Browse CVEs

HIGH 7.5 CVE-2008-2801 Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly implement JAR signing, which allows remote attackers to execute arbitrary… Firefox after 2.0.0.14 Fix from $1,9502008-07-07 HIGH 7.5 CVE-2008-2802 Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonkey before 1.1.10 allow remote attackers to execute arbitrary code via a… Firefox after 2.0.0.14 Fix from $1,9502008-07-07 HIGH 7.5 CVE-2008-2806 Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 on Mac OS X allow remote attackers to bypass the Same Origin Policy and create arbitrary … Firefox Mitigation only Fix from $1,9502008-07-07 MEDIUM 6.8 CVE-2008-2803 The mozIJSSubScriptLoader.LoadScript function in Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonkey before 1.1.10 does … Firefox after 2.0.0.14 Fix from $1,6002008-07-07 MEDIUM 6.8 CVE-2008-2810 Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly identify the context of Windows shortcut files, which allows user-assiste… Firefox after 2.0.0.14 Fix from $1,6002008-07-07 MEDIUM 5.0 CVE-2008-2805 Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 allow remote attackers to force the upload of arbitrary local files from a client compute… Firefox after 2.0.0.14 Fix from $1,6002008-07-07 MEDIUM 5.0 CVE-2008-2807 Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly handle an invalid .properties file for an add-on, which allows remote att… Firefox after 2.0.0.14 Fix from $1,6002008-07-07 HIGH 10.0 CVE-2008-2786 Buffer overflow in Firefox 3.0 and 2.0.x has unknown impact and attack vectors. NOTE: due to lack of details as of 20080619, it is not clear whether… Firefox No fix yet Fix from $1,9502008-06-19 HIGH 9.3 CVE-2008-2785EPSS 5% Mozilla Firefox before 2.0.0.16 and 3.x before 3.0.1, Thunderbird before 2.0.0.16, and SeaMonkey before 1.1.11 use an incorrect integer data type as … Firefox after 2.0.0.15 Fix from $1,9502008-06-19 MEDIUM 5.0 CVE-2008-2014 Mozilla Firefox 3.0 beta 5 allows remote attackers to cause a denial of service (application crash) via JavaScript code that calls document.write in … Firefox Mitigation only Fix from $1,6002008-04-30 HIGH 9.3 CVE-2008-1380 The JavaScript engine in Mozilla Firefox before 2.0.0.14, Thunderbird before 2.0.0.14, and SeaMonkey before 1.1.10 allows remote attackers to cause a… Firefox after 2.0.0.13 Fix from $1,9502008-04-17 MEDIUM 5.0 CVE-2008-1240 LiveConnect in Mozilla Firefox before 2.0.0.13 and SeaMonkey before 1.1.9 does not properly parse the content origin for jar: URIs before sending the… Firefox after 2.0.0.12 Fix from $1,6002008-03-28 HIGH 9.3 CVE-2008-1235EPSS 6% Unspecified vulnerability in Mozilla Firefox before 2.0.0.13, Thunderbird before 2.0.0.13, and SeaMonkey before 1.1.9 allows remote attackers to exec… Firefox after 2.0.0.12 Fix from $1,9502008-03-27 MEDIUM 6.8 CVE-2008-1233 Unspecified vulnerability in Mozilla Firefox before 2.0.0.13, Thunderbird before 2.0.0.13, and SeaMonkey before 1.1.9 allows remote attackers to exec… Firefox after 2.0.0.12 Fix from $1,6002008-03-27 MEDIUM 6.8 CVE-2008-1236 Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.13, Thunderbird before 2.0.0.13, and SeaMonkey before 1.1.9 allow remote attacke… Firefox after 2.0.0.12 Fix from $1,6002008-03-27 MEDIUM 6.8 CVE-2008-1237 Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.13, Thunderbird before 2.0.0.13, and SeaMonkey before 1.1.9 allow remote attacke… Firefox after 2.0.0.12 Fix from $1,6002008-03-27 MEDIUM 5.0 CVE-2008-1238 Mozilla Firefox before 2.0.0.13 and SeaMonkey before 1.1.9, when generating the HTTP Referer header, does not list the entire URL when it contains Ba… Firefox after 2.0.0.12 Fix from $1,6002008-03-27 HIGH 7.5 CVE-2008-0304EPSS 6% Heap-based buffer overflow in Mozilla Thunderbird before 2.0.0.12 and SeaMonkey before 1.1.8 might allow remote attackers to execute arbitrary code v… Seamonkey after 2.0.0.9 Fix from $1,9502008-02-29 HIGH 9.3 CVE-2008-0420 modules/libpr0n/decoders/bmp/nsBMPDecoder.cpp in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 does not pr… Firefox after 2.0.0.11 Fix from $1,9502008-02-12 MEDIUM 5.0 CVE-2008-0594 Mozilla Firefox before 2.0.0.12 does not always display a web forgery warning dialog if the entire contents of a web page are in a DIV tag that uses … Firefox after 2.0.0.11 Fix from $1,6002008-02-09 HIGH 9.3 CVE-2008-0412 The browser engine in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allows remote attackers to cause a den… Firefox after 2.0.0.11 Fix from $1,9502008-02-08 HIGH 9.3 CVE-2008-0413 The JavaScript engine in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allows remote attackers to cause a … Firefox after 2.0.0.11 Fix from $1,9502008-02-08 HIGH 9.3 CVE-2008-0419 Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8 allows remote attackers to steal navigation history and cause a denial of service (crash) … Firefox after 2.0.0.11 Fix from $1,9502008-02-08 MEDIUM 5.0 CVE-2008-0367 Mozilla Firefox 2.0.0.11, 3.0b2, and possibly earlier versions, when prompting for HTTP Basic Authentication, displays the site requesting the authen… Firefox after 2.0.0.11 Fix from $1,6002008-01-19 HIGH 9.3 CVE-2007-5959EPSS 5% Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.10 and SeaMonkey before 1.1.7 allow remote attackers to cause a denial of servic… Firefox Patch available Fix from $1,9502007-11-26 HIGH 7.1 CVE-2007-5896 Mozilla Firefox 2.0.0.9 allows remote attackers to cause a denial of service (CPU consumption and crash) via an iframe with Javascript that sets the … Firefox Mitigation only Fix from $1,9502007-11-08 HIGH 9.3 CVE-2007-5338 Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 allow remote attackers to execute arbitrary Javascript with user privileges by using the Sc… Firefox after 2.0.0.7 Fix from $1,9502007-10-21 HIGH 9.3 CVE-2007-5045 Argument injection vulnerability in Apple QuickTime 7.1.5 and earlier, when running on systems with Mozilla Firefox before 2.0.0.7 installed, allows … Firefox after 7.1.5 Fix from $1,9502007-09-24 HIGH 7.5 CVE-2007-5038 The offer_account_by_email function in User.pm in the WebService for Bugzilla before 3.0.2, and 3.1.x before 3.1.2, does not check the value of the c… Bugzilla Patch available Fix from $1,9502007-09-24 MEDIUM 5.0 CVE-2007-4879 Mozilla Firefox before Firefox 2.0.0.13, and SeaMonkey before 1.1.9, can automatically install TLS client certificates with minimal user interaction,… Firefox after 2.0.0.12 Fix from $1,6002007-09-13