firefox vulnerabilities (Ubuntu)
1,530 vulnerabilities.
firefoxUbuntuMozilla Firefox before 36.0 allows user-assisted remote attackers to read arbitrary files or...6.8 MediumfirefoxUbuntuMozilla Firefox before 36.0 does not properly restrict transitions of JavaScript objects from a...2.6 LowfirefoxUbuntuThe UITour::onPageEvent function in Mozilla Firefox before 36.0 does not ensure that an API call...4.3 MediumfirefoxUbuntufirefox regressionNo scorefirefoxUbuntuMozilla Firefox before 35.0 and SeaMonkey before 2.32 do not consider the id-pkix-ocsp-nocheck...4.3 MediumfirefoxUbuntuUse-after-free vulnerability in the WebRTC implementation in Mozilla Firefox before 35.0, Firefox...7.5 HighfirefoxUbuntuThe mozilla::dom::AudioParamTimeline::AudioNodeInputValue function in the Web Audio API...5.0 MediumfirefoxUbuntuMozilla Firefox before 35.0, Firefox ESR 31.x before 31.4, Thunderbird before 31.4, and SeaMonkey...6.8 MediumfirefoxUbuntuThe navigator.sendBeacon implementation in Mozilla Firefox before 35.0, Firefox ESR 31.x before...6.8 MediumfirefoxUbuntuMozilla Firefox before 35.0 and SeaMonkey before 2.32 do not properly initialize memory for BMP...5.0 MediumfirefoxUbuntuThe XrayWrapper implementation in Mozilla Firefox before 35.0 and SeaMonkey before 2.32 does not...7.5 HighfirefoxUbuntuMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 35.0 and...7.5 HighfirefoxUbuntuMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 35.0,...7.5 HighfirefoxUbuntuMozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey...6.8 MediumfirefoxUbuntuStack-based buffer overflow in the mozilla::FileBlockCache::Read function in Mozilla Firefox...6.8 MediumfirefoxUbuntuUse-after-free vulnerability in the nsHtml5TreeOperation function in xul.dll in Mozilla Firefox...6.8 MediumfirefoxUbuntuMozilla Firefox 33.0 and SeaMonkey before 2.31 include path strings in CSP violation reports,...4.3 MediumfirefoxUbuntuThe XMLHttpRequest.prototype.send method in Mozilla Firefox before 34.0, Firefox ESR 31.x before...4.3 MediumfirefoxUbuntuMozilla Firefox before 34.0 and SeaMonkey before 2.31 provide stylesheets with an incorrect...6.8 MediumfirefoxUbuntuMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 34.0 and...6.8 MediumfirefoxUbuntuMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 34.0,...6.8 MediumfirefoxUbuntucontent/base/src/nsDocument.cpp in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and...5.0 MediumfirefoxUbuntuThe WebRTC video-sharing feature in dom/media/MediaManager.cpp in Mozilla Firefox before 33.0,...5.0 MediumfirefoxUbuntuThe Public Key Pinning (PKP) implementation in Mozilla Firefox before 33.0 skips pinning checks...4.3 MediumfirefoxUbuntuThe Alarm API in Mozilla Firefox before 33.0 and Firefox ESR 31.x before 31.2 does not properly...5.0 MediumfirefoxUbuntuThe Public Key Pinning (PKP) implementation in Mozilla Firefox before 33.0 does not properly...4.3 MediumfirefoxUbuntuUse-after-free vulnerability in DirectionalityUtils.cpp in Mozilla Firefox before 33.0, Firefox...7.5 HighfirefoxUbuntuMozilla Firefox before 33.0 does not properly initialize memory for GIF images, which allows...5.0 MediumfirefoxUbuntuThe get_tile function in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and...7.5 HighfirefoxUbuntuThe mozilla::dom::OscillatorNodeEngine::ComputeCustom function in the Web Audio subsystem in...6.4 MediumfirefoxUbuntuHeap-based buffer overflow in the nsTransformedTextRun function in Mozilla Firefox before 33.0,...7.5 HighfirefoxUbuntuMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 33.0 allow...7.5 HighfirefoxUbuntuMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 33.0,...7.5 HighfirefoxUbuntuMozilla Network Security Services (NSS) before 3.16.2.1, 3.16.x before 3.16.5, and 3.17.x before...7.5 HighfirefoxUbuntuUse-after-free vulnerability in DirectionalityUtils.cpp in Mozilla Firefox before 32.0, Firefox...9.3 HighfirefoxUbuntuThe mozilla::dom::AudioEventTimeline function in the Web Audio API implementation in Mozilla...5.0 MediumfirefoxUbuntuMozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 do...4.3 MediumfirefoxUbuntuUse-after-free vulnerability in the mozilla::DOMSVGLength::GetTearOff function in Mozilla Firefox...10.0 HighfirefoxUbuntuUnspecified vulnerability in the browser engine in Mozilla Firefox before 32.0, Firefox ESR 24.x...10.0 HighfirefoxUbuntuMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 32.0 allow...10.0 HighfirefoxUbuntuMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 32.0,...10.0 HighfirefoxUbuntuMozilla Firefox before 31.0 does not properly restrict use of drag-and-drop events to spoof...5.8 MediumfirefoxUbuntuMozilla Firefox before 31.0 and Thunderbird before 31.0 allow remote attackers to cause a denial...4.3 MediumfirefoxUbuntuMozilla Firefox before 31.0 and Thunderbird before 31.0 allow remote attackers to cause a denial...4.3 MediumfirefoxUbuntuMozilla Firefox before 31.0 and Thunderbird before 31.0 allow remote attackers to cause a denial...4.3 MediumfirefoxUbuntuThe ConvolveHorizontally function in Skia, as used in Mozilla Firefox before 31.0, Firefox ESR 24...9.3 HighfirefoxUbuntuMozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7 allow...9.3 HighfirefoxUbuntuUse-after-free vulnerability in the nsDocLoader::OnProgress function in Mozilla Firefox before 31...9.3 HighfirefoxUbuntuMozilla Firefox before 31.0 and Thunderbird before 31.0 do not properly implement the sandbox...5.8 MediumfirefoxUbuntuUse-after-free vulnerability in the MediaInputPort class in Mozilla Firefox before 31.0 and...10.0 High- Show moreLoading…