Browse CVEs

MEDIUM 5.0 CVE-2011-2362 Mozilla Firefox before 3.6.18, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 do not distinguish between cookies for two domain names that d… Firefox after 3.6.17 Fix from $1,6002011-06-30 MEDIUM 5.0 CVE-2011-2370 Mozilla Firefox before 5.0 does not properly enforce the whitelist for the xpinstall functionality, which allows remote attackers to trigger an insta… Firefox after 4.0.1 Fix from $1,6002011-06-30 HIGH 7.5 CVE-2010-4568 Bugzilla 2.14 through 2.22.7; 3.0.x, 3.1.x, and 3.2.x before 3.2.10; 3.4.x before 3.4.10; 3.6.x before 3.6.4; and 4.0.x before 4.0rc2 does not proper… Bugzilla Mitigation only Fix from $1,9502011-01-28 MEDIUM 5.8 CVE-2010-3178 Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 do not properly ha… Firefox after 3.5.13 Fix from $1,6002010-10-21 MEDIUM 6.8 CVE-2010-2762 The XPCSafeJSObjectWrapper class in the SafeJSObjectWrapper (aka SJOW) implementation in Mozilla Firefox 3.6.x before 3.6.9 and Thunderbird 3.1.x bef… Firefox Mitigation only Fix from $1,6002010-09-09 MEDIUM 5.0 CVE-2010-2756 Search.pm in Bugzilla 2.19.1 through 3.2.7, 3.3.1 through 3.4.7, 3.5.1 through 3.6.1, and 3.7 through 3.7.2 allows remote attackers to determine the … Bugzilla Mitigation only Fix from $1,6002010-08-16 MEDIUM 5.0 CVE-2010-1204 Search.pm in Bugzilla 2.17.1 through 3.2.6, 3.3.1 through 3.4.6, 3.5.1 through 3.6, and 3.7 allows remote attackers to obtain potentially sensitive t… Bugzilla Mitigation only Fix from $1,6002010-06-28 HIGH 7.6 CVE-2010-0168EPSS 12% The nsDocument::MaybePreLoadImage function in content/base/src/nsDocument.cpp in the image-preloading implementation in Mozilla Firefox 3.6 before 3.… Firefox Patch available Fix from $1,9502010-03-25 HIGH 7.1 CVE-2009-3385 The mail component in Mozilla SeaMonkey before 1.1.19 does not properly restrict execution of scriptable plugin content, which allows user-assisted r… Seamonkey after 1.1.18 Fix from $1,9502010-03-23 MEDIUM 5.0 CVE-2009-3988 Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly restrict read access to object properties i… Firefox after 3.0.17 Fix from $1,6002010-02-22 MEDIUM 5.0 CVE-2009-3387 Bugzilla 3.3.1 through 3.4.4, 3.5.1, and 3.5.2 does not allow group restrictions to be preserved throughout the process of moving a bug to a differen… Bugzilla Patch available Fix from $1,6002010-02-03 HIGH 7.5 CVE-2009-3374 The XPCVariant::VariantDataToJS function in the XPCOM implementation in Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4 does not enforce i… Firefox Patch available Fix from $1,9502009-10-29 HIGH 9.3 CVE-2009-1840 Mozilla Firefox before 3.0.11, Thunderbird, and SeaMonkey do not check content policy before loading a script file into a XUL document, which allows … Firefox after 3.0.10 Fix from $1,9502009-06-12 MEDIUM 5.4 CVE-2009-1839EPSS 7% Mozilla Firefox 3 before 3.0.11 associates an incorrect principal with a file: URL loaded through the location bar, which allows user-assisted remote… Firefox after 3.0.10 Fix from $1,6002009-06-12 HIGH 9.3 CVE-2009-1597 Mozilla Firefox executes DOM calls in response to a javascript: URI in the target attribute of a submit element within a form contained in an inline … Firefox No fix yet Fix from $1,9502009-05-11 MEDIUM 5.4 CVE-2009-0355 components/sessionstore/src/nsSessionStore.js in Mozilla Firefox before 3.0.6 does not block changes of INPUT elements to type="file" during tab rest… Firefox after 3.0.5 Fix from $1,6002009-02-04 MEDIUM 5.0 CVE-2009-0357 Mozilla Firefox before 3.0.6 and SeaMonkey before 1.1.15 do not properly restrict access from web pages to the (1) Set-Cookie and (2) Set-Cookie2 HTT… Firefox after 3.0.5 Fix from $1,6002009-02-04 HIGH 7.5 CVE-2008-5504 Mozilla Firefox 2.x before 2.0.0.19 allows remote attackers to run arbitrary JavaScript with chrome privileges via vectors related to the feed previe… Firefox after 2.0.0.18 Fix from $1,9502008-12-17 MEDIUM 6.8 CVE-2008-5506 Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to… Firefox 1.1.14 / 2.0.0.19+ Fix from $1,6002008-12-17 MEDIUM 6.8 CVE-2008-5512 Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x … Firefox 1.1.14 / 2.0.0.19+ Fix from $1,6002008-12-17 MEDIUM 5.0 CVE-2008-5505 Mozilla Firefox 3.x before 3.0.5 allows remote attackers to bypass intended privacy restrictions by using the persist attribute in an XUL element to … Firefox after 3.0.4 Fix from $1,6002008-12-17 HIGH 7.5 CVE-2008-3835 The nsXMLDocument::OnChannelRedirect function in Mozilla Firefox before 2.0.0.17, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allows rem… Firefox after 2.0.0.16 Fix from $1,9502008-09-24 HIGH 7.5 CVE-2008-3836 feedWriter in Mozilla Firefox before 2.0.0.17 allows remote attackers to execute scripts with chrome privileges via vectors related to feed preview a… Firefox after 2.0.0.16 Fix from $1,9502008-09-24 HIGH 7.5 CVE-2008-4058EPSS 5% The XPConnect component in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allows remo… Firefox 1.1.12 / 2.0.0.17+ Fix from $1,9502008-09-24 HIGH 7.5 CVE-2008-4059 The XPConnect component in Mozilla Firefox before 2.0.0.17 allows remote attackers to "pollute XPCNativeWrappers" and execute arbitrary code with chr… Firefox after 2.0.0.17 Fix from $1,9502008-09-24 HIGH 7.5 CVE-2008-4060 Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allow remote attackers to create docum… Firefox after 2.0.0.16 Fix from $1,9502008-09-24 HIGH 7.5 CVE-2008-2802 Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonkey before 1.1.10 allow remote attackers to execute arbitrary code via a… Firefox after 2.0.0.14 Fix from $1,9502008-07-07 MEDIUM 6.8 CVE-2008-2803 The mozIJSSubScriptLoader.LoadScript function in Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonkey before 1.1.10 does … Firefox after 2.0.0.14 Fix from $1,6002008-07-07 MEDIUM 6.8 CVE-2008-2810 Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly identify the context of Windows shortcut files, which allows user-assiste… Firefox after 2.0.0.14 Fix from $1,6002008-07-07 HIGH 9.3 CVE-2007-5338 Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 allow remote attackers to execute arbitrary Javascript with user privileges by using the Sc… Firefox after 2.0.0.7 Fix from $1,9502007-10-21