product>
      <vuln:product>cpe:/a:ubercart:ubercart:6.x-2.0:dev</vuln:product>
      <vuln:product>cpe:/a:ubercart:ubercart:7.x-3.0:dev</vuln:product>
      <vuln:product>cpe:/a:ubercart:ubercart:7.x-3.0:beta2</vuln:product>
      <vuln:product>cpe:/a:ubercart:ubercart:7.x-3.0:rc3</vuln:product>
      <vuln:product>cpe:/a:ubercart:ubercart:7.x-3.0:beta3</vuln:product>
      <vuln:product>cpe:/a:ubercart:ubercart:7.x-3.0:rc4</vuln:product>
      <vuln:product>cpe:/a:ubercart:ubercart:6.x-2.3</vuln:product>
      <vuln:product>cpe:/a:ubercart:ubercart:7.x-3.0:beta1</vuln:product>
      <vuln:product>cpe:/a:ubercart:ubercart:7.x-3.0:rc2</vuln:product>
      <vuln:product>cpe:/a:ubercart:ubercart:6.x-2.2</vuln:product>
      <vuln:product>cpe:/a:ubercart:ubercart:7.x-3.0:rc1</vuln:product>
      <vuln:product>cpe:/a:ubercart:ubercart:6.x-2.1</vuln:product>
      <vuln:product>cpe:/a:ubercart:ubercart:7.x-3.0:beta4</vuln:product>
      <vuln:product>cpe:/a:ubercart:ubercart:6.x-2.0:beta4</vuln:product>
      <vuln:product>cpe:/a:ubercart:ubercart:6.x-2.0:beta5</vuln:product>
      <vuln:product>cpe:/a:ubercart:ubercart:6.x-2.0:beta6</vuln:product>
      <vuln:product>cpe:/a:ubercart:ubercart:6.x-2.0:beta1</vuln:product>
      <vuln:product>cpe:/a:ubercart:ubercart:6.x-2.0:beta2</vuln:product>
      <vuln:product>cpe:/a:ubercart:ubercart:6.x-2.0:beta3</vuln:product>
      <vuln:product>cpe:/a:ubercart:ubercart:6.x-2.0</vuln:product>
      <vuln:product>cpe:/a:ubercart:ubercart:6.x-2.8</vuln:product>
      <vuln:product>cpe:/a:ubercart:ubercart:6.x-2.4</vuln:product>
      <vuln:product>cpe:/a:ubercart:ubercart:6.x-2.6</vuln:product>
      <vuln:product>cpe:/a:ubercart:ubercart:6.x-2.7</vuln:product>
      <vuln:product>cpe:/a:ubercart:ubercart:6.x-2.11</vuln:product>
      <vuln:product>cpe:/a:ubercart:ubercart:6.x-2.12</vuln:product>
      <vuln:product>cpe:/a:ubercart:ubercart:6.x-2.10</vuln:product>
      <vuln:product>cpe:/a:ubercart:ubercart:6.x-2.9</vuln:product>
      <vuln:product>cpe:/a:ubercart:ubercart:7.x-3.0:alpha2</vuln:product>
      <vuln:product>cpe:/a:ubercart:ubercart:6.x-2.0:rc7</vuln:product>
      <vuln:product>cpe:/a:ubercart:ubercart:7.x-3.0:alpha3</vuln:product>
      <vuln:product>cpe:/a:ubercart:ubercart:6.x-2.0:rc6</vuln:product>
      <vuln:product>cpe:/a:ubercart:ubercart:6.x-2.0:rc5</vuln:product>
      <vuln:product>cpe:/a:ubercart:ubercart:6.x-2.0:rc4</vuln:product>
      <vuln:product>cpe:/a:ubercart:ubercart:6.x-2.0:rc3</vuln:product>
      <vuln:product>cpe:/a:ubercart:ubercart:6.x-2.0:rc2</vuln:product>
      <vuln:product>cpe:/a:ubercart:ubercart:7.x-3.1</vuln:product>
      <vuln:product>cpe:/a:ubercart:ubercart:6.x-2.0:rc1</vuln:product>
      <vuln:product>cpe:/a:ubercart:ubercart:7.x-3.0</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-7302</vuln:cve-id>
    <vuln:published-datetime>2014-04-29T10:38:49.907-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-30T10:04:51.667-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-30T10:04:51.293-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-287"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://drupal.org/node/2158651" xml:lang="en">https://drupal.org/node/2158651</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="PATCH">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://drupal.org/node/2158567" xml:lang="en">https://drupal.org/node/2158567</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="PATCH">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://drupal.org/node/2158565" xml:lang="en">https://drupal.org/node/2158565</vuln:reference>
    </vuln:references>
    <vuln:summary>Session fixation vulnerability in the Ubercart module 6.x-2.x before 6.x-2.13 and 7.x-3.x before 7.x-3.6 for Drupal, when the "Log in new customers after checkout" option is enabled, allows remote attackers to hijack web sessions by leveraging knowledge of the original session ID.</vuln:summary>
  </entry>
  <entry id="CVE-2013-7372">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/o:google:android:4.3.1"/>
        <cpe-lang:fact-ref name="cpe:/o:google:android:4.3"/>
        <cpe-lang:fact-ref name="cpe:/o:google:android:4.2.2"/>
        <cpe-lang:fact-ref name="cpe:/o:google:android:4.2.1"/>
        <cpe-lang:fact-ref name="cpe:/o:google:android:4.2"/>
        <cpe-lang:fact-ref name="cpe:/o:google:android:4.1.2"/>
        <cpe-lang:fact-ref name="cpe:/o:google:android:4.1"/>
        <cpe-lang:fact-ref name="cpe:/o:google:android:4.0.4"/>
        <cpe-lang:fact-ref name="cpe:/o:google:android:4.0.3"/>
        <cpe-lang:fact-ref name="cpe:/o:google:android:4.0.2"/>
        <cpe-lang:fact-ref name="cpe:/o:google:android:4.0.1"/>
        <cpe-lang:fact-ref name="cpe:/o:google:android:4.0"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:harmony:6.0:m3"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/o:google:android:4.1</vuln:product>
      <vuln:product>cpe:/o:google:android:4.1.2</vuln:product>
      <vuln:product>cpe:/o:google:android:4.2.2</vuln:product>
      <vuln:product>cpe:/o:google:android:4.2.1</vuln:product>
      <vuln:product>cpe:/o:google:android:4.0.1</vuln:product>
      <vuln:product>cpe:/o:google:android:4.0.2</vuln:product>
      <vuln:product>cpe:/o:google:android:4.0</vuln:product>
      <vuln:product>cpe:/a:apache:harmony:6.0:m3</vuln:product>
      <vuln:product>cpe:/o:google:android:4.0.4</vuln:product>
      <vuln:product>cpe:/o:google:android:4.0.3</vuln:product>
      <vuln:product>cpe:/o:google:android:4.3</vuln:product>
      <vuln:product>cpe:/o:google:android:4.2</vuln:product>
      <vuln:product>cpe:/o:google:android:4.3.1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-7372</vuln:cve-id>
    <vuln:published-datetime>2014-04-29T16:55:08.933-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-30T10:23:46.927-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-30T10:23:46.800-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="PATCH">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://android.googlesource.com/platform/libcore/+/kitkat-release/luni/src/main/java/org/apache/harmony/security/provider/crypto/SHA1PRNG_SecureRandomImpl.java" xml:lang="en">https://android.googlesource.com/platform/libcore/+/kitkat-release/luni/src/main/java/org/apache/harmony/security/provider/crypto/SHA1PRNG_SecureRandomImpl.java</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="PATCH">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://android-developers.blogspot.com.au/2013/08/some-securerandom-thoughts.html" xml:lang="en">http://android-developers.blogspot.com.au/2013/08/some-securerandom-thoughts.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://bitcoin.org/en/alert/2013-08-11-android" xml:lang="en">https://bitcoin.org/en/alert/2013-08-11-android</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.nds.rub.de/media/nds/veroeffentlichungen/2013/03/25/paper_2.pdf" xml:lang="en">http://www.nds.rub.de/media/nds/veroeffentlichungen/2013/03/25/paper_2.pdf</vuln:reference>
    </vuln:references>
    <vuln:summary>The engineNextBytes function in classlib/modules/security/src/main/java/common/org/apache/harmony/security/provider/crypto/SHA1PRNG_SecureRandomImpl.java in the SecureRandom implementation in Apache Harmony through 6.0M3, as used in the Java Cryptography Architecture (JCA) in Android before 4.4 and other products, when no seed is provided by the user, uses an incorrect offset value, which makes it easier for attackers to defeat cryptographic protection mechanisms by leveraging the resulting PRNG predictability, as exploited in the wild against Bitcoin wallet applications in August 2013.</vuln:summary>
  </entry>
  <entry id="CVE-2013-7373">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/o:google:android:1.0"/>
        <cpe-lang:fact-ref name="cpe:/o:google:android:1.1"/>
        <cpe-lang:fact-ref name="cpe:/o:google:android:1.5"/>
        <cpe-lang:fact-ref name="cpe:/o:google:android:1.6"/>
        <cpe-lang:fact-ref name="cpe:/o:google:android:2.0"/>
        <cpe-lang:fact-ref name="cpe:/o:google:android:2.0.1"/>
        <cpe-lang:fact-ref name="cpe:/o:google:android:2.1"/>
        <cpe-lang:fact-ref name="cpe:/o:google:android:2.2"/>
        <cpe-lang:fact-ref name="cpe:/o:google:android:2.2:rev1"/>
        <cpe-lang:fact-ref name="cpe:/o:google:android:2.2.1"/>
        <cpe-lang:fact-ref name="cpe:/o:google:android:2.2.2"/>
        <cpe-lang:fact-ref name="cpe:/o:google:android:2.2.3"/>
        <cpe-lang:fact-ref name="cpe:/o:google:android:2.3"/>
        <cpe-lang:fact-ref name="cpe:/o:google:android:2.3:rev1"/>
        <cpe-lang:fact-ref name="cpe:/o:google:android:2.3.1"/>
        <cpe-lang:fact-ref name="cpe:/o:google:android:2.3.2"/>
        <cpe-lang:fact-ref name="cpe:/o:google:android:2.3.3"/>
        <cpe-lang:fact-ref name="cpe:/o:google:android:2.3.4"/>
        <cpe-lang:fact-ref name="cpe:/o:google:android:2.3.5"/>
        <cpe-lang:fact-ref name="cpe:/o:google:android:2.3.6"/>
        <cpe-lang:fact-ref name="cpe:/o:google:android:2.3.7"/>
        <cpe-lang:fact-ref name="cpe:/o:google:android:3.0"/>
        <cpe-lang:fact-ref name="cpe:/o:google:android:3.1"/>
        <cpe-lang:fact-ref name="cpe:/o:google:android:3.2"/>
        <cpe-lang:fact-ref name="cpe:/o:google:android:3.2.1"/>
        <cpe-lang:fact-ref name="cpe:/o:google:android:3.2.2"/>
        <cpe-lang:fact-ref name="cpe:/o:google:android:3.2.4"/>
        <cpe-lang:fact-ref name="cpe:/o:google:android:3.2.6"/>
        <cpe-lang:fact-ref name="cpe:/o:google:android:4.0"/>
        <cpe-lang:fact-ref name="cpe:/o:google:android:4.0.1"/>
        <cpe-lang:fact-ref name="cpe:/o:google:android:4.0.2"/>
        <cpe-lang:fact-ref name="cpe:/o:google:android:4.0.3"/>
        <cpe-lang:fact-ref name="cpe:/o:google:android:4.0.4"/>
        <cpe-lang:fact-ref name="cpe:/o:google:android:4.1"/>
        <cpe-lang:fact-ref name="cpe:/o:google:android:4.1.2"/>
        <cpe-lang:fact-ref name="cpe:/o:google:android:4.2"/>
        <cpe-lang:fact-ref name="cpe:/o:google:android:4.2.1"/>
        <cpe-lang:fact-ref name="cpe:/o:google:android:4.2.2"/>
        <cpe-lang:fact-ref name="cpe:/o:google:android:4.3"/>
        <cpe-lang:fact-ref name="cpe:/o:google:android:4.3.1"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/o:google:android:4.1.2</vuln:product>
      <vuln:product>cpe:/o:google:android:2.2.2</vuln:product>
      <vuln:product>cpe:/o:google:android:3.1</vuln:product>
      <vuln:product>cpe:/o:google:android:2.2.1</vuln:product>
      <vuln:product>cpe:/o:google:android:3.0</vuln:product>
      <vuln:product>cpe:/o:google:android:4.0.4</vuln:product>
      <vuln:product>cpe:/o:google:android:4.0.3</vuln:product>
      <vuln:product>cpe:/o:google:android:3.2</vuln:product>
      <vuln:product>cpe:/o:google:android:4.1</vuln:product>
      <vuln:product>cpe:/o:google:android:4.0</vuln:product>
      <vuln:product>cpe:/o:google:android:2.3:rev1</vuln:product>
      <vuln:product>cpe:/o:google:android:3.2.1</vuln:product>
      <vuln:product>cpe:/o:google:android:2.2:rev1</vuln:product>
      <vuln:product>cpe:/o:google:android:1.5</vuln:product>
      <vuln:product>cpe:/o:google:android:1.6</vuln:product>
      <vuln:product>cpe:/o:google:android:2.3</vuln:product>
      <vuln:product>cpe:/o:google:android:2.1</vuln:product>
      <vuln:product>cpe:/o:google:android:2.2</vuln:product>
      <vuln:product>cpe:/o:google:android:2.3.1</vuln:product>
      <vuln:product>cpe:/o:google:android:2.0</vuln:product>
      <vuln:product>cpe:/o:google:android:1.1</vuln:product>
      <vuln:product>cpe:/o:google:android:3.2.6</vuln:product>
      <vuln:product>cpe:/o:google:android:1.0</vuln:product>
      <vuln:product>cpe:/o:google:android:4.3</vuln:product>
      <vuln:product>cpe:/o:google:android:3.2.4</vuln:product>
      <vuln:product>cpe:/o:google:android:4.2</vuln:product>
      <vuln:product>cpe:/o:google:android:2.3.7</vuln:product>
      <vuln:product>cpe:/o:google:android:3.2.2</vuln:product>
      <vuln:product>cpe:/o:google:android:4.2.2</vuln:product>
      <vuln:product>cpe:/o:google:android:2.2.3</vuln:product>
      <vuln:product>cpe:/o:google:android:4.2.1</vuln:product>
      <vuln:product>cpe:/o:google:android:4.0.1</vuln:product>
      <vuln:product>cpe:/o:google:android:4.0.2</vuln:product>
      <vuln:product>cpe:/o:google:android:2.3.6</vuln:product>
      <vuln:product>cpe:/o:google:android:2.3.4</vuln:product>
      <vuln:product>cpe:/o:google:android:2.0.1</vuln:product>
      <vuln:product>cpe:/o:google:android:2.3.5</vuln:product>
      <vuln:product>cpe:/o:google:android:4.3.1</vuln:product>
      <vuln:product>cpe:/o:google:android:2.3.2</vuln:product>
      <vuln:product>cpe:/o:google:android:2.3.3</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-7373</vuln:cve-id>
    <vuln:published-datetime>2014-04-29T16:55:09.013-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-30T08:57:21.250-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-30T08:57:20.750-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-200"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.reddit.com/r/Android/comments/1k6f03/due_to_a_serious_encryptionrng_flaw_in_android/cblvum5" xml:lang="en">http://www.reddit.com/r/Android/comments/1k6f03/due_to_a_serious_encryptionrng_flaw_in_android/cblvum5</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://marc.info/?l=openssl-dev&amp;m=130298304903422&amp;w=2" xml:lang="en">[openssl-dev] 20110416 Re: recycled pids causes PRNG to repeat</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://marc.info/?l=openssl-dev&amp;m=130289811108150&amp;w=2" xml:lang="en">[openssl-dev] 20110415 recycled pids causes PRNG to repeat</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://emboss.github.io/blog/2013/08/21/openssl-prng-is-not-really-fork-safe/" xml:lang="en">http://emboss.github.io/blog/2013/08/21/openssl-prng-is-not-really-fork-safe/</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://android-developers.blogspot.com.au/2013/08/some-securerandom-thoughts.html" xml:lang="en">http://android-developers.blogspot.com.au/2013/08/some-securerandom-thoughts.html</vuln:reference>
    </vuln:references>
    <vuln:summary>Android before 4.4 does not properly arrange for seeding of the OpenSSL PRNG, which makes it easier for attackers to defeat cryptographic protection mechanisms by leveraging use of the PRNG within multiple applications.</vuln:summary>
  </entry>
  <entry id="CVE-2013-7374">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/o:canonical:ubuntu_linux:13.10"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/o:canonical:ubuntu_linux:13.10</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-7374</vuln:cve-id>
    <vuln:published-datetime>2014-05-01T13:28:36.227-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-05-01T14:09:38.137-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.6</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-05-01T14:09:38.013-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-264"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugs.launchpad.net/ubuntu/%2Bsource/indicator-datetime/%2Bbug/1246812" xml:lang="en">https://bugs.launchpad.net/ubuntu/%2Bsource/indicator-datetime/%2Bbug/1246812</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>UBUNTU</vuln:source>
      <vuln:reference href="http://www.ubuntu.com/usn/USN-2186-1" xml:lang="en">USN-2186-1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://www.openwall.com/lists/oss-security/2014/04/30/1" xml:lang="en">[oss-security] 20140430 Re: CVE Request: indicator-datetime issue</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://www.openwall.com/lists/oss-security/2014/04/29/3" xml:lang="en">[oss-security] 20140429 CVE Request: indicator-datetime issue</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://bazaar.launchpad.net/~indicator-applet-developers/indicator-datetime/trunk.13.10/revision/282" xml:lang="en">http://bazaar.launchpad.net/~indicator-applet-developers/indicator-datetime/trunk.13.10/revision/282</vuln:reference>
    </vuln:references>
    <vuln:summary>The Ubuntu Date and Time Indicator (aka indicator-datetime) 13.10.0+13.10.x before 13.10.0+13.10.20131023.2-0ubuntu1.1 does not properly restrict access to Evolution, which allows local users to bypass the greeter screen restrictions by clicking the date.</vuln:summary>
  </entry>
  <entry id="CVE-2014-0037">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:7.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:7.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:7.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:7.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:7.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:7.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:7.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:7.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:7.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:7.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:7.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:7.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:7.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:7.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:7.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:7.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:7.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:7.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:7.0"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:5.01"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:5.02"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:5.10"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:5.11"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:5.20"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:5.22"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:6.00"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:6.01"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:6.02"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:6.10"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:6.03"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:6.11"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:6.20"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:6.20.2"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:6.20.3"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:6.20.5"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:6.20.6"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:6.20.7"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:6.30.0"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:6.20.10"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:6.30.3"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:6.30.4"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:6.20.11"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:6.30.5"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:6.30.6"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:6.30.7"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:6.30.8"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:6.30.9"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:6.20.12"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:6.30.10"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:6.30.11"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:6.30.13"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:6.40.0"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:6.30.16"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:6.40.2"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:6.30.17"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:6.40.3"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:6.40.4"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:6.40.5"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:6.40.6"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:6.40.7"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:6.40.8"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:6.40.9"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:6.40.10"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:6.40.11"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:6.40.12"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:6.40.13"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:6.40.14"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:6.40.15"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:6.40.16"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:6.40.17"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:5.00"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:zarafa:zarafa:7.0</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:6.30.8</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:6.30.6</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:6.30.7</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:7.0.8</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:6.30.4</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:7.0.9</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:6.30.5</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:7.0.6</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:7.0.7</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:6.30.3</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:7.0.5</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:6.20.7</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:6.20.2</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:6.20.6</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:6.20.5</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:6.20.3</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:6.30.0</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:6.40.17</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:7.1.4</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:7.0.13</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:5.20</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:6.30.16</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:6.00</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:6.30.13</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:6.01</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:6.02</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:6.30.11</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:7.0.10</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:6.03</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:7.0.12</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:6.30.10</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:7.0.11</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:6.30.17</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:5.22</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:5.10</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:5.11</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:6.20.11</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:6.20.12</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:6.10</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:7.0.3</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:7.0.2</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:6.20.10</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:7.0.1</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:6.30.9</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:6.11</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:7.0.4</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:5.00</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:6.40.5</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:6.40.6</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:5.01</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:6.40.7</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:6.40.8</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:6.40.2</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:6.40.3</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:5.02</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:6.40.4</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:6.40.0</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:6.40.9</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:6.40.12</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:6.40.13</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:6.40.14</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:6.40.15</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:6.40.10</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:7.1.3</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:6.40.11</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:7.1.1</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:7.1.2</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:7.1.0</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:6.20</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:6.40.16</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-0037</vuln:cve-id>
    <vuln:published-datetime>2014-04-28T10:09:06.080-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-29T07:35:51.057-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-29T07:35:50.760-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-20"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1059903" xml:lang="en">https://bugzilla.redhat.com/show_bug.cgi?id=1059903</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1056767" xml:lang="en">https://bugzilla.redhat.com/show_bug.cgi?id=1056767</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://www.openwall.com/lists/oss-security/2014/01/31/14" xml:lang="en">[oss-security] 20140131 Security Flaw CVE-2014-0037</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MANDRIVA</vuln:source>
      <vuln:reference href="http://www.mandriva.com/security/advisories?name=MDVSA-2014:044" xml:lang="en">MDVSA-2014:044</vuln:reference>
    </vuln:references>
    <vuln:summary>The ValidateUserLogon function in provider/libserver/ECSession.cpp in Zarafa 5.00 before 7.1.8 beta2 allows remote attackers to cause a denial of service (crash) via vectors related to "a NULL pointer of the username."</vuln:summary>
  </entry>
  <entry id="CVE-2014-0079">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:5.11"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:5.20"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:5.22"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:6.00"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:6.01"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:6.02"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:6.10"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:6.03"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:6.11"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:5.10"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:5.02"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:5.01"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:5.00"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:6.20"/>
        <cpe-lang:fact-ref name="cpe:/a:zarafa:zarafa:7.1.8"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:zarafa:zarafa:5.00</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:5.10</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:5.01</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:5.11</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:7.1.8</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:5.02</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:6.10</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:5.20</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:6.00</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:6.01</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:6.02</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:6.03</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:6.11</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:6.20</vuln:product>
      <vuln:product>cpe:/a:zarafa:zarafa:5.22</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-0079</vuln:cve-id>
    <vuln:published-datetime>2014-04-28T10:09:06.157-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-29T07:52:00.900-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-29T07:52:00.807-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-20"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1059903" xml:lang="en">https://bugzilla.redhat.com/show_bug.cgi?id=1059903</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MANDRIVA</vuln:source>
      <vuln:reference href="http://www.mandriva.com/security/advisories?name=MDVSA-2014:044" xml:lang="en">MDVSA-2014:044</vuln:reference>
    </vuln:references>
    <vuln:summary>The ValidateUserLogon function in provider/libserver/ECSession.cpp in Zarafa 7.1.8, 6.20.0, and earlier, when using certain build conditions, allows remote attackers to cause a denial of service (crash) via vectors related to "a NULL pointer of the password."</vuln:summary>
  </entry>
  <entry id="CVE-2014-0088">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:igor_sysoev:nginx:1.5.10"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:igor_sysoev:nginx:1.5.10</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-0088</vuln:cve-id>
    <vuln:published-datetime>2014-04-29T10:38:49.920-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-30T10:10:30.290-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-30T10:10:30.257-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-119"/>
    <vuln:references xml:lang="en" reference_type="PATCH">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://mailman.nginx.org/pipermail/nginx-announce/2014/000132.html" xml:lang="en">[nginx-announce] 20140304 nginx security advisory (CVE-2014-0088)</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1030150" xml:lang="en">1030150</vuln:reference>
    </vuln:references>
    <vuln:summary>The SPDY implementation in the ngx_http_spdy_module module in nginx 1.5.10 before 1.5.11, when running on a 32-bit platform, allows remote attackers to execute arbitrary code via a crafted request.</vuln:summary>
  </entry>
  <entry id="CVE-2014-0112">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.0.11.1"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.0.11.2"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.1.6"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.1.8"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.1.8.1"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.2.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.2.3"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.2.3.1"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.3.1"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.3.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.3.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.3.12"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.3.14"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.3.14.1"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.3.14.2"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.3.14.3"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.3.15"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.3.15.1"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.3.15.2"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.3.15.3"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.3.16"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.3.16.1"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.3.3"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.3.4"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.3.4.1"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.3.7"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.3.8"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:apache:struts:2.3.14</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.3.15</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.3.12</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.3.14.1</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.3.14.2</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.3.16</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.3.14.3</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.3.7</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.3.8</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.0.14</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.3.15.1</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.0.13</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.3.15.2</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.0.12</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.0.11</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.0.10</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.0.0</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.3.4.1</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.0.1</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.0.6</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.0.7</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.0.8</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.0.9</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.0.2</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.0.3</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.0.4</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.0.5</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.1.1</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.1.2</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.1.3</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.1.4</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.1.5</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.1.6</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.1.8</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.2.1.1</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.1.0</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.1.8.1</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.0.11.2</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.0.11.1</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.2.3</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.2.1</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.2.3.1</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.3.4</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.3.15.3</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.3.3</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.3.1</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.3.16.1</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.3.1.2</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.3.1.1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-0112</vuln:cve-id>
    <vuln:published-datetime>2014-04-29T06:37:03.670-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-29T09:59:24.903-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-29T09:59:24.420-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-264"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://cwiki.apache.org/confluence/display/WW/S2-021" xml:lang="en">https://cwiki.apache.org/confluence/display/WW/S2-021</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1091939" xml:lang="en">https://bugzilla.redhat.com/show_bug.cgi?id=1091939</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>JVNDB</vuln:source>
      <vuln:reference href="http://jvndb.jvn.jp/jvndb/JVNDB-2014-000045" xml:lang="en">JVNDB-2014-000045</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>JVN</vuln:source>
      <vuln:reference href="http://jvn.jp/en/jp/JVN19294237/index.html" xml:lang="en">JVN#19294237</vuln:reference>
    </vuln:references>
    <vuln:summary>ParametersInterceptor in Apache Struts before 2.3.16.2 does not properly restrict access to the getClass method, which allows remote attackers to "manipulate" the ClassLoader and execute arbitrary code via a crafted request.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-0094.</vuln:summary>
  </entry>
  <entry id="CVE-2014-0113">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.0.11.1"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.0.11.2"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.1.6"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.1.8"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.1.8.1"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.2.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.2.3"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.2.3.1"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.3.1"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.3.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.3.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.3.12"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.3.14"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.3.14.1"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.3.14.2"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.3.14.3"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.3.15"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.3.15.1"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.3.15.2"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.3.15.3"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.3.16"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.3.16.1"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.3.3"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.3.4"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.3.4.1"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.3.7"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:2.3.8"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:apache:struts:2.3.14</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.3.15</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.3.12</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.3.14.1</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.3.14.2</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.3.16</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.3.14.3</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.3.7</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.3.8</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.0.14</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.3.15.1</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.0.13</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.3.15.2</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.0.12</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.0.11</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.0.10</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.0.0</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.3.4.1</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.0.1</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.0.6</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.0.7</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.0.8</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.0.9</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.0.2</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.0.3</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.0.4</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.0.5</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.1.1</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.1.2</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.1.3</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.1.4</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.1.5</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.1.6</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.1.8</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.2.1.1</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.1.0</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.1.8.1</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.0.11.2</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.0.11.1</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.2.3</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.2.1</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.2.3.1</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.3.4</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.3.15.3</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.3.3</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.3.1</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.3.16.1</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.3.1.2</vuln:product>
      <vuln:product>cpe:/a:apache:struts:2.3.1.1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-0113</vuln:cve-id>
    <vuln:published-datetime>2014-04-29T06:37:03.700-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-29T09:59:31.653-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-29T09:59:30.983-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-264"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://cwiki.apache.org/confluence/display/WW/S2-021" xml:lang="en">https://cwiki.apache.org/confluence/display/WW/S2-021</vuln:reference>
    </vuln:references>
    <vuln:summary>CookieInterceptor in Apache Struts before 2.3.16.2, when a wildcard cookiesName value is used, does not properly restrict access to the getClass method, which allows remote attackers to "manipulate" the ClassLoader and execute arbitrary code via a crafted request.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-0094.</vuln:summary>
  </entry>
  <entry id="CVE-2014-0114">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:1.3.8"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:1.3.5"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:1.3.10"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:1.2.9"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:1.2.8"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:1.2.7"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:1.2.6"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:1.2.4"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:1.2.2"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:1.1:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:1.1:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:1.1:b3"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:1.1:b2"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:1.1:b1"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:1.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:struts:1.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:apache:struts:1.3.5</vuln:product>
      <vuln:product>cpe:/a:apache:struts:1.0</vuln:product>
      <vuln:product>cpe:/a:apache:struts:1.1:b3</vuln:product>
      <vuln:product>cpe:/a:apache:struts:1.1:b2</vuln:product>
      <vuln:product>cpe:/a:apache:struts:1.1</vuln:product>
      <vuln:product>cpe:/a:apache:struts:1.0.2</vuln:product>
      <vuln:product>cpe:/a:apache:struts:1.3.10</vuln:product>
      <vuln:product>cpe:/a:apache:struts:1.2.9</vuln:product>
      <vuln:product>cpe:/a:apache:struts:1.1:rc1</vuln:product>
      <vuln:product>cpe:/a:apache:struts:1.1:rc2</vuln:product>
      <vuln:product>cpe:/a:apache:struts:1.1:b1</vuln:product>
      <vuln:product>cpe:/a:apache:struts:1.2.2</vuln:product>
      <vuln:product>cpe:/a:apache:struts:1.3.8</vuln:product>
      <vuln:product>cpe:/a:apache:struts:1.2.4</vuln:product>
      <vuln:product>cpe:/a:apache:struts:1.2.6</vuln:product>
      <vuln:product>cpe:/a:apache:struts:1.2.7</vuln:product>
      <vuln:product>cpe:/a:apache:struts:1.2.8</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-0114</vuln:cve-id>
    <vuln:published-datetime>2014-04-30T06:49:03.973-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-30T10:28:16.450-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-30T10:28:16.280-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-20"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1091938" xml:lang="en">https://bugzilla.redhat.com/show_bug.cgi?id=1091938</vuln:reference>
    </vuln:references>
    <vuln:summary>The ActionForm object in Apache Struts 1.x through 1.3.10 allows remote attackers to "manipulate" the ClassLoader and execute arbitrary code via the class parameter, which is passed to the getClass method.</vuln:summary>
  </entry>
  <entry id="CVE-2014-0162">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:openstack:icehouse:rc-1"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:image_registry_and_delivery_service_%28glance%29:2013.2.3"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:image_registry_and_delivery_service_%28glance%29:2013.2.2"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:image_registry_and_delivery_service_%28glance%29:2013.2"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:image_registry_and_delivery_service_%28glance%29:2013.2.1"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:openstack:image_registry_and_delivery_service_%28glance%29:2013.2.1</vuln:product>
      <vuln:product>cpe:/a:openstack:image_registry_and_delivery_service_%28glance%29:2013.2.2</vuln:product>
      <vuln:product>cpe:/a:openstack:icehouse:rc-1</vuln:product>
      <vuln:product>cpe:/a:openstack:image_registry_and_delivery_service_%28glance%29:2013.2</vuln:product>
      <vuln:product>cpe:/a:openstack:image_registry_and_delivery_service_%28glance%29:2013.2.3</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-0162</vuln:cve-id>
    <vuln:published-datetime>2014-04-27T16:55:23.667-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-28T14:09:33.227-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-28T14:09:33.180-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-20"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://launchpad.net/bugs/1298698" xml:lang="en">https://launchpad.net/bugs/1298698</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://www.openwall.com/lists/oss-security/2014/04/10/13" xml:lang="en">[oss-security] 20140410 [OSSA 2014-012] Remote code execution in Glance Sheepdog backend (CVE-2014-0162)</vuln:reference>
    </vuln:references>
    <vuln:summary>The Sheepdog backend in OpenStack Image Registry and Delivery Service (Glance) 2013.2 before 2013.2.4 and icehouse before icehouse-rc2 allows remote authenticated users with permission to insert or modify an image to execute arbitrary commands via a crafted location.</vuln:summary>
  </entry>
  <entry id="CVE-2014-0181">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.23"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.24"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.25"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.26"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.27"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.28"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.29"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.30"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.31"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.32"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.33"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.34"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.35"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.36"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.37"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.38"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.39"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.40"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.41"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.42"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.43"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.44"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.45"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.46"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.47"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.48"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.49"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.50"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.51"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.52"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.53"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.54"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.55"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.56"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.57"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.58"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.59"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.60"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.61"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.62"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.63"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.64"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.65"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.66"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.67"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.68"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.1:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.1:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.1:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.1:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.1.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.1.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.1.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.1.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.1.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.1.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.1.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.1.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.1.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.1.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.23"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.24"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.25"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.26"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.27"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.28"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.29"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.30"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.3:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.3:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.3:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.3:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.3:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.3:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.3:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.3.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.3.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.3.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.3.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.3.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.3.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.3.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.3.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.23"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.24"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.25"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.26"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.27"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.28"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.29"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.30"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.31"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.32"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.33"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.34"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.35"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.36"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.37"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.38"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.39"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.40"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.41"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.42"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.43"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.44"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.45"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.46"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.47"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.48"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.49"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.50"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.51"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.52"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.53"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.54"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.55"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.56"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.57"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.58"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.59"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.60"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.61"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.62"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.63"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.64"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.65"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.66"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.67"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.68"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.69"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.70"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.71"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.72"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.73"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.74"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.75"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.76"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.77"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.78"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.79"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.5.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.5.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.5.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.5.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.5.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.5.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.5.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.6.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.6.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.6.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.6.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.6.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.6.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.6.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.6.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.6.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.6.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.6.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.7.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.7.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.7.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.7.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.7.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.7.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.7.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.7.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.7.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.7.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.8.0"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.8.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.8.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.8.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.8.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.8.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.8.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.8.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.8.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.8.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.8.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.8.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.8.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.8.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.0"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.23"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.24"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.25"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.26"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.27"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.28"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.29"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.11.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.11.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.11.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.11.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.11.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.11.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.11.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.11.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.11.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.11.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.13.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.13.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.13.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.13.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.13.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.13.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.13.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.13.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.13.7"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.48</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.49</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.46</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.47</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.44</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.45</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.42</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.70</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.71</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.40</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.41</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.45</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.44</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.46</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.41</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.40</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.43</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.42</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.49</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.48</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.59</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.47</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.55</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.56</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.57</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.58</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.51</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.52</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.53</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.11.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.50</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.57</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.56</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.55</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.54</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.53</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.52</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.51</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.50</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.43</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.26</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.59</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.24</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.25</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.22</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.1.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.23</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.28</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.28</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.27</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.26</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.29</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.58</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.27</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.24</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.23</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.25</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.20</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.1.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.20</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.22</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.21</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.21</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.20</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.23</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.22</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.24</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.27</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.26</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.29</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.28</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.54</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.33</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.34</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.35</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.36</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.19</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.37</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.18</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.38</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.25</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.17</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.39</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.30</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.31</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.5.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.32</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.5.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.31</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.5.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.30</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.7.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.35</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9.0</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.18</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.34</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.33</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.19</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.39</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.38</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.37</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.21</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.5.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.13.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.36</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.17</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.13.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.6.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.6.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.13.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.13.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.13.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.13.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.13.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.13.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.13.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.19</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.17</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.18</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.61</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.3:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.60</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.3:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.3:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.3:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.64</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.63</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.62</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.68</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.67</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.66</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.1:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.1:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.1:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.1.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.3:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.3:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.3:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.1:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.65</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.8.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.8.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.8.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.8.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.7.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.7.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.7.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.7.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.6.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.7.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.7.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.7.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.7.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.6.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.6.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.6.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.6.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.6.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.6.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.6.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.6.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.3.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.3.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.3.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.1.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.1.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.1.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.32</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.8.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.1.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.1.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.1.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.1.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.29</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.8.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.26</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.8.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.27</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.8.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.24</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.8.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.25</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.8.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.8.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.28</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.8.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.29</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.3.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.3.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.3.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.22</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.8.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.20</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.3.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.21</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.3.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.11.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.11.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.23</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.17</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.30</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.61</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.64</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.8.0</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.65</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.62</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.63</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.68</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.66</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.67</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.5.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.5.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.5.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.72</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.73</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.74</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.75</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.76</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.77</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.78</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.79</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.7.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.17</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.18</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.19</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.11.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.60</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.11.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.11.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.11.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.11.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.11.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.11.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.69</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-0181</vuln:cve-id>
    <vuln:published-datetime>2014-04-26T20:55:05.750-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-28T11:50:11.293-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>2.1</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-28T11:50:05.183-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-264"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://git.kernel.org/cgit/linux/kernel/git/davem/net.git/commit/?id=90f62cf30a78721641e08737bda787552428061e" xml:lang="en">https://git.kernel.org/cgit/linux/kernel/git/davem/net.git/commit/?id=90f62cf30a78721641e08737bda787552428061e</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://www.openwall.com/lists/oss-security/2014/04/23/6" xml:lang="en">[oss-security] 20140423 Re: CVE-2014-0181: Linux network reconfiguration due to incorrect netlink checks</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://marc.info/?l=linux-netdev&amp;m=139828832919748&amp;w=2" xml:lang="en">[netdev] 20140423 [PATCH 0/5]: Preventing abuse when passing file descriptors</vuln:reference>
    </vuln:references>
    <vuln:summary>The Netlink implementation in the Linux kernel through 3.14.1 does not provide a mechanism for authorizing socket operations based on the opener of a socket, which allows local users to bypass intended access restrictions and modify network configurations by using a Netlink socket for the (1) stdout or (2) stderr of a setuid program.</vuln:summary>
  </entry>
  <entry id="CVE-2014-0187">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:openstack:neutron:2014.1"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:neutron:2013.1"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:neutron:2013.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:neutron:2013.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:neutron:2013.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:neutron:2013.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:neutron:2013.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:neutron:2013.2"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:neutron:2013.2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:neutron:2013.2.2"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:neutron:2013.2.3"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:openstack:neutron:2013.2.3</vuln:product>
      <vuln:product>cpe:/a:openstack:neutron:2013.1.1</vuln:product>
      <vuln:product>cpe:/a:openstack:neutron:2013.2.2</vuln:product>
      <vuln:product>cpe:/a:openstack:neutron:2013.1.2</vuln:product>
      <vuln:product>cpe:/a:openstack:neutron:2013.2</vuln:product>
      <vuln:product>cpe:/a:openstack:neutron:2013.1</vuln:product>
      <vuln:product>cpe:/a:openstack:neutron:2013.1.4</vuln:product>
      <vuln:product>cpe:/a:openstack:neutron:2013.2.1</vuln:product>
      <vuln:product>cpe:/a:openstack:neutron:2013.1.3</vuln:product>
      <vuln:product>cpe:/a:openstack:neutron:2013.1.5</vuln:product>
      <vuln:product>cpe:/a:openstack:neutron:2014.1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-0187</vuln:cve-id>
    <vuln:published-datetime>2014-04-28T10:09:06.237-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-29T10:26:22.943-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-29T10:26:22.817-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-264"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugs.launchpad.net/neutron/+bug/1300785" xml:lang="en">https://bugs.launchpad.net/neutron/+bug/1300785</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://www.openwall.com/lists/oss-security/2014/04/22/8" xml:lang="en">[oss-security] 20140422 [OSSA 2014-014] Neutron security groups bypass through invalid CIDR (CVE-2014-0187)</vuln:reference>
    </vuln:references>
    <vuln:summary>The openvswitch-agent process in OpenStack Neutron 2013.1 before 2013.2.4 and 2014.1 before 2014.1.1 allows remote authenticated users to bypass security group restrictions via an invalid CIDR in a security group rule, which prevents further rules from being applied.</vuln:summary>
  </entry>
  <entry id="CVE-2014-0189">
    <vuln:cve-id>CVE-2014-0189</vuln:cve-id>
    <vuln:published-datetime>2014-05-02T10:55:05.823-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-05-02T10:55:05.823-04:00</vuln:last-modified-datetime>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1088732" xml:lang="en">https://bugzilla.redhat.com/show_bug.cgi?id=1088732</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1081286" xml:lang="en">https://bugzilla.redhat.com/show_bug.cgi?id=1081286</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/67089" xml:lang="en">67089</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://www.openwall.com/lists/oss-security/2014/04/28/2" xml:lang="en">[oss-security] 20140428 CVE-2014-0189: /etc/sysconfig/virt-who is world-readable (contains unencrypted passwords)</vuln:reference>
    </vuln:references>
    <vuln:summary>virt-who uses world-readable permissions for /etc/sysconfig/virt-who, which allows local users to obtain password for hypervisors by reading the file.</vuln:summary>
  </entry>
  <entry id="CVE-2014-0350">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:pocoproject:poco_c%2b%2b_libraries:1.4.6:p3"/>
        <cpe-lang:fact-ref name="cpe:/a:pocoproject:poco_c%2b%2b_libraries:1.4.6:p2"/>
        <cpe-lang:fact-ref name="cpe:/a:pocoproject:poco_c%2b%2b_libraries:1.4.6:p1"/>
        <cpe-lang:fact-ref name="cpe:/a:pocoproject:poco_c%2b%2b_libraries:1.4.6:-"/>
        <cpe-lang:fact-ref name="cpe:/a:pocoproject:poco_c%2b%2b_libraries:1.4.5"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:pocoproject:poco_c%2b%2b_libraries:1.4.6:p2</vuln:product>
      <vuln:product>cpe:/a:pocoproject:poco_c%2b%2b_libraries:1.4.6:p1</vuln:product>
      <vuln:product>cpe:/a:pocoproject:poco_c%2b%2b_libraries:1.4.6:p3</vuln:product>
      <vuln:product>cpe:/a:pocoproject:poco_c%2b%2b_libraries:1.4.6:-</vuln:product>
      <vuln:product>cpe:/a:pocoproject:poco_c%2b%2b_libraries:1.4.5</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-0350</vuln:cve-id>
    <vuln:published-datetime>2014-04-25T21:55:04.967-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-28T09:03:33.290-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.4</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-28T09:03:33.243-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CERT-VN</vuln:source>
      <vuln:reference href="http://www.kb.cert.org/vuls/id/118748" xml:lang="en">VU#118748</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://raw.githubusercontent.com/pocoproject/poco/poco-1.4.6p4-release/CHANGELOG" xml:lang="en">https://raw.githubusercontent.com/pocoproject/poco/poco-1.4.6p4-release/CHANGELOG</vuln:reference>
    </vuln:references>
    <vuln:summary>The Poco::Net::X509Certificate::verify method in the NetSSL library in POCO C++ Libraries before 1.4.6p4 allows man-in-the-middle attackers to spoof SSL servers via crafted DNS PTR records that are requested during comparison of a server name to a wildcard domain name in an X.509 certificate.</vuln:summary>
  </entry>
  <entry id="CVE-2014-0363">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:igniterealtime:smack:3.4.0"/>
        <cpe-lang:fact-ref name="cpe:/a:igniterealtime:smack:3.3.1"/>
        <cpe-lang:fact-ref name="cpe:/a:igniterealtime:smack:3.3.0"/>
        <cpe-lang:fact-ref name="cpe:/a:igniterealtime:smack:3.2.2"/>
        <cpe-lang:fact-ref name="cpe:/a:igniterealtime:smack:3.2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:igniterealtime:smack:3.2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:igniterealtime:smack:3.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:igniterealtime:smack:3.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:igniterealtime:smack:3.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:igniterealtime:smack:3.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:igniterealtime:smack:3.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:igniterealtime:smack:2.2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:igniterealtime:smack:2.2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-04-15"/>
        <cpe-lang:fact-ref name="cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-04-13"/>
        <cpe-lang:fact-ref name="cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-04-09"/>
        <cpe-lang:fact-ref name="cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-04-06"/>
        <cpe-lang:fact-ref name="cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-03-29"/>
        <cpe-lang:fact-ref name="cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-03-26"/>
        <cpe-lang:fact-ref name="cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-03-25"/>
        <cpe-lang:fact-ref name="cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-03-21"/>
        <cpe-lang:fact-ref name="cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-03-18"/>
        <cpe-lang:fact-ref name="cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-03-16"/>
        <cpe-lang:fact-ref name="cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-03-13"/>
        <cpe-lang:fact-ref name="cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-03-12"/>
        <cpe-lang:fact-ref name="cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-03-11"/>
        <cpe-lang:fact-ref name="cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-03-10"/>
        <cpe-lang:fact-ref name="cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-03-03"/>
        <cpe-lang:fact-ref name="cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-03-02"/>
        <cpe-lang:fact-ref name="cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-02-23"/>
        <cpe-lang:fact-ref name="cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-02-21"/>
        <cpe-lang:fact-ref name="cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-02-20"/>
        <cpe-lang:fact-ref name="cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-02-19"/>
        <cpe-lang:fact-ref name="cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-02-18"/>
        <cpe-lang:fact-ref name="cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-02-16"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-02-20</vuln:product>
      <vuln:product>cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-03-02</vuln:product>
      <vuln:product>cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-02-21</vuln:product>
      <vuln:product>cpe:/a:igniterealtime:smack:3.4.0</vuln:product>
      <vuln:product>cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-04-15</vuln:product>
      <vuln:product>cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-04-13</vuln:product>
      <vuln:product>cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-02-23</vuln:product>
      <vuln:product>cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-02-19</vuln:product>
      <vuln:product>cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-03-03</vuln:product>
      <vuln:product>cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-03-16</vuln:product>
      <vuln:product>cpe:/a:igniterealtime:smack:2.2.1</vuln:product>
      <vuln:product>cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-03-18</vuln:product>
      <vuln:product>cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-03-13</vuln:product>
      <vuln:product>cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-04-06</vuln:product>
      <vuln:product>cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-04-09</vuln:product>
      <vuln:product>cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-03-29</vuln:product>
      <vuln:product>cpe:/a:igniterealtime:smack:3.0.0</vuln:product>
      <vuln:product>cpe:/a:igniterealtime:smack:3.1.0</vuln:product>
      <vuln:product>cpe:/a:igniterealtime:smack:2.2.0</vuln:product>
      <vuln:product>cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-03-21</vuln:product>
      <vuln:product>cpe:/a:igniterealtime:smack:3.0.3</vuln:product>
      <vuln:product>cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-03-25</vuln:product>
      <vuln:product>cpe:/a:igniterealtime:smack:3.0.2</vuln:product>
      <vuln:product>cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-03-26</vuln:product>
      <vuln:product>cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-02-18</vuln:product>
      <vuln:product>cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-03-11</vuln:product>
      <vuln:product>cpe:/a:igniterealtime:smack:3.3.1</vuln:product>
      <vuln:product>cpe:/a:igniterealtime:smack:3.0.1</vuln:product>
      <vuln:product>cpe:/a:igniterealtime:smack:3.3.0</vuln:product>
      <vuln:product>cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-03-10</vuln:product>
      <vuln:product>cpe:/a:igniterealtime:smack:3.2.2</vuln:product>
      <vuln:product>cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-03-12</vuln:product>
      <vuln:product>cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-02-16</vuln:product>
      <vuln:product>cpe:/a:igniterealtime:smack:3.2.0</vuln:product>
      <vuln:product>cpe:/a:igniterealtime:smack:3.2.1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-0363</vuln:cve-id>
    <vuln:published-datetime>2014-04-30T06:49:04.490-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-30T10:47:23.507-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-30T10:47:22.397-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CERT-VN</vuln:source>
      <vuln:reference href="http://www.kb.cert.org/vuls/id/489228" xml:lang="en">VU#489228</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://issues.igniterealtime.org/browse/SMACK-410" xml:lang="en">http://issues.igniterealtime.org/browse/SMACK-410</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://community.igniterealtime.org/blogs/ignite/2014/04/17/asmack-400-rc1-has-been-released" xml:lang="en">http://community.igniterealtime.org/blogs/ignite/2014/04/17/asmack-400-rc1-has-been-released</vuln:reference>
    </vuln:references>
    <vuln:summary>The ServerTrustManager component in the Ignite Realtime Smack XMPP API before 4.0.0-rc1 does not verify basicConstraints and nameConstraints in X.509 certificate chains from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate chain.</vuln:summary>
  </entry>
  <entry id="CVE-2014-0364">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:igniterealtime:smack:3.4.0"/>
        <cpe-lang:fact-ref name="cpe:/a:igniterealtime:smack:3.3.1"/>
        <cpe-lang:fact-ref name="cpe:/a:igniterealtime:smack:3.3.0"/>
        <cpe-lang:fact-ref name="cpe:/a:igniterealtime:smack:3.2.2"/>
        <cpe-lang:fact-ref name="cpe:/a:igniterealtime:smack:3.2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:igniterealtime:smack:3.2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:igniterealtime:smack:3.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:igniterealtime:smack:3.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:igniterealtime:smack:3.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:igniterealtime:smack:3.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:igniterealtime:smack:3.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:igniterealtime:smack:2.2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:igniterealtime:smack:2.2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-04-15"/>
        <cpe-lang:fact-ref name="cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-04-13"/>
        <cpe-lang:fact-ref name="cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-04-09"/>
        <cpe-lang:fact-ref name="cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-04-06"/>
        <cpe-lang:fact-ref name="cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-03-29"/>
        <cpe-lang:fact-ref name="cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-03-26"/>
        <cpe-lang:fact-ref name="cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-03-25"/>
        <cpe-lang:fact-ref name="cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-03-21"/>
        <cpe-lang:fact-ref name="cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-03-18"/>
        <cpe-lang:fact-ref name="cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-03-16"/>
        <cpe-lang:fact-ref name="cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-03-13"/>
        <cpe-lang:fact-ref name="cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-03-12"/>
        <cpe-lang:fact-ref name="cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-03-11"/>
        <cpe-lang:fact-ref name="cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-03-10"/>
        <cpe-lang:fact-ref name="cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-03-03"/>
        <cpe-lang:fact-ref name="cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-03-02"/>
        <cpe-lang:fact-ref name="cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-02-23"/>
        <cpe-lang:fact-ref name="cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-02-21"/>
        <cpe-lang:fact-ref name="cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-02-20"/>
        <cpe-lang:fact-ref name="cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-02-19"/>
        <cpe-lang:fact-ref name="cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-02-18"/>
        <cpe-lang:fact-ref name="cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-02-16"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-02-20</vuln:product>
      <vuln:product>cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-03-02</vuln:product>
      <vuln:product>cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-02-21</vuln:product>
      <vuln:product>cpe:/a:igniterealtime:smack:3.4.0</vuln:product>
      <vuln:product>cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-04-15</vuln:product>
      <vuln:product>cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-04-13</vuln:product>
      <vuln:product>cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-02-23</vuln:product>
      <vuln:product>cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-02-19</vuln:product>
      <vuln:product>cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-03-03</vuln:product>
      <vuln:product>cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-03-16</vuln:product>
      <vuln:product>cpe:/a:igniterealtime:smack:2.2.1</vuln:product>
      <vuln:product>cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-03-18</vuln:product>
      <vuln:product>cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-03-13</vuln:product>
      <vuln:product>cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-04-06</vuln:product>
      <vuln:product>cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-04-09</vuln:product>
      <vuln:product>cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-03-29</vuln:product>
      <vuln:product>cpe:/a:igniterealtime:smack:3.0.0</vuln:product>
      <vuln:product>cpe:/a:igniterealtime:smack:3.1.0</vuln:product>
      <vuln:product>cpe:/a:igniterealtime:smack:2.2.0</vuln:product>
      <vuln:product>cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-03-21</vuln:product>
      <vuln:product>cpe:/a:igniterealtime:smack:3.0.3</vuln:product>
      <vuln:product>cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-03-25</vuln:product>
      <vuln:product>cpe:/a:igniterealtime:smack:3.0.2</vuln:product>
      <vuln:product>cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-03-26</vuln:product>
      <vuln:product>cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-02-18</vuln:product>
      <vuln:product>cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-03-11</vuln:product>
      <vuln:product>cpe:/a:igniterealtime:smack:3.3.1</vuln:product>
      <vuln:product>cpe:/a:igniterealtime:smack:3.0.1</vuln:product>
      <vuln:product>cpe:/a:igniterealtime:smack:3.3.0</vuln:product>
      <vuln:product>cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-03-10</vuln:product>
      <vuln:product>cpe:/a:igniterealtime:smack:3.2.2</vuln:product>
      <vuln:product>cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-03-12</vuln:product>
      <vuln:product>cpe:/a:igniterealtime:smack:4.0.0:snapshot-2014-02-16</vuln:product>
      <vuln:product>cpe:/a:igniterealtime:smack:3.2.0</vuln:product>
      <vuln:product>cpe:/a:igniterealtime:smack:3.2.1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-0364</vuln:cve-id>
    <vuln:published-datetime>2014-04-30T06:49:04.520-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-30T11:07:13.453-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-30T11:07:13.203-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CERT-VN</vuln:source>
      <vuln:reference href="http://www.kb.cert.org/vuls/id/489228" xml:lang="en">VU#489228</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://community.igniterealtime.org/blogs/ignite/2014/04/17/asmack-400-rc1-has-been-released" xml:lang="en">http://community.igniterealtime.org/blogs/ignite/2014/04/17/asmack-400-rc1-has-been-released</vuln:reference>
    </vuln:references>
    <vuln:summary>The ParseRoster component in the Ignite Realtime Smack XMPP API before 4.0.0-rc1 does not verify the from attribute of a roster-query IQ stanza, which allows remote attackers to spoof IQ responses via a crafted attribute.</vuln:summary>
  </entry>
  <entry id="CVE-2014-0470">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:super_project:super:3.30.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:super_project:super:3.30.0</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-0470</vuln:cve-id>
    <vuln:published-datetime>2014-04-30T10:22:06.110-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-30T15:20:24.450-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.2</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-30T15:20:24.403-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:security-protection>ALLOWS_ADMIN_ACCESS</vuln:security-protection>
    <vuln:cwe id="CWE-264"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://www.openwall.com/lists/oss-security/2014/04/28/6" xml:lang="en">[oss-security] 20140428 super unchecked setuid (CVE-2014-0470)</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>DEBIAN</vuln:source>
      <vuln:reference href="http://www.debian.org/security/2014/dsa-2917" xml:lang="en">DSA-2917</vuln:reference>
    </vuln:references>
    <vuln:summary>super.c in Super 3.30.0 does not check the return value of the setuid function when the -F flag is set, which allows local users to gain privileges via unspecified vectors, aka an RLIMIT_NPROC attack.</vuln:summary>
  </entry>
  <entry id="CVE-2014-0471">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/o:canonical:ubuntu_linux:10.04:-:lts"/>
        <cpe-lang:fact-ref name="cpe:/o:canonical:ubuntu_linux:12.04:-:lts"/>
        <cpe-lang:fact-ref name="cpe:/o:canonical:ubuntu_linux:12.10"/>
        <cpe-lang:fact-ref name="cpe:/o:canonical:ubuntu_linux:13.10"/>
        <cpe-lang:fact-ref name="cpe:/o:canonical:ubuntu_linux:14.04::lts"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.10"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.10.1"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.10.11"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.10.12"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.10.13"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.10.14"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.10.15"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.10.16"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.10.17"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.10.18"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.10.18.1"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.10.19"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.10.2"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.10.20"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.10.21"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.10.22"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.10.23"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.10.24"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.10.25"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.10.26"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.10.27"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.10.28"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.10.3"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.10.4"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.10.5"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.10.6"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.10.7"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.10.8"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.10.9"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.13.0"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.13.1"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.13.10"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.13.11"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.13.11.1"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.13.12"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.13.13"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.13.14"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.13.15"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.13.16"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.13.17"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.13.18"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.13.19"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.13.2"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.13.20"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.13.21"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.13.22"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.13.23"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.13.24"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.13.25"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.13.3"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.13.4"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.13.5"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.13.6"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.13.7"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.13.8"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.13.9"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.14.0"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.14.1"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.14.10"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.14.11"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.14.12"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.14.13"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.14.14"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.14.15"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.14.16"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.14.16.1"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.14.16.2"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.14.16.3"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.14.16.4"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.14.16.5"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.14.16.6"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.14.17"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.14.18"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.14.19"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.14.2"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.14.20"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.14.21"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.14.22"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.14.23"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.14.24"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.14.25"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.14.26"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.14.27"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.14.28"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.14.29"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.14.3"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.14.30"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.14.4"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.14.5"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.14.6"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.14.7"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.14.8"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.14.9"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.15.0"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.15.1"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.15.2"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.15.3"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.15.3.1"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.15.4"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.15.4.1"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.15.5"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.15.5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.15.5.2"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.15.5.3"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.15.5.4"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.15.5.5"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.15.5.6"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.15.6"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.15.6.1"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.15.7"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.15.7.1"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.15.7.2"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.15.8"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.15.8.1"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.15.8.2"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.15.8.3"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.15.8.4"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.15.8.5"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.15.8.6"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.15.8.7"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.15.8.8"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.9.1"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.9.2"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.9.3"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.15.8.9"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.9.7"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.9.8"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.9.9"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.9.10"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.9.11"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.9.12"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.9.13"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.9.14"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.9.15"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.9.16"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.9.17"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.9.18"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.9.19"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.9.20"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.9.21"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.17.7"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.17.6"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.17.5"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.17.4"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.17.3"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.17.2"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.17.1"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.17.0"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.16.12"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.16.11"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.16.10"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.16.9"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.16.8"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.16.7"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.16.6"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.16.5"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.16.4.3"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.16.4.2"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.16.4.1"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.16.4"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.16.3"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.16.2"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.16.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.16.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.16.1"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.16.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.16.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.16.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:debian:dpkg:1.16.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:debian:dpkg:1.14.3</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.14.2</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.9.10</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.14.1</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.14.0</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.9.19</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.14.5</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.14.4</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.9.18</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.13.6</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.9.17</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.13.5</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.13.4</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.13.3</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.13.2</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.13.1</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.17.3</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.17.4</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.15.5.6</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.9.15</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.9.16</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.15.8.2</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.10.8</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.15.8.1</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.10.9</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.17.7</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.9.11</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.10.6</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.9.12</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.10.7</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.17.5</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.9.13</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.10.4</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.17.6</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.9.14</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.10.5</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.17.2</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.9.21</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.17.1</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.9.20</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.15.5.1</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.15.5.2</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.10.3</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.15.5.3</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.10.2</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.15.5.4</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.15.5.5</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.17.0</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.15.8.3</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.15.8.4</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.15.4.1</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.15.8.9</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.13.0</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.15.8.6</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.13.9</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.15.8.5</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.15.8.8</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.14.6</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.15.8.7</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.14.7</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.14.8</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.14.9</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.13.7</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.13.8</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.16.4.2</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.16.4.3</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.16.4.1</vuln:product>
      <vuln:product>cpe:/o:canonical:ubuntu_linux:10.04:-:lts</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.14.21</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.14.20</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.14.23</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.14.22</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.13.11</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.14.16.1</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.13.10</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.14.16.2</vuln:product>
      <vuln:product>cpe:/o:canonical:ubuntu_linux:12.10</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.14.16.4</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.14.16.3</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.10</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.14.16.6</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.14.16.5</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.10.27</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.10.26</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.14.14</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.14.13</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.10.23</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.10.22</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.10.25</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.10.24</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.10.28</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.9.1</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.14.19</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.16.0.1</vuln:product>
      <vuln:product>cpe:/o:canonical:ubuntu_linux:12.04:-:lts</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.10.20</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.10.21</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.14.15</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.14.16</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.14.17</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.14.18</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.14.25</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.14.24</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.10.16</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.10.15</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.16.1.2</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.10.14</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.16.1.1</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.10.13</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.10.12</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.10.11</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.16.0.3</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.16.0.2</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.13.13</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.13.12</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.13.11.1</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.13.18</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.10.17</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.13.19</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.10.18</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.14.11</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.14.12</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.13.14</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.13.15</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.14.10</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.13.16</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.13.17</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.14.28</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.14.29</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.10.19</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.14.26</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.14.27</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.16.3</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.16.2</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.9.2</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.15.6.1</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.9.3</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.16.1</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.16.0</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.16.11</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.15.7.2</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.15.0</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.16.12</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.15.2</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.16.10</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.15.1</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.15.4</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.13.24</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.15.3</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.13.23</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.15.7.1</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.13.25</vuln:product>
      <vuln:product>cpe:/o:canonical:ubuntu_linux:14.04::lts</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.10.18.1</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.16.4</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.16.5</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.15.7</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.15.8</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.14.30</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.15.3.1</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.9.9</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.9.8</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.13.20</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.16.8</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.9.7</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.15.5</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.10.1</vuln:product>
      <vuln:product>cpe:/o:canonical:ubuntu_linux:13.10</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.13.21</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.16.9</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.15.6</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.13.22</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.16.6</vuln:product>
      <vuln:product>cpe:/a:debian:dpkg:1.16.7</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-0471</vuln:cve-id>
    <vuln:published-datetime>2014-04-30T10:22:06.140-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-05-01T12:33:41.257-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-05-01T12:33:40.477-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-22"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>UBUNTU</vuln:source>
      <vuln:reference href="http://www.ubuntu.com/usn/USN-2183-1" xml:lang="en">USN-2183-1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>DEBIAN</vuln:source>
      <vuln:reference href="http://www.debian.org/security/2014/dsa-2915" xml:lang="en">DSA-2915</vuln:reference>
    </vuln:references>
    <vuln:summary>Directory traversal vulnerability in the unpacking functionality in dpkg before 1.15.9, 1.16.x before 1.16.13, and 1.17.x before 1.17.8 allows remote attackers to write arbitrary files via a crafted source package, related to "C-style filename quoting."</vuln:summary>
  </entry>
  <entry id="CVE-2014-0515">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="AND">
        <cpe-lang:logical-test negate="false" operator="OR">
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:13.0.0.182"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.8.800.168"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.8.800.94"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.8.800.97"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.7.700.275"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.7.700.169"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.7.700.202"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.7.700.224"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.7.700.225"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.7.700.232"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.7.700.242"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.7.700.257"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.7.700.260"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.7.700.261"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.7.700.269"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.7.700.272"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:13.0.0.201"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test negate="false" operator="OR">
          <cpe-lang:fact-ref name="cpe:/o:apple:mac_os_x"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="AND">
        <cpe-lang:logical-test negate="false" operator="OR">
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.350"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.223"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.228"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.233"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.235"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.236"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.238"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.243"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.251"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.258"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.261"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.262"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.270"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.273"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.275"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.280"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.285"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.291"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.297"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.310"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.332"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.335"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.336"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.341"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.346"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test negate="false" operator="OR">
          <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="AND">
        <cpe-lang:logical-test negate="false" operator="OR">
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:13.0.0.182"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.8.800.168"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.8.800.94"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.8.800.97"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.7.700.275"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.7.700.169"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.7.700.202"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.7.700.224"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.7.700.225"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.7.700.232"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.7.700.242"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.7.700.257"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.7.700.260"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.7.700.261"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.7.700.269"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.7.700.272"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test negate="false" operator="OR">
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.261</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.243</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.280</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.262</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.285</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.223</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.7.700.275</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.335</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.336</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.7.700.242</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.7.700.202</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.273</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.7.700.272</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.275</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.235</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:13.0.0.182</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.236</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.8.800.168</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.7.700.257</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.238</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.341</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.297</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.258</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.7.700.224</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.7.700.225</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.270</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.8.800.94</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.291</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.251</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.228</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.7.700.232</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.233</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.346</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.7.700.261</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.7.700.260</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.7.700.169</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.8.800.97</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.332</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.7.700.269</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:13.0.0.201</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.350</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.310</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-0515</vuln:cve-id>
    <vuln:published-datetime>2014-04-29T06:37:03.733-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-29T10:46:06.390-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-29T10:46:05.390-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-119"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://helpx.adobe.com/security/products/flash-player/apsb14-13.html" xml:lang="en">http://helpx.adobe.com/security/products/flash-player/apsb14-13.html</vuln:reference>
    </vuln:references>
    <vuln:summary>Buffer overflow in Adobe Flash Player before 11.7.700.279 and 11.8.x through 13.0.x before 13.0.0.206 on Windows and OS X, and before 11.2.202.356 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in April 2014.</vuln:summary>
  </entry>
  <entry id="CVE-2014-0646">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:emc:rsa_access_manager:6.1:sp3"/>
        <cpe-lang:fact-ref name="cpe:/a:emc:rsa_access_manager:6.1:sp4"/>
        <cpe-lang:fact-ref name="cpe:/a:emc:rsa_access_manager:6.2:-"/>
        <cpe-lang:fact-ref name="cpe:/a:emc:rsa_access_manager:6.2:sp1"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:emc:rsa_access_manager:6.2:-</vuln:product>
      <vuln:product>cpe:/a:emc:rsa_access_manager:6.2:sp1</vuln:product>
      <vuln:product>cpe:/a:emc:rsa_access_manager:6.1:sp4</vuln:product>
      <vuln:product>cpe:/a:emc:rsa_access_manager:6.1:sp3</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-0646</vuln:cve-id>
    <vuln:published-datetime>2014-05-01T13:29:56.697-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-05-02T09:49:06.440-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.9</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-05-02T09:49:06.363-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://archives.neohapsis.com/archives/bugtraq/2014-04/0191.html" xml:lang="en">20140430 ESA-2014-029: RSA Access Manager Sensitive Information Disclosure Vulnerability</vuln:reference>
    </vuln:references>
    <vuln:summary>The runtime WS component in the server in EMC RSA Access Manager 6.1.3 before 6.1.3.39, 6.1.4 before 6.1.4.22, 6.2.0 before 6.2.0.11, and 6.2.1 before 6.2.1.03, when INFO logging is enabled, allows local users to discover cleartext passwords by reading log files.</vuln:summary>
  </entry>
  <entry id="CVE-2014-0760">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="AND">
        <cpe-lang:logical-test negate="false" operator="OR">
          <cpe-lang:fact-ref name="cpe:/a:3s-software:codesys_runtime_system:-"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test negate="false" operator="OR">
          <cpe-lang:fact-ref name="cpe:/h:festo:cecx-x-c1_modular_master_controller:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="AND">
        <cpe-lang:logical-test negate="false" operator="OR">
          <cpe-lang:fact-ref name="cpe:/a:softmotion3d:softmotion:-"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test negate="false" operator="OR">
          <cpe-lang:fact-ref name="cpe:/h:festo:cecx-x-m1_modular_controller:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:softmotion3d:softmotion:-</vuln:product>
      <vuln:product>cpe:/h:festo:cecx-x-c1_modular_master_controller:-</vuln:product>
      <vuln:product>cpe:/a:3s-software:codesys_runtime_system:-</vuln:product>
      <vuln:product>cpe:/h:festo:cecx-x-m1_modular_controller:-</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-0760</vuln:cve-id>
    <vuln:published-datetime>2014-04-25T01:12:07.693-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-25T09:56:18.937-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-25T09:56:18.873-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-287"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://ics-cert.us-cert.gov/advisories/ICSA-14-084-01" xml:lang="en">http://ics-cert.us-cert.gov/advisories/ICSA-14-084-01</vuln:reference>
    </vuln:references>
    <vuln:summary>The Festo CECX-X-C1 Modular Master Controller with CoDeSys and CECX-X-M1 Modular Controller with CoDeSys and SoftMotion provide an undocumented access method involving the FTP protocol, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2014-0769">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="AND">
        <cpe-lang:logical-test negate="false" operator="OR">
          <cpe-lang:fact-ref name="cpe:/a:softmotion3d:softmotion:-"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test negate="false" operator="OR">
          <cpe-lang:fact-ref name="cpe:/h:festo:cecx-x-m1_modular_controller:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="AND">
        <cpe-lang:logical-test negate="false" operator="OR">
          <cpe-lang:fact-ref name="cpe:/a:3s-software:codesys_runtime_system:-"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test negate="false" operator="OR">
          <cpe-lang:fact-ref name="cpe:/h:festo:cecx-x-c1_modular_master_controller:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:softmotion3d:softmotion:-</vuln:product>
      <vuln:product>cpe:/h:festo:cecx-x-c1_modular_master_controller:-</vuln:product>
      <vuln:product>cpe:/a:3s-software:codesys_runtime_system:-</vuln:product>
      <vuln:product>cpe:/h:festo:cecx-x-m1_modular_controller:-</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-0769</vuln:cve-id>
    <vuln:published-datetime>2014-04-25T01:12:07.753-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-25T09:58:09.157-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-25T09:58:09.110-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-287"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://ics-cert.us-cert.gov/advisories/ICSA-14-084-01" xml:lang="en">http://ics-cert.us-cert.gov/advisories/ICSA-14-084-01</vuln:reference>
    </vuln:references>
    <vuln:summary>The Festo CECX-X-C1 Modular Master Controller with CoDeSys and CECX-X-M1 Modular Controller with CoDeSys and SoftMotion do not require authentication for connections to certain TCP ports, which allows remote attackers to (1) modify the configuration via a request to the debug service on port 4000 or (2) delete log entries via a request to the log service on port 4001.</vuln:summary>
  </entry>
  <entry id="CVE-2014-0780">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:indusoft:web_studio:7.1:sp2"/>
        <cpe-lang:fact-ref name="cpe:/a:indusoft:web_studio:7.1:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:indusoft:web_studio:7.1:-"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:indusoft:web_studio:7.1:-</vuln:product>
      <vuln:product>cpe:/a:indusoft:web_studio:7.1:sp2</vuln:product>
      <vuln:product>cpe:/a:indusoft:web_studio:7.1:sp1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-0780</vuln:cve-id>
    <vuln:published-datetime>2014-04-25T01:12:07.787-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-25T11:48:51.573-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-25T11:48:51.433-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-22"/>
    <vuln:references xml:lang="en" reference_type="PATCH">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://ics-cert.us-cert.gov/advisories/ICSA-14-107-02" xml:lang="en">http://ics-cert.us-cert.gov/advisories/ICSA-14-107-02</vuln:reference>
    </vuln:references>
    <vuln:summary>Directory traversal vulnerability in NTWebServer in InduSoft Web Studio 7.1 before SP2 Patch 4 allows remote attackers to read administrative passwords in APP files, and consequently execute arbitrary code, via unspecified web requests.</vuln:summary>
  </entry>
  <entry id="CVE-2014-0786">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:ecava:integraxor:4.1"/>
        <cpe-lang:fact-ref name="cpe:/a:ecava:integraxor:4.1.4369"/>
        <cpe-lang:fact-ref name="cpe:/a:ecava:integraxor:4.1.4380"/>
        <cpe-lang:fact-ref name="cpe:/a:ecava:integraxor:4.1.4390"/>
        <cpe-lang:fact-ref name="cpe:/a:ecava:integraxor:4.1.4360"/>
        <cpe-lang:fact-ref name="cpe:/a:ecava:integraxor:4.1.4340"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:ecava:integraxor:4.1</vuln:product>
      <vuln:product>cpe:/a:ecava:integraxor:4.1.4369</vuln:product>
      <vuln:product>cpe:/a:ecava:integraxor:4.1.4390</vuln:product>
      <vuln:product>cpe:/a:ecava:integraxor:4.1.4360</vuln:product>
      <vuln:product>cpe:/a:ecava:integraxor:4.1.4340</vuln:product>
      <vuln:product>cpe:/a:ecava:integraxor:4.1.4380</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-0786</vuln:cve-id>
    <vuln:published-datetime>2014-04-30T21:56:10.490-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-05-01T12:18:09.443-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-05-01T12:18:09.240-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="PATCH">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://ics-cert.us-cert.gov/advisories/ICSA-14-091-01" xml:lang="en">http://ics-cert.us-cert.gov/advisories/ICSA-14-091-01</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.integraxor.com/blog/category/security/vulnerability-note/" xml:lang="en">http://www.integraxor.com/blog/category/security/vulnerability-note/</vuln:reference>
    </vuln:references>
    <vuln:summary>Ecava IntegraXor before 4.1.4393 allows remote attackers to read cleartext credentials for administrative accounts via SELECT statements that leverage the guest role.</vuln:summary>
  </entry>
  <entry id="CVE-2014-0823">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:8.0.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:8.0.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:8.0.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:8.0.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:8.0.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:8.0.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:8.0.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:8.0.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:8.0.0.8"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:8.5.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:8.5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:8.5.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:8.5.5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:8.5.5.1"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:ibm:websphere_application_server:8.0.0.4</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:8.0.0.3</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:8.0.0.2</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:8.0.0.0</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:8.0.0.8</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:8.5.0.0</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:8.0.0.1</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:8.0.0.7</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:8.5.0.1</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:8.0.0.6</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:8.5.0.2</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:8.0.0.5</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:8.5.5.1</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:8.5.5.0</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-0823</vuln:cve-id>
    <vuln:published-datetime>2014-05-01T13:29:56.713-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-05-02T09:54:20.187-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-05-02T09:54:20.043-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-200"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="http://xforce.iss.net/xforce/xfdb/90498" xml:lang="en">ibm-was-cve20140823-viewfiles(90498)</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21669554" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21669554</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>AIXAPAR</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg1PI05324" xml:lang="en">PI05324</vuln:reference>
    </vuln:references>
    <vuln:summary>IBM WebSphere Application Server (WAS) 8.x before 8.0.0.9 and 8.5.x before 8.5.5.2 allows remote attackers to read arbitrary files via a crafted URL.</vuln:summary>
  </entry>
  <entry id="CVE-2014-0857">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:8.5.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:8.5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:8.5.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:8.5.5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:8.5.5.1"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:8.0.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:8.0.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:8.0.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:8.0.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:8.0.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:8.0.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:8.0.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:8.0.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:8.0.0.8"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:ibm:websphere_application_server:8.0.0.4</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:8.0.0.3</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:8.0.0.2</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:8.0.0.0</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:8.0.0.8</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:8.5.0.0</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:8.0.0.7</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:8.5.0.1</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:8.0.0.1</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:8.5.0.2</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:8.0.0.6</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:8.0.0.5</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:8.5.5.1</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:8.5.5.0</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-0857</vuln:cve-id>
    <vuln:published-datetime>2014-05-01T13:29:56.713-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-05-02T09:57:31.300-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-05-02T09:57:30.973-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-200"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="http://xforce.iss.net/xforce/xfdb/90863" xml:lang="en">ibm-was-cve20140857-info-disc(90863)</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21669554" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21669554</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>AIXAPAR</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg1PI07808" xml:lang="en">PI07808</vuln:reference>
    </vuln:references>
    <vuln:summary>The Administrative Console in IBM WebSphere Application Server (WAS) 8.x before 8.0.0.9 and 8.5.x before 8.5.5.2 allows remote authenticated users to obtain sensitive information via a crafted request.</vuln:summary>
  </entry>
  <entry id="CVE-2014-0859">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:8.0.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:8.0.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:8.0.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:8.0.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:8.0.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:8.0.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:8.0.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:8.0.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:8.0.0.8"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:7.0"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:7.0.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:7.0.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:7.0.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:7.0.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:7.0.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:7.0.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:7.0.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:7.0.0.16"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:7.0.0.17"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:7.0.0.18"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:7.0.0.19"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:7.0.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:7.0.0.21"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:7.0.0.22"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:7.0.0.23"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:7.0.0.24"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:7.0.0.25"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:7.0.0.27"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:7.0.0.29"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:7.0.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:7.0.0.31"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:7.0.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:7.0.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:7.0.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:7.0.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:7.0.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:7.0.0.9"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:8.5.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:8.5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:8.5.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:8.5.5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:8.5.5.1"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:ibm:websphere_application_server:8.0.0.4</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:8.0.0.3</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:8.0.0.2</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:7.0.0.4</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:7.0.0.5</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:7.0.0.27</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:7.0.0.3</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:7.0.0.29</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:7.0.0.8</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:7.0.0.9</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:7.0.0.6</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:8.0.0.0</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:7.0.0.7</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:8.5.0.0</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:8.0.0.8</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:8.5.0.1</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:8.0.0.7</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:8.0.0.1</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:8.5.0.2</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:8.0.0.6</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:8.0.0.5</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:8.5.5.1</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:7.0.0.15</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:8.5.5.0</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:7.0.0.2</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:7.0.0.1</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:7.0.0.12</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:7.0.0.11</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:7.0.0.14</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:7.0.0.13</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:7.0.0.16</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:7.0.0.10</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:7.0.0.18</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:7.0.0.17</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:7.0.0.19</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:7.0.0.31</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:7.0</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:7.0.0.25</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:7.0.0.24</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:7.0.0.23</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:7.0.0.22</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:7.0.0.21</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-0859</vuln:cve-id>
    <vuln:published-datetime>2014-05-01T13:29:56.730-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-05-02T10:01:30.323-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-05-02T10:01:29.917-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="http://xforce.iss.net/xforce/xfdb/90879" xml:lang="en">ibm-was-cve20140859-retry(90879)</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21669554" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21669554</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>AIXAPAR</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg1PI08892" xml:lang="en">PI08892</vuln:reference>
    </vuln:references>
    <vuln:summary>The web-server plugin in IBM WebSphere Application Server (WAS) 7.x before 7.0.0.33, 8.x before 8.0.0.9, and 8.5.x before 8.5.5.2, when POST retries are enabled, allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2014-0896">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:8.5.5.1:-:liberty_profile"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:8.5.0.0:-:liberty_profile"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:8.5.0.1:-:liberty_profile"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:8.5.0.2:-:liberty_profile"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:8.5.5.0:-:liberty_profile"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:ibm:websphere_application_server:8.5.0.0:-:liberty_profile</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:8.5.0.2:-:liberty_profile</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:8.5.0.1:-:liberty_profile</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:8.5.5.0:-:liberty_profile</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:8.5.5.1:-:liberty_profile</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-0896</vuln:cve-id>
    <vuln:published-datetime>2014-05-01T13:29:56.747-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-05-02T10:14:42.947-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-05-02T10:14:42.897-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-200"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="http://xforce.iss.net/xforce/xfdb/91326" xml:lang="en">ibm-was-cve20140896-info-disc(91326)</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21669554" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21669554</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>AIXAPAR</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg1PI10134" xml:lang="en">PI10134</vuln:reference>
    </vuln:references>
    <vuln:summary>IBM WebSphere Application Server (WAS) Liberty Profile 8.5.x before 8.5.5.2 allows remote attackers to obtain sensitive information via a crafted request.</vuln:summary>
  </entry>
  <entry id="CVE-2014-0941">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:ibm:tivoli_netcool%2fomnibus:7.4.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:ibm:tivoli_netcool%2fomnibus:7.4.0</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-0941</vuln:cve-id>
    <vuln:published-datetime>2014-05-01T13:29:56.760-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-05-02T10:25:37.247-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>3.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-05-02T10:25:37.233-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="http://xforce.iss.net/xforce/xfdb/92400" xml:lang="en">ibm-netcoolomnibus-cve20140941-xss(92400)</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21671686" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21671686</vuln:reference>
    </vuln:references>
    <vuln:summary>Cross-site scripting (XSS) vulnerability in webtop/eventviewer/eventViewer.jsp in the Web GUI in IBM Netcool/OMNIbus 7.4.0 before FP2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2014-0942.</vuln:summary>
  </entry>
  <entry id="CVE-2014-0942">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:ibm:tivoli_netcool%2fomnibus:7.4.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:ibm:tivoli_netcool%2fomnibus:7.4.0</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-0942</vuln:cve-id>
    <vuln:published-datetime>2014-05-01T13:29:56.777-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-05-02T10:28:48.147-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>3.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-05-02T10:28:46.083-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="http://xforce.iss.net/xforce/xfdb/92401" xml:lang="en">ibm-netcoolomnibus-cve20140942-xss(92401)</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21671686" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21671686</vuln:reference>
    </vuln:references>
    <vuln:summary>Cross-site scripting (XSS) vulnerability in webtop/eventviewer/eventViewer.jsp in the Web GUI in IBM Netcool/OMNIbus 7.4.0 before FP2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2014-0941.</vuln:summary>
  </entry>
  <entry id="CVE-2014-1217">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:livetecs:timeline:6.2.71"/>
        <cpe-lang:fact-ref name="cpe:/a:livetecs:timeline:6.2.7"/>
        <cpe-lang:fact-ref name="cpe:/a:livetecs:timeline:6.2.6"/>
        <cpe-lang:fact-ref name="cpe:/a:livetecs:timeline:6.2.4"/>
        <cpe-lang:fact-ref name="cpe:/a:livetecs:timeline:6.2.3"/>
        <cpe-lang:fact-ref name="cpe:/a:livetecs:timeline:6.2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:livetecs:timeline:6.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:livetecs:timeline:5.2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:livetecs:timeline:4.9.1"/>
        <cpe-lang:fact-ref name="cpe:/a:livetecs:timeline:7.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:livetecs:timeline:4.3.1"/>
        <cpe-lang:fact-ref name="cpe:/a:livetecs:timeline:4.2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:livetecs:timeline:3.8.1"/>
        <cpe-lang:fact-ref name="cpe:/a:livetecs:timeline:3.7.1"/>
        <cpe-lang:fact-ref name="cpe:/a:livetecs:timeline:3.6.1"/>
        <cpe-lang:fact-ref name="cpe:/a:livetecs:timeline:3.5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:livetecs:timeline:3.2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:livetecs:timeline:3.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:livetecs:timeline:3.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:livetecs:timeline:3.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:livetecs:timeline:3.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:livetecs:timeline:2.94"/>
        <cpe-lang:fact-ref name="cpe:/a:livetecs:timeline:2.91"/>
        <cpe-lang:fact-ref name="cpe:/a:livetecs:timeline:2.81"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:livetecs:timeline:6.2.7</vuln:product>
      <vuln:product>cpe:/a:livetecs:timeline:2.94</vuln:product>
      <vuln:product>cpe:/a:livetecs:timeline:3.1.1</vuln:product>
      <vuln:product>cpe:/a:livetecs:timeline:3.5.1</vuln:product>
      <vuln:product>cpe:/a:livetecs:timeline:2.91</vuln:product>
      <vuln:product>cpe:/a:livetecs:timeline:3.0.3</vuln:product>
      <vuln:product>cpe:/a:livetecs:timeline:3.0.1</vuln:product>
      <vuln:product>cpe:/a:livetecs:timeline:4.2.1</vuln:product>
      <vuln:product>cpe:/a:livetecs:timeline:2.81</vuln:product>
      <vuln:product>cpe:/a:livetecs:timeline:6.0.1</vuln:product>
      <vuln:product>cpe:/a:livetecs:timeline:3.0.5</vuln:product>
      <vuln:product>cpe:/a:livetecs:timeline:7.1.1</vuln:product>
      <vuln:product>cpe:/a:livetecs:timeline:6.2.71</vuln:product>
      <vuln:product>cpe:/a:livetecs:timeline:3.6.1</vuln:product>
      <vuln:product>cpe:/a:livetecs:timeline:4.3.1</vuln:product>
      <vuln:product>cpe:/a:livetecs:timeline:6.2.1</vuln:product>
      <vuln:product>cpe:/a:livetecs:timeline:6.2.3</vuln:product>
      <vuln:product>cpe:/a:livetecs:timeline:3.8.1</vuln:product>
      <vuln:product>cpe:/a:livetecs:timeline:3.2.1</vuln:product>
      <vuln:product>cpe:/a:livetecs:timeline:6.2.4</vuln:product>
      <vuln:product>cpe:/a:livetecs:timeline:5.2.1</vuln:product>
      <vuln:product>cpe:/a:livetecs:timeline:4.9.1</vuln:product>
      <vuln:product>cpe:/a:livetecs:timeline:6.2.6</vuln:product>
      <vuln:product>cpe:/a:livetecs:timeline:3.7.1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-1217</vuln:cve-id>
    <vuln:published-datetime>2014-04-28T10:09:06.440-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-29T08:09:11.557-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-29T08:09:11.210-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-264"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-1217/" xml:lang="en">https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-1217/</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/67043" xml:lang="en">67043</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/archive/1/archive/1/531911/100/0/threaded" xml:lang="en">20140423 CVE-2014-1217 - Unauthenticated access to sensitive information and functionality in Livetecs Timelive</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>FULLDISC</vuln:source>
      <vuln:reference href="http://seclists.org/fulldisclosure/2014/Apr/259" xml:lang="en">20140423 CVE-2014-1217 - Unauthenticated access to sensitive information and functionality in Livetecs Timelive</vuln:reference>
    </vuln:references>
    <vuln:summary>Livetecs Timelive before 6.2.8 does not properly restrict access to systemsetting.aspx, which allows remote attackers to change configurations and obtain the database connection string and credentials via unspecified vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2014-1441">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:coreftp:core_ftp:1.2"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:coreftp:core_ftp:1.2</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-1441</vuln:cve-id>
    <vuln:published-datetime>2014-05-01T21:59:22.357-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-05-02T11:11:59.343-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-05-02T11:11:59.140-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-362"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>OSVDB</vuln:source>
      <vuln:reference href="http://www.osvdb.org/102966" xml:lang="en">102966</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/56850" xml:lang="en">56850</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>FULLDISC</vuln:source>
      <vuln:reference href="http://seclists.org/fulldisclosure/2014/Feb/39" xml:lang="en">20140205 Core FTP Server Vulnerabilities</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://packetstormsecurity.com/files/125073/Core-FTP-Server-1.2-DoS-Traversal-Disclosure.html" xml:lang="en">http://packetstormsecurity.com/files/125073/Core-FTP-Server-1.2-DoS-Traversal-Disclosure.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://coreftp.com/forums/viewtopic.php?t=2985707" xml:lang="en">http://coreftp.com/forums/viewtopic.php?t=2985707</vuln:reference>
    </vuln:references>
    <vuln:summary>Core FTP Server 1.2 before build 515 allows remote attackers to cause a denial of service (reachable assertion and crash) via an AUTH SSL command with malformed data, as demonstrated by pressing the enter key twice.</vuln:summary>
  </entry>
  <entry id="CVE-2014-1442">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:coreftp:core_ftp:1.2"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:coreftp:core_ftp:1.2</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-1442</vuln:cve-id>
    <vuln:published-datetime>2014-05-01T21:59:22.390-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-05-02T11:19:26.310-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-05-02T11:19:26.280-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-22"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>OSVDB</vuln:source>
      <vuln:reference href="http://www.osvdb.org/102967" xml:lang="en">102967</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/56850" xml:lang="en">56850</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>FULLDISC</vuln:source>
      <vuln:reference href="http://seclists.org/fulldisclosure/2014/Feb/39" xml:lang="en">20140205 Core FTP Server Vulnerabilities</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://packetstormsecurity.com/files/125073/Core-FTP-Server-1.2-DoS-Traversal-Disclosure.html" xml:lang="en">http://packetstormsecurity.com/files/125073/Core-FTP-Server-1.2-DoS-Traversal-Disclosure.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://coreftp.com/forums/viewtopic.php?t=2985707" xml:lang="en">http://coreftp.com/forums/viewtopic.php?t=2985707</vuln:reference>
    </vuln:references>
    <vuln:summary>Directory traversal vulnerability in Core FTP Server 1.2 before build 515 allows remote authenticated users to determine the existence of arbitrary files via a /../ sequence in an XCRC command.</vuln:summary>
  </entry>
  <entry id="CVE-2014-1443">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:coreftp:core_ftp:1.2"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:coreftp:core_ftp:1.2</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-1443</vuln:cve-id>
    <vuln:published-datetime>2014-05-01T21:59:22.420-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-05-02T11:21:20.283-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-05-02T11:21:20.220-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-119"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>OSVDB</vuln:source>
      <vuln:reference href="http://www.osvdb.org/102968" xml:lang="en">102968</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/56850" xml:lang="en">56850</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>FULLDISC</vuln:source>
      <vuln:reference href="http://seclists.org/fulldisclosure/2014/Feb/39" xml:lang="en">20140205 Core FTP Server Vulnerabilities</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://packetstormsecurity.com/files/125073/Core-FTP-Server-1.2-DoS-Traversal-Disclosure.html" xml:lang="en">http://packetstormsecurity.com/files/125073/Core-FTP-Server-1.2-DoS-Traversal-Disclosure.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://coreftp.com/forums/viewtopic.php?t=2985707" xml:lang="en">http://coreftp.com/forums/viewtopic.php?t=2985707</vuln:reference>
    </vuln:references>
    <vuln:summary>Core FTP Server 1.2 before build 515 allows remote authenticated users to obtain sensitive information (password for the previous user) via a USER command with a specific length, possibly related to an out-of-bounds read.</vuln:summary>
  </entry>
  <entry id="CVE-2014-1518">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:28.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:27.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:27.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:26.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.10.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.6.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.7.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.9:rc"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.9.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.9.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.9.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0:preview_release"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.28"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.27"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.26"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.22"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.23"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.24"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.25"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:6.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:6.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:6.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:7.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:7.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:8.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:8.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:9.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:9.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:11.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:12.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:12.0:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:13.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:13.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:14.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:14.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:15.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:15.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:16.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:16.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:16.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:18.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:18.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:18.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:19.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:19.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:19.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:20.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:20.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:21.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:25.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:24.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:23.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:23.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:24.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:24.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:25.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.25:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.25:-"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.26:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.25:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.25:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.24"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.24:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.23"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.23:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.23:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.22"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.22.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.10.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.17.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.4.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.6.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.9.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:alpha_1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:alpha_2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:alpha_3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:beta_1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:beta_2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:alpha1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:alpha2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:alpha3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.10:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.10:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.10:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.14:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.14:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.14:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.14:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.14:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.17:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.17:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.17:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.17:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.18:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.18:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.18:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.18:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.19:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.19:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.2:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.2:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.2:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.20:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.20:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.20:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.21:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.21:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.22:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.22:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.4:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.4:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.4:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.5:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.5:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.5:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.5:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.6:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.6:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.6:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.6:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.9:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.9:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.9:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.9:beta4"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:24.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:24.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:24.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.7.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.7.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.7.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.5:beta"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.7.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.7.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:10.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:10.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:10.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:10.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:10.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:11.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:11.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:12.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:12.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:13.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:13.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:14.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:15.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:15.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:16.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:16.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:16.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:17.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:17.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:17.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:17.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:17.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:17.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:17.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:17.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:17.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.22"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.23"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:6.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:6.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:6.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:7.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:7.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:8.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:9.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:9.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:24.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:24.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:24.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:24.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox_esr:24.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox_esr:24.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox_esr:24.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox_esr:24.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox_esr:24.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox_esr:24.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox_esr:24.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox_esr:24.1.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:6.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:8.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:5.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:16.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.4.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:11.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:23.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:6.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:24.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:24.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:alpha1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:alpha3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:alpha2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.22</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.21</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.20</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.26</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.25</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.24</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.23</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:19.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:18.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:19.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:18.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.7.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:13.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.7.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.7.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:6.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:14.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:alpha_1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:9.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:alpha_3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:alpha_2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.28</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.27</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:rc2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:18.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:rc1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:rc1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:rc2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:9.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:21.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:17.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:17.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:17.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:17.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:17.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.19</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:17.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.18</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:17.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:17.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.25:-</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:6.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:6.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:12.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta10</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:13.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:25.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:14.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:7.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:8.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta9</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.19</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:7.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.18</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.7.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.7.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:17.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:16.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.20</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:15.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:15.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.6.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:9.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:6.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:16.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:16.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:24.1.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.9.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox_esr:24.1.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:28.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox_esr:24.1.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.19</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:13.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:12.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:20.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:15.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.20</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:19.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.22</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.21</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.9.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.24</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.23</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:24.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:11.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.19</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.18</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:15.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.10.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.9:rc</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.9.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.9.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.10.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:8.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:16.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:16.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:5.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:24.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox_esr:24.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:24.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0:preview_release</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox_esr:24.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:24.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:24.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:24.1.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox_esr:24.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:20.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:24.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox_esr:24.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.14:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.14:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.14:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.10:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.14:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:5.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.14:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.10:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.10:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:26.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:beta_2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:beta_1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.5:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.4:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:14.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.6:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.25:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.25:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.18</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.20:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.20:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.22:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.21:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.24:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.21:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.23:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.20:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.23:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.25:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.22:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.5:beta</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.21</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.20</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.19:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:23.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.17:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.18:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.18:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.18:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.17:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.19:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.6.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.17:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.17:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.18:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.9:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.9:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.6:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.9:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.4:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.5:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.5:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.6:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.5:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.4:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.6:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.9:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.2:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.2:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.19</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.2:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.22</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.23</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:27.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.7.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:25.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:12.0:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:27.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:7.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox_esr:24.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:12.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:11.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox_esr:24.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.17.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:13.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:9.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:10.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.26:rc1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.22.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:10.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:10.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:10.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:10.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.18</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.19</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:7.0</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-1518</vuln:cve-id>
    <vuln:published-datetime>2014-04-30T06:49:04.677-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-30T11:29:46.733-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-30T11:29:44.043-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=993546" xml:lang="en">https://bugzilla.mozilla.org/show_bug.cgi?id=993546</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=992968" xml:lang="en">https://bugzilla.mozilla.org/show_bug.cgi?id=992968</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=991471" xml:lang="en">https://bugzilla.mozilla.org/show_bug.cgi?id=991471</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=986843" xml:lang="en">https://bugzilla.mozilla.org/show_bug.cgi?id=986843</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=986678" xml:lang="en">https://bugzilla.mozilla.org/show_bug.cgi?id=986678</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=980537" xml:lang="en">https://bugzilla.mozilla.org/show_bug.cgi?id=980537</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=966630" xml:lang="en">https://bugzilla.mozilla.org/show_bug.cgi?id=966630</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=952022" xml:lang="en">https://bugzilla.mozilla.org/show_bug.cgi?id=952022</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=944353" xml:lang="en">https://bugzilla.mozilla.org/show_bug.cgi?id=944353</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.mozilla.org/security/announce/2014/mfsa2014-34.html" xml:lang="en">http://www.mozilla.org/security/announce/2014/mfsa2014-34.html</vuln:reference>
    </vuln:references>
    <vuln:summary>Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2014-1519">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:28.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:27.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:27.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:26.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.10.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.6.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.7.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.9:rc"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.9.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.9.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.9.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0:preview_release"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.28"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.27"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.26"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.22"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.23"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.24"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.25"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:6.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:6.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:6.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:7.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:7.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:8.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:8.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:9.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:9.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:11.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:12.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:12.0:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:13.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:13.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:14.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:14.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:15.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:15.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:16.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:16.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:16.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:18.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:18.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:18.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:19.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:19.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:19.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:20.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:20.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:21.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:25.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:24.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:23.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:23.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:24.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:24.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:25.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.25:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.25:-"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.26:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.25:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.25:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.24"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.24:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.23"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.23:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.23:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.22"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.22.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.10.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.17.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.4.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.6.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.9.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:alpha_1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:alpha_2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:alpha_3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:beta_1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:beta_2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:alpha1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:alpha2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:alpha3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.10:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.10:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.10:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.14:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.14:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.14:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.14:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.14:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.17:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.17:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.17:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.17:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.18:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.18:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.18:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.18:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.19:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.19:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.2:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.2:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.2:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.20:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.20:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.20:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.21:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.21:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.22:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.22:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.4:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.4:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.4:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.5:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.5:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.5:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.5:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.6:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.6:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.6:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.6:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.9:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.9:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.9:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.9:beta4"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:mozilla:firefox:24.1.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:8.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:5.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.9.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.4.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:23.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:28.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:24.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:24.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:alpha1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.19</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:alpha3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:13.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:alpha2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:20.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.20</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.22</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:19.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.21</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.24</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.9.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.23</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.22</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.21</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.20</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.26</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.25</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.24</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.23</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:19.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:19.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:18.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:18.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:13.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:6.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:14.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:alpha_1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:alpha_3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:9.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:alpha_2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.19</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.28</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.27</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.18</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:rc2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:18.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:15.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.10.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:rc1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:rc2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:rc1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:9.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:21.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.9.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.9:rc</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.9.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.10.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:8.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:5.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0:preview_release</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:20.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.19</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.18</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.14:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.14:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.25:-</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.14:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.14:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.10:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:6.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:6.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.14:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.10:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.10:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:26.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:beta_2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:beta_1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.5:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta10</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.4:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.6:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:14.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.25:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.25:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.20:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.22:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.20:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.21:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.21:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.24:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.20:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.23:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.23:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.22:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.25:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:25.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta12</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.19:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:23.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.18:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.17:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.18:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.18:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.19:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.17:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.6.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.17:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.17:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.18:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.9:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.9:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.9:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.6:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta7</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.5:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.4:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.6:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.5:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.5:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.9:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.6:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.4:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.2:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.2:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.2:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta9</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:27.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.7.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:25.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.19</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:12.0:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:7.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:27.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.18</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:12.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:11.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.17.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:16.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.20</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:15.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.6.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.26:rc1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.22.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:16.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:16.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.18</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.19</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:7.0</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-1519</vuln:cve-id>
    <vuln:published-datetime>2014-04-30T06:49:04.707-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-30T11:51:53.667-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-30T11:51:51.027-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=996883" xml:lang="en">https://bugzilla.mozilla.org/show_bug.cgi?id=996883</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=995607" xml:lang="en">https://bugzilla.mozilla.org/show_bug.cgi?id=995607</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=990794" xml:lang="en">https://bugzilla.mozilla.org/show_bug.cgi?id=990794</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=986864" xml:lang="en">https://bugzilla.mozilla.org/show_bug.cgi?id=986864</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=977955" xml:lang="en">https://bugzilla.mozilla.org/show_bug.cgi?id=977955</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=953104" xml:lang="en">https://bugzilla.mozilla.org/show_bug.cgi?id=953104</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=946658" xml:lang="en">https://bugzilla.mozilla.org/show_bug.cgi?id=946658</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=919592" xml:lang="en">https://bugzilla.mozilla.org/show_bug.cgi?id=919592</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.mozilla.org/security/announce/2014/mfsa2014-34.html" xml:lang="en">http://www.mozilla.org/security/announce/2014/mfsa2014-34.html</vuln:reference>
    </vuln:references>
    <vuln:summary>Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2014-1520">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="AND">
        <cpe-lang:logical-test negate="false" operator="OR">
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox_esr:24.4"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox_esr:24.3"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox_esr:24.2"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox_esr:24.1.1"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox_esr:24.0"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox_esr:24.0.1"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox_esr:24.0.2"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox_esr:24.1.0"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:28.0"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:27.0.1"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:27.0"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:26.0"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.1"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.10"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.10.1"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.2"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.3"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.4"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.5"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.6"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.6.1"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.7"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.7.1"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.8"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.9"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.9:rc"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.9.1"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.9.2"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.9.3"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0:preview_release"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.1"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.2"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.3"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.4"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.5"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.6"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.7"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.8"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5:beta1"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5:beta2"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.1"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.10"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.11"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.12"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.2"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.3"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.4"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.5"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.6"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.7"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.8"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.9"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.1"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.2"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.3"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.4"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.5"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.6"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.7"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.8"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.1"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.10"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.11"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.12"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.13"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.14"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.15"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.16"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.17"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.18"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.19"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.2"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.20"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.3"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.4"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.5"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.6"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.7"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.8"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.9"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.19"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.18"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.1"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.10"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.11"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.12"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.13"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.14"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.15"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.16"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.17"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.2"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.3"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.4"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.5"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.6"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.7"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.8"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.9"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.16"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.17"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.18"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.19"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.1"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.10"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.11"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.12"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.13"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.14"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.15"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.2"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.3"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.4"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.5"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.6"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.7"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.8"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.9"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.28"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.27"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.26"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.10"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.11"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.12"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.13"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.14"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.15"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.16"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.17"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.18"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.19"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.2"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.20"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.21"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.22"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.23"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.24"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.25"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.3"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.4"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.6"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.7"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.8"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.9"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0.1"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta9"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta8"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta7"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta6"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta5"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta4"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta3"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta2"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta12"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta11"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta10"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta1"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:5.0.1"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:5.0"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:6.0"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:6.0.1"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:6.0.2"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:7.0.1"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:7.0"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:8.0.1"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:8.0"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:9.0.1"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:9.0"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.1"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.2"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.12"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.11"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.10"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.9"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.8"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.7"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.6"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.5"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.4"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.3"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:11.0"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:12.0"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:12.0:beta6"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:13.0.1"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:13.0"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:14.0"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:14.0.1"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:15.0"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:15.0.1"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:16.0"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:16.0.1"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:16.0.2"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.11"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.10"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.9"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.8"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.7"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.6"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.5"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.4"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.3"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.2"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:18.0.2"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:18.0.1"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:18.0"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:19.0.2"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:19.0.1"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:19.0"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:20.0.1"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:20.0"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:21.0"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:25.0.1"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:24.1.1"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:23.0.1"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:23.0"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:24.1"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:24.0"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:25.0"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test negate="false" operator="OR">
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:mozilla:firefox:24.1.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:8.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:5.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox_esr:24.1.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:23.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:28.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox_esr:24.1.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:24.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:24.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:13.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:20.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:19.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.9.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.22</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.21</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.20</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.26</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.25</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.24</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.23</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:19.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:19.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:18.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:18.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:13.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:6.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:14.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:9.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.19</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.28</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.27</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.18</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:18.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:15.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:9.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:21.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.9:rc</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.9.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.9.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.10.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:8.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:5.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox_esr:24.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0:preview_release</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox_esr:24.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox_esr:24.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:20.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox_esr:24.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.19</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.18</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:6.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:6.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:26.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:14.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:25.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:23.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:27.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.7.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:25.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.19</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:12.0:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:7.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:27.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.18</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox_esr:24.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:12.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:11.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox_esr:24.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:16.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.20</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:15.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.6.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:16.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:16.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.18</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.19</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:7.0</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-1520</vuln:cve-id>
    <vuln:published-datetime>2014-04-30T06:49:04.753-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-30T12:02:09.143-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.9</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-30T12:02:07.173-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-264"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=961676" xml:lang="en">https://bugzilla.mozilla.org/show_bug.cgi?id=961676</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.mozilla.org/security/announce/2014/mfsa2014-35.html" xml:lang="en">http://www.mozilla.org/security/announce/2014/mfsa2014-35.html</vuln:reference>
    </vuln:references>
    <vuln:summary>maintenservice_installer.exe in the Maintenance Service Installer in Mozilla Firefox before 29.0 and Firefox ESR 24.x before 24.5 on Windows allows local users to gain privileges by placing a Trojan horse DLL file into a temporary directory at an unspecified point in the update process.</vuln:summary>
  </entry>
  <entry id="CVE-2014-1522">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:28.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:27.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:27.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:26.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.10.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.6.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.7.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.9:rc"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.9.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.9.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.9.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0:preview_release"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.28"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.27"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.26"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.22"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.23"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.24"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.25"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:6.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:6.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:6.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:7.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:7.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:8.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:8.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:9.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:9.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:11.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:12.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:12.0:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:13.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:13.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:14.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:14.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:15.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:15.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:16.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:16.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:16.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:18.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:18.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:18.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:19.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:19.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:19.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:20.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:20.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:21.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:25.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:24.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:23.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:23.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:24.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:24.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:25.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.25:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.25:-"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.26:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.25:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.25:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.24"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.24:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.23"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.23:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.23:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.22"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.22.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.10.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.17.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.4.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.6.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.9.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:alpha_1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:alpha_2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:alpha_3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:beta_1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:beta_2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:alpha1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:alpha2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:alpha3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.10:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.10:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.10:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.14:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.14:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.14:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.14:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.14:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.17:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.17:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.17:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.17:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.18:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.18:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.18:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.18:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.19:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.19:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.2:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.2:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.2:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.20:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.20:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.20:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.21:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.21:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.22:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.22:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.4:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.4:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.4:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.5:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.5:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.5:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.5:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.6:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.6:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.6:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.6:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.9:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.9:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.9:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.9:beta4"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:mozilla:firefox:24.1.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:8.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:5.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.9.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.4.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:23.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:28.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:24.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:24.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:alpha1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.19</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:alpha3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:13.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:alpha2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:20.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.20</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.22</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:19.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.21</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.24</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.9.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.23</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.22</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.21</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.20</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.26</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.25</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.24</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.23</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:19.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:19.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:18.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:18.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:13.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:6.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:14.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:alpha_1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:alpha_3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:9.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:alpha_2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.19</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.28</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.27</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.18</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:rc2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:18.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:15.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.10.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:rc1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:rc2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:rc1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:9.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:21.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.9.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.9:rc</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.9.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.10.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:8.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:5.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0:preview_release</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:20.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.19</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.18</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.14:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.14:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.25:-</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.14:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.14:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.10:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:6.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:6.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.14:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.10:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.10:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:26.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:beta_2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:beta_1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.5:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta10</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.4:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.6:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:14.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.25:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.25:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.20:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.22:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.20:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.21:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.21:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.24:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.20:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.23:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.23:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.22:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.25:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:25.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta12</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.19:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:23.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.18:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.17:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.18:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.18:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.19:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.17:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.6.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.17:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.17:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.18:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.9:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.9:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.9:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.6:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta7</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.5:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.4:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.6:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.5:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.5:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.9:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.6:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.4:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.2:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.2:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.2:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta9</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:27.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.7.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:25.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.19</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:12.0:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:7.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:27.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.18</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:12.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:11.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.17.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:16.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.20</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:15.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.6.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.26:rc1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.22.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:16.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:16.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.18</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.19</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:7.0</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-1522</vuln:cve-id>
    <vuln:published-datetime>2014-04-30T06:49:04.787-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-30T12:11:38.583-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-30T12:11:36.177-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-119"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=995289" xml:lang="en">https://bugzilla.mozilla.org/show_bug.cgi?id=995289</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.mozilla.org/security/announce/2014/mfsa2014-36.html" xml:lang="en">http://www.mozilla.org/security/announce/2014/mfsa2014-36.html</vuln:reference>
    </vuln:references>
    <vuln:summary>The mozilla::dom::OscillatorNodeEngine::ComputeCustom function in the Web Audio subsystem in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read, memory corruption, and application crash) via crafted content.</vuln:summary>
  </entry>
  <entry id="CVE-2014-1523">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox_esr:24.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox_esr:24.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox_esr:24.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox_esr:24.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox_esr:24.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox_esr:24.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox_esr:24.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox_esr:24.1.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.25:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.25:-"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.26:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.25:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.25:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.24"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.24:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.23"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.23:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.23:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.22"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.22.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.10.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.17.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.4.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.6.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.9.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:alpha_1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:alpha_2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:alpha_3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:beta_1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:beta_2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:alpha1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:alpha2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:alpha3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.10:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.10:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.10:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.14:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.14:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.14:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.14:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.14:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.17:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.17:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.17:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.17:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.18:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.18:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.18:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.18:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.19:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.19:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.2:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.2:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.2:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.20:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.20:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.20:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.21:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.21:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.22:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.22:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.4:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.4:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.4:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.5:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.5:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.5:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.5:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.6:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.6:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.6:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.6:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.9:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.9:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.9:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.9:beta4"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:24.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:24.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:24.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.7.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.7.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.7.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.5:beta"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.7.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.7.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:10.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:10.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:10.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:10.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:10.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:11.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:11.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:12.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:12.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:13.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:13.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:14.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:15.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:15.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:16.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:16.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:16.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:17.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:17.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:17.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:17.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:17.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:17.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:17.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:17.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:17.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.22"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.23"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:6.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:6.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:6.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:7.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:7.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:8.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:9.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:9.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:24.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:24.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:24.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:24.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:28.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:27.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:27.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:26.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.10.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.6.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.7.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.9:rc"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.9.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.9.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.9.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0:preview_release"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.28"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.27"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.26"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.22"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.23"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.24"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.25"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:6.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:6.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:6.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:7.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:7.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:8.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:8.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:9.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:9.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:11.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:12.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:12.0:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:13.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:13.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:14.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:14.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:15.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:15.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:16.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:16.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:16.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:18.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:18.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:18.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:19.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:19.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:19.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:20.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:20.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:21.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:25.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:24.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:23.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:23.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:24.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:24.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:25.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:6.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:8.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:5.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:16.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.4.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:11.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:23.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:6.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:24.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:24.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:alpha1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:alpha3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:alpha2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.22</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.21</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.20</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.26</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.25</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.24</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.23</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:19.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:19.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:18.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:18.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:13.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.7.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.7.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.7.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:6.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:14.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:alpha_1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:9.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:alpha_3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:alpha_2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.28</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.27</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:rc2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:18.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:rc1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:rc1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:rc2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:9.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:21.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:17.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:17.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:17.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:17.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.19</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:17.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.18</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:17.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:17.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:17.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.25:-</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:6.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:6.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:12.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta10</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:13.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:25.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:14.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:7.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:8.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta9</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.19</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:7.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.18</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.7.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.7.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:17.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:16.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.20</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:15.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:15.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.6.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:9.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:6.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:16.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:16.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:24.1.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.9.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox_esr:24.1.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:28.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox_esr:24.1.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.19</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:13.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:12.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:20.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:15.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.20</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:19.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.22</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.21</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.24</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.9.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.23</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:24.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:11.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.19</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.18</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:15.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.10.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.9:rc</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.9.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.9.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.10.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:8.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:16.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:16.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:5.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:24.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:24.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox_esr:24.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0:preview_release</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox_esr:24.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:24.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:24.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:24.1.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox_esr:24.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:20.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:24.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox_esr:24.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.14:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.14:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.14:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.14:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.10:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:5.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.14:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.10:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.10:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:26.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:beta_2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:beta_1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.5:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.4:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:14.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.6:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.25:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.25:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.18</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.20:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.22:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.20:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.21:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.21:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.24:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.20:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.23:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.23:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.22:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.25:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.5:beta</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.21</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.20</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.19:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:23.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.18:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.17:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.18:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.18:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.19:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.17:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.6.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.17:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.17:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.18:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.9:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.9:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.9:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.6:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.5:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.4:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.6:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.5:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.5:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.9:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.6:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.4:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.2:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.2:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.19</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.2:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.22</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.23</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:27.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.7.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:25.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:12.0:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:27.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:7.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox_esr:24.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:12.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:11.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox_esr:24.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.17.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:13.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:9.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:10.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.26:rc1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.22.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:10.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:10.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:10.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:10.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.18</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.19</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:7.0</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-1523</vuln:cve-id>
    <vuln:published-datetime>2014-04-30T06:49:04.800-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-30T12:24:23.030-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-30T12:24:19.860-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-119"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=969226" xml:lang="en">https://bugzilla.mozilla.org/show_bug.cgi?id=969226</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.mozilla.org/security/announce/2014/mfsa2014-37.html" xml:lang="en">http://www.mozilla.org/security/announce/2014/mfsa2014-37.html</vuln:reference>
    </vuln:references>
    <vuln:summary>Heap-based buffer overflow in the read_u32 function in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted JPEG image.</vuln:summary>
  </entry>
  <entry id="CVE-2014-1524">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:28.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:27.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:27.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:26.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.10.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.6.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.7.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.9:rc"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.9.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.9.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.9.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0:preview_release"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.28"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.27"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.26"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.22"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.23"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.24"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.25"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:6.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:6.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:6.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:7.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:7.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:8.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:8.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:9.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:9.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:11.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:12.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:12.0:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:13.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:13.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:14.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:14.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:15.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:15.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:16.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:16.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:16.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:18.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:18.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:18.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:19.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:19.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:19.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:20.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:20.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:21.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:25.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:24.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:23.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:23.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:24.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:24.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:25.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.25:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.25:-"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.26:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.25:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.25:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.24"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.24:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.23"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.23:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.23:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.22"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.22.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.10.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.17.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.4.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.6.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.9.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:alpha_1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:alpha_2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:alpha_3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:beta_1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:beta_2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:alpha1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:alpha2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:alpha3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.10:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.10:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.10:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.14:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.14:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.14:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.14:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.14:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.17:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.17:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.17:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.17:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.18:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.18:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.18:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.18:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.19:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.19:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.2:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.2:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.2:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.20:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.20:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.20:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.21:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.21:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.22:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.22:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.4:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.4:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.4:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.5:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.5:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.5:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.5:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.6:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.6:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.6:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.6:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.9:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.9:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.9:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.9:beta4"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox_esr:24.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox_esr:24.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox_esr:24.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox_esr:24.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox_esr:24.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox_esr:24.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox_esr:24.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox_esr:24.1.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:24.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:24.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:24.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.7.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.7.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.7.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.5:beta"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.7.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.7.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:10.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:10.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:10.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:10.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:10.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:11.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:11.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:12.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:12.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:13.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:13.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:14.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:15.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:15.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:16.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:16.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:16.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:17.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:17.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:17.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:17.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:17.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:17.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:17.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:17.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:17.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.22"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.23"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:6.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:6.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:6.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:7.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:7.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:8.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:9.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:9.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:24.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:24.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:24.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:24.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:6.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:8.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:5.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:16.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.4.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:11.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:23.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:6.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:24.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:24.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:alpha1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:alpha3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:alpha2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.22</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.21</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.20</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.26</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.25</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.24</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.23</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:19.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:18.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:19.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:18.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.7.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:13.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.7.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.7.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:6.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:14.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:alpha_1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:9.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:alpha_3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:alpha_2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.28</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.27</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:rc2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:18.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:rc1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:rc1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:rc2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:9.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:21.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:17.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:17.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:17.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:17.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:17.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.19</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:17.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.18</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:17.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:17.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.25:-</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:6.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:6.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:12.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta10</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:13.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:25.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:14.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:7.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:8.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta9</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.19</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:7.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.18</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.7.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.7.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:17.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:16.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.20</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:15.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:15.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.6.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:9.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:6.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:16.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:16.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:24.1.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.9.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox_esr:24.1.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:28.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox_esr:24.1.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.19</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:13.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:12.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:20.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:15.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.20</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:19.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.22</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.21</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.9.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.24</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.23</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:24.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:11.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.19</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.18</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:15.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.10.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.9:rc</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.9.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.9.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.10.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:8.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:16.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:16.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:5.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:24.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:24.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox_esr:24.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0:preview_release</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:24.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox_esr:24.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:24.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:24.1.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox_esr:24.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:20.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:24.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox_esr:24.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.14:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.14:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.14:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.10:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.14:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:5.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.14:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.10:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.10:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:26.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:beta_2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:beta_1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.5:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.4:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:14.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.6:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.25:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.25:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.18</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.20:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.20:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.22:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.21:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.24:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.21:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.23:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.20:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.23:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.25:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.22:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.5:beta</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.21</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.20</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.19:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:23.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.17:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.18:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.18:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.18:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.17:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.19:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.6.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.17:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.17:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.18:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.9:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.9:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.6:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.9:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.4:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.5:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.5:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.6:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.5:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.4:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.6:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.9:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.2:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.2:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.19</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.2:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.22</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.23</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:27.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.7.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:25.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:12.0:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:27.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:7.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox_esr:24.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:12.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:11.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox_esr:24.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.17.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:13.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:9.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:10.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.26:rc1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.22.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:10.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:10.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:10.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:10.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.18</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.19</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:7.0</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-1524</vuln:cve-id>
    <vuln:published-datetime>2014-04-30T06:49:04.833-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-30T12:33:27.033-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-30T12:33:24.253-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-119"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=989183" xml:lang="en">https://bugzilla.mozilla.org/show_bug.cgi?id=989183</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.mozilla.org/security/announce/2014/mfsa2014-38.html" xml:lang="en">http://www.mozilla.org/security/announce/2014/mfsa2014-38.html</vuln:reference>
    </vuln:references>
    <vuln:summary>The nsXBLProtoImpl::InstallImplementation function in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 does not properly check whether objects are XBL objects, which allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow) via crafted JavaScript code that accesses a non-XBL object as if it were an XBL object.</vuln:summary>
  </entry>
  <entry id="CVE-2014-1525">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.25:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.25:-"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.26:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.25:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.25:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.24"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.24:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.23"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.23:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.23:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.22"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.22.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.10.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.17.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.4.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.6.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.9.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:alpha_1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:alpha_2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:alpha_3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:beta_1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:beta_2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:alpha1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:alpha2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:alpha3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.10:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.10:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.10:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.14:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.14:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.14:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.14:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.14:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.17:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.17:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.17:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.17:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.18:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.18:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.18:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.18:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.19:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.19:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.2:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.2:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.2:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.20:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.20:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.20:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.21:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.21:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.22:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.22:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.4:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.4:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.4:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.5:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.5:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.5:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.5:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.6:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.6:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.6:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.6:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.9:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.9:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.9:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.9:beta4"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:28.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:27.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:27.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:26.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.10.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.6.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.7.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.9:rc"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.9.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.9.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.9.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0:preview_release"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.28"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.27"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.26"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.22"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.23"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.24"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.25"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:6.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:6.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:6.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:7.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:7.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:8.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:8.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:9.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:9.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:11.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:12.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:12.0:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:13.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:13.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:14.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:14.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:15.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:15.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:16.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:16.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:16.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:18.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:18.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:18.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:19.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:19.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:19.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:20.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:20.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:21.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:25.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:24.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:23.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:23.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:24.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:24.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:25.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:mozilla:firefox:24.1.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:8.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:5.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.9.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.4.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:23.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:28.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:24.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:24.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:alpha1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.19</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:13.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:alpha3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:alpha2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:20.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.20</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:19.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.22</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.21</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.24</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.9.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.23</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.22</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.21</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.20</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.26</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.25</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.24</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.23</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:19.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:19.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:18.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:18.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:13.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:6.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:14.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:alpha_1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:9.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:alpha_3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:alpha_2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.19</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.28</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.27</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.18</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:rc2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:18.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:15.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.10.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:rc1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:rc2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:rc1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:9.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:21.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.9:rc</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.9.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.9.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.10.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:8.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:5.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0:preview_release</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:20.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.19</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.18</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.14:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.14:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.25:-</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.14:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.10:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.14:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:6.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:6.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.14:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.10:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.10:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:26.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:beta_2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:beta_1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.5:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta10</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.4:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:14.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.6:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.25:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.25:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.20:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.20:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.22:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.21:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.24:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.21:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.23:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.20:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.23:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.25:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.22:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:25.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.19:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:23.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.17:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.18:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.18:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.18:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.17:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.19:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.6.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.17:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.17:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.18:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.9:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.9:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta7</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.6:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.9:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.4:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.5:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.5:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.6:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.5:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.4:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.6:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.9:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.2:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.2:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.2:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta9</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:27.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.7.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:25.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.19</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:12.0:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:7.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:27.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.18</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:12.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:11.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.17.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:16.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.20</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:15.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.6.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.26:rc1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.22.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:16.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:16.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.18</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.19</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:7.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.6</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-1525</vuln:cve-id>
    <vuln:published-datetime>2014-04-30T06:49:04.863-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-30T12:39:27.297-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-30T12:39:22.030-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-399"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=989210" xml:lang="en">https://bugzilla.mozilla.org/show_bug.cgi?id=989210</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.mozilla.org/security/announce/2014/mfsa2014-39.html" xml:lang="en">http://www.mozilla.org/security/announce/2014/mfsa2014-39.html</vuln:reference>
    </vuln:references>
    <vuln:summary>The mozilla::dom::TextTrack::AddCue function in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 does not properly perform garbage collection for Text Track Manager variables, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and heap memory corruption) via a crafted VIDEO element in an HTML document.</vuln:summary>
  </entry>
  <entry id="CVE-2014-1526">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.25:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.25:-"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.26:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.25:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.25:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.24"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.24:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.23"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.23:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.23:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.22"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.22.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.10.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.17.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.4.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.6.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.9.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:alpha_1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:alpha_2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:alpha_3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:beta_1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:beta_2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:alpha1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:alpha2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:alpha3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.10:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.10:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.10:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.14:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.14:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.14:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.14:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.14:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.17:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.17:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.17:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.17:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.18:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.18:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.18:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.18:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.19:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.19:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.2:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.2:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.2:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.20:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.20:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.20:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.21:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.21:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.22:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.22:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.4:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.4:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.4:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.5:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.5:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.5:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.5:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.6:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.6:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.6:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.6:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.9:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.9:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.9:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.9:beta4"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:28.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:27.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:27.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:26.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.10.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.6.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.7.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.9:rc"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.9.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.9.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.9.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0:preview_release"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.28"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.27"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.26"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.22"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.23"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.24"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.25"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:6.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:6.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:6.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:7.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:7.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:8.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:8.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:9.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:9.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:11.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:12.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:12.0:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:13.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:13.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:14.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:14.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:15.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:15.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:16.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:16.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:16.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:18.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:18.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:18.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:19.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:19.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:19.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:20.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:20.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:21.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:25.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:24.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:23.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:23.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:24.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:24.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:25.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:mozilla:firefox:24.1.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:8.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:5.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.9.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.4.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:23.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:28.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:24.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:24.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:alpha1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.19</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:13.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:alpha3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:alpha2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:20.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.20</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:19.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.22</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.21</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.24</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.9.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.23</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.22</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.21</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.20</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.26</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.25</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.24</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.23</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:19.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:19.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:18.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:18.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:13.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:6.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:14.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:alpha_1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:9.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:alpha_3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:alpha_2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.19</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.28</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.27</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.18</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:rc2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:18.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:15.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.10.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:rc1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:rc2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:rc1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:9.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:21.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.9:rc</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.9.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.9.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.10.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:8.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:5.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0:preview_release</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:20.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.19</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.18</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.14:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.14:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.25:-</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.14:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.10:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.14:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:6.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:6.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.14:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.10:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.10:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:26.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:beta_2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:beta_1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.5:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta10</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.4:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:14.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.6:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.25:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.25:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.20:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.20:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.22:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.21:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.24:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.21:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.23:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.20:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.23:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.25:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.22:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:25.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.19:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:23.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.17:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.18:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.18:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.18:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.17:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.19:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.6.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.17:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.17:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.18:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.9:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.9:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta7</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.6:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.9:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.4:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.5:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.5:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.6:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.5:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.4:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.6:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.9:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.2:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.2:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.2:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta9</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:27.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.7.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:25.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.19</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:12.0:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:7.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:27.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.18</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:12.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:11.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.17.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:16.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.20</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:15.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.6.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.26:rc1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.22.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:16.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:16.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.18</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.19</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:7.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.6</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-1526</vuln:cve-id>
    <vuln:published-datetime>2014-04-30T06:49:04.880-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-30T12:56:20.300-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-30T12:56:17.970-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-264"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=988106" xml:lang="en">https://bugzilla.mozilla.org/show_bug.cgi?id=988106</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.mozilla.org/security/announce/2014/mfsa2014-47.html" xml:lang="en">http://www.mozilla.org/security/announce/2014/mfsa2014-47.html</vuln:reference>
    </vuln:references>
    <vuln:summary>The XrayWrapper implementation in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 allows user-assisted remote attackers to bypass intended access restrictions via a crafted web site that is visited in the debugger, leading to unwrapping operations and calls to DOM methods on the unwrapped objects.</vuln:summary>
  </entry>
  <entry id="CVE-2014-1527">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="AND">
        <cpe-lang:logical-test negate="false" operator="OR">
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:28.0"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:27.0.1"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:27.0"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:26.0"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.1"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.10"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.10.1"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.2"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.3"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.4"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.5"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.6"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.6.1"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.7"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.7.1"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.8"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.9"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.9:rc"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.9.1"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.9.2"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.9.3"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0:preview_release"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.1"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.2"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.3"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.4"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.5"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.6"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.7"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.8"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5:beta1"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5:beta2"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.1"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.10"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.11"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.12"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.2"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.3"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.4"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.5"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.6"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.7"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.8"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.9"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.1"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.2"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.3"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.4"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.5"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.6"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.7"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.8"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.1"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.10"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.11"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.12"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.13"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.14"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.15"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.16"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.17"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.18"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.19"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.2"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.20"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.3"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.4"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.5"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.6"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.7"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.8"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.9"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.19"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.18"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.1"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.10"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.11"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.12"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.13"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.14"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.15"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.16"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.17"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.2"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.3"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.4"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.5"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.6"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.7"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.8"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.9"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.16"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.17"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.18"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.19"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.1"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.10"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.11"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.12"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.13"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.14"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.15"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.2"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.3"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.4"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.5"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.6"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.7"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.8"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.9"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.28"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.27"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.26"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.10"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.11"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.12"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.13"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.14"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.15"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.16"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.17"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.18"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.19"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.2"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.20"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.21"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.22"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.23"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.24"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.25"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.3"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.4"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.6"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.7"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.8"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.9"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0.1"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta9"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta8"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta7"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta6"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta5"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta4"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta3"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta2"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta12"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta11"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta10"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta1"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:5.0.1"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:5.0"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:6.0"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:6.0.1"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:6.0.2"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:7.0.1"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:7.0"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:8.0.1"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:8.0"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:9.0.1"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:9.0"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.1"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.2"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.12"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.11"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.10"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.9"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.8"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.7"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.6"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.5"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.4"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.3"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:11.0"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:12.0"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:12.0:beta6"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:13.0.1"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:13.0"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:14.0"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:14.0.1"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:15.0"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:15.0.1"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:16.0"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:16.0.1"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:16.0.2"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.11"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.10"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.9"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.8"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.7"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.6"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.5"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.4"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.3"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.2"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:18.0.2"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:18.0.1"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:18.0"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:19.0.2"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:19.0.1"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:19.0"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:20.0.1"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:20.0"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:21.0"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:25.0.1"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:24.1.1"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:23.0.1"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:23.0"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:24.1"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:24.0"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:25.0"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test negate="false" operator="OR">
          <cpe-lang:fact-ref name="cpe:/o:google:android"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:mozilla:firefox:24.1.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:8.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:5.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:23.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:28.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:24.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:24.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:13.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:20.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:19.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.9.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.22</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.21</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.20</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.26</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.25</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.24</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.23</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:19.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:19.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:18.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:18.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:13.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:6.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:14.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:9.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.19</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.28</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.27</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.18</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:18.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:15.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:9.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:21.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.9.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.9:rc</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.9.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.10.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:8.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:5.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0:preview_release</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:20.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.19</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.18</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:6.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:6.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:26.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:14.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:25.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:23.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:27.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.7.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:25.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.19</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:12.0:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:7.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:27.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.18</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:12.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:11.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:16.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.20</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:15.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.6.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:16.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:16.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.18</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.19</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:7.0</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-1527</vuln:cve-id>
    <vuln:published-datetime>2014-04-30T06:49:04.910-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-30T13:01:15.387-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-30T13:01:13.310-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=960146" xml:lang="en">https://bugzilla.mozilla.org/show_bug.cgi?id=960146</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.mozilla.org/security/announce/2014/mfsa2014-40.html" xml:lang="en">http://www.mozilla.org/security/announce/2014/mfsa2014-40.html</vuln:reference>
    </vuln:references>
    <vuln:summary>Mozilla Firefox before 29.0 on Android allows remote attackers to spoof the address bar via crafted JavaScript code that uses DOM events to prevent the reemergence of the actual address bar after scrolling has taken it off of the screen.</vuln:summary>
  </entry>
  <entry id="CVE-2014-1528">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="AND">
        <cpe-lang:logical-test negate="false" operator="OR">
          <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.25:-"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:28.0"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test negate="false" operator="OR">
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:mozilla:firefox:28.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.25:-</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-1528</vuln:cve-id>
    <vuln:published-datetime>2014-04-30T06:49:04.943-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-30T13:07:51.433-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-30T13:07:51.277-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-119"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=963962" xml:lang="en">https://bugzilla.mozilla.org/show_bug.cgi?id=963962</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.mozilla.org/security/announce/2014/mfsa2014-41.html" xml:lang="en">http://www.mozilla.org/security/announce/2014/mfsa2014-41.html</vuln:reference>
    </vuln:references>
    <vuln:summary>The sse2_composite_src_x888_8888 function in Pixman, as used in Cairo in Mozilla Firefox 28.0 and SeaMonkey 2.25 on Windows, allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds write and application crash) by painting on a CANVAS element.</vuln:summary>
  </entry>
  <entry id="CVE-2014-1529">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:28.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:27.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:27.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:26.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.10.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.6.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.7.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.9:rc"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.9.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.9.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.9.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0:preview_release"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.28"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.27"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.26"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.22"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.23"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.24"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.25"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:6.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:6.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:6.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:7.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:7.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:8.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:8.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:9.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:9.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:11.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:12.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:12.0:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:13.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:13.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:14.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:14.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:15.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:15.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:16.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:16.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:16.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:18.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:18.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:18.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:19.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:19.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:19.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:20.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:20.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:21.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:25.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:24.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:23.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:23.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:24.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:24.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:25.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.25:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.25:-"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.26:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.25:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.25:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.24"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.24:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.23"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.23:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.23:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.22"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.22.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.10.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.17.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.4.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.6.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.9.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:alpha_1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:alpha_2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:alpha_3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:beta_1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:beta_2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:alpha1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:alpha2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:alpha3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.10:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.10:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.10:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.14:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.14:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.14:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.14:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.14:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.17:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.17:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.17:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.17:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.18:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.18:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.18:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.18:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.19:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.19:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.2:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.2:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.2:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.20:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.20:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.20:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.21:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.21:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.22:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.22:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.4:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.4:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.4:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.5:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.5:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.5:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.5:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.6:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.6:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.6:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.6:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.9:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.9:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.9:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.9:beta4"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:24.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:24.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:24.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.7.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.7.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.7.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.5:beta"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.7.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.7.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:10.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:10.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:10.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:10.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:10.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:11.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:11.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:12.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:12.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:13.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:13.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:14.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:15.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:15.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:16.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:16.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:16.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:17.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:17.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:17.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:17.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:17.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:17.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:17.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:17.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:17.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.22"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.23"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:6.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:6.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:6.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:7.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:7.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:8.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:9.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:9.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:24.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:24.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:24.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:24.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox_esr:24.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox_esr:24.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox_esr:24.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox_esr:24.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox_esr:24.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox_esr:24.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox_esr:24.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox_esr:24.1.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:6.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:8.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:5.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:16.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.4.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:11.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:23.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:6.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:24.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:24.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:alpha1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:alpha3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:alpha2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.22</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.21</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.20</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.26</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.25</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.24</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.23</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:19.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:18.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:19.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:18.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.7.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:13.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.7.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.7.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:6.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:14.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:alpha_1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:9.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:alpha_3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:alpha_2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.28</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.27</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:rc2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:18.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:rc1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:rc1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:rc2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:9.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:21.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:17.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:17.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:17.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:17.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:17.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.19</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:17.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.18</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:17.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:17.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.25:-</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:6.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:6.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:12.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta10</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:13.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:25.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:14.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:7.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:8.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta9</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.19</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:7.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.18</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.7.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.7.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:17.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:16.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.20</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:15.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:15.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.6.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:9.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:6.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:16.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:16.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:24.1.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.9.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox_esr:24.1.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:28.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox_esr:24.1.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.19</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:13.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:12.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:20.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:15.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.20</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:19.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.22</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.21</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.9.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.24</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.23</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:24.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:11.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.19</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.18</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:15.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.10.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.9:rc</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.9.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.9.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.10.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:8.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:16.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:16.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:5.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:24.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox_esr:24.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:24.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0:preview_release</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox_esr:24.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:24.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:24.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:24.1.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox_esr:24.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:20.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:24.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox_esr:24.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.14:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.14:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.14:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.10:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.14:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:5.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.14:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.10:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.10:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:26.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:beta_2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:beta_1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.5:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.4:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:14.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.6:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.25:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.25:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.18</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.20:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.20:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.22:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.21:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.24:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.21:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.23:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.20:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.23:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.25:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.22:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.5:beta</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.21</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.20</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.19:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:23.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.17:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.18:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.18:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.18:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.17:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.19:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.6.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.17:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.17:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.18:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.9:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.9:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.6:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.9:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.4:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.5:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.5:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.6:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.5:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.4:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.6:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.9:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.2:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.2:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.19</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.2:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.22</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.23</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:27.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.7.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:25.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:12.0:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:27.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:7.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox_esr:24.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:12.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:11.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox_esr:24.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.17.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:13.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:9.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:10.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.26:rc1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.22.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:10.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:10.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:10.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:10.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.18</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.19</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:7.0</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-1529</vuln:cve-id>
    <vuln:published-datetime>2014-04-30T06:49:04.973-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-30T13:12:49.910-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-30T13:12:46.863-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-264"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=987003" xml:lang="en">https://bugzilla.mozilla.org/show_bug.cgi?id=987003</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.mozilla.org/security/announce/2014/mfsa2014-42.html" xml:lang="en">http://www.mozilla.org/security/announce/2014/mfsa2014-42.html</vuln:reference>
    </vuln:references>
    <vuln:summary>The Web Notification API in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to bypass intended source-component restrictions and execute arbitrary JavaScript code in a privileged context via a crafted web page for which Notification.permission is granted.</vuln:summary>
  </entry>
  <entry id="CVE-2014-1530">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:28.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:27.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:27.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:26.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.10.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.6.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.7.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.9:rc"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.9.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.9.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.9.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0:preview_release"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.28"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.27"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.26"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.22"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.23"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.24"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.25"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:6.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:6.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:6.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:7.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:7.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:8.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:8.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:9.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:9.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:11.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:12.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:12.0:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:13.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:13.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:14.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:14.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:15.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:15.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:16.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:16.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:16.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:18.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:18.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:18.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:19.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:19.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:19.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:20.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:20.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:21.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:25.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:24.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:23.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:23.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:24.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:24.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:25.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:24.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:24.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:24.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.7.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.7.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.7.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.5:beta"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.7.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.7.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:10.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:10.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:10.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:10.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:10.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:11.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:11.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:12.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:12.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:13.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:13.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:14.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:15.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:15.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:16.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:16.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:16.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:17.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:17.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:17.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:17.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:17.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:17.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:17.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:17.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:17.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.22"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.23"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:6.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:6.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:6.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:7.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:7.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:8.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:9.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:9.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:24.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:24.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:24.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:24.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.25:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.25:-"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.26:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.25:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.25:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.24"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.24:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.23"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.23:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.23:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.22"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.22.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.10.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.17.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.4.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.6.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.9.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:alpha_1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:alpha_2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:alpha_3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:beta_1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:beta_2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:alpha1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:alpha2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:alpha3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.10:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.10:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.10:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.14:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.14:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.14:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.14:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.14:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.17:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.17:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.17:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.17:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.18:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.18:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.18:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.18:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.19:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.19:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.2:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.2:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.2:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.20:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.20:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.20:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.21:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.21:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.22:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.22:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.4:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.4:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.4:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.5:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.5:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.5:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.5:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.6:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.6:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.6:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.6:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.9:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.9:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.9:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.9:beta4"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox_esr:24.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox_esr:24.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox_esr:24.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox_esr:24.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox_esr:24.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox_esr:24.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox_esr:24.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox_esr:24.1.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:6.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:8.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:5.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:16.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.4.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:11.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:23.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:6.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:24.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:24.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:alpha1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:alpha3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:alpha2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.22</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.21</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.20</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.26</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.25</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.24</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.23</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:19.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:18.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:19.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:18.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:13.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.7.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.7.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.7.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:6.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:14.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:alpha_1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:alpha_3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:9.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:alpha_2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.28</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.27</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:rc2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:18.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:rc1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:rc2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:rc1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:9.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:21.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:17.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:17.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:17.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:17.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.19</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:17.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.18</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:17.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:17.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:17.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.25:-</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:6.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:6.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:12.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta10</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:13.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:25.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:14.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:7.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:8.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta9</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.19</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:7.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.18</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.7.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.7.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:17.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:16.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.20</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:15.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:15.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.6.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:9.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:6.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:16.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:16.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:24.1.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.9.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox_esr:24.1.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:28.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox_esr:24.1.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.19</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:13.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:12.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:20.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:15.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.20</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:19.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.22</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.21</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.9.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.24</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.23</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:24.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:11.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.19</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.18</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:15.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.10.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.9:rc</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.9.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.9.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.10.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:8.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:16.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:16.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:5.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:24.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox_esr:24.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0:preview_release</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:24.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox_esr:24.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:24.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:24.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:24.1.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox_esr:24.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:20.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:24.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox_esr:24.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.14:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.14:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.14:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.14:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.10:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:5.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.14:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.10:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.10:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:26.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:beta_2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:beta_1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.5:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.4:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.6:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:14.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.25:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.25:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.18</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.20:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.22:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.20:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.21:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.21:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.24:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.20:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.23:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.23:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.22:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.25:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.5:beta</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.21</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.20</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.19:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:23.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.18:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.17:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.18:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.18:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.19:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.17:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.6.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.17:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.17:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.18:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.9:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.9:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.9:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.6:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.5:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.4:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.6:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.5:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.5:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.9:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.6:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.4:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.2:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.2:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.19</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.2:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.22</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.23</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:27.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.7.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:25.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:12.0:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:27.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:7.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox_esr:24.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:12.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:11.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox_esr:24.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.17.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:13.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:9.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:10.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.26:rc1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.22.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:10.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:10.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:10.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:10.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.18</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.19</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:7.0</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-1530</vuln:cve-id>
    <vuln:published-datetime>2014-04-30T06:49:05.003-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-30T13:19:08.407-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-30T13:19:05.297-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=895557" xml:lang="en">https://bugzilla.mozilla.org/show_bug.cgi?id=895557</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.mozilla.org/security/announce/2014/mfsa2014-43.html" xml:lang="en">http://www.mozilla.org/security/announce/2014/mfsa2014-43.html</vuln:reference>
    </vuln:references>
    <vuln:summary>The docshell implementation in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to trigger the loading of a URL with a spoofed baseURI property, and conduct cross-site scripting (XSS) attacks, via a crafted web site that performs history navigation.</vuln:summary>
  </entry>
  <entry id="CVE-2014-1531">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox_esr:24.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox_esr:24.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox_esr:24.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox_esr:24.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox_esr:24.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox_esr:24.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox_esr:24.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox_esr:24.1.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:24.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:24.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:24.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.7.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.7.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.7.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.5:beta"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.7.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.7.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:10.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:10.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:10.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:10.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:10.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:11.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:11.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:12.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:12.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:13.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:13.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:14.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:15.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:15.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:16.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:16.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:16.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:17.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:17.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:17.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:17.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:17.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:17.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:17.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:17.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:17.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.22"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.23"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:6.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:6.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:6.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:7.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:7.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:8.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:9.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:9.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:24.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:24.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:24.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:24.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:28.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:27.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:27.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:26.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.10.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.6.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.7.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.9:rc"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.9.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.9.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.9.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0:preview_release"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.28"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.27"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.26"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.22"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.23"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.24"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.25"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:6.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:6.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:6.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:7.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:7.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:8.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:8.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:9.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:9.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:11.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:12.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:12.0:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:13.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:13.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:14.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:14.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:15.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:15.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:16.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:16.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:16.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:18.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:18.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:18.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:19.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:19.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:19.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:20.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:20.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:21.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:25.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:24.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:23.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:23.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:24.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:24.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:25.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.25:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.25:-"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.26:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.25:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.25:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.24"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.24:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.23"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.23:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.23:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.22"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.22.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.10.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.17.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.4.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.6.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.9.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:alpha_1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:alpha_2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:alpha_3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:beta_1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:beta_2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:alpha1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:alpha2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:alpha3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.10:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.10:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.10:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.14:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.14:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.14:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.14:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.14:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.17:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.17:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.17:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.17:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.18:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.18:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.18:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.18:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.19:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.19:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.2:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.2:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.2:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.20:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.20:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.20:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.21:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.21:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.22:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.22:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.4:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.4:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.4:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.5:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.5:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.5:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.5:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.6:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.6:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.6:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.6:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.9:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.9:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.9:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.9:beta4"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:6.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:8.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:5.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:16.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.4.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:11.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:23.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:6.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:24.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:24.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:alpha1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:alpha3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:alpha2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.22</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.21</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.20</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.26</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.25</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.24</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.23</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:19.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:18.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:19.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:18.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.7.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:13.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.7.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.7.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:6.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:14.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:alpha_1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:alpha_3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:9.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:alpha_2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.28</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.27</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:rc2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:18.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:rc1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:rc2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:rc1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:9.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:21.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:17.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:17.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:17.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:17.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:17.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.19</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:17.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.18</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:17.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:17.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.25:-</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:6.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:6.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:12.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta10</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:13.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:25.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:14.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:7.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:8.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta9</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.19</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:7.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.18</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.7.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.7.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:17.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:16.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.20</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:15.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:15.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.6.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:9.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:6.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:16.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:16.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:24.1.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.9.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox_esr:24.1.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:28.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox_esr:24.1.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.19</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:13.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:12.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:20.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:15.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.20</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:19.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.22</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.21</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.9.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.24</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.23</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:24.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:11.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.19</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.18</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:15.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.10.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.9.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.9:rc</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.9.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.10.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:8.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:16.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:16.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:5.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:24.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0:preview_release</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:24.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox_esr:24.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:24.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox_esr:24.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:24.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:24.1.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox_esr:24.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:20.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:24.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox_esr:24.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.14:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.14:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.14:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.14:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.10:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:5.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.14:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.10:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.10:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:26.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:beta_2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:beta_1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.5:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.4:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.6:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:14.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.25:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.25:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.18</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.20:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.22:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.20:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.21:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.21:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.24:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.20:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.23:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.23:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.22:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.25:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.5:beta</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.21</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.20</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.19:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:23.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.18:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.17:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.18:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.18:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.19:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.17:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.6.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.17:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.17:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.18:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.9:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.9:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.9:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.6:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.5:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.4:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.6:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.5:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.5:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.9:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.6:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.4:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.2:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.2:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.19</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.2:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.22</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.23</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:27.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.7.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:25.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:12.0:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:27.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:7.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox_esr:24.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:12.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:11.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox_esr:24.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.17.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:13.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:9.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:10.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.26:rc1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.22.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:10.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:10.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:10.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:10.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.18</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.19</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:7.0</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-1531</vuln:cve-id>
    <vuln:published-datetime>2014-04-30T06:49:05.037-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-30T13:44:36.193-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-30T13:44:32.600-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-399"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=987140" xml:lang="en">https://bugzilla.mozilla.org/show_bug.cgi?id=987140</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.mozilla.org/security/announce/2014/mfsa2014-44.html" xml:lang="en">http://www.mozilla.org/security/announce/2014/mfsa2014-44.html</vuln:reference>
    </vuln:references>
    <vuln:summary>Use-after-free vulnerability in the nsGenericHTMLElement::GetWidthHeightForImage function in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors involving an imgLoader object that is not properly handled during an image-resize operation.</vuln:summary>
  </entry>
  <entry id="CVE-2014-1532">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:28.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:27.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:27.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:26.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.10.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.6.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.7.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.9:rc"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.9.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.9.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.9.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0:preview_release"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.5.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.28"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.27"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.26"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.22"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.23"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.24"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.25"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:3.6.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:4.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:6.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:6.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:6.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:7.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:7.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:8.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:8.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:9.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:9.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:10.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:11.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:12.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:12.0:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:13.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:13.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:14.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:14.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:15.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:15.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:16.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:16.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:16.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:17.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:18.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:18.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:18.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:19.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:19.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:19.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:20.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:20.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:21.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:25.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:24.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:23.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:23.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:24.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:24.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:25.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox_esr:24.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox_esr:24.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox_esr:24.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox_esr:24.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox_esr:24.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox_esr:24.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox_esr:24.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox_esr:24.1.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.25:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.25:-"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.26:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.25:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.25:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.24"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.24:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.23"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.23:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.23:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.22"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.22.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.10.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.17.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.4.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.6.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.9.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:alpha_1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:alpha_2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:alpha_3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:beta_1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:beta_2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.0:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:alpha1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:alpha2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:alpha3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.1:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.10:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.10:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.10:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.11:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.12:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.13:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.14:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.14:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.14:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.14:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.14:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.15:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.16:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.17:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.17:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.17:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.17:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.18:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.18:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.18:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.18:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.19:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.19:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.2:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.2:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.2:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.20:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.20:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.20:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.21:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.21:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.22:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.22:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.3:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.4:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.4:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.4:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.5:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.5:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.5:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.5:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.6:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.6:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.6:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.6:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.7:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.8:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.9:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.9:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.9:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.9:beta4"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:24.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:24.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:24.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.7.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.7.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.7.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.5:beta"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.7.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.7.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:10.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:10.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:10.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:10.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:10.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:11.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:11.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:12.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:12.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:13.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:13.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:14.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:15.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:15.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:16.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:16.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:16.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:17.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:17.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:17.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:17.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:17.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:17.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:17.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:17.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:17.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.22"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.23"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:3.1.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:6.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:6.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:6.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:7.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:7.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:8.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:9.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:9.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:24.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:24.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:24.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:24.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:6.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:8.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:5.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:16.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.4.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:11.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:23.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:6.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:17.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:24.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:24.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:alpha1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:alpha3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:alpha2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.22</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.21</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.20</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.26</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.25</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.24</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.23</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:19.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:18.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:19.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:18.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.7.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:13.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.7.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.7.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:6.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:14.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:alpha_1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:9.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:alpha_3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:alpha_2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.28</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.27</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:rc2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:18.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:rc1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:rc1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:rc2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:9.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:21.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:17.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:17.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:17.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:17.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:17.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.19</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:17.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.18</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:17.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:17.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.25:-</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:6.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:6.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:12.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta10</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:13.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:25.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:14.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:7.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:8.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0:beta9</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.19</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:7.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.18</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.7.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.7.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:17.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:16.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.20</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:15.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:15.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.6.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:9.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:6.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:16.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:16.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.6.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:24.1.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.9.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox_esr:24.1.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:28.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox_esr:24.1.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.19</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:13.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:12.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:20.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:15.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.20</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:19.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.22</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.21</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.9.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.24</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.23</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:24.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:11.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.19</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.5.18</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:15.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.10.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.9:rc</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.9.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.9.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.10.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:8.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:16.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:16.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:5.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:24.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:24.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0:preview_release</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox_esr:24.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:24.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox_esr:24.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:24.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:24.1.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox_esr:24.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:20.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:24.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox_esr:24.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.14:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.14:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.14:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.10:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.14:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:5.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.14:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.10:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.10:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.12:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.13:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:26.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:beta_2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.0:beta_1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.5:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.4:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:14.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.6:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.25:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.25:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.18</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.17</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.16</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.15</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.20:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.20:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.22:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.21:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.24:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.21:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.23:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.20:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.23:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.25:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.22:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.11:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.5:beta</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.21</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.20</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.19:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:23.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.17:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.18:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.18:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.18:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.17:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.19:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.6.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.17:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.17:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.18:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.16:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.15:beta5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.9:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.9:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.9:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.6:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.4:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.5:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.7:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.5:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.6:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.8:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.5:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.9:beta4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.4:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.6:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.2:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.1:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.2:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:3.1.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.19</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.2:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.3:beta3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.22</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.23</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:27.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.7.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:25.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:12.0:beta6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:27.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.13</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:7.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.14</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox_esr:24.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:12.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:10.0.12</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:11.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox_esr:24.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.17.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:13.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:9.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:10.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.26:rc1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.22.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:4.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:10.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:10.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:10.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:10.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.18</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:3.0.19</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:7.0</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-1532</vuln:cve-id>
    <vuln:published-datetime>2014-04-30T06:49:05.067-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-30T13:51:29.847-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-30T13:51:26.927-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-399"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=966006" xml:lang="en">https://bugzilla.mozilla.org/show_bug.cgi?id=966006</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.mozilla.org/security/announce/2014/mfsa2014-46.html" xml:lang="en">http://www.mozilla.org/security/announce/2014/mfsa2014-46.html</vuln:reference>
    </vuln:references>
    <vuln:summary>Use-after-free vulnerability in the nsHostResolver::ConditionallyRefreshRecord function in libxul.so in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors related to host resolution.</vuln:summary>
  </entry>
  <entry id="CVE-2014-1730">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="AND">
        <cpe-lang:logical-test negate="false" operator="OR">
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.1"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.10"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.100"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.101"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.102"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.103"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.104"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.109"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.111"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.112"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.113"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.114"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.115"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.116"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.118"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.12"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.120"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.14"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.15"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.2"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.23"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.24"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.25"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.3"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.36"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.37"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.38"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.39"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.4"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.41"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.42"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.43"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.44"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.45"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.46"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.47"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.48"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.49"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.5"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.50"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.51"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.52"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.53"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.54"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.55"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.56"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.57"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.58"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.59"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.6"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.60"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.61"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.62"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.63"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.64"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.65"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.66"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.67"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.68"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.69"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.7"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.71"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.72"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.73"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.74"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.75"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.76"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.77"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.78"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.79"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.8"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.80"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.81"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.82"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.83"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.85"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.86"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.87"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.9"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.91"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.92"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.94"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.97"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.98"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.99"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.130"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test negate="false" operator="OR">
          <cpe-lang:fact-ref name="cpe:/o:apple:mac_os_x"/>
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="AND">
        <cpe-lang:logical-test negate="false" operator="OR">
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.1"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.10"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.100"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.101"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.102"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.103"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.104"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.109"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.111"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.112"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.113"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.114"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.115"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.116"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.118"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.12"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.120"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.14"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.15"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.2"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.23"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.24"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.25"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.3"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.36"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.37"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.38"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.39"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.4"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.41"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.42"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.43"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.44"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.45"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.46"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.47"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.48"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.49"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.5"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.50"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.51"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.52"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.53"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.54"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.55"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.56"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.57"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.58"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.59"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.6"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.60"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.61"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.62"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.63"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.64"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.65"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.66"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.67"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.68"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.69"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.7"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.71"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.72"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.73"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.74"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.75"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.76"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.77"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.78"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.79"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.8"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.80"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.81"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.82"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.83"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.85"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.86"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.87"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.9"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.91"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.92"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.94"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.97"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.98"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.99"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.131"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.130"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test negate="false" operator="OR">
          <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:google:chrome:34.0.1847.131</vuln:product>
      <vuln:product>cpe:/a:google:chrome:34.0.1847.130</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-1730</vuln:cve-id>
    <vuln:published-datetime>2014-04-26T06:55:05.433-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-28T10:29:20.927-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-28T10:29:19.757-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-264"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://code.google.com/p/v8/source/detail?r=20595" xml:lang="en">https://code.google.com/p/v8/source/detail?r=20595</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://code.google.com/p/v8/source/detail?r=20593" xml:lang="en">https://code.google.com/p/v8/source/detail?r=20593</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://code.google.com/p/v8/source/detail?r=20388" xml:lang="en">https://code.google.com/p/v8/source/detail?r=20388</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://code.google.com/p/v8/source/detail?r=20377" xml:lang="en">https://code.google.com/p/v8/source/detail?r=20377</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://code.google.com/p/v8/source/detail?r=20375" xml:lang="en">https://code.google.com/p/v8/source/detail?r=20375</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://code.google.com/p/chromium/issues/detail?id=354967" xml:lang="en">https://code.google.com/p/chromium/issues/detail?id=354967</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://googlechromereleases.blogspot.com/2014/04/stable-channel-update_24.html" xml:lang="en">http://googlechromereleases.blogspot.com/2014/04/stable-channel-update_24.html</vuln:reference>
    </vuln:references>
    <vuln:summary>Google V8, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, does not properly store internationalization metadata, which allows remote attackers to bypass intended access restrictions by leveraging "type confusion" and reading property values, related to i18n.js and runtime.cc.</vuln:summary>
  </entry>
  <entry id="CVE-2014-1731">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="AND">
        <cpe-lang:logical-test negate="false" operator="OR">
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.1"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.10"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.100"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.101"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.102"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.103"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.104"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.109"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.111"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.112"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.113"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.114"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.115"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.116"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.118"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.12"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.120"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.14"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.15"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.2"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.23"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.24"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.25"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.3"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.36"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.37"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.38"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.39"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.4"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.41"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.42"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.43"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.44"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.45"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.46"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.47"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.48"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.49"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.5"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.50"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.51"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.52"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.53"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.54"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.55"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.56"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.57"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.58"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.59"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.6"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.60"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.61"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.62"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.63"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.64"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.65"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.66"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.67"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.68"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.69"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.7"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.71"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.72"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.73"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.74"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.75"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.76"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.77"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.78"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.79"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.8"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.80"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.81"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.82"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.83"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.85"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.86"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.87"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.9"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.91"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.92"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.94"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.97"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.98"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.99"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.130"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test negate="false" operator="OR">
          <cpe-lang:fact-ref name="cpe:/o:apple:mac_os_x"/>
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="AND">
        <cpe-lang:logical-test negate="false" operator="OR">
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.1"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.10"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.100"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.101"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.102"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.103"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.104"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.109"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.111"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.112"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.113"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.114"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.115"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.116"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.118"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.12"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.120"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.14"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.15"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.2"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.23"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.24"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.25"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.3"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.36"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.37"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.38"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.39"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.4"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.41"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.42"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.43"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.44"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.45"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.46"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.47"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.48"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.49"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.5"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.50"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.51"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.52"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.53"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.54"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.55"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.56"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.57"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.58"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.59"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.6"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.60"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.61"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.62"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.63"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.64"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.65"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.66"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.67"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.68"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.69"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.7"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.71"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.72"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.73"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.74"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.75"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.76"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.77"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.78"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.79"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.8"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.80"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.81"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.82"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.83"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.85"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.86"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.87"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.9"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.91"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.92"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.94"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.97"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.98"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.99"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.131"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.130"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test negate="false" operator="OR">
          <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:google:chrome:34.0.1847.131</vuln:product>
      <vuln:product>cpe:/a:google:chrome:34.0.1847.130</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-1731</vuln:cve-id>
    <vuln:published-datetime>2014-04-26T06:55:05.480-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-28T10:31:52.497-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-28T10:31:51.403-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-20"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://src.chromium.org/viewvc/blink?revision=171216&amp;view=revision" xml:lang="en">https://src.chromium.org/viewvc/blink?revision=171216&amp;view=revision</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://code.google.com/p/chromium/issues/detail?id=349903" xml:lang="en">https://code.google.com/p/chromium/issues/detail?id=349903</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://googlechromereleases.blogspot.com/2014/04/stable-channel-update_24.html" xml:lang="en">http://googlechromereleases.blogspot.com/2014/04/stable-channel-update_24.html</vuln:reference>
    </vuln:references>
    <vuln:summary>core/html/HTMLSelectElement.cpp in the DOM implementation in Blink, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, does not properly check renderer state upon a focus event, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that leverage "type confusion" for SELECT elements.</vuln:summary>
  </entry>
  <entry id="CVE-2014-1732">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="AND">
        <cpe-lang:logical-test negate="false" operator="OR">
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.1"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.10"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.100"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.101"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.102"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.103"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.104"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.109"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.111"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.112"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.113"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.114"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.115"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.116"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.118"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.12"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.120"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.14"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.15"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.2"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.23"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.24"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.25"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.3"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.36"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.37"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.38"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.39"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.4"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.41"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.42"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.43"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.44"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.45"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.46"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.47"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.48"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.49"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.5"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.50"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.51"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.52"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.53"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.54"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.55"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.56"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.57"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.58"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.59"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.6"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.60"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.61"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.62"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.63"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.64"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.65"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.66"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.67"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.68"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.69"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.7"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.71"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.72"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.73"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.74"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.75"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.76"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.77"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.78"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.79"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.8"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.80"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.81"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.82"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.83"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.85"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.86"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.87"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.9"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.91"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.92"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.94"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.97"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.98"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.99"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.131"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.130"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test negate="false" operator="OR">
          <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="AND">
        <cpe-lang:logical-test negate="false" operator="OR">
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.1"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.10"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.100"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.101"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.102"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.103"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.104"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.109"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.111"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.112"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.113"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.114"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.115"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.116"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.118"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.12"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.120"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.14"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.15"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.2"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.23"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.24"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.25"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.3"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.36"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.37"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.38"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.39"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.4"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.41"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.42"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.43"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.44"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.45"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.46"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.47"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.48"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.49"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.5"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.50"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.51"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.52"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.53"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.54"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.55"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.56"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.57"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.58"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.59"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.6"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.60"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.61"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.62"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.63"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.64"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.65"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.66"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.67"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.68"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.69"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.7"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.71"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.72"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.73"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.74"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.75"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.76"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.77"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.78"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.79"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.8"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.80"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.81"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.82"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.83"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.85"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.86"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.87"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.9"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.91"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.92"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.94"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.97"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.98"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.99"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.130"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test negate="false" operator="OR">
          <cpe-lang:fact-ref name="cpe:/o:apple:mac_os_x"/>
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:google:chrome:34.0.1847.131</vuln:product>
      <vuln:product>cpe:/a:google:chrome:34.0.1847.130</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-1732</vuln:cve-id>
    <vuln:published-datetime>2014-04-26T06:55:05.513-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-28T10:38:32.990-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-28T10:38:30.227-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-399"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://src.chromium.org/viewvc/chrome?revision=261737&amp;view=revision" xml:lang="en">https://src.chromium.org/viewvc/chrome?revision=261737&amp;view=revision</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://code.google.com/p/chromium/issues/detail?id=352851" xml:lang="en">https://code.google.com/p/chromium/issues/detail?id=352851</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://googlechromereleases.blogspot.com/2014/04/stable-channel-update_24.html" xml:lang="en">http://googlechromereleases.blogspot.com/2014/04/stable-channel-update_24.html</vuln:reference>
    </vuln:references>
    <vuln:summary>Use-after-free vulnerability in browser/ui/views/speech_recognition_bubble_views.cc in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux allows remote attackers to cause a denial of service or possibly have unspecified other impact via an INPUT element that triggers the presence of a Speech Recognition Bubble window for an incorrect duration.</vuln:summary>
  </entry>
  <entry id="CVE-2014-1733">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="AND">
        <cpe-lang:logical-test negate="false" operator="OR">
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.1"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.10"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.100"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.101"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.102"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.103"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.104"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.109"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.111"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.112"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.113"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.114"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.115"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.116"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.118"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.12"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.120"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.14"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.15"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.2"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.23"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.24"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.25"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.3"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.36"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.37"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.38"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.39"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.4"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.41"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.42"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.43"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.44"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.45"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.46"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.47"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.48"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.49"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.5"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.50"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.51"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.52"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.53"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.54"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.55"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.56"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.57"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.58"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.59"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.6"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.60"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.61"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.62"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.63"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.64"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.65"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.66"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.67"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.68"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.69"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.7"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.71"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.72"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.73"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.74"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.75"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.76"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.77"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.78"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.79"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.8"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.80"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.81"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.82"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.83"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.85"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.86"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.87"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.9"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.91"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.92"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.94"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.97"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.98"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.99"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.130"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test negate="false" operator="OR">
          <cpe-lang:fact-ref name="cpe:/o:apple:mac_os_x"/>
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="AND">
        <cpe-lang:logical-test negate="false" operator="OR">
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.1"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.10"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.100"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.101"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.102"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.103"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.104"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.109"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.111"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.112"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.113"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.114"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.115"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.116"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.118"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.12"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.120"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.14"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.15"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.2"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.23"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.24"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.25"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.3"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.36"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.37"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.38"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.39"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.4"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.41"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.42"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.43"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.44"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.45"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.46"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.47"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.48"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.49"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.5"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.50"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.51"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.52"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.53"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.54"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.55"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.56"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.57"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.58"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.59"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.6"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.60"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.61"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.62"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.63"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.64"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.65"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.66"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.67"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.68"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.69"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.7"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.71"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.72"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.73"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.74"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.75"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.76"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.77"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.78"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.79"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.8"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.80"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.81"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.82"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.83"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.85"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.86"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.87"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.9"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.91"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.92"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.94"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.97"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.98"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.99"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.131"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.130"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test negate="false" operator="OR">
          <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:google:chrome:34.0.1847.131</vuln:product>
      <vuln:product>cpe:/a:google:chrome:34.0.1847.130</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-1733</vuln:cve-id>
    <vuln:published-datetime>2014-04-26T06:55:05.543-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-28T10:43:50.860-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-28T10:43:49.673-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-20"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://src.chromium.org/viewvc/chrome?revision=260157&amp;view=revision" xml:lang="en">https://src.chromium.org/viewvc/chrome?revision=260157&amp;view=revision</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://code.google.com/p/chromium/issues/detail?id=351103" xml:lang="en">https://code.google.com/p/chromium/issues/detail?id=351103</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://googlechromereleases.blogspot.com/2014/04/stable-channel-update_24.html" xml:lang="en">http://googlechromereleases.blogspot.com/2014/04/stable-channel-update_24.html</vuln:reference>
    </vuln:references>
    <vuln:summary>The PointerCompare function in codegen.cc in Seccomp-BPF, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, does not properly merge blocks, which might allow remote attackers to bypass intended sandbox restrictions by leveraging renderer access.</vuln:summary>
  </entry>
  <entry id="CVE-2014-1734">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="AND">
        <cpe-lang:logical-test negate="false" operator="OR">
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.1"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.10"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.100"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.101"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.102"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.103"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.104"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.109"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.111"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.112"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.113"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.114"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.115"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.116"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.118"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.12"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.120"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.14"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.15"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.2"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.23"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.24"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.25"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.3"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.36"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.37"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.38"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.39"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.4"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.41"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.42"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.43"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.44"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.45"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.46"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.47"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.48"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.49"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.5"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.50"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.51"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.52"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.53"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.54"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.55"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.56"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.57"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.58"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.59"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.6"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.60"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.61"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.62"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.63"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.64"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.65"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.66"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.67"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.68"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.69"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.7"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.71"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.72"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.73"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.74"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.75"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.76"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.77"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.78"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.79"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.8"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.80"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.81"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.82"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.83"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.85"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.86"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.87"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.9"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.91"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.92"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.94"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.97"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.98"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.99"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.130"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test negate="false" operator="OR">
          <cpe-lang:fact-ref name="cpe:/o:apple:mac_os_x"/>
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="AND">
        <cpe-lang:logical-test negate="false" operator="OR">
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.1"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.10"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.100"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.101"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.102"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.103"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.104"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.109"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.111"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.112"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.113"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.114"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.115"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.116"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.118"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.12"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.120"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.14"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.15"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.2"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.23"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.24"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.25"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.3"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.36"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.37"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.38"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.39"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.4"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.41"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.42"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.43"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.44"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.45"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.46"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.47"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.48"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.49"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.5"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.50"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.51"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.52"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.53"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.54"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.55"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.56"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.57"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.58"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.59"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.6"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.60"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.61"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.62"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.63"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.64"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.65"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.66"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.67"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.68"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.69"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.7"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.71"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.72"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.73"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.74"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.75"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.76"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.77"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.78"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.79"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.8"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.80"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.81"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.82"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.83"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.85"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.86"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.87"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.9"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.91"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.92"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.94"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.97"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.98"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.99"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.131"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.130"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test negate="false" operator="OR">
          <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:google:chrome:34.0.1847.131</vuln:product>
      <vuln:product>cpe:/a:google:chrome:34.0.1847.130</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-1734</vuln:cve-id>
    <vuln:published-datetime>2014-04-26T06:55:05.560-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-28T11:15:37.607-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-28T11:15:36.073-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://code.google.com/p/chromium/issues/detail?id=367314" xml:lang="en">https://code.google.com/p/chromium/issues/detail?id=367314</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://code.google.com/p/chromium/issues/detail?id=357382" xml:lang="en">https://code.google.com/p/chromium/issues/detail?id=357382</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://code.google.com/p/chromium/issues/detail?id=356181" xml:lang="en">https://code.google.com/p/chromium/issues/detail?id=356181</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://googlechromereleases.blogspot.com/2014/04/stable-channel-update_24.html" xml:lang="en">http://googlechromereleases.blogspot.com/2014/04/stable-channel-update_24.html</vuln:reference>
    </vuln:references>
    <vuln:summary>Multiple unspecified vulnerabilities in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux allow attackers to cause a denial of service or possibly have other impact via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2014-1735">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="AND">
        <cpe-lang:logical-test negate="false" operator="OR">
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.1"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.10"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.100"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.101"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.102"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.103"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.104"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.109"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.111"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.112"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.113"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.114"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.115"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.116"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.118"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.12"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.120"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.14"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.15"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.2"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.23"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.24"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.25"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.3"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.36"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.37"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.38"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.39"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.4"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.41"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.42"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.43"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.44"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.45"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.46"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.47"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.48"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.49"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.5"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.50"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.51"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.52"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.53"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.54"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.55"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.56"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.57"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.58"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.59"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.6"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.60"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.61"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.62"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.63"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.64"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.65"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.66"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.67"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.68"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.69"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.7"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.71"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.72"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.73"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.74"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.75"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.76"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.77"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.78"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.79"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.8"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.80"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.81"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.82"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.83"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.85"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.86"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.87"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.9"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.91"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.92"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.94"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.97"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.98"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.99"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.131"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.130"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test negate="false" operator="OR">
          <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="AND">
        <cpe-lang:logical-test negate="false" operator="OR">
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.1"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.10"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.100"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.101"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.102"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.103"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.104"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.109"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.111"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.112"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.113"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.114"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.115"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.116"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.118"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.12"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.120"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.14"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.15"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.2"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.23"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.24"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.25"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.3"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.36"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.37"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.38"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.39"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.4"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.41"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.42"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.43"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.44"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.45"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.46"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.47"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.48"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.49"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.5"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.50"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.51"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.52"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.53"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.54"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.55"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.56"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.57"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.58"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.59"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.6"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.60"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.61"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.62"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.63"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.64"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.65"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.66"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.67"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.68"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.69"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.7"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.71"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.72"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.73"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.74"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.75"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.76"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.77"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.78"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.79"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.8"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.80"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.81"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.82"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.83"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.85"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.86"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.87"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.9"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.91"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.92"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.94"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.97"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.98"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.99"/>
          <cpe-lang:fact-ref name="cpe:/a:google:chrome:34.0.1847.130"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test negate="false" operator="OR">
          <cpe-lang:fact-ref name="cpe:/o:apple:mac_os_x"/>
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:google:chrome:34.0.1847.131</vuln:product>
      <vuln:product>cpe:/a:google:chrome:34.0.1847.130</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-1735</vuln:cve-id>
    <vuln:published-datetime>2014-04-26T06:55:05.590-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-28T11:21:36.240-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-28T11:21:35.007-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://src.chromium.org/viewvc/blink?revision=171127&amp;view=revision" xml:lang="en">https://src.chromium.org/viewvc/blink?revision=171127&amp;view=revision</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://src.chromium.org/viewvc/blink?revision=171077&amp;view=revision" xml:lang="en">https://src.chromium.org/viewvc/blink?revision=171077&amp;view=revision</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://code.google.com/p/v8/source/detail?r=20624" xml:lang="en">https://code.google.com/p/v8/source/detail?r=20624</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://code.google.com/p/v8/source/detail?r=20622" xml:lang="en">https://code.google.com/p/v8/source/detail?r=20622</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://code.google.com/p/v8/source/detail?r=20501" xml:lang="en">https://code.google.com/p/v8/source/detail?r=20501</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://code.google.com/p/chromium/issues/detail?id=360429" xml:lang="en">https://code.google.com/p/chromium/issues/detail?id=360429</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://code.google.com/p/chromium/issues/detail?id=359525" xml:lang="en">https://code.google.com/p/chromium/issues/detail?id=359525</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://code.google.com/p/chromium/issues/detail?id=359130" xml:lang="en">https://code.google.com/p/chromium/issues/detail?id=359130</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://googlechromereleases.blogspot.com/2014/04/stable-channel-update_24.html" xml:lang="en">http://googlechromereleases.blogspot.com/2014/04/stable-channel-update_24.html</vuln:reference>
    </vuln:references>
    <vuln:summary>Multiple unspecified vulnerabilities in Google V8 before 3.24.35.33, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, allow attackers to cause a denial of service or possibly have other impact via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2014-1762">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:microsoft:internet_explorer:11:-"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:microsoft:internet_explorer:11:-</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-1762</vuln:cve-id>
    <vuln:published-datetime>2014-04-27T06:55:03.153-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-28T12:15:10.007-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-28T12:15:09.977-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.pwn2own.com/2014/03/pwn2own-results-for-wednesday-day-one/" xml:lang="en">http://www.pwn2own.com/2014/03/pwn2own-results-for-wednesday-day-one/</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://twitter.com/thezdi/statuses/443810610958958592" xml:lang="en">http://twitter.com/thezdi/statuses/443810610958958592</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code with medium-integrity privileges and bypass a sandbox protection mechanism via unknown vectors, as demonstrated by ZDI during a Pwn4Fun competition at CanSecWest 2014.</vuln:summary>
  </entry>
  <entry id="CVE-2014-1763">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:microsoft:internet_explorer:11:-"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:microsoft:internet_explorer:11:-</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-1763</vuln:cve-id>
    <vuln:published-datetime>2014-04-27T06:55:03.200-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-28T12:17:29.263-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-28T12:17:29.247-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-399"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.pwn2own.com/2014/03/pwn2own-results-for-wednesday-day-one/" xml:lang="en">http://www.pwn2own.com/2014/03/pwn2own-results-for-wednesday-day-one/</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://twitter.com/thezdi/statuses/443855973673754624" xml:lang="en">http://twitter.com/thezdi/statuses/443855973673754624</vuln:reference>
    </vuln:references>
    <vuln:summary>Use-after-free vulnerability in Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code and bypass a sandbox protection mechanism via unspecified vectors, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2014.</vuln:summary>
  </entry>
  <entry id="CVE-2014-1764">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:microsoft:internet_explorer:11:-"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:microsoft:internet_explorer:11:-</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-1764</vuln:cve-id>
    <vuln:published-datetime>2014-04-27T06:55:03.233-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-28T12:26:37.700-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-28T12:26:37.670-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-264"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.pwn2own.com/2014/03/pwn2own-results-for-wednesday-day-one/" xml:lang="en">http://www.pwn2own.com/2014/03/pwn2own-results-for-wednesday-day-one/</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://twitter.com/thezdi/statuses/443855973673754624" xml:lang="en">http://twitter.com/thezdi/statuses/443855973673754624</vuln:reference>
    </vuln:references>
    <vuln:summary>Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code and bypass a sandbox protection mechanism by leveraging "object confusion" in a broker process, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2014.</vuln:summary>
  </entry>
  <entry id="CVE-2014-1765">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:microsoft:internet_explorer:11:-"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:microsoft:internet_explorer:11:-</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-1765</vuln:cve-id>
    <vuln:published-datetime>2014-04-27T06:55:03.247-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-28T12:34:52.230-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-28T12:34:52.183-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-399"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.pwn2own.com/2014/03/pwn2own-results-thursday-day-two/" xml:lang="en">http://www.pwn2own.com/2014/03/pwn2own-results-thursday-day-two/</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://twitter.com/thezdi/statuses/444216845734666240" xml:lang="en">http://twitter.com/thezdi/statuses/444216845734666240</vuln:reference>
    </vuln:references>
    <vuln:summary>Multiple use-after-free vulnerabilities in Microsoft Internet Explorer 11 allow remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by Sebastian Apelt and Andreas Schmidt during a Pwn2Own competition at CanSecWest 2014.</vuln:summary>
  </entry>
  <entry id="CVE-2014-1766">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/o:microsoft:windows_8.1:-"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/o:microsoft:windows_8.1:-</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-1766</vuln:cve-id>
    <vuln:published-datetime>2014-04-27T06:55:03.280-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-28T12:40:57.350-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.2</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-28T12:40:57.303-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.pwn2own.com/2014/03/pwn2own-results-thursday-day-two/" xml:lang="en">http://www.pwn2own.com/2014/03/pwn2own-results-thursday-day-two/</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://twitter.com/thezdi/statuses/444216845734666240" xml:lang="en">http://twitter.com/thezdi/statuses/444216845734666240</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in the kernel in Microsoft Windows 8.1 allows local users to gain privileges via unknown vectors, as demonstrated by Sebastian Apelt and Andreas Schmidt during a Pwn2Own competition at CanSecWest 2014.</vuln:summary>
  </entry>
  <entry id="CVE-2014-1776">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:microsoft:internet_explorer:7"/>
        <cpe-lang:fact-ref name="cpe:/a:microsoft:internet_explorer:6"/>
        <cpe-lang:fact-ref name="cpe:/a:microsoft:internet_explorer:11:-"/>
        <cpe-lang:fact-ref name="cpe:/a:microsoft:internet_explorer:10"/>
        <cpe-lang:fact-ref name="cpe:/a:microsoft:internet_explorer:9"/>
        <cpe-lang:fact-ref name="cpe:/a:microsoft:internet_explorer:8"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:microsoft:internet_explorer:8</vuln:product>
      <vuln:product>cpe:/a:microsoft:internet_explorer:7</vuln:product>
      <vuln:product>cpe:/a:microsoft:internet_explorer:9</vuln:product>
      <vuln:product>cpe:/a:microsoft:internet_explorer:11:-</vuln:product>
      <vuln:product>cpe:/a:microsoft:internet_explorer:6</vuln:product>
      <vuln:product>cpe:/a:microsoft:internet_explorer:10</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-1776</vuln:cve-id>
    <vuln:published-datetime>2014-04-27T06:55:03.340-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-28T12:53:15.060-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-28T12:53:15.013-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-399"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://technet.microsoft.com/library/security/2963983" xml:lang="en">https://technet.microsoft.com/library/security/2963983</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.fireeye.com/blog/uncategorized/2014/04/new-zero-day-exploit-targeting-internet-explorer-versions-9-through-11-identified-in-targeted-attacks.html" xml:lang="en">http://www.fireeye.com/blog/uncategorized/2014/04/new-zero-day-exploit-targeting-internet-explorer-versions-9-through-11-identified-in-targeted-attacks.html</vuln:reference>
    </vuln:references>
    <vuln:summary>Use-after-free vulnerability in VGX.DLL in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in April 2014.</vuln:summary>
  </entry>
  <entry id="CVE-2014-1841">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:southrivertech:titan_ftp_server:10.40"/>
        <cpe-lang:fact-ref name="cpe:/a:southrivertech:titan_ftp_server:10.30"/>
        <cpe-lang:fact-ref name="cpe:/a:southrivertech:titan_ftp_server:10.0.1733"/>
        <cpe-lang:fact-ref name="cpe:/a:southrivertech:titan_ftp_server:10.01.1740"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:southrivertech:titan_ftp_server:10.01.1740</vuln:product>
      <vuln:product>cpe:/a:southrivertech:titan_ftp_server:10.0.1733</vuln:product>
      <vuln:product>cpe:/a:southrivertech:titan_ftp_server:10.40</vuln:product>
      <vuln:product>cpe:/a:southrivertech:titan_ftp_server:10.30</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-1841</vuln:cve-id>
    <vuln:published-datetime>2014-04-29T06:37:03.763-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-29T11:23:07.387-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-29T11:23:07.323-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-22"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>FULLDISC</vuln:source>
      <vuln:reference href="http://archives.neohapsis.com/archives/fulldisclosure/2014-02/0092.html" xml:lang="en">20140210 Titan FTP Server Directory Traversal Vulnerabilities - [CVE-2014-1841 / CVE-2014-1842 / CVE-2014-1843]</vuln:reference>
    </vuln:references>
    <vuln:summary>Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attackers to copy an arbitrary user's home folder via a Move action with a .. (dot dot) in the src parameter.</vuln:summary>
  </entry>
  <entry id="CVE-2014-1842">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:southrivertech:titan_ftp_server:10.40"/>
        <cpe-lang:fact-ref name="cpe:/a:southrivertech:titan_ftp_server:10.30"/>
        <cpe-lang:fact-ref name="cpe:/a:southrivertech:titan_ftp_server:10.0.1733"/>
        <cpe-lang:fact-ref name="cpe:/a:southrivertech:titan_ftp_server:10.01.1740"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:southrivertech:titan_ftp_server:10.01.1740</vuln:product>
      <vuln:product>cpe:/a:southrivertech:titan_ftp_server:10.0.1733</vuln:product>
      <vuln:product>cpe:/a:southrivertech:titan_ftp_server:10.40</vuln:product>
      <vuln:product>cpe:/a:southrivertech:titan_ftp_server:10.30</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-1842</vuln:cve-id>
    <vuln:published-datetime>2014-04-29T06:37:03.780-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-29T11:24:52.327-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-29T11:24:52.280-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-22"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>FULLDISC</vuln:source>
      <vuln:reference href="http://archives.neohapsis.com/archives/fulldisclosure/2014-02/0092.html" xml:lang="en">20140210 Titan FTP Server Directory Traversal Vulnerabilities - [CVE-2014-1841 / CVE-2014-1842 / CVE-2014-1843]</vuln:reference>
    </vuln:references>
    <vuln:summary>Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attackers to list all usernames via a Go action with a .. (dot dot) in the search-bar value.</vuln:summary>
  </entry>
  <entry id="CVE-2014-1843">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:southrivertech:titan_ftp_server:10.40"/>
        <cpe-lang:fact-ref name="cpe:/a:southrivertech:titan_ftp_server:10.30"/>
        <cpe-lang:fact-ref name="cpe:/a:southrivertech:titan_ftp_server:10.0.1733"/>
        <cpe-lang:fact-ref name="cpe:/a:southrivertech:titan_ftp_server:10.01.1740"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:southrivertech:titan_ftp_server:10.01.1740</vuln:product>
      <vuln:product>cpe:/a:southrivertech:titan_ftp_server:10.0.1733</vuln:product>
      <vuln:product>cpe:/a:southrivertech:titan_ftp_server:10.40</vuln:product>
      <vuln:product>cpe:/a:southrivertech:titan_ftp_server:10.30</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-1843</vuln:cve-id>
    <vuln:published-datetime>2014-04-29T06:37:03.810-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-29T11:34:23.800-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-29T11:34:23.737-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-22"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>FULLDISC</vuln:source>
      <vuln:reference href="http://archives.neohapsis.com/archives/fulldisclosure/2014-02/0092.html" xml:lang="en">20140210 Titan FTP Server Directory Traversal Vulnerabilities - [CVE-2014-1841 / CVE-2014-1842 / CVE-2014-1843]</vuln:reference>
    </vuln:references>
    <vuln:summary>Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attackers to obtain the property information of an arbitrary home folder via a Properties action with a .. (dot dot) in the src parameter.</vuln:summary>
  </entry>
  <entry id="CVE-2014-1899">
    <vuln:cve-id>CVE-2014-1899</vuln:cve-id>
    <vuln:published-datetime>2014-05-02T10:55:05.933-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-05-02T10:55:05.933-04:00</vuln:last-modified-datetime>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://support.citrix.com/article/CTX140291" xml:lang="en">https://support.citrix.com/article/CTX140291</vuln:reference>
    </vuln:references>
    <vuln:summary>Cross-site scripting (XSS) vulnerability in Citrix NetScaler Gateway (formerly Citrix Access Gateway Enterprise Edition) 9.x before 9.3.66.5 and 10.x before 10.1.123.9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2014-1955">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:fortinet:fortiweb:5.0.2"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:fortinet:fortiweb:5.0.2</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-1955</vuln:cve-id>
    <vuln:published-datetime>2014-04-30T10:22:06.173-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-05-01T08:14:40.323-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-05-01T08:14:40.247-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.fortiguard.com/advisory/FG-IR-13-009/" xml:lang="en">http://www.fortiguard.com/advisory/FG-IR-13-009/</vuln:reference>
    </vuln:references>
    <vuln:summary>Cross-site scripting (XSS) vulnerability in FortiGuard FortiWeb before 5.0.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2014-1956">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:fortinet:fortiweb:5.0.2"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:fortinet:fortiweb:5.0.2</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-1956</vuln:cve-id>
    <vuln:published-datetime>2014-04-30T10:22:06.203-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-05-01T08:20:06.820-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-05-01T08:20:06.787-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.fortiguard.com/advisory/FG-IR-13-009/" xml:lang="en">http://www.fortiguard.com/advisory/FG-IR-13-009/</vuln:reference>
    </vuln:references>
    <vuln:summary>CRLF injection vulnerability in FortiGuard FortiWeb before 5.0.3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2014-1957">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:fortinet:fortiweb:5.0.2"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:fortinet:fortiweb:5.0.2</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-1957</vuln:cve-id>
    <vuln:published-datetime>2014-04-30T10:22:06.237-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-05-01T08:54:07.450-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-05-01T08:54:06.467-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:security-protection>ALLOWS_USER_ACCESS</vuln:security-protection>
    <vuln:cwe id="CWE-264"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.fortiguard.com/advisory/FG-IR-13-009/" xml:lang="en">http://www.fortiguard.com/advisory/FG-IR-13-009/</vuln:reference>
    </vuln:references>
    <vuln:summary>FortiGuard FortiWeb before 5.0.3 allows remote authenticated users to gain privileges via unspecified vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2014-1988">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:cybozu:garoon:2.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cybozu:garoon:3.7:sp2"/>
        <cpe-lang:fact-ref name="cpe:/a:cybozu:garoon:3.7:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:cybozu:garoon:3.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cybozu:garoon:3.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cybozu:garoon:3.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:cybozu:garoon:3.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:cybozu:garoon:3.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cybozu:garoon:3.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cybozu:garoon:3.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:cybozu:garoon:3.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:cybozu:garoon:3.5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cybozu:garoon:3.5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cybozu:garoon:3.5.2"/>
        <cpe-lang:fact-ref name="cpe:/a:cybozu:garoon:3.5.3"/>
        <cpe-lang:fact-ref name="cpe:/a:cybozu:garoon:3.5.4"/>
        <cpe-lang:fact-ref name="cpe:/a:cybozu:garoon:3.5.5"/>
        <cpe-lang:fact-ref name="cpe:/a:cybozu:garoon:3.7.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cybozu:garoon:3.7.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cybozu:garoon:3.7.2"/>
        <cpe-lang:fact-ref name="cpe:/a:cybozu:garoon:2.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cybozu:garoon:2.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cybozu:garoon:2.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:cybozu:garoon:2.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:cybozu:garoon:2.5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cybozu:garoon:2.5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cybozu:garoon:2.5.2"/>
        <cpe-lang:fact-ref name="cpe:/a:cybozu:garoon:2.5.3"/>
        <cpe-lang:fact-ref name="cpe:/a:cybozu:garoon:2.5.4"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:cybozu:garoon:2.1.3</vuln:product>
      <vuln:product>cpe:/a:cybozu:garoon:2.1.2</vuln:product>
      <vuln:product>cpe:/a:cybozu:garoon:2.1.1</vuln:product>
      <vuln:product>cpe:/a:cybozu:garoon:2.5.4</vuln:product>
      <vuln:product>cpe:/a:cybozu:garoon:2.5.2</vuln:product>
      <vuln:product>cpe:/a:cybozu:garoon:2.5.3</vuln:product>
      <vuln:product>cpe:/a:cybozu:garoon:2.5.0</vuln:product>
      <vuln:product>cpe:/a:cybozu:garoon:2.5.1</vuln:product>
      <vuln:product>cpe:/a:cybozu:garoon:3.0.1</vuln:product>
      <vuln:product>cpe:/a:cybozu:garoon:3.0.3</vuln:product>
      <vuln:product>cpe:/a:cybozu:garoon:3.0.2</vuln:product>
      <vuln:product>cpe:/a:cybozu:garoon:3.7.1</vuln:product>
      <vuln:product>cpe:/a:cybozu:garoon:3.7.0</vuln:product>
      <vuln:product>cpe:/a:cybozu:garoon:3.7:sp2</vuln:product>
      <vuln:product>cpe:/a:cybozu:garoon:3.7:sp1</vuln:product>
      <vuln:product>cpe:/a:cybozu:garoon:3.1.3</vuln:product>
      <vuln:product>cpe:/a:cybozu:garoon:2.0.0</vuln:product>
      <vuln:product>cpe:/a:cybozu:garoon:3.1.0</vuln:product>
      <vuln:product>cpe:/a:cybozu:garoon:3.1.1</vuln:product>
      <vuln:product>cpe:/a:cybozu:garoon:3.1.2</vuln:product>
      <vuln:product>cpe:/a:cybozu:garoon:2.1.0</vuln:product>
      <vuln:product>cpe:/a:cybozu:garoon:3.7.2</vuln:product>
      <vuln:product>cpe:/a:cybozu:garoon:3.5.3</vuln:product>
      <vuln:product>cpe:/a:cybozu:garoon:3.5.0</vuln:product>
      <vuln:product>cpe:/a:cybozu:garoon:3.5.4</vuln:product>
      <vuln:product>cpe:/a:cybozu:garoon:3.0.0</vuln:product>
      <vuln:product>cpe:/a:cybozu:garoon:3.5.2</vuln:product>
      <vuln:product>cpe:/a:cybozu:garoon:3.5.1</vuln:product>
      <vuln:product>cpe:/a:cybozu:garoon:3.5.5</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-1988</vuln:cve-id>
    <vuln:published-datetime>2014-05-02T06:55:07.430-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-05-02T11:32:37.667-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>3.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-05-02T11:32:37.167-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://support.cybozu.com/ja-jp/article/8105" xml:lang="en">https://support.cybozu.com/ja-jp/article/8105</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>JVNDB</vuln:source>
      <vuln:reference href="http://jvndb.jvn.jp/jvndb/JVNDB-2014-000042" xml:lang="en">JVNDB-2014-000042</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>JVN</vuln:source>
      <vuln:reference href="http://jvn.jp/en/jp/JVN90519014/index.html" xml:lang="en">JVN#90519014</vuln:reference>
    </vuln:references>
    <vuln:summary>The Phone Messages feature in Cybozu Garoon 2.0.0 through 3.7 SP2 allows remote authenticated users to cause a denial of service (resource consumption) via unspecified vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2014-1989">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:cybozu:garoon:3.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cybozu:garoon:3.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cybozu:garoon:3.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:cybozu:garoon:3.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:cybozu:garoon:3.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cybozu:garoon:3.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cybozu:garoon:3.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:cybozu:garoon:3.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:cybozu:garoon:3.5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cybozu:garoon:3.5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cybozu:garoon:3.5.2"/>
        <cpe-lang:fact-ref name="cpe:/a:cybozu:garoon:3.5.3"/>
        <cpe-lang:fact-ref name="cpe:/a:cybozu:garoon:3.5.4"/>
        <cpe-lang:fact-ref name="cpe:/a:cybozu:garoon:3.5.5"/>
        <cpe-lang:fact-ref name="cpe:/a:cybozu:garoon:3.7:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:cybozu:garoon:3.7:sp2"/>
        <cpe-lang:fact-ref name="cpe:/a:cybozu:garoon:3.7:sp3"/>
        <cpe-lang:fact-ref name="cpe:/a:cybozu:garoon:3.7.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cybozu:garoon:3.7.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cybozu:garoon:3.7.2"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:cybozu:garoon:3.1.3</vuln:product>
      <vuln:product>cpe:/a:cybozu:garoon:3.1.0</vuln:product>
      <vuln:product>cpe:/a:cybozu:garoon:3.1.1</vuln:product>
      <vuln:product>cpe:/a:cybozu:garoon:3.1.2</vuln:product>
      <vuln:product>cpe:/a:cybozu:garoon:3.7:sp3</vuln:product>
      <vuln:product>cpe:/a:cybozu:garoon:3.0.1</vuln:product>
      <vuln:product>cpe:/a:cybozu:garoon:3.0.3</vuln:product>
      <vuln:product>cpe:/a:cybozu:garoon:3.7.1</vuln:product>
      <vuln:product>cpe:/a:cybozu:garoon:3.0.2</vuln:product>
      <vuln:product>cpe:/a:cybozu:garoon:3.7.0</vuln:product>
      <vuln:product>cpe:/a:cybozu:garoon:3.7.2</vuln:product>
      <vuln:product>cpe:/a:cybozu:garoon:3.5.3</vuln:product>
      <vuln:product>cpe:/a:cybozu:garoon:3.5.4</vuln:product>
      <vuln:product>cpe:/a:cybozu:garoon:3.5.0</vuln:product>
      <vuln:product>cpe:/a:cybozu:garoon:3.7:sp2</vuln:product>
      <vuln:product>cpe:/a:cybozu:garoon:3.0.0</vuln:product>
      <vuln:product>cpe:/a:cybozu:garoon:3.7:sp1</vuln:product>
      <vuln:product>cpe:/a:cybozu:garoon:3.5.2</vuln:product>
      <vuln:product>cpe:/a:cybozu:garoon:3.5.5</vuln:product>
      <vuln:product>cpe:/a:cybozu:garoon:3.5.1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-1989</vuln:cve-id>
    <vuln:published-datetime>2014-05-02T06:55:07.787-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-05-02T11:35:28.657-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-05-02T11:35:28.530-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-264"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://support.cybozu.com/ja/article/5264" xml:lang="en">https://support.cybozu.com/ja/article/5264</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>JVNDB</vuln:source>
      <vuln:reference href="http://jvndb.jvn.jp/jvndb/JVNDB-2014-000043" xml:lang="en">JVNDB-2014-000043</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>JVN</vuln:source>
      <vuln:reference href="http://jvn.jp/en/jp/JVN31230946/index.html" xml:lang="en">JVN#31230946</vuln:reference>
    </vuln:references>
    <vuln:summary>Cybozu Garoon 3.0 through 3.7 SP3 allows remote authenticated users to bypass intended access restrictions and delete schedule information via unspecified API calls.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2042">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:livetecs:timeline:6.2.8"/>
        <cpe-lang:fact-ref name="cpe:/a:livetecs:timeline:6.2.71"/>
        <cpe-lang:fact-ref name="cpe:/a:livetecs:timeline:6.2.7"/>
        <cpe-lang:fact-ref name="cpe:/a:livetecs:timeline:6.2.6"/>
        <cpe-lang:fact-ref name="cpe:/a:livetecs:timeline:6.2.4"/>
        <cpe-lang:fact-ref name="cpe:/a:livetecs:timeline:6.2.3"/>
        <cpe-lang:fact-ref name="cpe:/a:livetecs:timeline:6.2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:livetecs:timeline:6.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:livetecs:timeline:5.2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:livetecs:timeline:4.9.1"/>
        <cpe-lang:fact-ref name="cpe:/a:livetecs:timeline:4.3.1"/>
        <cpe-lang:fact-ref name="cpe:/a:livetecs:timeline:4.2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:livetecs:timeline:3.8.1"/>
        <cpe-lang:fact-ref name="cpe:/a:livetecs:timeline:3.7.1"/>
        <cpe-lang:fact-ref name="cpe:/a:livetecs:timeline:3.6.1"/>
        <cpe-lang:fact-ref name="cpe:/a:livetecs:timeline:3.5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:livetecs:timeline:3.2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:livetecs:timeline:3.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:livetecs:timeline:3.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:livetecs:timeline:3.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:livetecs:timeline:3.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:livetecs:timeline:2.94"/>
        <cpe-lang:fact-ref name="cpe:/a:livetecs:timeline:2.91"/>
        <cpe-lang:fact-ref name="cpe:/a:livetecs:timeline:2.81"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:livetecs:timeline:6.2.7</vuln:product>
      <vuln:product>cpe:/a:livetecs:timeline:2.94</vuln:product>
      <vuln:product>cpe:/a:livetecs:timeline:3.1.1</vuln:product>
      <vuln:product>cpe:/a:livetecs:timeline:3.5.1</vuln:product>
      <vuln:product>cpe:/a:livetecs:timeline:6.2.8</vuln:product>
      <vuln:product>cpe:/a:livetecs:timeline:2.91</vuln:product>
      <vuln:product>cpe:/a:livetecs:timeline:3.0.3</vuln:product>
      <vuln:product>cpe:/a:livetecs:timeline:3.0.1</vuln:product>
      <vuln:product>cpe:/a:livetecs:timeline:4.2.1</vuln:product>
      <vuln:product>cpe:/a:livetecs:timeline:2.81</vuln:product>
      <vuln:product>cpe:/a:livetecs:timeline:6.0.1</vuln:product>
      <vuln:product>cpe:/a:livetecs:timeline:3.0.5</vuln:product>
      <vuln:product>cpe:/a:livetecs:timeline:6.2.71</vuln:product>
      <vuln:product>cpe:/a:livetecs:timeline:3.6.1</vuln:product>
      <vuln:product>cpe:/a:livetecs:timeline:4.3.1</vuln:product>
      <vuln:product>cpe:/a:livetecs:timeline:6.2.1</vuln:product>
      <vuln:product>cpe:/a:livetecs:timeline:6.2.3</vuln:product>
      <vuln:product>cpe:/a:livetecs:timeline:3.8.1</vuln:product>
      <vuln:product>cpe:/a:livetecs:timeline:3.2.1</vuln:product>
      <vuln:product>cpe:/a:livetecs:timeline:6.2.4</vuln:product>
      <vuln:product>cpe:/a:livetecs:timeline:5.2.1</vuln:product>
      <vuln:product>cpe:/a:livetecs:timeline:4.9.1</vuln:product>
      <vuln:product>cpe:/a:livetecs:timeline:6.2.6</vuln:product>
      <vuln:product>cpe:/a:livetecs:timeline:3.7.1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-2042</vuln:cve-id>
    <vuln:published-datetime>2014-04-28T10:09:06.563-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-29T08:18:50.870-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-29T08:18:50.713-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/archive/1/archive/1/531914/100/0/threaded" xml:lang="en">20140423 CVE-2014-2042 - Unrestricted file upload in Livetecs Timelive</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>FULLDISC</vuln:source>
      <vuln:reference href="http://seclists.org/fulldisclosure/2014/Apr/260" xml:lang="en">20140423 CVE-2014-2042 - Unrestricted file upload in Livetecs Timelive</vuln:reference>
    </vuln:references>
    <vuln:summary>Unrestricted file upload vulnerability in the Manage Project functionality in Livetecs Timelive before 6.5.1 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in a predictable directory in Uploads/.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2156">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="AND">
        <cpe-lang:logical-test negate="false" operator="OR">
          <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_system_software:f9.3"/>
          <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_system_software:fnc9.3"/>
          <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_system_software:f9.1.2"/>
          <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_system_software:fnc9.1.2"/>
          <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_system_software:f9.1.1"/>
          <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_system_software:fnc9.1.1"/>
          <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_system_software:f9.1.0"/>
          <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_system_software:fnc9.1.0"/>
          <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_system_software:f9.0.2"/>
          <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_system_software:f9.0.1"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test negate="false" operator="OR">
          <cpe-lang:fact-ref name="cpe:/h:cisco:tandberg_2000_mxp:-"/>
          <cpe-lang:fact-ref name="cpe:/h:cisco:tandberg_990_mxp:-"/>
          <cpe-lang:fact-ref name="cpe:/h:cisco:tandberg_880_mxp:-"/>
          <cpe-lang:fact-ref name="cpe:/h:cisco:tandberg_770_mxp:-"/>
          <cpe-lang:fact-ref name="cpe:/h:cisco:tandberg_550_mxp:-"/>
          <cpe-lang:fact-ref name="cpe:/h:cisco:telepresence_system_codec_6000_mxp:-"/>
          <cpe-lang:fact-ref name="cpe:/h:cisco:telepresence_system_codec_3000_mxp:-"/>
          <cpe-lang:fact-ref name="cpe:/h:cisco:telepresence_system_edge_95_mxp:-"/>
          <cpe-lang:fact-ref name="cpe:/h:cisco:telepresence_system_edge_85_mxp:-"/>
          <cpe-lang:fact-ref name="cpe:/h:cisco:telepresence_system_edge_75_mxp:-"/>
          <cpe-lang:fact-ref name="cpe:/h:cisco:telepresence_system_1000_mxp:-"/>
          <cpe-lang:fact-ref name="cpe:/h:cisco:telepresence_system_1700_mxp:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:cisco:telepresence_system_software:f9.3</vuln:product>
      <vuln:product>cpe:/h:cisco:telepresence_system_codec_3000_mxp:-</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_system_software:fnc9.1.2</vuln:product>
      <vuln:product>cpe:/h:cisco:telepresence_system_edge_75_mxp:-</vuln:product>
      <vuln:product>cpe:/h:cisco:telepresence_system_edge_95_mxp:-</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_system_software:fnc9.1.1</vuln:product>
      <vuln:product>cpe:/h:cisco:tandberg_880_mxp:-</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_system_software:fnc9.1.0</vuln:product>
      <vuln:product>cpe:/h:cisco:telepresence_system_edge_85_mxp:-</vuln:product>
      <vuln:product>cpe:/h:cisco:telepresence_system_codec_6000_mxp:-</vuln:product>
      <vuln:product>cpe:/h:cisco:tandberg_550_mxp:-</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_system_software:f9.1.2</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_system_software:f9.1.1</vuln:product>
      <vuln:product>cpe:/h:cisco:tandberg_990_mxp:-</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_system_software:f9.1.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_system_software:fnc9.3</vuln:product>
      <vuln:product>cpe:/h:cisco:telepresence_system_1700_mxp:-</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_system_software:f9.0.1</vuln:product>
      <vuln:product>cpe:/h:cisco:tandberg_770_mxp:-</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_system_software:f9.0.2</vuln:product>
      <vuln:product>cpe:/h:cisco:telepresence_system_1000_mxp:-</vuln:product>
      <vuln:product>cpe:/h:cisco:tandberg_2000_mxp:-</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-2156</vuln:cve-id>
    <vuln:published-datetime>2014-05-02T06:55:07.977-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-05-02T11:49:05.840-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.1</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-05-02T11:49:05.340-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-20"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CISCO</vuln:source>
      <vuln:reference href="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140430-mxp" xml:lang="en">20140430 Multiple Vulnerabilities in Cisco TelePresence System MXP Series</vuln:reference>
    </vuln:references>
    <vuln:summary>Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCty45739.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2157">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="AND">
        <cpe-lang:logical-test negate="false" operator="OR">
          <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_system_software:f9.3"/>
          <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_system_software:fnc9.3"/>
          <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_system_software:f9.1.2"/>
          <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_system_software:fnc9.1.2"/>
          <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_system_software:f9.1.1"/>
          <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_system_software:fnc9.1.1"/>
          <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_system_software:f9.1.0"/>
          <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_system_software:fnc9.1.0"/>
          <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_system_software:f9.0.2"/>
          <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_system_software:f9.0.1"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test negate="false" operator="OR">
          <cpe-lang:fact-ref name="cpe:/h:cisco:tandberg_2000_mxp:-"/>
          <cpe-lang:fact-ref name="cpe:/h:cisco:tandberg_990_mxp:-"/>
          <cpe-lang:fact-ref name="cpe:/h:cisco:tandberg_880_mxp:-"/>
          <cpe-lang:fact-ref name="cpe:/h:cisco:tandberg_770_mxp:-"/>
          <cpe-lang:fact-ref name="cpe:/h:cisco:tandberg_550_mxp:-"/>
          <cpe-lang:fact-ref name="cpe:/h:cisco:telepresence_system_codec_6000_mxp:-"/>
          <cpe-lang:fact-ref name="cpe:/h:cisco:telepresence_system_codec_3000_mxp:-"/>
          <cpe-lang:fact-ref name="cpe:/h:cisco:telepresence_system_edge_95_mxp:-"/>
          <cpe-lang:fact-ref name="cpe:/h:cisco:telepresence_system_edge_85_mxp:-"/>
          <cpe-lang:fact-ref name="cpe:/h:cisco:telepresence_system_edge_75_mxp:-"/>
          <cpe-lang:fact-ref name="cpe:/h:cisco:telepresence_system_1000_mxp:-"/>
          <cpe-lang:fact-ref name="cpe:/h:cisco:telepresence_system_1700_mxp:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:cisco:telepresence_system_software:f9.3</vuln:product>
      <vuln:product>cpe:/h:cisco:telepresence_system_codec_3000_mxp:-</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_system_software:fnc9.1.2</vuln:product>
      <vuln:product>cpe:/h:cisco:telepresence_system_edge_75_mxp:-</vuln:product>
      <vuln:product>cpe:/h:cisco:telepresence_system_edge_95_mxp:-</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_system_software:fnc9.1.1</vuln:product>
      <vuln:product>cpe:/h:cisco:tandberg_880_mxp:-</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_system_software:fnc9.1.0</vuln:product>
      <vuln:product>cpe:/h:cisco:telepresence_system_edge_85_mxp:-</vuln:product>
      <vuln:product>cpe:/h:cisco:telepresence_system_codec_6000_mxp:-</vuln:product>
      <vuln:product>cpe:/h:cisco:tandberg_550_mxp:-</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_system_software:f9.1.2</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_system_software:f9.1.1</vuln:product>
      <vuln:product>cpe:/h:cisco:tandberg_990_mxp:-</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_system_software:f9.1.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_system_software:fnc9.3</vuln:product>
      <vuln:product>cpe:/h:cisco:telepresence_system_1700_mxp:-</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_system_software:f9.0.1</vuln:product>
      <vuln:product>cpe:/h:cisco:tandberg_770_mxp:-</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_system_software:f9.0.2</vuln:product>
      <vuln:product>cpe:/h:cisco:telepresence_system_1000_mxp:-</vuln:product>
      <vuln:product>cpe:/h:cisco:tandberg_2000_mxp:-</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-2157</vuln:cve-id>
    <vuln:published-datetime>2014-05-02T06:55:08.007-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-05-02T12:03:27.213-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.1</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-05-02T12:03:26.963-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-20"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CISCO</vuln:source>
      <vuln:reference href="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140430-mxp" xml:lang="en">20140430 Multiple Vulnerabilities in Cisco TelePresence System MXP Series</vuln:reference>
    </vuln:references>
    <vuln:summary>Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCty45733.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2158">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="AND">
        <cpe-lang:logical-test negate="false" operator="OR">
          <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_system_software:f9.3"/>
          <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_system_software:fnc9.3"/>
          <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_system_software:f9.1.2"/>
          <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_system_software:fnc9.1.2"/>
          <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_system_software:f9.1.1"/>
          <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_system_software:fnc9.1.1"/>
          <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_system_software:f9.1.0"/>
          <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_system_software:fnc9.1.0"/>
          <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_system_software:f9.0.2"/>
          <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_system_software:f9.0.1"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test negate="false" operator="OR">
          <cpe-lang:fact-ref name="cpe:/h:cisco:tandberg_2000_mxp:-"/>
          <cpe-lang:fact-ref name="cpe:/h:cisco:tandberg_990_mxp:-"/>
          <cpe-lang:fact-ref name="cpe:/h:cisco:tandberg_880_mxp:-"/>
          <cpe-lang:fact-ref name="cpe:/h:cisco:tandberg_770_mxp:-"/>
          <cpe-lang:fact-ref name="cpe:/h:cisco:tandberg_550_mxp:-"/>
          <cpe-lang:fact-ref name="cpe:/h:cisco:telepresence_system_codec_6000_mxp:-"/>
          <cpe-lang:fact-ref name="cpe:/h:cisco:telepresence_system_codec_3000_mxp:-"/>
          <cpe-lang:fact-ref name="cpe:/h:cisco:telepresence_system_edge_95_mxp:-"/>
          <cpe-lang:fact-ref name="cpe:/h:cisco:telepresence_system_edge_85_mxp:-"/>
          <cpe-lang:fact-ref name="cpe:/h:cisco:telepresence_system_edge_75_mxp:-"/>
          <cpe-lang:fact-ref name="cpe:/h:cisco:telepresence_system_1000_mxp:-"/>
          <cpe-lang:fact-ref name="cpe:/h:cisco:telepresence_system_1700_mxp:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:cisco:telepresence_system_software:f9.3</vuln:product>
      <vuln:product>cpe:/h:cisco:telepresence_system_codec_3000_mxp:-</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_system_software:fnc9.1.2</vuln:product>
      <vuln:product>cpe:/h:cisco:telepresence_system_edge_75_mxp:-</vuln:product>
      <vuln:product>cpe:/h:cisco:telepresence_system_edge_95_mxp:-</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_system_software:fnc9.1.1</vuln:product>
      <vuln:product>cpe:/h:cisco:tandberg_880_mxp:-</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_system_software:fnc9.1.0</vuln:product>
      <vuln:product>cpe:/h:cisco:telepresence_system_edge_85_mxp:-</vuln:product>
      <vuln:product>cpe:/h:cisco:telepresence_system_codec_6000_mxp:-</vuln:product>
      <vuln:product>cpe:/h:cisco:tandberg_550_mxp:-</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_system_software:f9.1.2</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_system_software:f9.1.1</vuln:product>
      <vuln:product>cpe:/h:cisco:tandberg_990_mxp:-</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_system_software:f9.1.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_system_software:fnc9.3</vuln:product>
      <vuln:product>cpe:/h:cisco:telepresence_system_1700_mxp:-</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_system_software:f9.0.1</vuln:product>
      <vuln:product>cpe:/h:cisco:tandberg_770_mxp:-</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_system_software:f9.0.2</vuln:product>
      <vuln:product>cpe:/h:cisco:telepresence_system_1000_mxp:-</vuln:product>
      <vuln:product>cpe:/h:cisco:tandberg_2000_mxp:-</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-2158</vuln:cve-id>
    <vuln:published-datetime>2014-05-02T06:55:08.037-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-05-02T12:18:44.133-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-05-02T12:18:43.603-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-20"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CISCO</vuln:source>
      <vuln:reference href="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140430-mxp" xml:lang="en">20140430 Multiple Vulnerabilities in Cisco TelePresence System MXP Series</vuln:reference>
    </vuln:references>
    <vuln:summary>Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCty45720.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2159">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="AND">
        <cpe-lang:logical-test negate="false" operator="OR">
          <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_system_software:f9.3"/>
          <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_system_software:fnc9.3"/>
          <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_system_software:f9.1.2"/>
          <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_system_software:fnc9.1.2"/>
          <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_system_software:f9.1.1"/>
          <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_system_software:fnc9.1.1"/>
          <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_system_software:f9.1.0"/>
          <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_system_software:fnc9.1.0"/>
          <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_system_software:f9.0.2"/>
          <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_system_software:f9.0.1"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test negate="false" operator="OR">
          <cpe-lang:fact-ref name="cpe:/h:cisco:tandberg_2000_mxp:-"/>
          <cpe-lang:fact-ref name="cpe:/h:cisco:tandberg_990_mxp:-"/>
          <cpe-lang:fact-ref name="cpe:/h:cisco:tandberg_880_mxp:-"/>
          <cpe-lang:fact-ref name="cpe:/h:cisco:tandberg_770_mxp:-"/>
          <cpe-lang:fact-ref name="cpe:/h:cisco:tandberg_550_mxp:-"/>
          <cpe-lang:fact-ref name="cpe:/h:cisco:telepresence_system_codec_6000_mxp:-"/>
          <cpe-lang:fact-ref name="cpe:/h:cisco:telepresence_system_codec_3000_mxp:-"/>
          <cpe-lang:fact-ref name="cpe:/h:cisco:telepresence_system_edge_95_mxp:-"/>
          <cpe-lang:fact-ref name="cpe:/h:cisco:telepresence_system_edge_85_mxp:-"/>
          <cpe-lang:fact-ref name="cpe:/h:cisco:telepresence_system_edge_75_mxp:-"/>
          <cpe-lang:fact-ref name="cpe:/h:cisco:telepresence_system_1000_mxp:-"/>
          <cpe-lang:fact-ref name="cpe:/h:cisco:telepresence_system_1700_mxp:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:cisco:telepresence_system_software:f9.3</vuln:product>
      <vuln:product>cpe:/h:cisco:telepresence_system_codec_3000_mxp:-</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_system_software:fnc9.1.2</vuln:product>
      <vuln:product>cpe:/h:cisco:telepresence_system_edge_75_mxp:-</vuln:product>
      <vuln:product>cpe:/h:cisco:telepresence_system_edge_95_mxp:-</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_system_software:fnc9.1.1</vuln:product>
      <vuln:product>cpe:/h:cisco:tandberg_880_mxp:-</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_system_software:fnc9.1.0</vuln:product>
      <vuln:product>cpe:/h:cisco:telepresence_system_edge_85_mxp:-</vuln:product>
      <vuln:product>cpe:/h:cisco:telepresence_system_codec_6000_mxp:-</vuln:product>
      <vuln:product>cpe:/h:cisco:tandberg_550_mxp:-</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_system_software:f9.1.2</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_system_software:f9.1.1</vuln:product>
      <vuln:product>cpe:/h:cisco:tandberg_990_mxp:-</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_system_software:f9.1.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_system_software:fnc9.3</vuln:product>
      <vuln:product>cpe:/h:cisco:telepresence_system_1700_mxp:-</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_system_software:f9.0.1</vuln:product>
      <vuln:product>cpe:/h:cisco:tandberg_770_mxp:-</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_system_software:f9.0.2</vuln:product>
      <vuln:product>cpe:/h:cisco:telepresence_system_1000_mxp:-</vuln:product>
      <vuln:product>cpe:/h:cisco:tandberg_2000_mxp:-</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-2159</vuln:cve-id>
    <vuln:published-datetime>2014-05-02T06:55:08.070-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-05-02T12:23:55.550-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-05-02T12:23:55.317-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-20"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CISCO</vuln:source>
      <vuln:reference href="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140430-mxp" xml:lang="en">20140430 Multiple Vulnerabilities in Cisco TelePresence System MXP Series</vuln:reference>
    </vuln:references>
    <vuln:summary>The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted packets, aka Bug ID CSCtq78722.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2160">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="AND">
        <cpe-lang:logical-test negate="false" operator="OR">
          <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_system_software:f9.3"/>
          <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_system_software:fnc9.3"/>
          <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_system_software:f9.1.2"/>
          <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_system_software:fnc9.1.2"/>
          <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_system_software:f9.1.1"/>
          <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_system_software:fnc9.1.1"/>
          <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_system_software:f9.1.0"/>
          <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_system_software:fnc9.1.0"/>
          <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_system_software:f9.0.2"/>
          <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_system_software:f9.0.1"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test negate="false" operator="OR">
          <cpe-lang:fact-ref name="cpe:/h:cisco:tandberg_2000_mxp:-"/>
          <cpe-lang:fact-ref name="cpe:/h:cisco:tandberg_990_mxp:-"/>
          <cpe-lang:fact-ref name="cpe:/h:cisco:tandberg_880_mxp:-"/>
          <cpe-lang:fact-ref name="cpe:/h:cisco:tandberg_770_mxp:-"/>
          <cpe-lang:fact-ref name="cpe:/h:cisco:tandberg_550_mxp:-"/>
          <cpe-lang:fact-ref name="cpe:/h:cisco:telepresence_system_codec_6000_mxp:-"/>
          <cpe-lang:fact-ref name="cpe:/h:cisco:telepresence_system_codec_3000_mxp:-"/>
          <cpe-lang:fact-ref name="cpe:/h:cisco:telepresence_system_edge_95_mxp:-"/>
          <cpe-lang:fact-ref name="cpe:/h:cisco:telepresence_system_edge_85_mxp:-"/>
          <cpe-lang:fact-ref name="cpe:/h:cisco:telepresence_system_edge_75_mxp:-"/>
          <cpe-lang:fact-ref name="cpe:/h:cisco:telepresence_system_1000_mxp:-"/>
          <cpe-lang:fact-ref name="cpe:/h:cisco:telepresence_system_1700_mxp:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:cisco:telepresence_system_software:f9.3</vuln:product>
      <vuln:product>cpe:/h:cisco:telepresence_system_codec_3000_mxp:-</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_system_software:fnc9.1.2</vuln:product>
      <vuln:product>cpe:/h:cisco:telepresence_system_edge_75_mxp:-</vuln:product>
      <vuln:product>cpe:/h:cisco:telepresence_system_edge_95_mxp:-</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_system_software:fnc9.1.1</vuln:product>
      <vuln:product>cpe:/h:cisco:tandberg_880_mxp:-</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_system_software:fnc9.1.0</vuln:product>
      <vuln:product>cpe:/h:cisco:telepresence_system_edge_85_mxp:-</vuln:product>
      <vuln:product>cpe:/h:cisco:telepresence_system_codec_6000_mxp:-</vuln:product>
      <vuln:product>cpe:/h:cisco:tandberg_550_mxp:-</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_system_software:f9.1.2</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_system_software:f9.1.1</vuln:product>
      <vuln:product>cpe:/h:cisco:tandberg_990_mxp:-</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_system_software:f9.1.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_system_software:fnc9.3</vuln:product>
      <vuln:product>cpe:/h:cisco:telepresence_system_1700_mxp:-</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_system_software:f9.0.1</vuln:product>
      <vuln:product>cpe:/h:cisco:tandberg_770_mxp:-</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_system_software:f9.0.2</vuln:product>
      <vuln:product>cpe:/h:cisco:telepresence_system_1000_mxp:-</vuln:product>
      <vuln:product>cpe:/h:cisco:tandberg_2000_mxp:-</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-2160</vuln:cve-id>
    <vuln:published-datetime>2014-05-02T06:55:08.100-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-05-02T12:40:58.290-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-05-02T12:40:57.930-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-20"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CISCO</vuln:source>
      <vuln:reference href="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140430-mxp" xml:lang="en">20140430 Multiple Vulnerabilities in Cisco TelePresence System MXP Series</vuln:reference>
    </vuln:references>
    <vuln:summary>The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted packets, aka Bug ID CSCty45745.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2161">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="AND">
        <cpe-lang:logical-test negate="false" operator="OR">
          <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_system_software:f9.3"/>
          <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_system_software:fnc9.3"/>
          <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_system_software:f9.1.2"/>
          <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_system_software:fnc9.1.2"/>
          <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_system_software:f9.1.1"/>
          <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_system_software:fnc9.1.1"/>
          <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_system_software:f9.1.0"/>
          <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_system_software:fnc9.1.0"/>
          <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_system_software:f9.0.2"/>
          <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_system_software:f9.0.1"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test negate="false" operator="OR">
          <cpe-lang:fact-ref name="cpe:/h:cisco:tandberg_2000_mxp:-"/>
          <cpe-lang:fact-ref name="cpe:/h:cisco:tandberg_990_mxp:-"/>
          <cpe-lang:fact-ref name="cpe:/h:cisco:tandberg_880_mxp:-"/>
          <cpe-lang:fact-ref name="cpe:/h:cisco:tandberg_770_mxp:-"/>
          <cpe-lang:fact-ref name="cpe:/h:cisco:tandberg_550_mxp:-"/>
          <cpe-lang:fact-ref name="cpe:/h:cisco:telepresence_system_codec_6000_mxp:-"/>
          <cpe-lang:fact-ref name="cpe:/h:cisco:telepresence_system_codec_3000_mxp:-"/>
          <cpe-lang:fact-ref name="cpe:/h:cisco:telepresence_system_edge_95_mxp:-"/>
          <cpe-lang:fact-ref name="cpe:/h:cisco:telepresence_system_edge_85_mxp:-"/>
          <cpe-lang:fact-ref name="cpe:/h:cisco:telepresence_system_edge_75_mxp:-"/>
          <cpe-lang:fact-ref name="cpe:/h:cisco:telepresence_system_1000_mxp:-"/>
          <cpe-lang:fact-ref name="cpe:/h:cisco:telepresence_system_1700_mxp:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:cisco:telepresence_system_software:f9.3</vuln:product>
      <vuln:product>cpe:/h:cisco:telepresence_system_codec_3000_mxp:-</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_system_software:fnc9.1.2</vuln:product>
      <vuln:product>cpe:/h:cisco:telepresence_system_edge_75_mxp:-</vuln:product>
      <vuln:product>cpe:/h:cisco:telepresence_system_edge_95_mxp:-</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_system_software:fnc9.1.1</vuln:product>
      <vuln:product>cpe:/h:cisco:tandberg_880_mxp:-</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_system_software:fnc9.1.0</vuln:product>
      <vuln:product>cpe:/h:cisco:telepresence_system_edge_85_mxp:-</vuln:product>
      <vuln:product>cpe:/h:cisco:telepresence_system_codec_6000_mxp:-</vuln:product>
      <vuln:product>cpe:/h:cisco:tandberg_550_mxp:-</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_system_software:f9.1.2</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_system_software:f9.1.1</vuln:product>
      <vuln:product>cpe:/h:cisco:tandberg_990_mxp:-</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_system_software:f9.1.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_system_software:fnc9.3</vuln:product>
      <vuln:product>cpe:/h:cisco:telepresence_system_1700_mxp:-</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_system_software:f9.0.1</vuln:product>
      <vuln:product>cpe:/h:cisco:tandberg_770_mxp:-</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_system_software:f9.0.2</vuln:product>
      <vuln:product>cpe:/h:cisco:telepresence_system_1000_mxp:-</vuln:product>
      <vuln:product>cpe:/h:cisco:tandberg_2000_mxp:-</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-2161</vuln:cve-id>
    <vuln:published-datetime>2014-05-02T06:55:08.117-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-05-02T12:43:40.373-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-05-02T12:43:40.200-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-20"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CISCO</vuln:source>
      <vuln:reference href="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140430-mxp" xml:lang="en">20140430 Multiple Vulnerabilities in Cisco TelePresence System MXP Series</vuln:reference>
    </vuln:references>
    <vuln:summary>The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted packets, aka Bug ID CSCty45731.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2162">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.7"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.6"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.2.2"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.2.3"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.2.4"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_te_software:6.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_te_software:4.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_te_software:4.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_te_software:4.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_te_software:4.1.3"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.1.2</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_te_software:4.1.2</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_te_software:4.1.3</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.1.1</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_te_software:4.1.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_te_software:4.1.1</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.0.4</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_te_software:6.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.0.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.0.1</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.2.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.2.1</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.2.2</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.2.3</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.2.4</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.3</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.0.2</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.4</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.1</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.2</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.5</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.7</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.0.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.6</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.0.1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-2162</vuln:cve-id>
    <vuln:published-datetime>2014-05-02T06:55:08.147-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-05-02T14:14:17.070-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-05-02T14:14:14.103-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-20"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CISCO</vuln:source>
      <vuln:reference href="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140430-tcte" xml:lang="en">20140430 Multiple Vulnerabilities in Cisco TelePresence TC and TE Software</vuln:reference>
    </vuln:references>
    <vuln:summary>The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCud29566.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2163">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.7"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.6"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.2.2"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.2.3"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.2.4"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_te_software:4.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_te_software:4.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_te_software:4.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_te_software:4.1.3"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.1.2</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_te_software:4.1.2</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_te_software:4.1.3</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.1.1</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_te_software:4.1.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_te_software:4.1.1</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.0.4</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.0.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.0.1</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.2.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.2.1</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.2.2</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.2.3</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.2.4</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.3</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.0.2</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.4</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.1</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.2</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.5</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.7</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.0.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.6</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.0.1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-2163</vuln:cve-id>
    <vuln:published-datetime>2014-05-02T06:55:08.180-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-05-02T14:13:53.820-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-05-02T14:13:50.697-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-20"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CISCO</vuln:source>
      <vuln:reference href="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140430-tcte" xml:lang="en">20140430 Multiple Vulnerabilities in Cisco TelePresence TC and TE Software</vuln:reference>
    </vuln:references>
    <vuln:summary>The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCua64961.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2164">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_te_software:6.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_te_software:4.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_te_software:4.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_te_software:4.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_te_software:4.1.3"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.7"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.6"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.2.2"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.2.3"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.2.4"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.1.2</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_te_software:4.1.2</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_te_software:4.1.3</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_te_software:4.1.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.1.1</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_te_software:4.1.1</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.0.4</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_te_software:6.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.0.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.0.1</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.2.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.2.1</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.2.2</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.2.3</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.2.4</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.0.2</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.3</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.4</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.1</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.2</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.5</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.7</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.0.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.0.1</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.6</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-2164</vuln:cve-id>
    <vuln:published-datetime>2014-05-02T06:55:08.193-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-05-02T14:13:20.710-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-05-02T14:13:17.883-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-20"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CISCO</vuln:source>
      <vuln:reference href="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140430-tcte" xml:lang="en">20140430 Multiple Vulnerabilities in Cisco TelePresence TC and TE Software</vuln:reference>
    </vuln:references>
    <vuln:summary>The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCuj94651.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2165">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_te_software:6.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_te_software:4.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_te_software:4.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_te_software:4.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_te_software:4.1.3"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.7"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.6"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.2.2"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.2.3"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.2.4"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.1.2</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_te_software:4.1.2</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_te_software:4.1.3</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_te_software:4.1.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.1.1</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_te_software:4.1.1</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.0.4</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_te_software:6.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.0.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.0.1</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.2.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.2.1</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.2.2</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.2.3</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.2.4</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.0.2</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.3</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.4</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.1</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.2</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.5</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.7</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.0.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.0.1</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.6</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-2165</vuln:cve-id>
    <vuln:published-datetime>2014-05-02T06:55:08.227-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-05-02T14:12:54.537-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-05-02T14:12:52.367-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-20"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CISCO</vuln:source>
      <vuln:reference href="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140430-tcte" xml:lang="en">20140430 Multiple Vulnerabilities in Cisco TelePresence TC and TE Software</vuln:reference>
    </vuln:references>
    <vuln:summary>The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCtq72699.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2166">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.2.2"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.2.3"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.2.4"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_te_software:4.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_te_software:4.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_te_software:4.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_te_software:4.1.3"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.1.2</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.2.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_te_software:4.1.2</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.2.1</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_te_software:4.1.3</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.2.2</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.1.1</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.2.3</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_te_software:4.1.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.2.4</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_te_software:4.1.1</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.0.4</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.0.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.0.1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-2166</vuln:cve-id>
    <vuln:published-datetime>2014-05-02T06:55:08.240-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-05-02T13:41:32.207-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-05-02T13:41:31.647-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-20"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CISCO</vuln:source>
      <vuln:reference href="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140430-tcte" xml:lang="en">20140430 Multiple Vulnerabilities in Cisco TelePresence TC and TE Software</vuln:reference>
    </vuln:references>
    <vuln:summary>The SIP implementation in Cisco TelePresence TC Software 4.x and TE Software 4.x allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCto70562.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2167">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.7"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.6"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.2.2"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.2.3"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.2.4"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_te_software:6.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_te_software:4.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_te_software:4.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_te_software:4.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_te_software:4.1.3"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.1.2</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_te_software:4.1.2</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_te_software:4.1.3</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.1.1</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_te_software:4.1.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_te_software:4.1.1</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.0.4</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_te_software:6.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.0.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.0.1</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.2.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.2.1</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.2.2</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.2.3</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.2.4</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.3</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.0.2</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.4</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.1</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.2</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.5</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.7</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.0.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.6</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.0.1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-2167</vuln:cve-id>
    <vuln:published-datetime>2014-05-02T06:55:08.273-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-05-02T14:12:16.380-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-05-02T14:12:14.223-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-20"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CISCO</vuln:source>
      <vuln:reference href="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140430-tcte" xml:lang="en">20140430 Multiple Vulnerabilities in Cisco TelePresence TC and TE Software</vuln:reference>
    </vuln:references>
    <vuln:summary>The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCua86589.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2168">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_te_software:6.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_te_software:4.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_te_software:4.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_te_software:4.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_te_software:4.1.3"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.7"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.6"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.2.2"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.2.3"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.2.4"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.1.2</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_te_software:4.1.2</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_te_software:4.1.3</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_te_software:4.1.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.1.1</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_te_software:4.1.1</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.0.4</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_te_software:6.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.0.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.0.1</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.2.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.2.1</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.2.2</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.2.3</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.2.4</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.0.2</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.3</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.4</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.1</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.2</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.5</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.7</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.0.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.0.1</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.6</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-2168</vuln:cve-id>
    <vuln:published-datetime>2014-05-02T06:55:08.287-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-05-02T14:11:50.380-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.6</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>HIGH</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-05-02T14:11:45.863-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-119"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CISCO</vuln:source>
      <vuln:reference href="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140430-tcte" xml:lang="en">20140430 Multiple Vulnerabilities in Cisco TelePresence TC and TE Software</vuln:reference>
    </vuln:references>
    <vuln:summary>Buffer overflow in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to execute arbitrary code via crafted DNS response packets, aka Bug ID CSCty44804.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2169">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.7"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:6.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:6.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:6.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:6.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:6.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.6"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.2.2"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.2.3"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.2.4"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_te_software:6.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_te_software:4.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_te_software:4.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_te_software:4.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_te_software:4.1.3"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.1.2</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_te_software:4.1.2</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_te_software:4.1.3</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_te_software:4.1.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.1.1</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_te_software:4.1.1</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.0.4</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_te_software:6.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.0.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.0.1</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.2.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.2.1</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.2.2</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.2.3</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.2.4</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.0.2</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.3</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.4</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.1</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.2</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:6.0.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.5</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:6.0.1</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:6.1.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.7</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:6.1.1</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.0.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:6.1.2</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.0.1</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.6</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-2169</vuln:cve-id>
    <vuln:published-datetime>2014-05-02T06:55:08.320-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-05-02T14:11:05.753-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-05-02T14:11:03.360-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-20"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CISCO</vuln:source>
      <vuln:reference href="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140430-tcte" xml:lang="en">20140430 Multiple Vulnerabilities in Cisco TelePresence TC and TE Software</vuln:reference>
    </vuln:references>
    <vuln:summary>Cisco TelePresence TC Software 4.x through 6.x before 6.2.0 and TE Software 4.x and 6.0 allow remote authenticated users to execute arbitrary commands by using the commands as arguments to internal system scripts, aka Bug ID CSCue60211.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2170">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_te_software:6.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_te_software:4.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_te_software:4.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_te_software:4.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_te_software:4.1.3"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:6.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.6"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.2.2"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.2.3"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.2.4"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.1.2</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_te_software:4.1.2</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_te_software:4.1.3</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_te_software:4.1.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.1.1</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_te_software:4.1.1</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.0.4</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_te_software:6.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.0.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.0.1</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.2.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.2.1</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.2.2</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.2.3</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.2.4</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.0.2</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.3</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.4</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.1</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.2</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:6.0.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.5</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.0.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.0.1</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.6</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-2170</vuln:cve-id>
    <vuln:published-datetime>2014-05-02T06:55:08.337-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-05-02T14:00:25.717-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-05-02T14:00:25.403-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-94"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CISCO</vuln:source>
      <vuln:reference href="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140430-tcte" xml:lang="en">20140430 Multiple Vulnerabilities in Cisco TelePresence TC and TE Software</vuln:reference>
    </vuln:references>
    <vuln:summary>Cisco TelePresence TC Software 4.x and 5.x before 5.1.7 and 6.x before 6.0.1 and TE Software 4.x and 6.0 allow remote authenticated users to execute arbitrary commands by using the commands as arguments to tshell (aka tcsh) scripts, aka Bug ID CSCue60202.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2171">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_te_software:6.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_te_software:6.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_te_software:4.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_te_software:4.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_te_software:4.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_te_software:4.1.3"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.7"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:6.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.6"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.2.2"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.2.3"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.2.4"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:cisco:telepresence_te_software:6.0.1</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.1.2</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_te_software:4.1.2</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_te_software:4.1.3</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_te_software:4.1.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.1.1</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_te_software:4.1.1</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.0.4</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_te_software:6.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.0.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.0.1</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.2.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.2.1</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.2.2</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.2.3</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.2.4</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.0.2</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.3</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.4</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.1</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.2</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:6.0.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.5</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.7</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.0.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.0.1</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.6</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-2171</vuln:cve-id>
    <vuln:published-datetime>2014-05-02T06:55:08.367-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-05-02T14:10:31.783-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-05-02T14:10:29.673-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-119"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CISCO</vuln:source>
      <vuln:reference href="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140430-tcte" xml:lang="en">20140430 Multiple Vulnerabilities in Cisco TelePresence TC and TE Software</vuln:reference>
    </vuln:references>
    <vuln:summary>Heap-based buffer overflow in Cisco TelePresence TC Software 4.x through 6.x before 6.0.1 and TE Software 4.x and 6.0.x before 6.0.2 allows remote attackers to execute arbitrary code via crafted SIP packets, aka Bug ID CSCud81796.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2172">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.7"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.6"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.2.2"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.2.3"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.2.4"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_te_software:6.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_te_software:4.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_te_software:4.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_te_software:4.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_te_software:4.1.3"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.1.2</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_te_software:4.1.2</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_te_software:4.1.3</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.1.1</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_te_software:4.1.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_te_software:4.1.1</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.0.4</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_te_software:6.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.0.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.0.1</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.2.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.2.1</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.2.2</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.2.3</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.2.4</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.3</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.0.2</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.4</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.1</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.2</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.5</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.7</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.0.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.6</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.0.1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-2172</vuln:cve-id>
    <vuln:published-datetime>2014-05-02T06:55:08.383-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-05-02T14:09:54.500-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.6</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-05-02T14:09:54.360-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-119"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CISCO</vuln:source>
      <vuln:reference href="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140430-tcte" xml:lang="en">20140430 Multiple Vulnerabilities in Cisco TelePresence TC and TE Software</vuln:reference>
    </vuln:references>
    <vuln:summary>Buffer overflow in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows local users to gain privileges by leveraging improper handling of the u-boot compiler flag for internal executable files, aka Bug ID CSCub67693.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2173">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_te_software:6.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_te_software:4.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_te_software:4.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_te_software:4.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_te_software:4.1.3"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.7"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.6"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.2.2"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.2.3"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.2.4"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.1.2</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_te_software:4.1.2</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_te_software:4.1.3</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_te_software:4.1.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.1.1</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_te_software:4.1.1</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.0.4</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_te_software:6.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.0.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.0.1</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.2.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.2.1</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.2.2</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.2.3</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.2.4</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.0.2</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.3</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.4</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.1</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.2</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.5</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.7</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.0.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.0.1</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.6</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-2173</vuln:cve-id>
    <vuln:published-datetime>2014-05-02T06:55:08.413-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-05-02T14:15:25.027-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.2</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-05-02T14:15:24.760-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-264"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CISCO</vuln:source>
      <vuln:reference href="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140430-tcte" xml:lang="en">20140430 Multiple Vulnerabilities in Cisco TelePresence TC and TE Software</vuln:reference>
    </vuln:references>
    <vuln:summary>Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 do not properly restrict access to the serial port, which allows local users to gain privileges via unspecified commands, aka Bug ID CSCub67692.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2175">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.7"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:5.1.6"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.2.2"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.2.3"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_tc_software:4.2.4"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_te_software:6.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_te_software:4.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_te_software:4.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_te_software:4.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:telepresence_te_software:4.1.3"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.1.2</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_te_software:4.1.2</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_te_software:4.1.3</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.1.1</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_te_software:4.1.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_te_software:4.1.1</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.0.4</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_te_software:6.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.0.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.0.1</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.2.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.2.1</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.2.2</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.2.3</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:4.2.4</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.3</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.0.2</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.4</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.1</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.2</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.5</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.7</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.0.0</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.1.6</vuln:product>
      <vuln:product>cpe:/a:cisco:telepresence_tc_software:5.0.1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-2175</vuln:cve-id>
    <vuln:published-datetime>2014-05-02T06:55:08.430-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-05-02T14:17:51.313-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-05-02T14:17:51.077-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-20"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CISCO</vuln:source>
      <vuln:reference href="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140430-tcte" xml:lang="en">20140430 Multiple Vulnerabilities in Cisco TelePresence TC and TE Software</vuln:reference>
    </vuln:references>
    <vuln:summary>Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allow remote attackers to cause a denial of service (memory consumption) via crafted H.225 packets, aka Bug ID CSCtq78849.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2180">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:cisco:unified_contact_center_enterprise"/>
        <cpe-lang:fact-ref name="cpe:/a:cisco:unified_contact_center_express_editor_software:-"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:cisco:unified_contact_center_enterprise</vuln:product>
      <vuln:product>cpe:/a:cisco:unified_contact_center_express_editor_software:-</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-2180</vuln:cve-id>
    <vuln:published-datetime>2014-04-29T06:37:03.967-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-29T11:42:38.457-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-29T11:42:38.363-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-20"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CISCO</vuln:source>
      <vuln:reference href="http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2180" xml:lang="en">20140428 Cisco Unified Contact Center Express Arbitrary File Upload Vulnerability</vuln:reference>
    </vuln:references>
    <vuln:summary>The Document Management component in Cisco Unified Contact Center Express does not properly validate a parameter, which allows remote authenticated users to upload files to arbitrary pathnames via a crafted HTTP request, aka Bug ID CSCun74133.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2182">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:cisco:adaptive_security_appliance_software:-"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:cisco:adaptive_security_appliance_software:-</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-2182</vuln:cve-id>
    <vuln:published-datetime>2014-04-29T06:37:03.997-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-29T11:46:24.903-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.1</cvss:score>
        <cvss:access-vector>ADJACENT_NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-29T11:46:24.870-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-20"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CISCO</vuln:source>
      <vuln:reference href="http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2182" xml:lang="en">20140428 Cisco ASA DHCPv6 Denial of Service Vulnerability</vuln:reference>
    </vuln:references>
    <vuln:summary>Cisco Adaptive Security Appliance (ASA) Software, when DHCPv6 replay is configured, allows remote attackers to cause a denial of service (device reload) via a crafted DHCPv6 packet, aka Bug ID CSCun45520.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2183">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="AND">
        <cpe-lang:logical-test negate="false" operator="OR">
          <cpe-lang:fact-ref name="cpe:/o:cisco:ios_xe:3.10.2s"/>
          <cpe-lang:fact-ref name="cpe:/o:cisco:ios_xe:3.10.1s1"/>
          <cpe-lang:fact-ref name="cpe:/o:cisco:ios_xe:3.10.1s"/>
          <cpe-lang:fact-ref name="cpe:/o:cisco:ios_xe:3.10.0s"/>
          <cpe-lang:fact-ref name="cpe:/o:cisco:ios_xe:3.10"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test negate="false" operator="OR">
          <cpe-lang:fact-ref name="cpe:/h:cisco:asr_1001_router:-"/>
          <cpe-lang:fact-ref name="cpe:/h:cisco:asr_1002-x_router:-"/>
          <cpe-lang:fact-ref name="cpe:/h:cisco:asr_1002_fixed_router:-"/>
          <cpe-lang:fact-ref name="cpe:/h:cisco:asr_1002_router:-"/>
          <cpe-lang:fact-ref name="cpe:/h:cisco:asr_1004_router:-"/>
          <cpe-lang:fact-ref name="cpe:/h:cisco:asr_1006_router:-"/>
          <cpe-lang:fact-ref name="cpe:/h:cisco:asr_1013_router:-"/>
          <cpe-lang:fact-ref name="cpe:/h:cisco:asr_1023_router:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/o:cisco:ios_xe:3.10.1s1</vuln:product>
      <vuln:product>cpe:/h:cisco:asr_1006_router:-</vuln:product>
      <vuln:product>cpe:/h:cisco:asr_1023_router:-</vuln:product>
      <vuln:product>cpe:/o:cisco:ios_xe:3.10.0s</vuln:product>
      <vuln:product>cpe:/h:cisco:asr_1001_router:-</vuln:product>
      <vuln:product>cpe:/h:cisco:asr_1002-x_router:-</vuln:product>
      <vuln:product>cpe:/h:cisco:asr_1004_router:-</vuln:product>
      <vuln:product>cpe:/o:cisco:ios_xe:3.10</vuln:product>
      <vuln:product>cpe:/h:cisco:asr_1013_router:-</vuln:product>
      <vuln:product>cpe:/h:cisco:asr_1002_fixed_router:-</vuln:product>
      <vuln:product>cpe:/h:cisco:asr_1002_router:-</vuln:product>
      <vuln:product>cpe:/o:cisco:ios_xe:3.10.1s</vuln:product>
      <vuln:product>cpe:/o:cisco:ios_xe:3.10.2s</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-2183</vuln:cve-id>
    <vuln:published-datetime>2014-04-29T06:37:04.013-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-29T12:19:28.250-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-29T12:19:27.877-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-20"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://tools.cisco.com/security/center/viewAlert.x?alertId=33971" xml:lang="en">http://tools.cisco.com/security/center/viewAlert.x?alertId=33971</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CISCO</vuln:source>
      <vuln:reference href="http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2183" xml:lang="en">20140428 Cisco IOS XE Software Malformed L2TP Packet Vulnerability</vuln:reference>
    </vuln:references>
    <vuln:summary>The L2TP module in Cisco IOS XE 3.10S(.2) and earlier on ASR 1000 routers allows remote authenticated users to cause a denial of service (ESP card reload) via a malformed L2TP packet, aka Bug ID CSCun09973.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2184">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:cisco:unified_communications_manager"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:cisco:unified_communications_manager</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-2184</vuln:cve-id>
    <vuln:published-datetime>2014-04-29T06:37:04.047-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-29T12:08:03.257-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-29T12:08:03.210-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-20"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CISCO</vuln:source>
      <vuln:reference href="http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2184" xml:lang="en">20140428 Cisco Unified Communications Manager Sensitive Information Disclosure Vulnerability</vuln:reference>
    </vuln:references>
    <vuln:summary>The IP Manager Assistant (IPMA) component in Cisco Unified Communications Manager (Unified CM) allows remote attackers to obtain sensitive information via a crafted URL, aka Bug ID CSCun74352.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2185">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:cisco:unified_communications_manager"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:cisco:unified_communications_manager</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-2185</vuln:cve-id>
    <vuln:published-datetime>2014-04-29T06:37:04.077-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-29T12:08:08.930-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-29T12:08:08.900-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-200"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CISCO</vuln:source>
      <vuln:reference href="http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2185" xml:lang="en">20140428 Cisco Unified Communications Manager CDR Management Vulnerability</vuln:reference>
    </vuln:references>
    <vuln:summary>The Call Detail Records (CDR) Management component in Cisco Unified Communications Manager (Unified CM) allows remote authenticated users to obtain sensitive information by reading extraneous fields in an HTML document, aka Bug ID CSCun74374.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2186">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:cisco:webex_meetings_server:-"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:cisco:webex_meetings_server:-</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-2186</vuln:cve-id>
    <vuln:published-datetime>2014-04-30T06:49:05.207-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-30T13:56:16.513-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-30T13:56:16.467-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-352"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CISCO</vuln:source>
      <vuln:reference href="http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2186" xml:lang="en">20140429 Cisco WebEx Meetings Server Cross-Site Request Forgery Vulnerability</vuln:reference>
    </vuln:references>
    <vuln:summary>Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco WebEx Meetings Server allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuj81777.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2260">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:ajenti:ajenti:1.2.13"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:ajenti:ajenti:1.2.13</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-2260</vuln:cve-id>
    <vuln:published-datetime>2014-04-30T19:58:26.733-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-05-01T11:42:19.917-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>3.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-05-01T11:42:19.870-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="PATCH">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://github.com/Eugeny/ajenti/commit/3270fd1d78391bb847b4c9ce37cf921f485b1310" xml:lang="en">https://github.com/Eugeny/ajenti/commit/3270fd1d78391bb847b4c9ce37cf921f485b1310</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://github.com/Eugeny/ajenti/issues/233" xml:lang="en">https://github.com/Eugeny/ajenti/issues/233</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/64982" xml:lang="en">64982</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>OSVDB</vuln:source>
      <vuln:reference href="http://www.osvdb.org/102174" xml:lang="en">102174</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://packetstormsecurity.com/files/124804/Ajenti-1.2.13-Cross-Site-Scripting.html" xml:lang="en">http://packetstormsecurity.com/files/124804/Ajenti-1.2.13-Cross-Site-Scripting.html</vuln:reference>
    </vuln:references>
    <vuln:summary>Cross-site scripting (XSS) vulnerability in plugins/main/content/js/ajenti.coffee in Eugene Pankov Ajenti 1.2.13 allows remote authenticated users to inject arbitrary web script or HTML via the command field in the Cron functionality.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2285">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:net-snmp:net-snmp:5.7.3:pre1"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:net-snmp:net-snmp:5.7.3:pre1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-2285</vuln:cve-id>
    <vuln:published-datetime>2014-04-27T18:55:05.990-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-28T15:43:31.097-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-28T15:43:31.067-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-20"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1072778" xml:lang="en">https://bugzilla.redhat.com/show_bug.cgi?id=1072778</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1072044" xml:lang="en">https://bugzilla.redhat.com/show_bug.cgi?id=1072044</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.nntp.perl.org/group/perl.perl5.porters/2006/09/msg116250.html" xml:lang="en">http://www.nntp.perl.org/group/perl.perl5.porters/2006/09/msg116250.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://sourceforge.net/p/net-snmp/patches/1275/" xml:lang="en">http://sourceforge.net/p/net-snmp/patches/1275/</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-updates/2014-03/msg00061.html" xml:lang="en">openSUSE-SU-2014:0399</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-updates/2014-03/msg00060.html" xml:lang="en">openSUSE-SU-2014:0398</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://comments.gmane.org/gmane.comp.security.oss.general/12284" xml:lang="en">[oss-security] 20140305 CVE request for two net-snmp remote DoS flaws</vuln:reference>
    </vuln:references>
    <vuln:summary>The perl_trapd_handler function in perl/TrapReceiver/TrapReceiver.xs in Net-SNMP 5.7.3.pre3 and earlier, when using certain Perl versions, allows remote attackers to cause a denial of service (snmptrapd crash) via an empty community string in an SNMP trap, which triggers a NULL pointer dereference within the newSVpv function in Perl.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2322">
    <vuln:cve-id>CVE-2014-2322</vuln:cve-id>
    <vuln:published-datetime>2014-05-02T10:55:07.217-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-05-02T10:55:07.217-04:00</vuln:last-modified-datetime>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.vapid.dhs.org/advisories/arabic-ruby-gem.html" xml:lang="en">http://www.vapid.dhs.org/advisories/arabic-ruby-gem.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://www.openwall.com/lists/oss-security/2014/03/12/6" xml:lang="en">[oss-security] 20140312 Re: Remote Command Injection in Arabic Prawn 0.0.1 Ruby Gem</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://www.openwall.com/lists/oss-security/2014/03/10/8" xml:lang="en">[oss-security] 20140310 Remote Command Injection in Arabic Prawn 0.0.1 Ruby Gem</vuln:reference>
    </vuln:references>
    <vuln:summary>lib/string_utf_support.rb in the Arabic Prawn 0.0.1 gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) downloaded_file or (2) url variable.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2383">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:dompdf:dompdf:0.6.0:beta3"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:dompdf:dompdf:0.6.0:beta3</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-2383</vuln:cve-id>
    <vuln:published-datetime>2014-04-28T10:09:06.707-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-29T08:18:44.760-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-29T08:18:44.683-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-200"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-2383/" xml:lang="en">https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-2383/</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://github.com/dompdf/dompdf/commit/23a693993299e669306929e3d49a4a1f7b3fb028" xml:lang="en">https://github.com/dompdf/dompdf/commit/23a693993299e669306929e3d49a4a1f7b3fb028</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/archive/1/archive/1/531912/100/0/threaded" xml:lang="en">20140423 CVE-2014-2383 - Arbitrary file read in dompdf</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>FULLDISC</vuln:source>
      <vuln:reference href="http://seclists.org/fulldisclosure/2014/Apr/258" xml:lang="en">20140423 CVE-2014-2383 - Arbitrary file read in dompdf</vuln:reference>
    </vuln:references>
    <vuln:summary>dompdf.php in dompdf before 0.6.1, when DOMPDF_ENABLE_PHP is enabled, allows context-dependent attackers to bypass chroot protections and read arbitrary files via a PHP protocol and wrappers in the input_file parameter, as demonstrated by a php://filter/read=convert.base64-encode/resource in the input_file parameter.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2545">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:tibco:slingshot:1.7.0"/>
        <cpe-lang:fact-ref name="cpe:/a:tibco:slingshot:1.8.1"/>
        <cpe-lang:fact-ref name="cpe:/a:tibco:slingshot:1.9.0"/>
        <cpe-lang:fact-ref name="cpe:/a:tibco:slingshot:1.8.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:tibco:vault:1.0.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:tibco:managed_file_transfer_command_center:7.2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:tibco:managed_file_transfer_command_center:7.2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:tibco:managed_file_transfer_command_center:7.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:tibco:managed_file_transfer_command_center:7.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:tibco:managed_file_transfer_command_center:7.0"/>
        <cpe-lang:fact-ref name="cpe:/a:tibco:managed_file_transfer_command_center:6.7"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:tibco:managed_file_transfer_internet_server:7.2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:tibco:managed_file_transfer_internet_server:7.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:tibco:managed_file_transfer_internet_server:7.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:tibco:managed_file_transfer_internet_server:7.0"/>
        <cpe-lang:fact-ref name="cpe:/a:tibco:managed_file_transfer_internet_server:6.7"/>
        <cpe-lang:fact-ref name="cpe:/a:tibco:managed_file_transfer_internet_server:7.2.1"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:tibco:managed_file_transfer_internet_server:7.0</vuln:product>
      <vuln:product>cpe:/a:tibco:slingshot:1.9.0</vuln:product>
      <vuln:product>cpe:/a:tibco:managed_file_transfer_command_center:6.7</vuln:product>
      <vuln:product>cpe:/a:tibco:managed_file_transfer_command_center:7.2.0</vuln:product>
      <vuln:product>cpe:/a:tibco:managed_file_transfer_command_center:7.2.1</vuln:product>
      <vuln:product>cpe:/a:tibco:slingshot:1.7.0</vuln:product>
      <vuln:product>cpe:/a:tibco:vault:1.0.0</vuln:product>
      <vuln:product>cpe:/a:tibco:managed_file_transfer_command_center:7.1.0</vuln:product>
      <vuln:product>cpe:/a:tibco:managed_file_transfer_internet_server:7.0.1</vuln:product>
      <vuln:product>cpe:/a:tibco:managed_file_transfer_internet_server:7.1.0</vuln:product>
      <vuln:product>cpe:/a:tibco:managed_file_transfer_internet_server:7.2.0</vuln:product>
      <vuln:product>cpe:/a:tibco:managed_file_transfer_internet_server:7.2.1</vuln:product>
      <vuln:product>cpe:/a:tibco:managed_file_transfer_internet_server:6.7</vuln:product>
      <vuln:product>cpe:/a:tibco:managed_file_transfer_command_center:7.0</vuln:product>
      <vuln:product>cpe:/a:tibco:slingshot:1.8.0</vuln:product>
      <vuln:product>cpe:/a:tibco:slingshot:1.8.1</vuln:product>
      <vuln:product>cpe:/a:tibco:managed_file_transfer_command_center:7.0.1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-2545</vuln:cve-id>
    <vuln:published-datetime>2014-04-30T06:49:05.380-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-05-01T15:15:07.567-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-30T14:17:44.543-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-200"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.tibco.com/multimedia/mft_advisory_20140429_tcm8-21013.txt" xml:lang="en">http://www.tibco.com/multimedia/mft_advisory_20140429_tcm8-21013.txt</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.tibco.com/mk/advisory.jsp" xml:lang="en">http://www.tibco.com/mk/advisory.jsp</vuln:reference>
    </vuln:references>
    <vuln:summary>TIBCO Managed File Transfer Internet Server before 7.2.2, Managed File Transfer Command Center before 7.2.2, Slingshot before 1.9.1, and Vault before 1.0.1 allow remote attackers to obtain sensitive information via a crafted HTTP request.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2565">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="AND">
        <cpe-lang:logical-test negate="false" operator="OR">
          <cpe-lang:fact-ref name="cpe:/a:bluecoat:content_analysis_system_software:1.1.2.1"/>
          <cpe-lang:fact-ref name="cpe:/a:bluecoat:content_analysis_system_software:1.1.1.1"/>
          <cpe-lang:fact-ref name="cpe:/a:bluecoat:content_analysis_system_software:1.1"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test negate="false" operator="OR">
          <cpe-lang:fact-ref name="cpe:/h:bluecoat:content_analysis_system:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:bluecoat:content_analysis_system_software:1.1.2.1</vuln:product>
      <vuln:product>cpe:/h:bluecoat:content_analysis_system:-</vuln:product>
      <vuln:product>cpe:/a:bluecoat:content_analysis_system_software:1.1</vuln:product>
      <vuln:product>cpe:/a:bluecoat:content_analysis_system_software:1.1.1.1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-2565</vuln:cve-id>
    <vuln:published-datetime>2014-04-30T10:22:06.377-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-05-01T09:49:31.517-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.5</cvss:score>
        <cvss:access-vector>ADJACENT_NETWORK</cvss:access-vector>
        <cvss:access-complexity>HIGH</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-05-01T09:49:31.437-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-78"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://kb.bluecoat.com/index?page=content&amp;id=SA78&amp;actp=LIST" xml:lang="en">https://kb.bluecoat.com/index?page=content&amp;id=SA78&amp;actp=LIST</vuln:reference>
    </vuln:references>
    <vuln:summary>The commandline interface in Blue Coat Content Analysis System (CAS) 1.1 before 1.1.4.2 allows remote administrators to execute arbitrary commands via unspecified vectors, related to "command injection."</vuln:summary>
  </entry>
  <entry id="CVE-2014-2579">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:xcloner:xcloner:3.5::standalone"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:xcloner:xcloner:3.5::standalone</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-2579</vuln:cve-id>
    <vuln:published-datetime>2014-04-25T16:55:03.007-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-28T08:01:35.070-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.6</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>HIGH</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-28T08:01:34.070-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-352"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://www.htbridge.com/advisory/HTB23207" xml:lang="en">https://www.htbridge.com/advisory/HTB23207</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/archive/1/archive/1/531780/100/0/threaded" xml:lang="en">20140409 &amp;ETH;&amp;iexcl;ross-Site Request Forgery (CSRF) in XCloner Standalone</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>EXPLOIT-DB</vuln:source>
      <vuln:reference href="http://www.exploit-db.com/exploits/32790" xml:lang="en">32790</vuln:reference>
    </vuln:references>
    <vuln:summary>Multiple cross-site request forgery (CSRF) vulnerabilities in XCloner Standalone 3.5 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) change the administrator password via the config task to index2.php or (2) when the enable_db_backup and sql_mem options are enabled, access the database backup functionality via the dbbackup_comp parameter in the generate action to index2.php.  NOTE: vector 2 might be a duplicate of CVE-2014-2340, which is for the XCloner Wordpress plugin.  NOTE: remote attackers can leverage CVE-2014-2996 with vector 2 to execute arbitrary commands.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2601">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/o:hp:integrated_lights-out_2_firmware:1.00"/>
        <cpe-lang:fact-ref name="cpe:/o:hp:integrated_lights-out_2_firmware:1.10"/>
        <cpe-lang:fact-ref name="cpe:/o:hp:integrated_lights-out_2_firmware:1.20"/>
        <cpe-lang:fact-ref name="cpe:/o:hp:integrated_lights-out_2_firmware:1.30"/>
        <cpe-lang:fact-ref name="cpe:/o:hp:integrated_lights-out_2_firmware:1.70"/>
        <cpe-lang:fact-ref name="cpe:/o:hp:integrated_lights-out_2_firmware:1.75"/>
        <cpe-lang:fact-ref name="cpe:/o:hp:integrated_lights-out_2_firmware:2.23"/>
        <cpe-lang:fact-ref name="cpe:/o:hp:integrated_lights-out_2_firmware:2.22"/>
        <cpe-lang:fact-ref name="cpe:/o:hp:integrated_lights-out_2_firmware:2.20"/>
        <cpe-lang:fact-ref name="cpe:/o:hp:integrated_lights-out_2_firmware:2.15"/>
        <cpe-lang:fact-ref name="cpe:/o:hp:integrated_lights-out_2_firmware:2.12"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/o:hp:integrated_lights-out_2_firmware:1.75</vuln:product>
      <vuln:product>cpe:/o:hp:integrated_lights-out_2_firmware:1.30</vuln:product>
      <vuln:product>cpe:/o:hp:integrated_lights-out_2_firmware:1.20</vuln:product>
      <vuln:product>cpe:/o:hp:integrated_lights-out_2_firmware:1.00</vuln:product>
      <vuln:product>cpe:/o:hp:integrated_lights-out_2_firmware:1.10</vuln:product>
      <vuln:product>cpe:/o:hp:integrated_lights-out_2_firmware:2.22</vuln:product>
      <vuln:product>cpe:/o:hp:integrated_lights-out_2_firmware:2.23</vuln:product>
      <vuln:product>cpe:/o:hp:integrated_lights-out_2_firmware:2.20</vuln:product>
      <vuln:product>cpe:/o:hp:integrated_lights-out_2_firmware:2.12</vuln:product>
      <vuln:product>cpe:/o:hp:integrated_lights-out_2_firmware:2.15</vuln:product>
      <vuln:product>cpe:/o:hp:integrated_lights-out_2_firmware:1.70</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-2601</vuln:cve-id>
    <vuln:published-datetime>2014-04-24T19:55:05.580-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-25T09:20:31.153-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-25T09:20:31.043-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04244787" xml:lang="en">SSRT101509</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04244787" xml:lang="en">HPSBHF03006</vuln:reference>
    </vuln:references>
    <vuln:summary>The server in HP Integrated Lights-Out 2 (aka iLO 2) 2.23 and earlier allows remote attackers to cause a denial of service via crafted HTTPS traffic, as demonstrated by traffic from a CVE-2014-0160 vulnerability-assessment tool.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2657">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:papercut:papercut_mf:14.1"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:papercut:papercut_mf:14.1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-2657</vuln:cve-id>
    <vuln:published-datetime>2014-04-28T10:09:07.080-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-29T09:08:14.863-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-29T09:08:14.817-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="http://xforce.iss.net/xforce/xfdb/92650" xml:lang="en">papercut-cve20142657-unspec(92650)</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.papercut-mf.com/release-history/" xml:lang="en">http://www.papercut-mf.com/release-history/</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in the print release functionality in PaperCut MF 14.1 (Build 26983) has unknown impact and remote vectors, related to embedded MFPs.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2658">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:papercut:papercut_mf:14.1"/>
        <cpe-lang:fact-ref name="cpe:/a:papercut:papercut_ng:14.1"/>
        <cpe-lang:fact-ref name="cpe:/a:papercut:papercut_mf:14.0"/>
        <cpe-lang:fact-ref name="cpe:/a:papercut:papercut_ng:14.0"/>
        <cpe-lang:fact-ref name="cpe:/a:papercut:papercut_ng:13.5"/>
        <cpe-lang:fact-ref name="cpe:/a:papercut:papercut_mf:13.5"/>
        <cpe-lang:fact-ref name="cpe:/a:papercut:papercut_mf:13.4"/>
        <cpe-lang:fact-ref name="cpe:/a:papercut:papercut_ng:13.4"/>
        <cpe-lang:fact-ref name="cpe:/a:papercut:papercut_mf:13.3"/>
        <cpe-lang:fact-ref name="cpe:/a:papercut:papercut_ng:13.3"/>
        <cpe-lang:fact-ref name="cpe:/a:papercut:papercut_mf:13.2"/>
        <cpe-lang:fact-ref name="cpe:/a:papercut:papercut_mf:13.1"/>
        <cpe-lang:fact-ref name="cpe:/a:papercut:papercut_mf:13.0"/>
        <cpe-lang:fact-ref name="cpe:/a:papercut:papercut_ng:13.2"/>
        <cpe-lang:fact-ref name="cpe:/a:papercut:papercut_ng:13.1"/>
        <cpe-lang:fact-ref name="cpe:/a:papercut:papercut_ng:13.0"/>
        <cpe-lang:fact-ref name="cpe:/a:papercut:papercut_mf:12.5"/>
        <cpe-lang:fact-ref name="cpe:/a:papercut:papercut_mf:12.4"/>
        <cpe-lang:fact-ref name="cpe:/a:papercut:papercut_mf:12.3"/>
        <cpe-lang:fact-ref name="cpe:/a:papercut:papercut_mf:12.2"/>
        <cpe-lang:fact-ref name="cpe:/a:papercut:papercut_mf:12.1"/>
        <cpe-lang:fact-ref name="cpe:/a:papercut:papercut_mf:12.0"/>
        <cpe-lang:fact-ref name="cpe:/a:papercut:papercut_ng:12.5"/>
        <cpe-lang:fact-ref name="cpe:/a:papercut:papercut_ng:12.4"/>
        <cpe-lang:fact-ref name="cpe:/a:papercut:papercut_ng:12.3"/>
        <cpe-lang:fact-ref name="cpe:/a:papercut:papercut_ng:12.2"/>
        <cpe-lang:fact-ref name="cpe:/a:papercut:papercut_ng:12.1"/>
        <cpe-lang:fact-ref name="cpe:/a:papercut:papercut_ng:12.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:papercut:papercut_mf:14.0</vuln:product>
      <vuln:product>cpe:/a:papercut:papercut_mf:14.1</vuln:product>
      <vuln:product>cpe:/a:papercut:papercut_mf:13.0</vuln:product>
      <vuln:product>cpe:/a:papercut:papercut_ng:13.5</vuln:product>
      <vuln:product>cpe:/a:papercut:papercut_mf:13.2</vuln:product>
      <vuln:product>cpe:/a:papercut:papercut_ng:13.4</vuln:product>
      <vuln:product>cpe:/a:papercut:papercut_ng:12.4</vuln:product>
      <vuln:product>cpe:/a:papercut:papercut_mf:13.1</vuln:product>
      <vuln:product>cpe:/a:papercut:papercut_ng:12.2</vuln:product>
      <vuln:product>cpe:/a:papercut:papercut_ng:12.3</vuln:product>
      <vuln:product>cpe:/a:papercut:papercut_mf:13.3</vuln:product>
      <vuln:product>cpe:/a:papercut:papercut_ng:12.0</vuln:product>
      <vuln:product>cpe:/a:papercut:papercut_ng:12.1</vuln:product>
      <vuln:product>cpe:/a:papercut:papercut_mf:12.5</vuln:product>
      <vuln:product>cpe:/a:papercut:papercut_ng:14.0</vuln:product>
      <vuln:product>cpe:/a:papercut:papercut_ng:14.1</vuln:product>
      <vuln:product>cpe:/a:papercut:papercut_ng:13.2</vuln:product>
      <vuln:product>cpe:/a:papercut:papercut_mf:12.4</vuln:product>
      <vuln:product>cpe:/a:papercut:papercut_ng:13.1</vuln:product>
      <vuln:product>cpe:/a:papercut:papercut_ng:13.0</vuln:product>
      <vuln:product>cpe:/a:papercut:papercut_mf:12.0</vuln:product>
      <vuln:product>cpe:/a:papercut:papercut_mf:12.1</vuln:product>
      <vuln:product>cpe:/a:papercut:papercut_mf:12.2</vuln:product>
      <vuln:product>cpe:/a:papercut:papercut_ng:13.3</vuln:product>
      <vuln:product>cpe:/a:papercut:papercut_mf:12.3</vuln:product>
      <vuln:product>cpe:/a:papercut:papercut_ng:12.5</vuln:product>
      <vuln:product>cpe:/a:papercut:papercut_mf:13.5</vuln:product>
      <vuln:product>cpe:/a:papercut:papercut_mf:13.4</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-2658</vuln:cve-id>
    <vuln:published-datetime>2014-04-28T10:09:07.517-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-29T09:03:33.383-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-29T09:03:33.070-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="http://xforce.iss.net/xforce/xfdb/92649" xml:lang="en">papercut-cve20142658-dos(92649)</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.papercut.com/release-history/" xml:lang="en">http://www.papercut.com/release-history/</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.papercut-mf.com/release-history/" xml:lang="en">http://www.papercut-mf.com/release-history/</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/58037" xml:lang="en">58037</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in Papercut MF and NG before 14.1 (Build 26983) allows attacker to cause a denial of service via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2715">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:videowhisper:videowhisper:7.x-1.3::~~~drupal~~"/>
        <cpe-lang:fact-ref name="cpe:/a:videowhisper:videowhisper:7.x-1.1::~~~drupal~~"/>
        <cpe-lang:fact-ref name="cpe:/a:videowhisper:videowhisper:7.x-1.0::~~~drupal~~"/>
        <cpe-lang:fact-ref name="cpe:/a:videowhisper:videowhisper:7.x-1.x:dev:~~~drupal~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:videowhisper:videowhisper:7.x-1.3::~~~drupal~~</vuln:product>
      <vuln:product>cpe:/a:videowhisper:videowhisper:7.x-1.0::~~~drupal~~</vuln:product>
      <vuln:product>cpe:/a:videowhisper:videowhisper:7.x-1.1::~~~drupal~~</vuln:product>
      <vuln:product>cpe:/a:videowhisper:videowhisper:7.x-1.x:dev:~~~drupal~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-2715</vuln:cve-id>
    <vuln:published-datetime>2014-04-28T10:09:07.643-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-29T08:57:40.247-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-29T08:57:40.170-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/archive/1/archive/1/531935/100/0/threaded" xml:lang="en">20140425 [CVE-2014-2715] Cross-site scripting (XSS) vulnerability in Videowhisper</vuln:reference>
    </vuln:references>
    <vuln:summary>Multiple cross-site scripting (XSS) vulnerabilities in vwrooms\templates\logout.tpl.php in the VideoWhisper Webcam plugins for Drupal 7.x allow remote attackers to inject arbitrary web script or HTML via the (1) module or (2) message parameter to index.php.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2729">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:ektron:ektron_content_management_system:8.7.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:ektron:ektron_content_management_system:8.7.0</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-2729</vuln:cve-id>
    <vuln:published-datetime>2014-04-25T10:15:30.517-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-25T13:51:50.370-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>3.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-25T13:51:50.260-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/archive/1/archive/1/531853/100/0/threaded" xml:lang="en">20140416 [SECURITY] Stored Cross Site Scripting in Ektron CMS 8.7</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/archive/1/archive/1/531852/100/0/threaded" xml:lang="en">20140416 [Security Advisory] Stored Cross Site Scripting in Ektron CMS 8.7</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://packetstormsecurity.com/files/126187/Ektron-CMS-8.7-Cross-Site-Scripting.html" xml:lang="en">http://packetstormsecurity.com/files/126187/Ektron-CMS-8.7-Cross-Site-Scripting.html</vuln:reference>
    </vuln:references>
    <vuln:summary>Cross-site scripting (XSS) vulnerability in content.aspx in Ektron CMS 8.7 before 8.7.0.055 allows remote authenticated users to inject arbitrary web script or HTML via the category0 parameter, which is not properly handled when displaying the Subjects tab in the View Properties menu option.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2734">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:ruby-lang:ruby:2.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:ruby-lang:ruby:2.1:-"/>
        <cpe-lang:fact-ref name="cpe:/a:ruby-lang:ruby:2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:ruby-lang:ruby:2.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:ruby-lang:ruby:2.0.0:p0"/>
        <cpe-lang:fact-ref name="cpe:/a:ruby-lang:ruby:2.0.0:p195"/>
        <cpe-lang:fact-ref name="cpe:/a:ruby-lang:ruby:2.0.0:p247"/>
        <cpe-lang:fact-ref name="cpe:/a:ruby-lang:ruby:2.0.0:preview1"/>
        <cpe-lang:fact-ref name="cpe:/a:ruby-lang:ruby:2.0.0:preview2"/>
        <cpe-lang:fact-ref name="cpe:/a:ruby-lang:ruby:2.0.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:ruby-lang:ruby:2.0.0:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:ruby-lang:ruby:2.1:preview1"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:ruby-lang:ruby:2.0.0:rc2</vuln:product>
      <vuln:product>cpe:/a:ruby-lang:ruby:2.0.0:p247</vuln:product>
      <vuln:product>cpe:/a:ruby-lang:ruby:2.1:preview1</vuln:product>
      <vuln:product>cpe:/a:ruby-lang:ruby:2.0.0:rc1</vuln:product>
      <vuln:product>cpe:/a:ruby-lang:ruby:2.0.0:p195</vuln:product>
      <vuln:product>cpe:/a:ruby-lang:ruby:2.0.0:p0</vuln:product>
      <vuln:product>cpe:/a:ruby-lang:ruby:2.0.0:preview2</vuln:product>
      <vuln:product>cpe:/a:ruby-lang:ruby:2.0.0:preview1</vuln:product>
      <vuln:product>cpe:/a:ruby-lang:ruby:2.1.1</vuln:product>
      <vuln:product>cpe:/a:ruby-lang:ruby:2.1:-</vuln:product>
      <vuln:product>cpe:/a:ruby-lang:ruby:2.0</vuln:product>
      <vuln:product>cpe:/a:ruby-lang:ruby:2.0.0</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-2734</vuln:cve-id>
    <vuln:published-datetime>2014-04-24T19:55:05.707-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-25T09:30:18.403-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-25T09:30:13.623-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-399"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://gist.github.com/10446549" xml:lang="en">https://gist.github.com/10446549</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>FULLDISC</vuln:source>
      <vuln:reference href="http://seclists.org/fulldisclosure/2014/Apr/231" xml:lang="en">20140416 Ruby OpenSSL private key spoofing ~ CVE-2014-2734 with PoC</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://packetstormsecurity.com/files/126218/Ruby-OpenSSL-Private-Key-Spoofing.html" xml:lang="en">http://packetstormsecurity.com/files/126218/Ruby-OpenSSL-Private-Key-Spoofing.html</vuln:reference>
    </vuln:references>
    <vuln:summary>The openssl extension in Ruby 2.x does not properly maintain the state of process memory after a file is reopened, which allows remote attackers to spoof signatures within the context of a Ruby script that attempts signature verification after performing a certain sequence of filesystem operations.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2846">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="AND">
        <cpe-lang:logical-test negate="false" operator="OR">
          <cpe-lang:fact-ref name="cpe:/o:wdc:arkeia_virtual_appliance_firmware:10.2.7"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test negate="false" operator="OR">
          <cpe-lang:fact-ref name="cpe:/a:wdc:arkeia_virtual_appliance:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:wdc:arkeia_virtual_appliance:-</vuln:product>
      <vuln:product>cpe:/o:wdc:arkeia_virtual_appliance_firmware:10.2.7</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-2846</vuln:cve-id>
    <vuln:published-datetime>2014-04-28T10:09:07.877-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-29T09:07:44.203-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-29T09:07:44.127-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-22"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/archive/1/archive/1/531910/100/0/threaded" xml:lang="en">20140423 SEC Consult SA-20140423-0 :: Path Traversal/Remote Code Execution in WD Arkeia Network Backup Appliances</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>FULLDISC</vuln:source>
      <vuln:reference href="http://seclists.org/fulldisclosure/2014/Apr/257" xml:lang="en">20140423 SEC Consult SA-20140423-0 :: Path Traversal/Remote Code Execution in WD Arkeia Network Backup Appliances</vuln:reference>
    </vuln:references>
    <vuln:summary>Directory traversal vulnerability in opt/arkeia/wui/htdocs/index.php in the WD Arkeia virtual appliance (AVA) with firmware before 10.2.9 allows remote attackers to read arbitrary files and execute arbitrary PHP code via a ..././ (dot dot dot slash dot slash) in the lang Cookie parameter, as demonstrated by a request to login/doLogin.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2853">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.10.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.10.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.10.0:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.10.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.10.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.10.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.10.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.11.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.11.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.11.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.11.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.12.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.12.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.12.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.12.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.12.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.12.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.13.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.13.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.13.0:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.13.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.13.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.13.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.13.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.14.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.14.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.14.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.15.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.15.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.15.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.15.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.15.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.15.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.15.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.16.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.16.0:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.16.0:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.16.0:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.16.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.16.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.17:beta_1"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.17.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.17.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.17.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.17.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.17.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.17.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.18:beta_1"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.18.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.18.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.18.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.18.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.18.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.19:beta_1"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.19:beta_2"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.19.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.19.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.19.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.19.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.19.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.19.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.19.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.19.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.19.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.19.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.19.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.19.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.19.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.19.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.19.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.2.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.2.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.2.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.2.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.2.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.20.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.20.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.20.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.20.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.20.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.20.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.20.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.20.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.21.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.21.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.21.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.21.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.21.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.21.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.21.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.21.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.22.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.22.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.22.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.22.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.22.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.22.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.3.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.3.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.3.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.3.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.3.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.3.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.3.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.3.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.3.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.3.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.3.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.3.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.3.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.3.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.3.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.3.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.4:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.4:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.4:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.4:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.4:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.4:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.4.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.4.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.4.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.4.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.4.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.4.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.4.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.4.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.4.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.4.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.4.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.4.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.4.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.4.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.4.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.5:alpha1"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.5:alpha2"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.5:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.5:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.5:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.5:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.5:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.5:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.5:rc4"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.5.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.5.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.5.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.5.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.5.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.5.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.5.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.6.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.6.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.6.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.6.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.6.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.6.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.6.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.6.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.6.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.6.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.6.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.6.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.6.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.7.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.7.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.7.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.7.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.8.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.8.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.8.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.8.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.8.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.8.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.9.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.9.0:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.9.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.9.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.9.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.9.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.9.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mediawiki:mediawiki:1.9.6"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.4:beta2</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.4:beta3</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.17:beta_1</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.4:beta1</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.14.0:rc1</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.21.1</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.13.1</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.13.0</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.20.1</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.17.0:rc1</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.11</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.18:beta_1</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.19:beta_2</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.13.4</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.19:beta_1</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.13.3</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.13.2</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.13.0:rc2</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.13.0:rc1</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.20.2</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.4.11</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.5:alpha1</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.11.0</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.4.12</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.4.13</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.4.0</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.4.14</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.4.1</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.4.2</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.4.3</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.4.4</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.4.5</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.8.4</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.4.6</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.8.5</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.8.3</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.4.10</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.7.1</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.10.0:rc2</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.7.2</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.7.0</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.16.0:beta2</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.7.3</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.10.0:rc1</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.3.10</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.5:alpha2</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.5.5</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.16.0:beta1</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.1.0</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.16.0:beta3</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.5.0</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.3.14</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.22.4</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.21.7</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.18.1</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.19.10</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.3.15</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.22.5</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.21.8</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.21.5</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.19.12</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.21.6</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.19.11</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.5.4</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.16.2</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.19.14</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.21.3</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.5.3</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.3.11</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.22.1</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.16.1</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.19.13</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.21.4</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.5.2</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.3.12</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.22.2</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.16.0</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.5.1</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.3.13</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.22.3</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.21.2</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.8.1</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.5.6</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.3.1</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.8.0</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.3.2</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.5.8</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.5.7</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.3.0</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.3.5</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.18.0</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.3.6</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.3.3</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.9.0</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.3.4</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.9.1</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.5:rc4</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.18.3</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.5:rc2</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.3.7</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.18.2</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.4.7</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.4.9</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.8.2</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.5:rc3</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.4.8</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.12.0</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.12.2</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.12.1</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.12.4</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.12.3</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.10.2</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.10.4</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.10.3</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.19.0</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.18.0:rc1</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.19.9</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.14.1</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.14.0</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.6.12</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.6.11</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.6.10</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.9.5</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.9.6</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.9.3</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.9.4</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.9.2</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.6.4</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.19.5</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.19.4</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.19.7</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.19.6</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.3.9</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.19.1</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.3</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.22.0</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.19.3</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.9.0:rc2</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.3.8</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.19.2</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.6.0</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.6.1</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.19.8</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.6.2</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.6.3</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.11.2</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.19</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.20.4</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.20.5</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.17</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.11.1</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.18</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.20.3</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.20.8</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.15.5</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.20.6</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.20.7</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.15.0</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.15.1</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.15.2</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.15.3</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.10.1</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.10.0</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.17.2</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.6.9</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.17.0</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.6.8</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.17.1</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.15.0:rc1</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.2.6</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.2.5</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.2.4</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.6.5</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.2.3</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.2.2</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.6.7</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.2.1</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.6.6</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.5:beta4</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.17.4</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.17.3</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.5:beta2</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.5:beta1</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.5:beta3</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.2.0</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.15.4</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.4:beta4</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.21</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.4:beta5</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.20</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.4:beta6</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.12.0:rc1</vuln:product>
      <vuln:product>cpe:/a:mediawiki:mediawiki:1.11.0:rc1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-2853</vuln:cve-id>
    <vuln:published-datetime>2014-04-29T14:55:08.723-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-30T08:44:58.270-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-30T08:44:57.067-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://www.mediawiki.org/wiki/Release_notes/1.22#Changes_since_1.22.5" xml:lang="en">https://www.mediawiki.org/wiki/Release_notes/1.22#Changes_since_1.22.5</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://www.mediawiki.org/wiki/Release_notes/1.21#Changes_since_1.21.8" xml:lang="en">https://www.mediawiki.org/wiki/Release_notes/1.21#Changes_since_1.21.8</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://github.com/wikimedia/mediawiki-core/commit/0b695ae09aada343ab59be4a3c9963995a1143b6" xml:lang="en">https://github.com/wikimedia/mediawiki-core/commit/0b695ae09aada343ab59be4a3c9963995a1143b6</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.wikimedia.org/show_bug.cgi?id=63251" xml:lang="en">https://bugzilla.wikimedia.org/show_bug.cgi?id=63251</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1091967" xml:lang="en">https://bugzilla.redhat.com/show_bug.cgi?id=1091967</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/67068" xml:lang="en">67068</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/58262" xml:lang="en">58262</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://lists.wikimedia.org/pipermail/mediawiki-announce/2014-April/000149.html" xml:lang="en">[MediaWiki-announce] 20140424 MediaWiki Security and Maintenance Releases: 1.22.6 and 1.21.9</vuln:reference>
    </vuln:references>
    <vuln:summary>Cross-site scripting (XSS) vulnerability in includes/actions/InfoAction.php in MediaWiki before 1.21.9 and 1.22.x before 1.22.6 allows remote attackers to inject arbitrary web script or HTML via the sort key in an info action.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2881">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/o:citrix:netscaler_access_gateway_firmware:9.3"/>
        <cpe-lang:fact-ref name="cpe:/o:citrix:netscaler_application_delivery_controller_firmware:10.1"/>
        <cpe-lang:fact-ref name="cpe:/o:citrix:netscaler_access_gateway_firmware:10.1.e"/>
        <cpe-lang:fact-ref name="cpe:/o:citrix:netscaler_application_delivery_controller_firmware:9.3.e"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/o:citrix:netscaler_application_delivery_controller_firmware:9.3.e</vuln:product>
      <vuln:product>cpe:/o:citrix:netscaler_access_gateway_firmware:9.3</vuln:product>
      <vuln:product>cpe:/o:citrix:netscaler_access_gateway_firmware:10.1.e</vuln:product>
      <vuln:product>cpe:/o:citrix:netscaler_application_delivery_controller_firmware:10.1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-2881</vuln:cve-id>
    <vuln:published-datetime>2014-05-01T13:28:36.367-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-05-01T15:06:13.173-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-05-01T15:06:11.737-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1030180" xml:lang="en">1030180</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://support.citrix.com/article/CTX140651" xml:lang="en">http://support.citrix.com/article/CTX140651</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in the Diffie-Hellman key agreement implementation in the management GUI Java applet in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 9.3-66.5 and 10.x before 10.1-122.17 has unknown impact and vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2882">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/o:citrix:netscaler_access_gateway_firmware:9.3"/>
        <cpe-lang:fact-ref name="cpe:/o:citrix:netscaler_application_delivery_controller_firmware:10.1"/>
        <cpe-lang:fact-ref name="cpe:/o:citrix:netscaler_access_gateway_firmware:10.1.e"/>
        <cpe-lang:fact-ref name="cpe:/o:citrix:netscaler_application_delivery_controller_firmware:9.3.e"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/o:citrix:netscaler_application_delivery_controller_firmware:9.3.e</vuln:product>
      <vuln:product>cpe:/o:citrix:netscaler_access_gateway_firmware:9.3</vuln:product>
      <vuln:product>cpe:/o:citrix:netscaler_access_gateway_firmware:10.1.e</vuln:product>
      <vuln:product>cpe:/o:citrix:netscaler_application_delivery_controller_firmware:10.1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-2882</vuln:cve-id>
    <vuln:published-datetime>2014-05-01T13:28:36.383-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-05-01T15:06:15.627-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-05-01T15:06:15.517-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1030180" xml:lang="en">1030180</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://support.citrix.com/article/CTX140651" xml:lang="en">http://support.citrix.com/article/CTX140651</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in the management GUI in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 9.3-66.5 and 10.x before 10.1-122.17 has unspecified impact and vectors, related to certificate validation.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2889">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.1.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.1.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.1.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.68"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.67"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.66"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.65"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.64"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.63"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.62"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.61"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.60"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.59"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.58"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.57"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.56"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.55"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.54"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.53"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.52"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.51"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.50"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.49"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.48"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.47"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.46"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.45"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.44"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.43"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.42"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.41"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.40"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.39"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.38"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.37"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.36"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.35"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.34"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.33"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.32"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.31"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.30"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.29"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.28"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.27"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.26"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.25"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.24"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.23"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.1.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.1.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.1.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.1.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.1:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.1:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.1:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.1:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.1"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/o:linux:linux_kernel:3.1.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.1.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.48</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.1.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.49</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.32</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.1.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.46</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.1.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.47</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.1.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.44</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.1.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.45</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.42</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.40</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.29</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.41</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.59</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.55</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.56</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.57</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.58</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.51</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.52</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.53</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.50</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.17</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.43</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.24</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.61</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.25</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.60</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.22</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.23</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.28</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.64</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.26</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.63</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.27</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.62</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.68</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.67</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.66</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.20</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.1:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.1:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.1:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.54</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.33</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.34</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.35</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.36</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.37</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.38</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.39</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.1:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.30</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.31</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.18</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.65</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.19</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.21</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-2889</vuln:cve-id>
    <vuln:published-datetime>2014-04-26T20:55:05.780-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-28T11:47:57.460-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.6</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-28T11:47:57.083-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-189"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://github.com/torvalds/linux/commit/a03ffcf873fe0f2565386ca8ef832144c42e67fa" xml:lang="en">https://github.com/torvalds/linux/commit/a03ffcf873fe0f2565386ca8ef832144c42e67fa</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://www.openwall.com/lists/oss-security/2014/04/18/6" xml:lang="en">[oss-security] 20140418 Re: CVE request Linux kernel: arch: x86: net: bpf_jit: an off-by-one bug in x86_64 cond jump target</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1.8" xml:lang="en">http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1.8</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=a03ffcf873fe0f2565386ca8ef832144c42e67fa" xml:lang="en">http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=a03ffcf873fe0f2565386ca8ef832144c42e67fa</vuln:reference>
    </vuln:references>
    <vuln:summary>Off-by-one error in the bpf_jit_compile function in arch/x86/net/bpf_jit_comp.c in the Linux kernel before 3.1.8, when BPF JIT is enabled, allows local users to cause a denial of service (system crash) or possibly gain privileges via a long jump after a conditional jump.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2905">
    <vuln:cve-id>CVE-2014-2905</vuln:cve-id>
    <vuln:published-datetime>2014-05-02T10:55:07.260-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-05-02T10:55:07.260-04:00</vuln:last-modified-datetime>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://github.com/fish-shell/fish-shell/issues/1436" xml:lang="en">https://github.com/fish-shell/fish-shell/issues/1436</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://www.openwall.com/lists/oss-security/2014/04/28/4" xml:lang="en">[oss-security] 20140428 Upcoming security release of fish 2.1.1</vuln:reference>
    </vuln:references>
    <vuln:summary>fish (aka fish-shell) 1.16.0 before 2.1.1 does not properly check the credentials, which allows local users to gain privileges via the universal variable socket, related to /tmp/fishd.socket.user permissions.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2908">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="AND">
        <cpe-lang:logical-test negate="false" operator="OR">
          <cpe-lang:fact-ref name="cpe:/o:siemens:simatic_s7_cpu_1200_firmware:2.0"/>
          <cpe-lang:fact-ref name="cpe:/o:siemens:simatic_s7_cpu_1200_firmware:3.0"/>
          <cpe-lang:fact-ref name="cpe:/o:siemens:simatic_s7_cpu_1200_firmware:3.0.2"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test negate="false" operator="OR">
          <cpe-lang:fact-ref name="cpe:/h:siemens:simatic_s7_cpu-1211c:-"/>
          <cpe-lang:fact-ref name="cpe:/h:siemens:simatic_s7_cpu_1212c:-"/>
          <cpe-lang:fact-ref name="cpe:/h:siemens:simatic_s7_cpu_1214c:-"/>
          <cpe-lang:fact-ref name="cpe:/h:siemens:simatic_s7_cpu_1215c:-"/>
          <cpe-lang:fact-ref name="cpe:/h:siemens:simatic_s7_cpu_1217c:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/h:siemens:simatic_s7_cpu-1211c:-</vuln:product>
      <vuln:product>cpe:/h:siemens:simatic_s7_cpu_1212c:-</vuln:product>
      <vuln:product>cpe:/o:siemens:simatic_s7_cpu_1200_firmware:3.0</vuln:product>
      <vuln:product>cpe:/o:siemens:simatic_s7_cpu_1200_firmware:2.0</vuln:product>
      <vuln:product>cpe:/h:siemens:simatic_s7_cpu_1217c:-</vuln:product>
      <vuln:product>cpe:/h:siemens:simatic_s7_cpu_1215c:-</vuln:product>
      <vuln:product>cpe:/h:siemens:simatic_s7_cpu_1214c:-</vuln:product>
      <vuln:product>cpe:/o:siemens:simatic_s7_cpu_1200_firmware:3.0.2</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-2908</vuln:cve-id>
    <vuln:published-datetime>2014-04-25T01:12:07.847-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-25T13:08:33.573-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-25T13:08:33.480-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://ics-cert.us-cert.gov/advisories/ICSA-14-114-02" xml:lang="en">http://ics-cert.us-cert.gov/advisories/ICSA-14-114-02</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-892012.pdf" xml:lang="en">http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-892012.pdf</vuln:reference>
    </vuln:references>
    <vuln:summary>Cross-site scripting (XSS) vulnerability in the integrated web server on Siemens SIMATIC S7-1200 CPU devices 2.x and 3.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2909">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="AND">
        <cpe-lang:logical-test negate="false" operator="OR">
          <cpe-lang:fact-ref name="cpe:/o:siemens:simatic_s7_cpu_1200_firmware:2.0"/>
          <cpe-lang:fact-ref name="cpe:/o:siemens:simatic_s7_cpu_1200_firmware:3.0"/>
          <cpe-lang:fact-ref name="cpe:/o:siemens:simatic_s7_cpu_1200_firmware:3.0.2"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test negate="false" operator="OR">
          <cpe-lang:fact-ref name="cpe:/h:siemens:simatic_s7_cpu-1211c:-"/>
          <cpe-lang:fact-ref name="cpe:/h:siemens:simatic_s7_cpu_1212c:-"/>
          <cpe-lang:fact-ref name="cpe:/h:siemens:simatic_s7_cpu_1214c:-"/>
          <cpe-lang:fact-ref name="cpe:/h:siemens:simatic_s7_cpu_1215c:-"/>
          <cpe-lang:fact-ref name="cpe:/h:siemens:simatic_s7_cpu_1217c:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/h:siemens:simatic_s7_cpu-1211c:-</vuln:product>
      <vuln:product>cpe:/h:siemens:simatic_s7_cpu_1212c:-</vuln:product>
      <vuln:product>cpe:/o:siemens:simatic_s7_cpu_1200_firmware:3.0</vuln:product>
      <vuln:product>cpe:/o:siemens:simatic_s7_cpu_1200_firmware:2.0</vuln:product>
      <vuln:product>cpe:/h:siemens:simatic_s7_cpu_1217c:-</vuln:product>
      <vuln:product>cpe:/h:siemens:simatic_s7_cpu_1215c:-</vuln:product>
      <vuln:product>cpe:/h:siemens:simatic_s7_cpu_1214c:-</vuln:product>
      <vuln:product>cpe:/o:siemens:simatic_s7_cpu_1200_firmware:3.0.2</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-2909</vuln:cve-id>
    <vuln:published-datetime>2014-04-25T01:12:07.863-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-25T13:10:47.627-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-25T13:10:47.530-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-94"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://ics-cert.us-cert.gov/advisories/ICSA-14-114-02" xml:lang="en">http://ics-cert.us-cert.gov/advisories/ICSA-14-114-02</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-892012.pdf" xml:lang="en">http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-892012.pdf</vuln:reference>
    </vuln:references>
    <vuln:summary>CRLF injection vulnerability in the integrated web server on Siemens SIMATIC S7-1200 CPU devices 2.x and 3.x allows remote attackers to inject arbitrary HTTP headers via unspecified vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2980">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:gnustep:base:1.24.6"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:gnustep:base:1.24.6</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-2980</vuln:cve-id>
    <vuln:published-datetime>2014-04-28T10:09:08.253-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-29T09:16:01.830-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-29T09:16:01.660-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-20"/>
    <vuln:references xml:lang="en" reference_type="PATCH">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://svn.gna.org/viewcvs/gnustep/libs/base/trunk/Tools/gdomap.c?r1=37756&amp;r2=37755&amp;pathrev=37756" xml:lang="en">http://svn.gna.org/viewcvs/gnustep/libs/base/trunk/Tools/gdomap.c?r1=37756&amp;r2=37755&amp;pathrev=37756</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://savannah.gnu.org/bugs/?41751" xml:lang="en">https://savannah.gnu.org/bugs/?41751</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="http://xforce.iss.net/xforce/xfdb/92688" xml:lang="en">gnustep-cve20142980-dos(92688)</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/66992" xml:lang="en">66992</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://svn.gna.org/viewcvs/gnustep/libs/base/trunk/ChangeLog?r1=37756&amp;r2=37755&amp;pathrev=37756" xml:lang="en">http://svn.gna.org/viewcvs/gnustep/libs/base/trunk/ChangeLog?r1=37756&amp;r2=37755&amp;pathrev=37756</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/58104" xml:lang="en">58104</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://seclists.org/oss-sec/2014/q2/152" xml:lang="en">[oss-security] 20140421 Re: CVE request / advisory: gdomap (GNUstep core package &lt;= 1.24.6)</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://seclists.org/oss-sec/2014/q2/143" xml:lang="en">[oss-security] 20140419 CVE request / advisory: gdomap (GNUstep core package &lt;= 1.24.6)</vuln:reference>
    </vuln:references>
    <vuln:summary>Tools/gdomap.c in gdomap in GNUstep Base 1.24.6 and earlier, when run in daemon mode, does not properly handle the file descriptor for the logger, which allows remote attackers to cause a denial of service (abort) via an invalid request.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2984">
    <vuln:cve-id>CVE-2014-2984</vuln:cve-id>
    <vuln:published-datetime>2014-04-25T01:12:07.897-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-25T01:12:07.990-04:00</vuln:last-modified-datetime>
    <vuln:summary>** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2014-2650.  Reason: This candidate is a reservation duplicate of CVE-2014-2650.  Notes: All CVE users should reference CVE-2014-2650 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2986">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/o:xen:xen:4.4.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:xen:xen:4.4.0:-"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/o:xen:xen:4.4.0:-</vuln:product>
      <vuln:product>cpe:/o:xen:xen:4.4.0:rc1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-2986</vuln:cve-id>
    <vuln:published-datetime>2014-04-28T10:09:08.487-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-29T09:38:02.563-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.5</cvss:score>
        <cvss:access-vector>ADJACENT_NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-29T09:38:02.533-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-20"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://xenbits.xen.org/xsa/advisory-94.html" xml:lang="en">http://xenbits.xen.org/xsa/advisory-94.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1030146" xml:lang="en">1030146</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/67047" xml:lang="en">67047</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://www.openwall.com/lists/oss-security/2014/04/23/5" xml:lang="en">[oss-security] 20140423 Xen Security Advisory 94 (CVE-2014-2986) - ARM hypervisor crash on guest interrupt controller access</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://www.openwall.com/lists/oss-security/2014/04/23/4" xml:lang="en">[oss-security] 20140423 Re: Xen Security Advisory 94 - ARM hypervisor crash on guest interrupt controller access</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://www.openwall.com/lists/oss-security/2014/04/23/3" xml:lang="en">[oss-security] 20140423 Xen Security Advisory 94 - ARM hypervisor crash on guest interrupt controller access</vuln:reference>
    </vuln:references>
    <vuln:summary>The vgic_distr_mmio_write function in the virtual guest interrupt controller (GIC) distributor (arch/arm/vgic.c) in Xen 4.4.x, when running on an ARM system, allows local guest users to cause a denial of service (NULL pointer dereference and host crash) via unspecified vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2992">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:misli:misli.com_app:-::~~~~android~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:misli:misli.com_app:-::~~~~android~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-2992</vuln:cve-id>
    <vuln:published-datetime>2014-04-25T21:55:05.027-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-28T09:21:00.697-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.4</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-28T09:21:00.573-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://sceptive.com/p/mislicom-android-app-ssl-certificate-validation-weakness-" xml:lang="en">http://sceptive.com/p/mislicom-android-app-ssl-certificate-validation-weakness-</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://archives.neohapsis.com/archives/bugtraq/current/0152.html" xml:lang="en">20140424 Misli.com Android App SSL certificate validation weakness</vuln:reference>
    </vuln:references>
    <vuln:summary>The Misli.com application for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2993">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:birebin:birebin.com_app:-::~~~~android~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:birebin:birebin.com_app:-::~~~~android~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-2993</vuln:cve-id>
    <vuln:published-datetime>2014-04-25T21:55:05.060-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-28T09:33:19.593-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.4</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-28T09:33:19.563-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://sceptive.com/p/birebincom-android-app-ssl-certificate-validation-weakness-" xml:lang="en">http://sceptive.com/p/birebincom-android-app-ssl-certificate-validation-weakness-</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://archives.neohapsis.com/archives/bugtraq/current/0153.html" xml:lang="en">20140424 Birebin.com Android App SSL certificate validation weakness</vuln:reference>
    </vuln:references>
    <vuln:summary>The Birebin.com application for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2994">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:acunetix:web_vulnerability_scanner:8:build_20120704"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:acunetix:web_vulnerability_scanner:8:build_20120704</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-2994</vuln:cve-id>
    <vuln:published-datetime>2014-04-27T00:32:01.717-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-28T12:06:13.133-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-28T12:06:13.087-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-119"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://www.youtube.com/watch?v=RHaMx8K1GeM" xml:lang="en">https://www.youtube.com/watch?v=RHaMx8K1GeM</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>EXPLOIT-DB</vuln:source>
      <vuln:reference href="http://www.exploit-db.com/exploits/32997" xml:lang="en">32997</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.acunetix.com/blog/news/misleading-reports-0-day-acunetix-wvs/" xml:lang="en">http://www.acunetix.com/blog/news/misleading-reports-0-day-acunetix-wvs/</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://packetstormsecurity.com/files/126307/Acunetix-8-Scanner-Buffer-Overflow.html" xml:lang="en">http://packetstormsecurity.com/files/126307/Acunetix-8-Scanner-Buffer-Overflow.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://packetstormsecurity.com/files/126306/Acunetix-8-Stack-Buffer-Overflow.html" xml:lang="en">http://packetstormsecurity.com/files/126306/Acunetix-8-Stack-Buffer-Overflow.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://osandamalith.wordpress.com/2014/04/24/pwning-script-kiddies-acunetix-buffer-overflow/" xml:lang="en">http://osandamalith.wordpress.com/2014/04/24/pwning-script-kiddies-acunetix-buffer-overflow/</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://an7isec.blogspot.co.il/2014/04/pown-noobs-acunetix-0day.html" xml:lang="en">http://an7isec.blogspot.co.il/2014/04/pown-noobs-acunetix-0day.html</vuln:reference>
    </vuln:references>
    <vuln:summary>Stack-based buffer overflow in Acunetix Web Vulnerability Scanner (WVS) 8 build 20120704 allows remote attackers to execute arbitrary code via an HTML file containing an IMG element with a long URL (src attribute).</vuln:summary>
  </entry>
  <entry id="CVE-2014-2996">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:xcloner:xcloner:3.5::standalone"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:xcloner:xcloner:3.5::standalone</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-2996</vuln:cve-id>
    <vuln:published-datetime>2014-04-25T16:55:03.040-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-28T08:03:04.260-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.1</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>HIGH</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-28T08:03:04.230-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-94"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://www.htbridge.com/advisory/HTB23207" xml:lang="en">https://www.htbridge.com/advisory/HTB23207</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/archive/1/archive/1/531780/100/0/threaded" xml:lang="en">20140409 &amp;ETH;&amp;iexcl;ross-Site Request Forgery (CSRF) in XCloner Standalone</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>EXPLOIT-DB</vuln:source>
      <vuln:reference href="http://www.exploit-db.com/exploits/32790" xml:lang="en">32790</vuln:reference>
    </vuln:references>
    <vuln:summary>XCloner Standalone 3.5 and earlier, when enable_db_backup and sql_mem are enabled, allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the dbbackup_comp parameter in a generate action to index2.php.  NOTE: it is not clear whether this issue crosses privilege boundaries, since administrators might already have the privileges to execute code.  NOTE: this can be leveraged by remote attackers using CVE-2014-2579.</vuln:summary>
  </entry>
  <entry id="CVE-2014-3000">
    <vuln:cve-id>CVE-2014-3000</vuln:cve-id>
    <vuln:published-datetime>2014-05-02T10:55:07.433-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-05-02T10:55:07.433-04:00</vuln:last-modified-datetime>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1030172" xml:lang="en">1030172</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/67153" xml:lang="en">67153</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>FREEBSD</vuln:source>
      <vuln:reference href="http://www.freebsd.org/security/advisories/FreeBSD-SA-14:08.tcp.asc" xml:lang="en">FreeBSD-SA-14:08</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/58293" xml:lang="en">58293</vuln:reference>
    </vuln:references>
    <vuln:summary>The TCP reassembly function in the inet module in FreeBSD 8.3 before p16, 8.4 before p9, 9.1 before p12, 9.2 before p5, and 10.0 before p2 allows remote attackers to cause a denial of service (undefined memory access and system crash) or possibly read system memory via multiple crafted packets, related to moving a reassemble queue entry to the segment list when the queue is full.</vuln:summary>
  </entry>
  <entry id="CVE-2014-3001">
    <vuln:cve-id>CVE-2014-3001</vuln:cve-id>
    <vuln:published-datetime>2014-05-02T10:55:07.510-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-05-02T10:55:07.510-04:00</vuln:last-modified-datetime>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1030171" xml:lang="en">1030171</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/67158" xml:lang="en">67158</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>FREEBSD</vuln:source>
      <vuln:reference href="http://www.freebsd.org/security/advisories/FreeBSD-SA-14:07.devfs.asc" xml:lang="en">FreeBSD-SA-14:07</vuln:reference>
    </vuln:references>
    <vuln:summary>The device file system (aka devfs) in FreeBSD 10.0 before p2 does not load default rulesets when booting, which allows context-dependent attackers to bypass intended restrictions by leveraging a jailed device node process.</vuln:summary>
  </entry>
  <entry id="CVE-2014-3006">
    <vuln:cve-id>CVE-2014-3006</vuln:cve-id>
    <vuln:published-datetime>2014-05-02T10:55:07.590-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-05-02T10:55:07.590-04:00</vuln:last-modified-datetime>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://www.lsexperts.de/advisories/lse-2014-04-10.txt" xml:lang="en">https://www.lsexperts.de/advisories/lse-2014-04-10.txt</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/67165" xml:lang="en">67165</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/archive/1/archive/1/531986/100/0/threaded" xml:lang="en">20140430 LSE Leading Security Experts GmbH - LSE-2014-04-10 - Sitepark IES - Unauthenticated Access</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>FULLDISC</vuln:source>
      <vuln:reference href="http://seclists.org/fulldisclosure/2014/Apr/317" xml:lang="en">20140430 LSE Leading Security Experts GmbH - LSE-2014-04-10 - Sitepark IES - Unauthenticated Access</vuln:reference>
    </vuln:references>
    <vuln:summary>Sitepark Information Enterprise Server (IES) 2.9 before 2.9.6, when upgraded from an earlier version, does not properly restrict access, which allows remote attackers to change the manager account password and obtain sensitive information via a request to install/.</vuln:summary>
  </entry>
  <entry id="CVE-2014-3007">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:python:pillow:2.3.0"/>
        <cpe-lang:fact-ref name="cpe:/a:pythonware:python_imaging_library:1.1.7"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:python:pillow:2.3.0</vuln:product>
      <vuln:product>cpe:/a:pythonware:python_imaging_library:1.1.7</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-3007</vuln:cve-id>
    <vuln:published-datetime>2014-04-27T16:55:23.697-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-28T13:51:13.663-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-28T13:51:13.617-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-78"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=737059" xml:lang="en">https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=737059</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://people.canonical.com/~ubuntu-security/cve/2014/CVE-2014-1932.html" xml:lang="en">http://people.canonical.com/~ubuntu-security/cve/2014/CVE-2014-1932.html</vuln:reference>
    </vuln:references>
    <vuln:summary>Python Image Library (PIL) 1.1.7 and earlier and Pillow 2.3 might allow remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors related to CVE-2014-1932, possibly JpegImagePlugin.py.</vuln:summary>
  </entry>
  <entry id="CVE-2014-3008">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:unitrends:enterprise_backup:7.3.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:unitrends:enterprise_backup:7.3.0</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-3008</vuln:cve-id>
    <vuln:published-datetime>2014-04-28T10:09:08.940-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-04-29T09:37:14.843-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-04-29T09:37:14.797-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-78"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://gist.github.com/brandonprry/10745756" xml:lang="en">https://gist.github.com/brandonprry/10745756</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="http://xforce.iss.net/xforce/xfdb/92642" xml:lang="en">unitrends-snmpod-command-exec(92642)</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/66928" xml:lang="en">66928</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>EXPLOIT-DB</vuln:source>
      <vuln:reference href="http://www.exploit-db.com/exploits/32885" xml:lang="en">32885</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/58001" xml:lang="en">58001</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>FULLDISC</vuln:source>
      <vuln:reference href="http://seclists.org/fulldisclosure/2014/Apr/204" xml:lang="en">20140415 Unitrends enterprise backup remote unauthenticated root</vuln:reference>
    </vuln:references>
    <vuln:summary>Unitrends Enterprise Backup 7.3.0 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the comm parameter to recoveryconsole/bpl/snmpd.php.</vuln:summary>
  </entry>
  <entry id="CVE-2014-3125">
    <vuln:cve-id>CVE-2014-3125</vuln:cve-id>
    <vuln:published-datetime>2014-05-02T10:55:07.807-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-05-02T10:55:07.807-04:00</vuln:last-modified-datetime>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://xenbits.xen.org/xsa/advisory-91.html" xml:lang="en">http://xenbits.xen.org/xsa/advisory-91.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1030184" xml:lang="en">1030184</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/67157" xml:lang="en">67157</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://www.openwall.com/lists/oss-security/2014/04/30/5" xml:lang="en">[oss-security] 20140430 Xen Security Advisory 91 - Hardware timer context is not properly context switched on ARM</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://www.openwall.com/lists/oss-security/2014/04/30/11" xml:lang="en">[oss-security] 20140430 Re: Xen Security Advisory 91 - Hardware timer context is not properly context switched on ARM</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/58347" xml:lang="en">58347</vuln:reference>
    </vuln:references>
    <vuln:summary>Xen 4.4.x, when running on an ARM system, does not properly context switch the CNTKCTL_EL1 register, which allows local guest users to modify the hardware timers and cause a denial of service (crash) via unspecified vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2014-3129">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:sap:netweaver_software_lifecycle_manager:7.1"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:sap:netweaver_software_lifecycle_manager:7.1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-3129</vuln:cve-id>
    <vuln:published-datetime>2014-04-30T10:22:07.203-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-05-01T08:51:41.993-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-05-01T08:51:41.960-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-200"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://service.sap.com/sap/support/notes/1894049" xml:lang="en">https://service.sap.com/sap/support/notes/1894049</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1030157" xml:lang="en">1030157</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.onapsis.com/resources/get.php?resid=adv_onapsis-2014-005" xml:lang="en">http://www.onapsis.com/resources/get.php?resid=adv_onapsis-2014-005</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>FULLDISC</vuln:source>
      <vuln:reference href="http://seclists.org/fulldisclosure/2014/Apr/294" xml:lang="en">20140428 [Onapsis Security Advisory 2014-005] Information disclosure in SAP Software Lifeclycle Manager</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://scn.sap.com/docs/DOC-8218" xml:lang="en">http://scn.sap.com/docs/DOC-8218</vuln:reference>
    </vuln:references>
    <vuln:summary>The Java Server Pages in the Software Lifecycle Manager (SLM) in SAP NetWeaver allows remote attackers to obtain sensitive information via a crafted request, related to SAP Solution Manager 7.1.</vuln:summary>
  </entry>
  <entry id="CVE-2014-3130">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:sap:netweaver_abap_application_server:-"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:sap:netweaver_abap_application_server:-</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-3130</vuln:cve-id>
    <vuln:published-datetime>2014-04-30T10:22:07.250-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-05-01T09:06:15.100-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.6</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-05-01T09:06:15.007-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:security-protection>ALLOWS_OTHER_ACCESS</vuln:security-protection>
    <vuln:cwe id="CWE-264"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://service.sap.com/sap/support/notes/1910914" xml:lang="en">https://service.sap.com/sap/support/notes/1910914</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.onapsis.com/resources/get.php?resid=adv_onapsis-2014-009" xml:lang="en">http://www.onapsis.com/resources/get.php?resid=adv_onapsis-2014-009</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>FULLDISC</vuln:source>
      <vuln:reference href="http://seclists.org/fulldisclosure/2014/Apr/302" xml:lang="en">20140428 [Onapsis Security Advisory 2014-009] SAP BASIS Missing Authorization Check</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://scn.sap.com/docs/DOC-8218" xml:lang="en">http://scn.sap.com/docs/DOC-8218</vuln:reference>
    </vuln:references>
    <vuln:summary>The ABAP Help documentation and translation tools (BC-DOC-HLP) in Basis in SAP Netweaver ABAP Application Server does not properly restrict access, which allows local users to gain privileges and execute ABAP instructions via crafted help messages.</vuln:summary>
  </entry>
  <entry id="CVE-2014-3131">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:sap:profile_maintenance:-"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:sap:profile_maintenance:-</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-3131</vuln:cve-id>
    <vuln:published-datetime>2014-04-30T10:22:07.283-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-05-01T10:06:43.287-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-05-01T10:06:43.113-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-264"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://service.sap.com/sap/support/notes/1917381" xml:lang="en">https://service.sap.com/sap/support/notes/1917381</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.onapsis.com/resources/get.php?resid=adv_onapsis-2014-007" xml:lang="en">http://www.onapsis.com/resources/get.php?resid=adv_onapsis-2014-007</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>FULLDISC</vuln:source>
      <vuln:reference href="http://seclists.org/fulldisclosure/2014/Apr/300" xml:lang="en">20140428 [Onapsis Security Advisory 2014-007] Missing authorization check in SAP Profile Maintenance</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://scn.sap.com/docs/DOC-8218" xml:lang="en">http://scn.sap.com/docs/DOC-8218</vuln:reference>
    </vuln:references>
    <vuln:summary>SAP Profile Maintenance does not properly restrict access, which allows remote authenticated users to obtain sensitive information via an unspecified RFC function, related to SAP Solution Manager 7.1.</vuln:summary>
  </entry>
  <entry id="CVE-2014-3132">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:sap:background_processing:-"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:sap:background_processing:-</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-3132</vuln:cve-id>
    <vuln:published-datetime>2014-04-30T10:22:07.313-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-05-01T10:18:20.887-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-05-01T10:18:20.827-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-264"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://service.sap.com/sap/support/notes/1918333" xml:lang="en">https://service.sap.com/sap/support/notes/1918333</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.onapsis.com/resources/get.php?resid=adv_onapsis-2014-006" xml:lang="en">http://www.onapsis.com/resources/get.php?resid=adv_onapsis-2014-006</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>FULLDISC</vuln:source>
      <vuln:reference href="http://seclists.org/fulldisclosure/2014/Apr/299" xml:lang="en">20140428 [Onapsis Security Advisory 2014-006] Missing authorization check in SAP Background Processing RFC</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://scn.sap.com/docs/DOC-8218" xml:lang="en">http://scn.sap.com/docs/DOC-8218</vuln:reference>
    </vuln:references>
    <vuln:summary>SAP Background Processing does not properly restrict access, which allows remote authenticated users to obtain sensitive information via an unspecified RFC function, related to SAP Solution Manager 7.1.</vuln:summary>
  </entry>
  <entry id="CVE-2014-3133">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:sap:netweaver_java_application_server:-"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:sap:netweaver_java_application_server:-</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-3133</vuln:cve-id>
    <vuln:published-datetime>2014-04-30T10:22:07.343-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-05-01T10:29:16.487-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-05-01T10:29:16.363-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-264"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://service.sap.com/sap/support/notes/1922547" xml:lang="en">https://service.sap.com/sap/support/notes/1922547</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.onapsis.com/resources/get.php?resid=adv_onapsis-2014-008" xml:lang="en">http://www.onapsis.com/resources/get.php?resid=adv_onapsis-2014-008</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>FULLDISC</vuln:source>
      <vuln:reference href="http://seclists.org/fulldisclosure/2014/Apr/301" xml:lang="en">20140428 [Onapsis Security Advisory 2014-008] SAP NW Portal WD Information Disclosure</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://scn.sap.com/docs/DOC-8218" xml:lang="en">http://scn.sap.com/docs/DOC-8218</vuln:reference>
    </vuln:references>
    <vuln:summary>SAP Netweaver Java Application Server does not properly restrict access, which allows remote attackers to obtain the list of SAP systems registered on an SLD via an unspecified webdynpro, related to SystemSelection.</vuln:summary>
  </entry>
  <entry id="CVE-2014-3134">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:sap:businessobjects:-"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:sap:businessobjects:-</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-3134</vuln:cve-id>
    <vuln:published-datetime>2014-04-30T10:22:07.377-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-05-01T10:36:42.830-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-05-01T10:36:42.003-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://service.sap.com/sap/support/notes/1931399" xml:lang="en">https://service.sap.com/sap/support/notes/1931399</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.onapsis.com/resources/get.php?resid=adv_onapsis-2014-010" xml:lang="en">http://www.onapsis.com/resources/get.php?resid=adv_onapsis-2014-010</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>FULLDISC</vuln:source>
      <vuln:reference href="http://seclists.org/fulldisclosure/2014/Apr/303" xml:lang="en">20140428 [Onapsis Security Advisory 2014-010] SAP BusinessObjects InfoView Reflected Cross Site Scripting</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://scn.sap.com/docs/DOC-8218" xml:lang="en">http://scn.sap.com/docs/DOC-8218</vuln:reference>
    </vuln:references>
    <vuln:summary>Cross-site scripting (XSS) vulnerability in the InfoView application in SAP BusinessObjects allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2014-3135">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:vbulletin:vbulletin:5.1.1:alpha9"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:vbulletin:vbulletin:5.1.1:alpha9</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-3135</vuln:cve-id>
    <vuln:published-datetime>2014-04-30T10:22:07.610-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-05-01T11:42:56.497-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-05-01T11:42:56.467-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="http://xforce.iss.net/xforce/xfdb/92664" xml:lang="en">vbulletin-multiple-scripts-xss(92664)</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/66972" xml:lang="en">66972</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://packetstormsecurity.com/files/126226/vBulletin-5.1-Cross-Site-Scripting.html" xml:lang="en">http://packetstormsecurity.com/files/126226/vBulletin-5.1-Cross-Site-Scripting.html</vuln:reference>
    </vuln:references>
    <vuln:summary>Multiple cross-site scripting (XSS) vulnerabilities in vBulletin 5.1.1 Alpha 9 allow remote attackers to inject arbitrary web script or HTML via (1) the PATH_INFO to privatemessage/new/, (2) the folderid parameter to a private message in privatemessage/view, (3) a fragment indicator to /help, or (4) the view parameter to a topic, as demonstrated by a request to forum/anunturi-importante/rst-power/67030-rst-admin-restore.</vuln:summary>
  </entry>
  <entry id="CVE-2014-3138">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:xerox:docushare:6.5.3:patch6"/>
        <cpe-lang:fact-ref name="cpe:/a:xerox:docushare:6.5.3:-"/>
        <cpe-lang:fact-ref name="cpe:/a:xerox:docushare:6.6.1:-"/>
        <cpe-lang:fact-ref name="cpe:/a:xerox:docushare:6.6.1:update1"/>
        <cpe-lang:fact-ref name="cpe:/a:xerox:docushare:6.6.1:update2"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:xerox:docushare:6.6.1:update2</vuln:product>
      <vuln:product>cpe:/a:xerox:docushare:6.6.1:update1</vuln:product>
      <vuln:product>cpe:/a:xerox:docushare:6.6.1:-</vuln:product>
      <vuln:product>cpe:/a:xerox:docushare:6.5.3:patch6</vuln:product>
      <vuln:product>cpe:/a:xerox:docushare:6.5.3:-</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-3138</vuln:cve-id>
    <vuln:published-datetime>2014-05-01T20:55:07.587-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-05-02T10:38:12.993-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-05-02T10:38:12.917-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-89"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="http://xforce.iss.net/xforce/xfdb/92548" xml:lang="en">xerox-docushare-sql-injection(92548)</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.xerox.com/download/security/security-bulletin/a72cd-4f7a54ce14460/cert_XRX14-003_V1.0.pdf" xml:lang="en">http://www.xerox.com/download/security/security-bulletin/a72cd-4f7a54ce14460/cert_XRX14-003_V1.0.pdf</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/66922" xml:lang="en">66922</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>OSVDB</vuln:source>
      <vuln:reference href="http://www.osvdb.org/105972" xml:lang="en">105972</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>EXPLOIT-DB</vuln:source>
      <vuln:reference href="http://www.exploit-db.com/exploits/32886" xml:lang="en">32886</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/57996" xml:lang="en">57996</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>FULLDISC</vuln:source>
      <vuln:reference href="http://seclists.org/fulldisclosure/2014/Apr/205" xml:lang="en">20140415 Xerox DocuShare authenticated SQL injection</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://packetstormsecurity.com/files/126171/Xerox-DocuShare-SQL-Injection.html" xml:lang="en">http://packetstormsecurity.com/files/126171/Xerox-DocuShare-SQL-Injection.html</vuln:reference>
    </vuln:references>
    <vuln:summary>SQL injection vulnerability in Xerox DocuShare before 6.53 Patch 6 Hotfix 2, 6.6.1 Update 1before Hotfix 24, and 6.6.1 Update 2 before Hotfix 3 allows remote authenticated users to execute arbitrary SQL commands via the PATH_INFO to /docushare/dsweb/ResultBackgroundJobMultiple/.  NOTE: some of these details are obtained from third party information.</vuln:summary>
  </entry>
  <entry id="CVE-2014-3139">
    <vuln:vulnerable-configuration id="http://www.nist.gov/">
      <cpe-lang:logical-test negate="false" operator="OR">
        <cpe-lang:fact-ref name="cpe:/a:unitrends:enterprise_backup:7.3.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:unitrends:enterprise_backup:7.3.0</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-3139</vuln:cve-id>
    <vuln:published-datetime>2014-05-02T06:55:08.507-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2014-05-02T14:24:56.593-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2014-05-02T14:24:56.530-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-287"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://gist.github.com/brandonprry/10745756" xml:lang="en">https://gist.github.com/brandonprry/10745756</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>EXPLOIT-DB</vuln:source>
      <vuln:reference href="http://www.exploit-db.com/exploits/32885" xml:lang="en">32885</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>FULLDISC</vuln:source>
      <vuln:reference href="http://seclists.org/fulldisclosure/2014/Apr/204" xml:lang="en">20140415 Unitrends enterprise backup remote unauthenticated root</vuln:reference>
    </vuln:references>
    <vuln:summary>recoveryconsole/bpl/snmpd.php in Unitrends Enterprise Backup 7.3.0 allows remote attackers to bypass authentication by setting the auth parameter to a certain string.</vuln:summary>
  </entry>
</nvd>