Vulnerability index

Browse CVEs

361 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Memory Buffer Bounds ErrorCWE-119 × clear
Firefox HIGH 8.8
CVE-2016-1959

The ServiceWorkerManager class in Mozilla Firefox before 45.0 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-…

Fix: after 44.0.2
Fix from $1,950 2016-03-13
Firefox HIGH 8.8
CVE-2016-1953

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 45.0 allow remote attackers to cause a denial of service (memory…

Fix: after 44.0.2
Fix from $1,950 2016-03-13
Firefox HIGH 8.8
CVE-2016-1950

Heap-based buffer overflow in Mozilla Network Security Services (NSS) before 3.19.2.3 and 3.20.x and 3.21.x before 3.21.1, as used in Mozilla Firefox…

Fix: after 44.0.2
Fix from $1,950 2016-03-13
Firefox CRITICAL 9.8
CVE-2016-1946EPSS 6%

The MoofParser::Metadata function in binding/MoofParser.cpp in libstagefright in Mozilla Firefox before 44.0 does not limit the size of read operatio…

Fix: after 43.0.4
Fix from $2,300 2016-01-31
Firefox CRITICAL 9.8
CVE-2016-1944

The Buffer11::NativeBuffer11::map function in ANGLE, as used in Mozilla Firefox before 44.0, might allow remote attackers to cause a denial of servic…

No fix yet
Fix from $2,300 2016-01-31
Firefox CRITICAL 10.0
CVE-2016-1931EPSS 6%

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 44.0 allow remote attackers to cause a denial of service (memory…

Fix: after 43.0.4
Fix from $2,300 2016-01-31
Firefox CRITICAL 9.8
CVE-2016-1930EPSS 6%

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 44.0 and Firefox ESR 38.x before 38.6 allow remote attackers to …

Fix: after 43.0.4
Fix from $2,300 2016-01-31
Firefox HIGH 10.0
CVE-2015-7221

Buffer overflow in the nsDeque::GrowCapacity function in xpcom/glue/nsDeque.cpp in Mozilla Firefox before 43.0 might allow remote attackers to cause …

Fix: after 42.0
Fix from $1,950 2015-12-16
Firefox HIGH 10.0
CVE-2015-7220

Buffer overflow in the XDRBuffer::grow function in js/src/vm/Xdr.cpp in Mozilla Firefox before 43.0 might allow remote attackers to cause a denial of…

Fix: after 42.0
Fix from $1,950 2015-12-16
Firefox HIGH 10.0
CVE-2015-7203

Buffer overflow in the DirectWriteFontInfo::LoadFontFamilyData function in gfx/thebes/gfxDWriteFontList.cpp in Mozilla Firefox before 43.0 might allo…

Fix: after 42.0
Fix from $1,950 2015-12-16
Firefox HIGH 10.0
CVE-2015-7202EPSS 6%

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 43.0 allow remote attackers to cause a denial of service (memory…

Fix: after 42.0
Fix from $1,950 2015-12-16
Firefox HIGH 7.5
CVE-2015-7199

The (1) AddWeightedPathSegLists and (2) SVGPathSegListSMILType::Interpolate functions in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4…

Fix: after 41.0.2
Fix from $1,950 2015-11-05
Firefox HIGH 7.5
CVE-2015-7198

Buffer overflow in the rx::TextureStorage11 class in ANGLE, as used in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4, allows remote at…

Fix: after 41.0.2
Fix from $1,950 2015-11-05
Firefox HIGH 7.5
CVE-2015-7194

Buffer underflow in libjar in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allows remote attackers to cause a denial of service (appl…

Fix: after 41.0.2
Fix from $1,950 2015-11-05
Firefox MEDIUM 6.8
CVE-2015-7189

Race condition in the JPEGEncoder function in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allows remote attackers to execute arbitra…

Fix: after 41.0.2
Fix from $1,600 2015-11-05
Firefox HIGH 7.5
CVE-2015-7183EPSS 7%

Integer overflow in the PL_ARENA_ALLOCATE implementation in Netscape Portable Runtime (NSPR) in Mozilla Network Security Services (NSS) before 3.19.2…

Fix: after 41.0.2
Fix from $1,950 2015-11-05
Firefox CRITICAL 9.8
CVE-2015-7182EPSS 10%

Heap-based buffer overflow in the ASN.1 decoder in Mozilla Network Security Services (NSS) before 3.19.2.1 and 3.20.x before 3.20.1, as used in Firef…

Fix: after 41.0.2
Fix from $2,300 2015-11-05
Firefox HIGH 7.5
CVE-2015-7181EPSS 8%

The sec_asn1d_parse_leaf function in Mozilla Network Security Services (NSS) before 3.19.2.1 and 3.20.x before 3.20.1, as used in Firefox before 42.0…

Fix: after 41.0.2
Fix from $1,950 2015-11-05
Firefox HIGH 7.5
CVE-2015-4514

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 42.0 allow remote attackers to cause a denial of service (memory…

Fix: after 41.0.2
Fix from $1,950 2015-11-05
Firefox HIGH 7.5
CVE-2015-4513

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allow remote attackers to …

Fix: after 41.0.2
Fix from $1,950 2015-11-05
Firefox HIGH 7.5
CVE-2015-7180

The ReadbackResultWriterD3D11::Run function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 misinterprets the return value of a funct…

Fix: after 40.0.3
Fix from $1,950 2015-09-24
Firefox HIGH 7.5
CVE-2015-7179

The VertexBufferInterface::reserveVertexSpace function in libGLES in ANGLE, as used in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 o…

Fix: after 40.0.3
Fix from $1,950 2015-09-24
Firefox HIGH 7.5
CVE-2015-7178

The ProgramBinary::linkAttributes function in libGLES in ANGLE, as used in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 on Windows, m…

Fix: after 40.0.3
Fix from $1,950 2015-09-24
Firefox HIGH 7.5
CVE-2015-7176

The AnimationThread function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 uses an incorrect argument to the sscanf function, which…

Fix: after 40.0.3
Fix from $1,950 2015-09-24
Firefox HIGH 7.5
CVE-2015-7177

The InitTextures function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to cause a denial of service (…

Fix: after 40.0.3
Fix from $1,950 2015-09-24
Firefox HIGH 7.5
CVE-2015-7175

The XULContentSinkImpl::AddText function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to cause a deni…

Fix: after 40.0.3
Fix from $1,950 2015-09-24
Firefox HIGH 7.5
CVE-2015-7174

The nsAttrAndChildArray::GrowBy function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to cause a deni…

Fix: after 40.0.3
Fix from $1,950 2015-09-24
Firefox HIGH 7.5
CVE-2015-4522

The nsUnicodeToUTF8::GetMaxLength function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to cause a de…

Fix: after 40.0.3
Fix from $1,950 2015-09-24
Firefox HIGH 7.5
CVE-2015-4521

The ConvertDialogOptions function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to cause a denial of s…

Fix: after 40.0.3
Fix from $1,950 2015-09-24
Firefox HIGH 7.5
CVE-2015-4517

NetworkUtils.cpp in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to cause a denial of service (memory co…

Fix: after 40.0.3
Fix from $1,950 2015-09-24