Vulnerability index

Browse CVEs

2,895 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Firefox MEDIUM 6.4
CVE-2014-1577

The mozilla::dom::OscillatorNodeEngine::ComputeCustom function in the Web Audio subsystem in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.…

Fix: after 32.0
Fix from $1,600 2014-10-15
Firefox MEDIUM 5.0
CVE-2014-1580

Mozilla Firefox before 33.0 does not properly initialize memory for GIF images, which allows remote attackers to obtain sensitive information from pr…

Fix: after 32.0
Fix from $1,600 2014-10-15
Firefox MEDIUM 5.0
CVE-2014-1583

The Alarm API in Mozilla Firefox before 33.0 and Firefox ESR 31.x before 31.2 does not properly restrict toJSON calls, which allows remote attackers …

Fix: after 32.0
Fix from $1,600 2014-10-15
Firefox HIGH 10.0
CVE-2014-1553EPSS 6%

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before …

Fix: after 31.1.0
Fix from $1,950 2014-09-03
Firefox HIGH 10.0
CVE-2014-1554EPSS 6%

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 32.0 allow remote attackers to cause a denial of service (memory…

Fix: after 31.1.0
Fix from $1,950 2014-09-03
Firefox HIGH 10.0
CVE-2014-1562EPSS 6%

Unspecified vulnerability in the browser engine in Mozilla Firefox before 32.0, Firefox ESR 24.x before 24.8 and 31.x before 31.1, and Thunderbird 24…

Fix: after 31.1.0
Fix from $1,950 2014-09-03
Firefox HIGH 10.0
CVE-2014-1563EPSS 6%

Use-after-free vulnerability in the mozilla::DOMSVGLength::GetTearOff function in Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thun…

Fix: after 31.1.0
Fix from $1,950 2014-09-03
Firefox HIGH 9.3
CVE-2014-1567

Use-after-free vulnerability in DirectionalityUtils.cpp in Mozilla Firefox before 32.0, Firefox ESR 24.x before 24.8 and 31.x before 31.1, and Thunde…

Fix: after 31.1.0
Fix from $1,950 2014-09-03
Firefox MEDIUM 5.0
CVE-2014-1565

The mozilla::dom::AudioEventTimeline function in the Web Audio API implementation in Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and T…

Fix: after 31.1.0
Fix from $1,600 2014-09-03
Firefox HIGH 10.0
CVE-2014-1551

Use-after-free vulnerability in the FontTableRec destructor in Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7…

Fix: after 30.0
Fix from $1,950 2014-07-23
Firefox HIGH 9.3
CVE-2014-1555

Use-after-free vulnerability in the nsDocLoader::OnProgress function in Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird be…

Fix: after 30.0
Fix from $1,950 2014-07-23
Firefox HIGH 9.3
CVE-2014-1556

Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7 allow remote attackers to execute arbitrary code via crafted W…

Fix: after 30.0
Fix from $1,950 2014-07-23
Firefox HIGH 9.3
CVE-2014-1557

The ConvolveHorizontally function in Skia, as used in Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7, does no…

Fix: after 30.0
Fix from $1,950 2014-07-23
Firefox MEDIUM 5.8
CVE-2014-1552

Mozilla Firefox before 31.0 and Thunderbird before 31.0 do not properly implement the sandbox attribute of the IFRAME element, which allows remote at…

Fix: after 30.0
Fix from $1,600 2014-07-23
Firefox MEDIUM 5.8
CVE-2014-1561

Mozilla Firefox before 31.0 does not properly restrict use of drag-and-drop events to spoof customization events, which allows remote attackers to al…

Fix: after 30.0
Fix from $1,600 2014-07-23
Firefox HIGH 10.0
CVE-2014-1544EPSS 6%

Use-after-free vulnerability in the CERT_DestroyCertificate function in libnss3.so in Mozilla Network Security Services (NSS) 3.x, as used in Firefox…

Fix: after 30.0
Fix from $1,950 2014-07-23
Firefox HIGH 10.0
CVE-2014-1547EPSS 6%

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7 …

Fix: after 30.0
Fix from $1,950 2014-07-23
Firefox HIGH 10.0
CVE-2014-1548EPSS 6%

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 31.0 and Thunderbird before 31.0 allow remote attackers to cause…

Fix: after 30.0
Fix from $1,950 2014-07-23
Firefox HIGH 10.0
CVE-2014-1550

Use-after-free vulnerability in the MediaInputPort class in Mozilla Firefox before 31.0 and Thunderbird before 31.0 allows remote attackers to execut…

Fix: after 30.0
Fix from $1,950 2014-07-23
Firefox HIGH 9.3
CVE-2014-1549EPSS 6%

The mozilla::dom::AudioBufferSourceNodeEngine::CopyFromInputBuffer function in Mozilla Firefox before 31.0 and Thunderbird before 31.0 does not prope…

Fix: after 30.0
Fix from $1,950 2014-07-23
Netscape Portable Runtime HIGH 10.0
CVE-2014-1545EPSS 6%

Mozilla Netscape Portable Runtime (NSPR) before 4.10.6 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds …

Fix: after 4.10.5
Fix from $1,950 2014-06-11
Firefox HIGH 7.5
CVE-2014-1543

Multiple heap-based buffer overflows in the navigator.getGamepads function in the Gamepad API in Mozilla Firefox before 30.0 allow remote attackers t…

Fix: after 29.0.1
Fix from $1,950 2014-06-11
Firefox MEDIUM 6.8
CVE-2014-1542EPSS 5%

Buffer overflow in the Speex resampler in the Web Audio subsystem in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrary code vi…

Fix: after 29.0.1
Fix from $1,600 2014-06-11
Firefox HIGH 10.0
CVE-2014-1533EPSS 6%

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 30.0, Firefox ESR 24.x before 24.6, and Thunderbird before 24.6 …

Fix: after 29.0.1
Fix from $1,950 2014-06-11
Firefox HIGH 10.0
CVE-2014-1534EPSS 6%

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 30.0 allow remote attackers to cause a denial of service (memory…

Fix: after 29.0.1
Fix from $1,950 2014-06-11
Firefox HIGH 10.0
CVE-2014-1536EPSS 6%

The PropertyProvider::FindJustificationRange function in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrary code or cause a den…

Fix: after 29.0.1
Fix from $1,950 2014-06-11
Firefox HIGH 10.0
CVE-2014-1537

Use-after-free vulnerability in the mozilla::dom::workers::WorkerPrivateParent function in Mozilla Firefox before 30.0 allows remote attackers to exe…

Fix: after 29.0.1
Fix from $1,950 2014-06-11
Firefox HIGH 10.0
CVE-2014-1538

Use-after-free vulnerability in the nsTextEditRules::CreateMozBR function in Mozilla Firefox before 30.0, Firefox ESR 24.x before 24.6, and Thunderbi…

Fix: after 29.0.1
Fix from $1,950 2014-06-11
Firefox HIGH 10.0
CVE-2014-1541

Use-after-free vulnerability in the RefreshDriverTimer::TickDriver function in the SMIL Animation Controller in Mozilla Firefox before 30.0, Firefox …

Fix: after 29.0.1
Fix from $1,950 2014-06-11
Firefox HIGH 9.3
CVE-2014-1540

Use-after-free vulnerability in the nsEventListenerManager::CompileEventHandlerInternal function in the Event Listener Manager in Mozilla Firefox bef…

Fix: after 29.0.1
Fix from $1,950 2014-06-11