Vulnerability index

Browse CVEs

361 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Memory Buffer Bounds ErrorCWE-119 × clear
Firefox MEDIUM 6.4
CVE-2015-4512

gfx/2d/DataSurfaceHelpers.cpp in Mozilla Firefox before 41.0 on Linux improperly attempts to use the Cairo library with 32-bit color-depth surface cr…

Fix: after 40.0.3
Fix from $1,600 2015-09-24
Firefox MEDIUM 6.8
CVE-2015-4511

Heap-based buffer overflow in the nestegg_track_codec_data function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allows remote att…

Fix: after 40.0.3
Fix from $1,600 2015-09-24
Firefox MEDIUM 6.8
CVE-2015-4506

Buffer overflow in the vp9_init_context_buffers function in libvpx, as used in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3, allows r…

Fix: after 40.0.3
Fix from $1,600 2015-09-24
Firefox MEDIUM 6.4
CVE-2015-4504

The lut_inverse_interp16 function in the QCMS library in Mozilla Firefox before 41.0 allows remote attackers to obtain sensitive information or cause…

Fix: after 40.0.3
Fix from $1,600 2015-09-24
Firefox HIGH 7.5
CVE-2015-4501

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 41.0 allow remote attackers to cause a denial of service (memory…

Fix: after 40.0.3
Fix from $1,950 2015-09-24
Firefox HIGH 7.5
CVE-2015-4500

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allow remote attackers to …

Fix: after 40.0.3
Fix from $1,950 2015-09-24
Firefox HIGH 9.3
CVE-2015-4493EPSS 7%

Heap-based buffer overflow in the stagefright::ESDS::parseESDescriptor function in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x…

Fix: after 39.0.3
Fix from $1,950 2015-08-16
Firefox HIGH 7.5
CVE-2015-4489

The nsTArray_Impl class in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 might allow remote attackers to cause…

Fix: after 39.0.3
Fix from $1,950 2015-08-16
Firefox HIGH 7.5
CVE-2015-4487

The nsTSubstring::ReplacePrep function in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 might allow remote att…

Fix: after 39.0.3
Fix from $1,950 2015-08-16
Firefox HIGH 10.0
CVE-2015-4485EPSS 8%

Heap-based buffer overflow in the resize_context_buffers function in libvpx in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows re…

Fix: after 39.0.3
Fix from $1,950 2015-08-16
Firefox HIGH 7.5
CVE-2015-4475

The mozilla::AudioSink function in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 mishandles inconsistent sample formats within MP3 aud…

Fix: after 39.0.3
Fix from $1,950 2015-08-16
Firefox HIGH 10.0
CVE-2015-2740EPSS 6%

Buffer overflow in the nsXMLHttpRequest::AppendToResponseText function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 3…

Fix: after 38.1.0
Fix from $1,950 2015-07-06
Firefox HIGH 10.0
CVE-2015-2739

The ArrayBufferBuilder::append function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.…

Fix: after 38.1.0
Fix from $1,950 2015-07-06
Firefox MEDIUM 5.0
CVE-2015-2729

The AudioParamTimeline::AudioNodeInputValue function in the Web Audio implementation in Mozilla Firefox before 39.0 and Firefox ESR 38.x before 38.1 …

Fix: after 38.1.0
Fix from $1,600 2015-07-06
Firefox HIGH 10.0
CVE-2015-2726EPSS 6%

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0 allow remote attackers to cause a denial of service (memory…

Fix: after 38.1.0
Fix from $1,950 2015-07-06
Firefox HIGH 10.0
CVE-2015-2725EPSS 6%

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0, Firefox ESR 38.x before 38.1, and Thunderbird before 38.1 …

Fix: after 38.1.0
Fix from $1,950 2015-07-06
Firefox HIGH 10.0
CVE-2015-2724EPSS 6%

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thu…

Fix: after 38.1.0
Fix from $1,950 2015-07-06
Firefox HIGH 7.5
CVE-2015-2716EPSS 7%

Buffer overflow in the XML parser in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allows remote attackers t…

Fix: after 37.0.2
Fix from $1,950 2015-05-14
Firefox HIGH 7.5
CVE-2015-2712

The asm.js implementation in Mozilla Firefox before 38.0 does not properly determine heap lengths during identification of cases in which bounds chec…

Fix: after 37.0.2
Fix from $1,950 2015-05-14
Firefox MEDIUM 6.8
CVE-2015-2710

Heap-based buffer overflow in the SVGTextFrame class in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allows…

Fix: after 37.0.2
Fix from $1,600 2015-05-14
Firefox MEDIUM 6.4
CVE-2015-0811

The QCMS implementation in Mozilla Firefox before 37.0 allows remote attackers to obtain sensitive information from process heap memory or cause a de…

Fix: after 36.0.4
Fix from $1,600 2015-04-01
Firefox MEDIUM 6.8
CVE-2015-0826

The nsTransformedTextRun::SetCapitalization function in Mozilla Firefox before 36.0 allows remote attackers to execute arbitrary code or cause a deni…

Fix: after 35.0.1
Fix from $1,600 2015-02-25
Firefox MEDIUM 6.8
CVE-2014-1593

Stack-based buffer overflow in the mozilla::FileBlockCache::Read function in Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird b…

Fix: after 33.0
Fix from $1,600 2014-12-11
Firefox HIGH 7.5
CVE-2014-1576EPSS 5%

Heap-based buffer overflow in the nsTransformedTextRun function in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x be…

Fix: after 32.0
Fix from $1,950 2014-10-15
Firefox HIGH 7.5
CVE-2014-1578

The get_tile function in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x before 31.2 allows remote attackers to cause…

Fix: after 32.0
Fix from $1,950 2014-10-15
Firefox HIGH 10.0
CVE-2014-1553EPSS 6%

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before …

Fix: after 31.1.0
Fix from $1,950 2014-09-03
Firefox HIGH 10.0
CVE-2014-1554EPSS 6%

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 32.0 allow remote attackers to cause a denial of service (memory…

Fix: after 31.1.0
Fix from $1,950 2014-09-03
Firefox HIGH 10.0
CVE-2014-1562EPSS 6%

Unspecified vulnerability in the browser engine in Mozilla Firefox before 32.0, Firefox ESR 24.x before 24.8 and 31.x before 31.1, and Thunderbird 24…

Fix: after 31.1.0
Fix from $1,950 2014-09-03
Firefox MEDIUM 5.0
CVE-2014-1565

The mozilla::dom::AudioEventTimeline function in the Web Audio API implementation in Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and T…

Fix: after 31.1.0
Fix from $1,600 2014-09-03
Firefox HIGH 9.3
CVE-2014-1549EPSS 6%

The mozilla::dom::AudioBufferSourceNodeEngine::CopyFromInputBuffer function in Mozilla Firefox before 31.0 and Thunderbird before 31.0 does not prope…

Fix: after 30.0
Fix from $1,950 2014-07-23