Browse CVEs

HIGH 10.0 CVE-2013-5599EPSS 5% Use-after-free vulnerability in the nsIPresShell::GetPresContext function in the PresShell (aka presentation shell) implementation in Mozilla Firefox… Firefox after 24.0.1 Fix from $1,9502013-10-30 HIGH 10.0 CVE-2013-5600EPSS 5% Use-after-free vulnerability in the nsIOService::NewChannelFromURIWithProxyFlags function in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.… Firefox after 24.0.1 Fix from $1,9502013-10-30 HIGH 10.0 CVE-2013-5601EPSS 5% Use-after-free vulnerability in the nsEventListenerManager::SetEventHandler function in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 … Firefox after 24.0.1 Fix from $1,9502013-10-30 HIGH 10.0 CVE-2013-5602EPSS 5% The Worker::SetEventListener function in the Web workers implementation in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x befo… Firefox after 24.0.1 Fix from $1,9502013-10-30 HIGH 10.0 CVE-2013-5603EPSS 5% Use-after-free vulnerability in the nsContentUtils::ContentIsHostIncludingDescendantOf function in Mozilla Firefox before 25.0, Firefox ESR 24.x befo… Firefox after 24.0.1 Fix from $1,9502013-10-30 HIGH 9.3 CVE-2013-5604EPSS 6% The txXPathNodeUtils::getBaseURI function in the XSLT processor in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1,… Firefox after 24.0.1 Fix from $1,9502013-10-30 HIGH 8.3 CVE-2013-5598 PDF.js in Mozilla Firefox before 25.0 and Firefox ESR 24.x before 24.1 does not properly handle the appending of an IFRAME element, which allows remo… Firefox after 24.0 Fix from $1,9502013-10-30 MEDIUM 6.8 CVE-2013-5596 The cycle collection (CC) implementation in Mozilla Firefox before 25.0, Firefox ESR 24.x before 24.1, Thunderbird before 24.1, and SeaMonkey before … Firefox after 24.0.1 Fix from $1,6002013-10-30 MEDIUM 6.8 CVE-2013-1734 Cross-site request forgery (CSRF) vulnerability in attachment.cgi in Bugzilla 2.x, 3.x, and 4.0.x before 4.0.11; 4.1.x and 4.2.x before 4.2.7; and 4.… Bugzilla Patch available Fix from $1,6002013-10-24 MEDIUM 6.8 CVE-2013-1733 Cross-site request forgery (CSRF) vulnerability in process_bug.cgi in Bugzilla 4.4.x before 4.4.1 allows remote attackers to hijack the authenticatio… Bugzilla Patch available Fix from $1,6002013-10-24 MEDIUM 5.0 CVE-2013-1739 Mozilla Network Security Services (NSS) before 3.15.2 does not ensure that data structures are initialized before read operations, which allows remot… Network Security Services after 3.15.1 Fix from $1,6002013-10-22 HIGH 10.0 CVE-2013-1719EPSS 5% Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 24.0, Thunderbird before 24.0, and SeaMonkey before 2.21 allow r… Firefox after 23.0.1 Fix from $1,9502013-09-18 HIGH 10.0 CVE-2013-1736EPSS 5% The nsGfxScrollFrameInner::IsLTR function in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17… Firefox after 23.0.1 Fix from $1,9502013-09-18 HIGH 9.3 CVE-2013-1721 Integer overflow in the drawLineLoop function in the libGLESv2 library in Almost Native Graphics Layer Engine (ANGLE), as used in Mozilla Firefox bef… Firefox after 23.0.1 Fix from $1,9502013-09-18 HIGH 9.3 CVE-2013-1722EPSS 6% Use-after-free vulnerability in the nsAnimationManager::BuildAnimations function in the Animation Manager in Mozilla Firefox before 24.0, Firefox ESR… Firefox after 23.0.1 Fix from $1,9502013-09-18 HIGH 9.3 CVE-2013-1724EPSS 6% Use-after-free vulnerability in the mozilla::dom::HTMLFormElement::IsDefaultSubmitElement function in Mozilla Firefox before 24.0, Thunderbird before… Firefox after 23.0.1 Fix from $1,9502013-09-18 HIGH 9.3 CVE-2013-1732EPSS 9% Buffer overflow in the nsFloatManager::GetFlowArea function in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, … Firefox after 23.0.1 Fix from $1,9502013-09-18 HIGH 9.3 CVE-2013-1735 Use-after-free vulnerability in the mozilla::layout::ScrollbarActivity function in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thund… Firefox after 23.0.1 Fix from $1,9502013-09-18 HIGH 9.3 CVE-2013-1738EPSS 6% Use-after-free vulnerability in the JS_GetGlobalForScopeChain function in Mozilla Firefox before 24.0, Thunderbird before 24.0, and SeaMonkey before … Firefox after 23.0.1 Fix from $1,9502013-09-18 MEDIUM 6.8 CVE-2013-1720 The nsHtml5TreeBuilder::resetTheInsertionMode function in the HTML5 Tree Builder in Mozilla Firefox before 24.0, Thunderbird before 24.0, and SeaMonk… Firefox after 23.0.1 Fix from $1,6002013-09-18 MEDIUM 6.8 CVE-2013-1725 Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 d… Firefox after 23.0.1 Fix from $1,6002013-09-18 MEDIUM 6.8 CVE-2013-1730 Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 d… Firefox after 23.0.1 Fix from $1,6002013-09-18 MEDIUM 6.8 CVE-2013-1731 Untrusted search path vulnerability in the GL tracing functionality in Mozilla Firefox before 24.0 on Android allows attackers to execute arbitrary c… Firefox after 23.0.1 Fix from $1,6002013-09-18 MEDIUM 6.2 CVE-2013-1726 Mozilla Updater in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaM… Firefox after 23.0.1 Fix from $1,6002013-09-18 MEDIUM 5.0 CVE-2013-1737 Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 d… Firefox after 23.0.1 Fix from $1,6002013-09-18 HIGH 10.0 CVE-2013-1718EPSS 5% Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, T… Firefox after 23.0.1 Fix from $1,9502013-09-18 MEDIUM 5.4 CVE-2013-1717 Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20… Firefox after 22.0 Fix from $1,6002013-08-07 HIGH 10.0 CVE-2013-1701 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8,… Firefox after 22.0 Fix from $1,9502013-08-07 HIGH 10.0 CVE-2013-1702EPSS 5% Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 23.0 and SeaMonkey before 2.20 allow remote attackers to cause a… Firefox after 22.0 Fix from $1,9502013-08-07 HIGH 10.0 CVE-2013-1705 Heap-based buffer underflow in the cryptojs_interpret_key_gen_type function in Mozilla Firefox before 23.0 and SeaMonkey before 2.20 allows remote at… Firefox after 22.0 Fix from $1,9502013-08-07