Browse CVEs

MEDIUM 6.4 CVE-2012-1950 The drag-and-drop implementation in Mozilla Firefox 4.x through 13.0 and Firefox ESR 10.x before 10.0.6 allows remote attackers to spoof the address … Firefox Mitigation only Fix from $1,6002012-07-18 HIGH 9.3 CVE-2012-1939 jsinfer.cpp in Mozilla Firefox ESR 10.x before 10.0.5 and Thunderbird ESR 10.x before 10.0.5 does not properly determine data types, which allows rem… Firefox Mitigation only Fix from $1,9502012-06-05 HIGH 7.2 CVE-2012-1942 The Mozilla Updater and Windows Updater Service in Mozilla Firefox 12.0, Thunderbird 12.0, and SeaMonkey 2.9 on Windows allow local users to gain pri… Firefox Mitigation only Fix from $1,9502012-06-05 MEDIUM 6.9 CVE-2012-1943 Untrusted search path vulnerability in Updater.exe in the Windows Updater Service in Mozilla Firefox 12.0, Thunderbird 12.0, and SeaMonkey 2.9 on Win… Firefox Mitigation only Fix from $1,6002012-06-05 HIGH 7.5 CVE-2012-0452 Use-after-free vulnerability in Mozilla Firefox 10.x before 10.0.1, Thunderbird 10.x before 10.0.1, and SeaMonkey 2.7 allows remote attackers to caus… Firefox Mitigation only Fix from $1,9502012-02-11 MEDIUM 6.8 CVE-2011-3667 The User.offer_account_by_email WebService method in Bugzilla 2.x and 3.x before 3.4.13, 3.5.x and 3.6.x before 3.6.7, 3.7.x and 4.0.x before 4.0.3, … Bugzilla Mitigation only Fix from $1,6002012-01-02 MEDIUM 6.8 CVE-2011-3668 Cross-site request forgery (CSRF) vulnerability in post_bug.cgi in Bugzilla 2.x, 3.x, and 4.x before 4.2rc1 allows remote attackers to hijack the aut… Bugzilla No fix yet Fix from $1,6002012-01-02 MEDIUM 6.8 CVE-2011-3669 Cross-site request forgery (CSRF) vulnerability in attachment.cgi in Bugzilla 2.x, 3.x, and 4.x before 4.2rc1 allows remote attackers to hijack the a… Bugzilla No fix yet Fix from $1,6002012-01-02 HIGH 7.5 CVE-2011-3658EPSS 70% The SVG implementation in Mozilla Firefox 8.0, Thunderbird 8.0, and SeaMonkey 2.5 does not properly interact with DOMAttrModified event handlers, whi… Firefox Mitigation only Fix from $1,9502011-12-21 HIGH 9.3 CVE-2011-3655 Mozilla Firefox 4.x through 7.0 and Thunderbird 5.0 through 7.0 perform access control without checking for use of the NoWaiverWrapper wrapper, which… Firefox Mitigation only Fix from $1,9502011-11-09 HIGH 10.0 CVE-2011-3651EPSS 6% Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 7.0 and Thunderbird 7.0 allow remote attackers to cause a denial of ser… Firefox Mitigation only Fix from $1,9502011-11-09 HIGH 10.0 CVE-2011-2998EPSS 5% Integer underflow in Mozilla Firefox 3.6.x before 3.6.23 allows remote attackers to cause a denial of service (application crash) or possibly execute… Firefox Mitigation only Fix from $1,9502011-09-30 HIGH 10.0 CVE-2011-2996 Unspecified vulnerability in the plugin API in Mozilla Firefox 3.6.x before 3.6.23 allows remote attackers to cause a denial of service (memory corru… Firefox Mitigation only Fix from $1,9502011-09-29 HIGH 9.3 CVE-2011-2993 The implementation of digital signatures for JAR files in Mozilla Firefox 4.x through 5, SeaMonkey 2.x before 2.3, and possibly other products does n… Firefox Mitigation only Fix from $1,9502011-08-18 MEDIUM 5.0 CVE-2011-2990 The implementation of Content Security Policy (CSP) violation reports in Mozilla Firefox 4.x through 5, SeaMonkey 2.x before 2.3, and possibly other … Firefox Mitigation only Fix from $1,6002011-08-18 HIGH 10.0 CVE-2011-2368 The WebGL implementation in Mozilla Firefox 4.x through 4.0.1 does not properly restrict write operations, which allows remote attackers to execute a… Firefox Mitigation only Fix from $1,9502011-06-30 MEDIUM 6.4 CVE-2011-2367 The WebGL implementation in Mozilla Firefox 4.x through 4.0.1 does not properly restrict read operations, which allows remote attackers to obtain sen… Firefox Mitigation only Fix from $1,6002011-06-30 HIGH 10.0 CVE-2011-0062 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.6.x before 3.6.14 and Thunderbird 3.1.x before 3.1.8 allow remote att… Firefox Mitigation only Fix from $1,9502011-03-02 HIGH 7.5 CVE-2010-4568 Bugzilla 2.14 through 2.22.7; 3.0.x, 3.1.x, and 3.2.x before 3.2.10; 3.4.x before 3.4.10; 3.6.x before 3.6.4; and 4.0.x before 4.0rc2 does not proper… Bugzilla Mitigation only Fix from $1,9502011-01-28 HIGH 9.3 CVE-2010-3777EPSS 8% Unspecified vulnerability in Mozilla Firefox 3.6.x before 3.6.13 and Thunderbird 3.1.x before 3.1.7 allows remote attackers to cause a denial of serv… Firefox Mitigation only Fix from $1,9502010-12-10 HIGH 10.0 CVE-2010-4508 The WebSockets implementation in Mozilla Firefox 4 through 4.0 Beta 7 does not properly perform proxy upgrade negotiation, which has unspecified impa… Firefox Mitigation only Fix from $1,9502010-12-09 CRITICAL 9.8 CVE-2010-3765 KEVEPSS 83% Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.1… Firefox Mitigation only Fix from $2,3002010-10-28 HIGH 9.3 CVE-2010-3175 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.6.x before 3.6.11 and Thunderbird 3.1.x before 3.1.5 allow remote att… Firefox Mitigation only Fix from $1,9502010-10-21 MEDIUM 5.8 CVE-2010-3171 The Math.random function in the JavaScript implementation in Mozilla Firefox 3.5.10 through 3.5.11, 3.6.4 through 3.6.8, and 4.0 Beta1 uses a random … Firefox No fix yet Fix from $1,6002010-09-15 MEDIUM 5.8 CVE-2010-3399 The js_InitRandom function in the JavaScript implementation in Mozilla Firefox 3.5.10 through 3.5.11, 3.6.4 through 3.6.8, and 4.0 Beta1 uses a conte… Firefox No fix yet Fix from $1,6002010-09-15 MEDIUM 6.8 CVE-2010-2762 The XPCSafeJSObjectWrapper class in the SafeJSObjectWrapper (aka SJOW) implementation in Mozilla Firefox 3.6.x before 3.6.9 and Thunderbird 3.1.x bef… Firefox Mitigation only Fix from $1,6002010-09-09 MEDIUM 6.5 CVE-2010-2757 The sudo feature in Bugzilla 2.22rc1 through 3.2.7, 3.3.1 through 3.4.7, 3.5.1 through 3.6.1, and 3.7 through 3.7.2 does not properly send impersonat… Bugzilla Mitigation only Fix from $1,6002010-08-16 MEDIUM 5.0 CVE-2010-2756 Search.pm in Bugzilla 2.19.1 through 3.2.7, 3.3.1 through 3.4.7, 3.5.1 through 3.6.1, and 3.7 through 3.7.2 allows remote attackers to determine the … Bugzilla Mitigation only Fix from $1,6002010-08-16 MEDIUM 5.0 CVE-2010-2758 Bugzilla 2.17.1 through 3.2.7, 3.3.1 through 3.4.7, 3.5.1 through 3.6.1, and 3.7 through 3.7.2 generates different error messages depending on whethe… Bugzilla Mitigation only Fix from $1,6002010-08-16 HIGH 9.3 CVE-2010-1212 js/src/jstracer.cpp in the browser engine in Mozilla Firefox 3.6.x before 3.6.7 and Thunderbird 3.1.x before 3.1.1 allows remote attackers to cause a… Firefox Mitigation only Fix from $1,9502010-07-30