Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Vendors
Mozilla
Firefox

Mozilla Firefox vulnerabilities

Known exploitedIn KEVPublic exploitFix available

mozilla firefox, seamonkey, thunderbird +2 moreMultiple integer overflows in Mozilla Firefox 1.5, Thunderbird 1.5 if Javascript is enabled in...CVE-2006-0297Fix available5.1 MediumFebruary 2, 2006
mozilla firefox, seamonkey +1 moreThe XULDocument.persist function in Mozilla, Firefox before 1.5.0.1, and SeaMonkey before 1.0...CVE-2006-0296Fix available5.0 MediumFebruary 2, 2006
mozilla firefox, seamonkey, thunderbird +2 moreMozilla Firefox 1.5, Thunderbird 1.5 if Javascript is enabled in mail, and SeaMonkey before 1.0...CVE-2006-0295Public exploitFix availableEPSS 71.3%5.1 MediumFebruary 2, 2006
mozilla firefox, seamonkey, thunderbird +2 moreMozilla Firefox before 1.5.0.1, Thunderbird 1.5 if running Javascript in mail, and SeaMonkey...CVE-2006-0294Fix available7.5 HighFebruary 2, 2006
mozilla firefoxThe function allocation code (js_NewFunction in jsfun.c) in Firefox 1.5 allows attackers to cause...CVE-2006-02937.5 HighFebruary 2, 2006
mozilla firefox, mozilla +1 moreThe Javascript interpreter (jsinterp.c) in Mozilla and Firefox before 1.5.1 does not properly...CVE-2006-0292Fix available7.5 HighFebruary 2, 2006
mozilla firefox, mozilla +1 moreCross-site scripting (XSS) vulnerability in Mozilla 1.7.12 and possibly earlier, Mozilla Firefox...CVE-2006-0496Public exploit4.3 MediumFebruary 1, 2006
mozilla firefox, mozilla, mozilla thunderbird +2 moreMozilla Firefox 1.0.1 and possibly other versions, including Mozilla and Thunderbird, allows...CVE-2005-4809Public exploit5.0 MediumDecember 31, 2005
mozilla firefoxMozilla Firefox 1.0.7 and earlier on Linux allows remote attackers to cause a denial of service ...CVE-2005-4720Public exploit5.0 MediumDecember 31, 2005
mozilla firefox, mozilla +1 moreFirefox and Mozilla can associate a cookie with multiple domains when the DNS resolver has a non...CVE-2005-46856.4 MediumDecember 31, 2005
k-meleon project k-meleon, mozilla firefox, suite +1 more +3 moreMozilla Firefox 1.5, Netscape 8.0.4 and 7.2, and K-Meleon before 0.9.12 allows remote attackers...CVE-2005-4134Public exploitEPSS 12.6%5.0 MediumDecember 9, 2005
mozilla firefoxFirefox 1.0.6 allows attackers to cause a denial of service (crash) via a Proxy Auto-Config (PAC)...CVE-2005-30892.6 LowSeptember 28, 2005
mozilla firefox, suite +1 moreFirefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to spawn windows...CVE-2005-27075.0 MediumSeptember 23, 2005
mozilla firefox, suite +1 moreFirefox before 1.0.7 and Mozilla before Suite 1.7.12 allows remote attackers to execute...CVE-2005-27066.4 MediumSeptember 23, 2005
mozilla firefox, suite +1 moreInteger overflow in the JavaScript engine in Firefox before 1.0.7 and Mozilla Suite before 1.7.12...CVE-2005-27057.5 HighSeptember 23, 2005
mozilla firefox, suite +1 moreFirefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to spoof DOM objects...CVE-2005-27045.0 MediumSeptember 23, 2005
mozilla firefox, suite +1 moreFirefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to modify HTTP...CVE-2005-27035.0 MediumSeptember 23, 2005
mozilla firefox, suite +1 moreFirefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to cause a denial of...CVE-2005-27027.5 HighSeptember 23, 2005
mozilla firefox, suite +1 moreHeap-based buffer overflow in Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote...CVE-2005-27017.5 HighSeptember 23, 2005
mozilla firefox, mozilla +1 moreFirefox 1.0.6 and Mozilla 1.7.10 allows attackers to execute arbitrary commands via shell...CVE-2005-2968Public exploitEPSS 10.7%7.5 HighSeptember 20, 2005
mozilla firefoxBuffer overflow in the International Domain Name (IDN) support in Mozilla Firefox 1.0.6 and...CVE-2005-2871Public exploitFix availableEPSS 21.1%7.5 HighSeptember 9, 2005
mozilla firefox, thunderbird +1 moreMozilla Thunderbird 1.0 and Firefox 1.0.6 allows remote attackers to obfuscate URIs via a long...CVE-2005-26022.6 LowAugust 17, 2005
mozilla firefoxFirefox, when opening Microsoft Word documents, does not properly set the permissions on shared...CVE-2005-24295.0 MediumAugust 3, 2005
mozilla firefoxMozilla Firefox 1.0.4 and 1.0.5 does not choose the challenge with the strongest authentication...CVE-2005-23955.0 MediumJuly 27, 2005
mozilla firefox, mozilla +1 moreFirefox before 1.0.5 and Mozilla before 1.7.9 does not properly clone base objects, which allows...CVE-2005-22707.5 HighJuly 13, 2005
mozilla firefox, mozilla +1 moreFirefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 does not properly verify the...CVE-2005-22697.5 HighJuly 13, 2005
mozilla firefox, mozilla +1 moreFirefox before 1.0.5 and Mozilla before 1.7.9 does not clearly associate a Javascript dialog box...CVE-2005-22682.6 LowJuly 13, 2005
mozilla firefoxFirefox before 1.0.5 allows remote attackers to steal information and possibly execute arbitrary...CVE-2005-22677.5 HighJuly 13, 2005
mozilla firefox, mozilla +1 moreFirefox before 1.0.5 and Mozilla before 1.7.9 allows a child frame to call top.focus and other...CVE-2005-22665.0 MediumJuly 13, 2005
mozilla firefox, mozilla +1 moreFirefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 and 7.2 allows remote attackers to...CVE-2005-2265Public exploitEPSS 68.1%5.0 MediumJuly 13, 2005
mozilla firefoxFirefox before 1.0.5 allows remote attackers to steal sensitive information by opening a...CVE-2005-22647.5 HighJuly 13, 2005
mozilla firefox, mozilla +1 moreThe InstallTrigger.install method in Firefox before 1.0.5 and Mozilla before 1.7.9 allows remote...CVE-2005-22635.0 MediumJuly 13, 2005
mozilla firefoxFirefox 1.0.3 and 1.0.4, and Netscape 8.0.2, allows remote attackers to execute arbitrary code by...CVE-2005-2262Public exploit5.1 MediumJuly 13, 2005
mozilla firefox, mozilla, mozilla thunderbird +2 moreFirefox before 1.0.5, Thunderbird before 1.0.5, Mozilla before 1.7.9, Netscape 8.0.2, and K...CVE-2005-22617.5 HighJuly 13, 2005
mozilla firefox, mozilla +1 moreThe browser user interface in Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 and...CVE-2005-22607.5 HighJuly 13, 2005
mozilla camino, firefox, mozilla +2 moreMozilla 1.7.8, Firefox 1.0.4, Camino 0.8.4, Netscape 8.0.2, and K-Meleon 0.9, and possibly other...CVE-2005-21145.0 MediumJuly 1, 2005
mozilla firefox, mozilla +1 moreA regression error in Firefox 1.0.3 and Mozilla 1.7.7 allows remote attackers to inject arbitrary...CVE-2005-19372.6 LowJune 13, 2005
mozilla firefoxThe file download dialog in Mozilla Firefox 0.10.1 and 1.0 for Windows allows remote attackers to...CVE-2005-15755.0 MediumMay 14, 2005
mozilla firefoxThe file download dialog in Mozilla Firefox 0.10.1 and 1.0 for Windows uses the Content-Type HTTP...CVE-2005-15762.6 LowMay 12, 2005
mozilla firefox, mozilla +1 moreFirefox before 1.0.4 and Mozilla Suite before 1.7.8 do not properly limit privileges of...CVE-2005-1532Public exploit7.5 HighMay 12, 2005
mozilla firefox, mozilla +1 moreFirefox before 1.0.4 and Mozilla Suite before 1.7.8 does not properly implement certain security...CVE-2005-15317.5 HighMay 12, 2005
mozilla firefoxThe install function in Firefox 1.0.3 allows remote web sites on the browser's whitelist, such as...CVE-2005-1477Public exploitEPSS 15.2%5.1 MediumMay 9, 2005
mozilla firefoxFirefox 1.0.3 allows remote attackers to execute arbitrary Javascript in other domains by using...CVE-2005-1476Public exploitEPSS 16.7%5.1 MediumMay 9, 2005
mozilla firefox, mozilla +1 moreThe privileged "chrome" UI code in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows...CVE-2005-11605.1 MediumApril 18, 2005
mozilla firefox, mozilla +1 moreThe native implementations of InstallTrigger and other functions in Firefox before 1.0.3 and...CVE-2005-11597.5 HighApril 18, 2005
mozilla firefoxMultiple "missing security checks" in Firefox before 1.0.3 allow remote attackers to inject...CVE-2005-11585.0 MediumApril 18, 2005
mozilla firefox, mozilla, netscape navigator +2 moreFirefox before 1.0.3, Mozilla Suite before 1.7.7, and Netscape 7.2 allows remote attackers to...CVE-2005-11577.5 HighApril 18, 2005
mozilla firefox, mozilla, netscape navigator +2 moreFirefox before 1.0.3, Mozilla Suite before 1.7.7, and Netscape 7.2 allows remote attackers to...CVE-2005-11567.5 HighApril 18, 2005
mozilla firefox, mozilla +1 moreThe favicon functionality in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote...CVE-2005-11557.5 HighApril 18, 2005
mozilla firefox, mozilla +1 moreFirefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to execute arbitrary...CVE-2005-11547.5 HighApril 18, 2005
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open