Browse CVEs

HIGH 8.8 CVE-2025-2817 Thunderbird's update mechanism allowed a medium-integrity user process to interfere with the SYSTEM-level updater by manipulating the file-locking be… Firefox 115.23.0 / 128.10.0+ Fix from $1,9502025-04-29 MEDIUM 6.3 CVE-2025-2830 By crafting a malformed file name for an attachment in a multipart message, an attacker can trick Thunderbird into including a directory listing of /… Thunderbird 128.9.2 / 137.0.2+ Fix from $1,6002025-04-15 MEDIUM 6.5 CVE-2023-6209 Relative URLs starting with three slashes were incorrectly parsed, and a path-traversal "/../" part in the path could be used to override the specifi… Firefox 115.5 / 115.5.0+ Fix from $1,6002023-11-21 MEDIUM 6.5 CVE-2023-28163 When downloading files through the Save As dialog on Windows with suggested filenames containing environment variable names, Windows would have resol… Firefox 102.9 / 111.0+ Fix from $1,6002023-06-02 MEDIUM 5.5 CVE-2020-12392 The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP POST data of a request, which can be controlled by the website. … Firefox 68.8.0 / 76.0+ Fix from $1,6002020-05-26 HIGH 7.5 CVE-2020-6828 A malicious Android application could craft an Intent that would have been processed by Firefox for Android and potentially result in a file overwrit… Firefox Esr 68.7.0+ Fix from $1,9502020-04-24 HIGH 7.5 CVE-2017-5381 The "export" function in the Certificate Viewer can force local filesystem navigation when the "common name" in a certificate contains slashes, allow… Firefox 51.0+ Fix from $1,9502018-06-11 HIGH 9.3 CVE-2014-1507 Directory traversal vulnerability in the DeviceStorage API in Mozilla FirefoxOS before 1.2.2 allows attackers to bypass the media sandbox protection … Firefoxos after 1.2 Fix from $1,9502014-03-19 MEDIUM 6.4 CVE-2014-1506 Directory traversal vulnerability in Android Crash Reporter in Mozilla Firefox before 28.0 on Android allows attackers to trigger the transmission of… Firefox after 27.0.1 Fix from $1,6002014-03-19 MEDIUM 5.0 CVE-2011-0071 Directory traversal vulnerability in Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, Thunderbird before 3.1.10, and SeaMonkey before 2.0.14 on… Firefox after 3.1.9 Fix from $1,6002011-05-07 HIGH 7.1 CVE-2008-4437EPSS 6% Directory traversal vulnerability in importxml.pl in Bugzilla before 2.22.5, and 3.x before 3.0.5, when --attach_path is enabled, allows remote attac… Bugzilla Patch available Fix from $1,9502008-10-03 HIGH 7.8 CVE-2008-4068 Directory traversal vulnerability in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 a… Firefox 1.1.12 / 2.0.0.17+ Fix from $1,9502008-09-24 HIGH 7.1 CVE-2007-3072 Directory traversal vulnerability in Mozilla Firefox before 2.0.0.4 on Windows allows remote attackers to read arbitrary files via ..%5C (dot dot enc… Firefox No fix yet Fix from $1,9502007-06-06