Browse CVEs

MEDIUM 5.0 CVE-2014-1565 The mozilla::dom::AudioEventTimeline function in the Web Audio API implementation in Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and T… Firefox after 31.1.0 Fix from $1,6002014-09-03 HIGH 9.3 CVE-2014-1549EPSS 6% The mozilla::dom::AudioBufferSourceNodeEngine::CopyFromInputBuffer function in Mozilla Firefox before 31.0 and Thunderbird before 31.0 does not prope… Firefox after 30.0 Fix from $1,9502014-07-23 HIGH 7.5 CVE-2014-1543 Multiple heap-based buffer overflows in the navigator.getGamepads function in the Gamepad API in Mozilla Firefox before 30.0 allow remote attackers t… Firefox after 29.0.1 Fix from $1,9502014-06-11 MEDIUM 6.8 CVE-2014-1542EPSS 5% Buffer overflow in the Speex resampler in the Web Audio subsystem in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrary code vi… Firefox after 29.0.1 Fix from $1,6002014-06-11 HIGH 10.0 CVE-2014-1534EPSS 6% Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 30.0 allow remote attackers to cause a denial of service (memory… Firefox after 29.0.1 Fix from $1,9502014-06-11 CRITICAL 9.8 CVE-2014-1493EPSS 8% Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and… Firefox 24.4 / 28.0+ Fix from $2,3002014-03-19 HIGH 10.0 CVE-2013-5602EPSS 5% The Worker::SetEventListener function in the Web workers implementation in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x befo… Firefox after 24.0.1 Fix from $1,9502013-10-30 HIGH 9.3 CVE-2013-5604EPSS 6% The txXPathNodeUtils::getBaseURI function in the XSLT processor in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1,… Firefox after 24.0.1 Fix from $1,9502013-10-30 MEDIUM 6.8 CVE-2013-5596 The cycle collection (CC) implementation in Mozilla Firefox before 25.0, Firefox ESR 24.x before 24.1, Thunderbird before 24.1, and SeaMonkey before … Firefox after 24.0.1 Fix from $1,6002013-10-30 HIGH 10.0 CVE-2013-1719EPSS 5% Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 24.0, Thunderbird before 24.0, and SeaMonkey before 2.21 allow r… Firefox after 23.0.1 Fix from $1,9502013-09-18 HIGH 10.0 CVE-2013-1736EPSS 5% The nsGfxScrollFrameInner::IsLTR function in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17… Firefox after 23.0.1 Fix from $1,9502013-09-18 HIGH 9.3 CVE-2013-1721 Integer overflow in the drawLineLoop function in the libGLESv2 library in Almost Native Graphics Layer Engine (ANGLE), as used in Mozilla Firefox bef… Firefox after 23.0.1 Fix from $1,9502013-09-18 HIGH 9.3 CVE-2013-1732EPSS 9% Buffer overflow in the nsFloatManager::GetFlowArea function in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, … Firefox after 23.0.1 Fix from $1,9502013-09-18 MEDIUM 6.8 CVE-2013-1720 The nsHtml5TreeBuilder::resetTheInsertionMode function in the HTML5 Tree Builder in Mozilla Firefox before 24.0, Thunderbird before 24.0, and SeaMonk… Firefox after 23.0.1 Fix from $1,6002013-09-18 MEDIUM 6.8 CVE-2013-1725 Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 d… Firefox after 23.0.1 Fix from $1,6002013-09-18 MEDIUM 6.8 CVE-2013-1730 Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 d… Firefox after 23.0.1 Fix from $1,6002013-09-18 HIGH 10.0 CVE-2013-1718EPSS 5% Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, T… Firefox after 23.0.1 Fix from $1,9502013-09-18 HIGH 10.0 CVE-2013-1705 Heap-based buffer underflow in the cryptojs_interpret_key_gen_type function in Mozilla Firefox before 23.0 and SeaMonkey before 2.20 allows remote at… Firefox after 22.0 Fix from $1,9502013-08-07 HIGH 7.2 CVE-2013-1706 Stack-based buffer overflow in maintenanceservice.exe in the Mozilla Maintenance Service in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0… Firefox after 22.0 Fix from $1,9502013-08-07 HIGH 7.2 CVE-2013-1707 Stack-based buffer overflow in Mozilla Updater in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, and Thunder… Firefox after 22.0 Fix from $1,9502013-08-07 HIGH 8.8 CVE-2013-1690 KEVEPSS 69% Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not properly handle… Firefox 17.0.7 / 22.0+ Fix from $1,9502013-06-26 HIGH 10.0 CVE-2013-1676EPSS 6% The SelectionIterator::GetNextSegment function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunder… Firefox after 20.0.1 Fix from $1,9502013-05-16 HIGH 10.0 CVE-2013-1678EPSS 6% The _cairo_xlib_surface_add_glyph function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird… Firefox after 20.0.1 Fix from $1,9502013-05-16 HIGH 10.0 CVE-2013-1680EPSS 6% Use-after-free vulnerability in the nsFrameList::FirstChild function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird befo… Firefox after 20.0.1 Fix from $1,9502013-05-16 HIGH 7.2 CVE-2013-0799 Buffer overflow in the Mozilla Maintenance Service in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, and Thu… Firefox after 19.0.2 Fix from $1,9502013-04-03 MEDIUM 5.0 CVE-2013-0791EPSS 5% The CERT_DecodeCertPackage function in Mozilla Network Security Services (NSS), as used in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.… Firefox 3.15 / 17.0.5+ Fix from $1,6002013-04-03 MEDIUM 5.8 CVE-2013-0772 The RasterImage::DrawFrameTo function in Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey before 2.16 allows remote attackers to… Firefox 2.16 / 19.0+ Fix from $1,6002013-02-19 HIGH 9.3 CVE-2013-0752EPSS 7% Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.2, and SeaMonkey before 2.15… Firefox 2.15 / 17.0.2+ Fix from $1,9502013-01-13 HIGH 9.3 CVE-2012-5833 The texImage2D implementation in the WebGL subsystem in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunde… Firefox 2.14 / 10.0.11+ Fix from $1,9502012-11-21 HIGH 9.3 CVE-2012-5838EPSS 6% The copyTexImage2D implementation in the WebGL subsystem in Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 allows re… Firefox 2.14 / 10.0.11+ Fix from $1,9502012-11-21