Browse CVEs

HIGH 9.3 CVE-2010-3777EPSS 8% Unspecified vulnerability in Mozilla Firefox 3.6.x before 3.6.13 and Thunderbird 3.1.x before 3.1.7 allows remote attackers to cause a denial of serv… Firefox Mitigation only Fix from $1,9502010-12-10 HIGH 9.3 CVE-2010-3778EPSS 8% Unspecified vulnerability in Mozilla Firefox 3.5.x before 3.5.16, Thunderbird before 3.0.11, and SeaMonkey before 2.0.11 allows remote attackers to c… Firefox after 3.0.10 Fix from $1,9502010-12-10 MEDIUM 6.8 CVE-2010-3771 Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, does not properly handle injection of an ISINDEX element into an … Firefox after 3.5.15 Fix from $1,6002010-12-10 MEDIUM 6.8 CVE-2010-3773 Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, when the XMLHttpRequestSpy module in the Firebug add-on is used, … Firefox after 3.5.15 Fix from $1,6002010-12-10 HIGH 10.0 CVE-2010-4508 The WebSockets implementation in Mozilla Firefox 4 through 4.0 Beta 7 does not properly perform proxy upgrade negotiation, which has unspecified impa… Firefox Mitigation only Fix from $1,9502010-12-09 MEDIUM 5.0 CVE-2010-3764 The Old Charts implementation in Bugzilla 2.12 through 3.2.8, 3.4.8, 3.6.2, 3.7.3, and 4.1 creates graph files with predictable names in graphs/, whi… Bugzilla Patch available Fix from $1,6002010-11-05 CRITICAL 9.8 CVE-2010-3765 KEVEPSS 83% Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.1… Firefox Mitigation only Fix from $2,3002010-10-28 HIGH 9.3 CVE-2010-3179EPSS 10% Stack-based buffer overflow in the text-rendering functionality in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 an… Firefox after 3.5.13 Fix from $1,9502010-10-21 HIGH 9.3 CVE-2010-3180 Use-after-free vulnerability in the nsBarProp function in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x b… Firefox after 3.5.13 Fix from $1,9502010-10-21 HIGH 9.3 CVE-2010-3183EPSS 6% The LookupGetterOrSetter function in js3250.dll in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3… Firefox after 3.5.13 Fix from $1,9502010-10-21 MEDIUM 6.9 CVE-2010-3181 Untrusted search path vulnerability in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and Se… Firefox after 3.5.13 Fix from $1,6002010-10-21 MEDIUM 6.9 CVE-2010-3182 A certain application-launch script in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and Se… Firefox after 3.5.13 Fix from $1,6002010-10-21 MEDIUM 5.8 CVE-2010-3178 Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 do not properly ha… Firefox after 3.5.13 Fix from $1,6002010-10-21 HIGH 9.3 CVE-2010-3174 Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.14, Thunderbird before 3.0.9, and SeaMonkey before 2.0.9 allows r… Firefox after 3.0.8 Fix from $1,9502010-10-21 HIGH 9.3 CVE-2010-3175 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.6.x before 3.6.11 and Thunderbird 3.1.x before 3.1.5 allow remote att… Firefox Mitigation only Fix from $1,9502010-10-21 HIGH 9.3 CVE-2010-3176 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 a… Firefox after 3.0.8 Fix from $1,9502010-10-21 HIGH 7.5 CVE-2010-3173 The SSL implementation in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey befor… Firefox after 3.5.13 Fix from $1,9502010-10-21 MEDIUM 5.8 CVE-2010-3171 The Math.random function in the JavaScript implementation in Mozilla Firefox 3.5.10 through 3.5.11, 3.6.4 through 3.6.8, and 4.0 Beta1 uses a random … Firefox No fix yet Fix from $1,6002010-09-15 MEDIUM 5.8 CVE-2010-3399 The js_InitRandom function in the JavaScript implementation in Mozilla Firefox 3.5.10 through 3.5.11, 3.6.4 through 3.6.8, and 4.0 Beta1 uses a conte… Firefox No fix yet Fix from $1,6002010-09-15 MEDIUM 5.8 CVE-2010-3400 The js_InitRandom function in the JavaScript implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5… Firefox after 2.0.4 Fix from $1,6002010-09-15 HIGH 9.3 CVE-2010-2760 Use-after-free vulnerability in the nsTreeSelection function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.… Firefox after 3.5.11 Fix from $1,9502010-09-09 HIGH 9.3 CVE-2010-2765EPSS 6% Integer overflow in the FRAMESET element implementation in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x b… Firefox after 3.5.11 Fix from $1,9502010-09-09 HIGH 9.3 CVE-2010-2766EPSS 5% The normalizeDocument function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonke… Firefox after 3.5.11 Fix from $1,9502010-09-09 HIGH 9.3 CVE-2010-2767 The navigator.plugins implementation in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and Se… Firefox after 3.5.11 Fix from $1,9502010-09-09 HIGH 9.3 CVE-2010-2770 Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 on Mac OS X allow r… Firefox after 3.5.11 Fix from $1,9502010-09-09 HIGH 9.3 CVE-2010-3166EPSS 6% Heap-based buffer overflow in the nsTextFrameUtils::TransformText function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird befor… Firefox after 3.5.11 Fix from $1,9502010-09-09 HIGH 9.3 CVE-2010-3167EPSS 7% The nsTreeContentView function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonke… Firefox after 3.5.11 Fix from $1,9502010-09-09 HIGH 9.3 CVE-2010-3168 Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 do not properly res… Firefox after 3.5.11 Fix from $1,9502010-09-09 HIGH 9.3 CVE-2010-3169 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.… Firefox after 3.5.11 Fix from $1,9502010-09-09 MEDIUM 6.8 CVE-2010-2762 The XPCSafeJSObjectWrapper class in the SafeJSObjectWrapper (aka SJOW) implementation in Mozilla Firefox 3.6.x before 3.6.9 and Thunderbird 3.1.x bef… Firefox Mitigation only Fix from $1,6002010-09-09