Skip to contentMozilla Firefox vulnerabilities
- mozilla firefox, mozilla +1 moreFirefox before 1.0.3 and Mozilla Suite before 1.7.7, when blocking a popup, allows remote...CVE-2005-11537.5 High
- mozilla firefoxThe Plugin Finder Service (PFS) in Firefox before 1.0.3 allows remote attackers to execute...CVE-2005-07527.5 High
- mozilla firefox, mozilla, netscape navigator +2 moreThe find_replen function in jsstr.c in the Javascript engine for Mozilla Suite 1.7.6, Firefox 1.0...CVE-2005-0989Public exploitEPSS 10.0%5.0 Medium
- mozilla firefoxFirefox before 1.0.2 allows remote attackers to execute arbitrary code by tricking a user into...CVE-2005-04022.6 Low
- mozilla firefox, mozilla +1 moreFireFox 1.0.1 and Mozilla before 1.7.6 do not sufficiently address all attack vectors for loading...CVE-2005-04015.1 Medium
- mozilla firefox, mozilla, mozilla thunderbird +2 moreHeap-based buffer overflow in GIF2.cpp in Firefox before 1.0.2, Mozilla before to 1.7.6, and...CVE-2005-0399EPSS 15.1%5.1 Medium
- mozilla firefox, mozilla +1 moreFirefox before 1.0.1 and Mozilla before 1.7.6 allows remote attackers to spoof the SSL "secure...CVE-2005-05932.6 Low
- mozilla firefox, mozilla +1 moreHeap-based buffer overflow in the UTF8ToNewUnicode function for Firefox before 1.0.1 and Mozilla...CVE-2005-05927.5 High
- mozilla firefoxFirefox before 1.0.1 allows remote attackers to spoof the (1) security and (2) download modal...CVE-2005-05912.6 Low
- mozilla firefox, mozilla, mozilla thunderbird +2 moreThe installation confirmation dialog in Firefox before 1.0.1, Thunderbird before 1.0.1, and...CVE-2005-05905.0 Medium
- mozilla firefoxThe Form Fill feature in Firefox before 1.0.1 allows remote attackers to steal potentially...CVE-2005-05895.0 Medium
- mozilla firefox, mozilla +1 moreFirefox before 1.0.1 and Mozilla before 1.7.6 does not restrict xsl:include and xsl:import tags...CVE-2005-05885.0 Medium
- mozilla firefox, mozilla +1 moreFirefox before 1.0.1 and Mozilla before 1.7.6 allows remote malicious web sites to overwrite...CVE-2005-05876.5 Medium
- mozilla firefox, mozilla +1 moreFirefox before 1.0.1 and Mozilla before 1.7.6 allows remote malicious web sites to spoof the...CVE-2005-05862.6 Low
- mozilla firefox, mozilla +1 moreFirefox before 1.0.1 and Mozilla before 1.7.6 truncates long sub-domains or paths for display,...CVE-2005-05852.6 Low
- mozilla firefox, mozilla +1 moreFirefox before 1.0.1 and Mozilla before 1.7.6, when displaying the HTTP Authentication dialog, do...CVE-2005-05842.6 Low
- mozilla firefox, mozilla, mozilla thunderbird +2 moreString handling functions in Mozilla 1.7.3, Firefox 1.0, and Thunderbird before 1.0.2, such as...CVE-2005-02555.0 Medium
- mozilla firefox, mozilla +1 moreFirefox before 1.0.1 and Mozilla Suite before 1.7.6 use a predictable filename for the plugin...CVE-2005-05782.1 Low
- mozilla firefoxFirefox 1.0 allows remote attackers to execute arbitrary code via plugins that load "privileged...CVE-2005-05275.1 Medium
- mozilla firefoxFirefox 1.0 does not prevent the user from dragging an executable file to the desktop when it has...CVE-2005-02305.1 Medium
- mozilla firefoxFirefox 1.0 allows remote attackers to modify Boolean configuration parameters for the about...CVE-2005-02322.6 Low
- mozilla camino, firefox, mozilla +3 more +5 moreThe International Domain Name (IDN) support in Firefox 1.0, Camino .8.5, and Mozilla before 1.7.6...CVE-2005-0233EPSS 20.4%7.5 High
- mozilla firefoxFirefox 1.0 does not invoke the Javascript Security Manager when a user drags a javascript: or...CVE-2005-02312.6 Low
- mozilla firefoxFirefox before 1.0 allows the user to store a (1) javascript: or (2) data: URLs as a Livefeed...CVE-2005-01505.0 Medium
- mozilla firefox, mozilla +1 moreFirefox before 1.0 and Mozilla before 1.7.5, when configured to use a proxy, respond to 407 proxy...CVE-2005-01477.5 High
- mozilla firefox, mozilla +1 moreFirefox before 1.0 and Mozilla before 1.7.5 allow remote attackers to obtain sensitive data from...CVE-2005-01465.0 Medium
- mozilla firefox, mozilla +1 moreFirefox before 1.0 and Mozilla before 1.7.5 display the secure site lock icon when a view-source:...CVE-2005-01442.6 Low
- mozilla firefox, mozilla +1 moreFirefox before 1.0 and Mozilla before 1.7.5 display the SSL lock icon when an insecure page loads...CVE-2005-01432.6 Low
- mozilla firefox, mozilla, mozilla thunderbird +2 moreFirefox 0.9, Thunderbird 0.6 and other versions before 0.9, and Mozilla 1.7 before 1.7.5 save...CVE-2005-01422.1 Low
- mozilla firefox, mozilla +1 moreFirefox before 1.0 and Mozilla before 1.7.5 allow remote attackers to load local files via links ...CVE-2005-01412.6 Low
- mozilla firefoxFirefox before 1.0 does not properly distinguish between user-generated and synthetic click...CVE-2005-01452.6 Low
- mozilla firefox** DISPUTED ** Mozilla Firefox 1.5.0.1, and possibly other versions, preserves some records of...CVE-2004-2657Disputed1.7 Low
- mozilla firefoxMozilla Firefox before 1.0 truncates long filenames in the file download dialog box, which makes...CVE-2004-22275.0 Medium
- mozilla firefoxMozilla Firefox before 0.10.1 allows remote attackers to delete arbitrary files in the download...CVE-2004-22255.0 Medium
- mozilla firefox, mozilla, netscape navigator +2 moreThe Apple Java plugin, as used in Netscape 7.1 and 7.2, Mozilla 1.7.2, and Firefox 0.9.3 on MacOS...CVE-2004-17532.6 Low
- mozilla firefoxFirefox and Mozilla allow remote attackers to cause a denial of service (application crash from...CVE-2004-12005.0 Medium
- mozilla firefox, mozilla +1 moreMozilla before 1.7.6, and Firefox before 1.0.1, allows remote attackers to spoof arbitrary web...CVE-2004-11564.3 Medium
- mozilla firefox, mozilla +1 moreFirefox before 1.0 and Mozilla before 1.7.5 allow inactive (background) tabs to focus on input...CVE-2004-1381Public exploit5.0 Medium
- mozilla firefox, mozilla +1 moreFirefox before 1.0 and Mozilla before 1.7.5 allows inactive (background) tabs to launch dialog...CVE-2004-1380Public exploit5.0 Medium
- mozilla firefox, mozilla, mozilla thunderbird +6 more +8 moreInteger overflow in the bitmap (BMP) decoder for Mozilla Firefox before the Preview Release,...CVE-2004-090410.0 High
- microsoft ie, mozilla firefox, kde konqueror +2 more +4 moreMozilla Firefox 0.9.2 allows web sites to set cookies for country-specific top-level domains,...CVE-2004-0867EPSS 17.2%7.5 High
- microsoft ie, internet explorer, kde konqueror +2 more +4 moreInternet Explorer 6.0 allows web sites to set cookies for country-specific top-level domains,...CVE-2004-0866EPSS 10.1%7.5 High
- mozilla firefox, mozilla, conectiva linux +5 more +7 moreMozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8...CVE-2004-09054.6 Medium
- firebirdsql firebird, mozilla firefox, mozilla +2 moreThe (1) Mozilla 1.6, (2) Firebird 0.7 and (3) Firefox 0.8 web browsers do not properly verify...CVE-2004-07797.5 High
- mozilla firefox, mozilla, mozilla thunderbird +2 moreThe cert_TestHostName function in Mozilla before 1.7, Firefox before 0.9, and Thunderbird before...CVE-2004-07657.5 High
- mozilla firefox, mozilla, mozilla thunderbird +2 moreMozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote web sites to...CVE-2004-076410.0 High
- mozilla firefoxMozilla Firefox 0.9.1 and 0.9.2 allows remote web sites to spoof certificates of trusted web...CVE-2004-0763Public exploit5.0 Medium
- mozilla firefox, mozilla, mozilla thunderbird +2 moreMozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote web sites to...CVE-2004-07625.0 Medium
- mozilla firefox, mozilla, mozilla thunderbird +2 moreMozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote attackers to use...CVE-2004-07615.0 Medium
- mozilla firefox, mozilla, mozilla thunderbird +2 moreHeap-based buffer overflow in the SendUidl in the POP3 capability for Mozilla before 1.7, Firefox...CVE-2004-075710.0 High
- Show moreLoading…