Skip to contentMozilla Firefox vulnerabilities
- citrix access gateway, endpoint analysis client, mozilla firefox +2 moreMultiple unspecified vulnerabilities in (1) Net6Helper.DLL (aka Net6Launcher Class) 4.5.2 and...CVE-2007-40139.3 High
- mozilla firefox, thunderbird +1 moreArgument injection vulnerability in Mozilla Firefox before 2.0.0.5, when running on systems with...CVE-2007-40384.3 Medium
- mozilla firefoxMultiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.5 allow remote attackers to...CVE-2007-37389.3 High
- mozilla firefoxMozilla Firefox before 2.0.0.5 allows remote attackers to execute arbitrary code with chrome...CVE-2007-37379.3 High
- mozilla firefoxCross-site scripting (XSS) vulnerability in Mozilla Firefox before 2.0.0.5 allows remote...CVE-2007-37364.3 Medium
- mozilla firefox, thunderbird +1 moreMultiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox before 2.0.0.5...CVE-2007-37359.3 High
- mozilla firefox, thunderbird +1 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 2.0.0.5 and...CVE-2007-37349.3 High
- mozilla firefoxMozilla Firefox allows for cookies to be set with a null domain (aka "domainless cookies"), which...CVE-2007-38275.0 Medium
- microsoft internet explorer, mozilla firefox +1 moreArgument injection vulnerability in Microsoft Internet Explorer, when running on systems with...CVE-2007-3670Public exploitEPSS 29.4%4.3 Medium
- mozilla firefox** DISPUTED ** Mozilla Firefox 2.0.0.4 allows remote attackers to cause a denial of service by...CVE-2007-3657Disputed4.3 Medium
- mozilla firefoxMozilla Firefox before 1.8.0.13 and 1.8.1.x before 1.8.1.5 does not perform a security zone check...CVE-2007-36566.8 Medium
- mozilla firefox, seamonkey +1 moreThe focus handling for the onkeydown event in Mozilla Firefox 1.5.0.12, 2.0.0.4 and other...CVE-2007-35114.3 Medium
- mozilla firefoxMozilla Firefox before 2.0.0.5, when run on Windows, allows remote attackers to bypass file type...CVE-2007-32856.8 Medium
- mozilla firefoxMozilla Firefox before 2.0.0.5 does not prevent use of document.write to replace an IFRAME (1)...CVE-2007-30894.3 Medium
- mozilla firefoxMozilla Firefox 2.0.0.4 and earlier allows remote attackers to read files in the local Firefox...CVE-2007-30744.3 Medium
- mozilla firefoxDirectory traversal vulnerability in Mozilla Firefox 2.0.0.4 and earlier on Mac OS X and Unix...CVE-2007-30737.8 High
- mozilla firefoxDirectory traversal vulnerability in Mozilla Firefox before 2.0.0.4 on Windows allows remote...CVE-2007-30727.1 High
- mozilla firefox, seamonkey +1 moreMozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2,...CVE-2007-28714.3 Medium
- mozilla firefox, seamonkey +1 moreMozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2,...CVE-2007-28704.3 Medium
- mozilla firefoxThe form autocomplete feature in Mozilla Firefox 1.5.x before 1.5.0.12, 2.x before 2.0.0.4, and...CVE-2007-28694.3 Medium
- mozilla firefox, seamonkey, thunderbird +2 moreMultiple vulnerabilities in the JavaScript engine for Mozilla Firefox 1.5.x before 1.5.0.12 and 2...CVE-2007-28689.3 High
- mozilla firefox, seamonkey, thunderbird +2 moreMultiple vulnerabilities in the layout engine for Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x...CVE-2007-28679.3 High
- mozilla firefox, seamonkey +1 moreMozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2,...CVE-2007-1362Public exploit4.3 Medium
- mozilla firefoxMozilla Firefox 2.0.0.3 allows remote attackers to cause a denial of service (application crash)...CVE-2007-2671Public exploit7.1 High
- mozilla firefox, seamonkey, microsoft internet explorer +2 moreCRLF injection vulnerability in the Digest Authentication support for Mozilla Firefox before 2.0...CVE-2007-2292EPSS 12.7%4.3 Medium
- mozilla firefoxUnspecified vulnerability in Mozilla Firefox allows remote attackers to execute arbitrary code...CVE-2007-217610.0 High
- gnu iceweasel, mozilla firefox +1 more(1) Mozilla Firefox 2.0.0.3 and (2) GNU IceWeasel 2.0.0.3 allow remote attackers to cause a...CVE-2007-21627.8 High
- mozilla firefoxMozilla Firefox does not warn the user about HTTP elements on an HTTPS page when the HTTP...CVE-2007-19705.0 Medium
- mozilla firefoxMozilla Firefox 2.0.0.1 through 2.0.0.3 does not canonicalize URLs before checking them against...CVE-2007-17625.0 Medium
- mozilla firefoxMozilla Firefox 2.0.0.3 does not check URLs embedded in (1) object or (2) iframe HTML tags...CVE-2007-17367.5 High
- mozilla firefox, canonical ubuntu linux +1 moreThe FTP protocol implementation in Mozilla Firefox before 1.5.0.11 and 2.x before 2.0.0.3 allows...CVE-2007-1562Public exploitEPSS 14.3%6.8 Medium
- mozilla firefox, adobe acrobat reader, netscape navigator +1 more +3 moreAcroPDF.DLL in Adobe Reader 8.0, when accessed from Mozilla Firefox, Netscape, or Opera, allows...CVE-2007-1377Public exploitEPSS 18.1%5.0 Medium
- mozilla firefox, seamonkey, debian linux +2 moreA regression error in Mozilla Firefox 2.x before 2.0.0.2 and 1.x before 1.5.0.10, and SeaMonkey 1...CVE-2007-09946.8 Medium
- mozilla firefoxMozilla Firefox 2.0.0.2 allows remote attackers to spoof the address bar, favicons, and document...CVE-2007-12566.8 Medium
- mozilla firefox, seamonkey +1 moreThe child frames in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before...CVE-2007-09965.8 Medium
- mozilla firefoxThe CheckLoadURI function in Mozilla Firefox 1.8 lists the about: URI as a ChromeProtocol and can...CVE-2007-11165.0 Medium
- mozilla firefox, seamonkey, canonical ubuntu linux +2 morebrowser.js in Mozilla Firefox 1.5.x before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before...CVE-2007-07806.8 Medium
- mozilla firefox, seamonkey +1 moreGUI overlay vulnerability in Mozilla Firefox 1.5.x before 1.5.0.10 and 2.x before 2.0.0.2, and...CVE-2007-07796.4 Medium
- mozilla firefox, seamonkey, canonical ubuntu linux +1 more +3 moreThe page cache feature in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey...CVE-2007-07785.4 Medium
- mozilla firefox, network security services, seamonkey +3 more +5 moreStack-based buffer overflow in the SSLv2 support in Mozilla Network Security Services (NSS)...CVE-2007-0009EPSS 50.6%6.8 Medium
- mozilla firefox, network security services, seamonkey +1 more +3 moreInteger underflow in the SSLv2 support in Mozilla Network Security Services (NSS) before 3.11.5,...CVE-2007-00086.8 Medium
- mozilla firefox, seamonkey +1 moreMozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 ignores...CVE-2007-09954.3 Medium
- mozilla firefox, seamonkey, thunderbird +1 more +3 moreThe JavaScript engine in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, Thunderbird...CVE-2007-07779.3 High
- mozilla firefox, seamonkey, thunderbird +2 moreHeap-based buffer overflow in the _cairo_pen_init function in Mozilla Firefox 2.x before 2.0.0.2,...CVE-2007-07769.3 High
- mozilla firefox, seamonkey, thunderbird +2 moreMultiple unspecified vulnerabilities in the layout engine in Mozilla Firefox before 1.5.0.10 and...CVE-2007-07753.7 Low
- mozilla firefox, seamonkey +1 moreMozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 do not properly implement JavaScript...CVE-2007-10956.8 Medium
- mozilla firefox, seamonkey +1 moreMozilla Firefox 1.5.0.9 and 2.0.0.1, and SeaMonkey before 1.0.8 allow remote attackers to execute...CVE-2007-10929.3 High
- mozilla firefoxMozilla Firefox 2.0.0.1 and earlier does not prompt users before saving bookmarklets, which...CVE-2007-10846.8 Medium
- mozilla firefoxMozilla Firefox might allow remote attackers to conduct spoofing and phishing attacks by writing...CVE-2007-10044.3 Medium
- mozilla firefox, seamonkey +1 moreMozilla based browsers, including Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey...CVE-2007-0981Public exploitEPSS 12.8%7.5 High
- Show moreLoading…