Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Vendors
Mozilla

Mozilla vulnerabilities

Products

Newest

Known exploitedIn KEVPublic exploitFix available

mozillaMozilla allows remote attackers to bypass intended cookie access restrictions on a web...CVE-2003-05947.5 HighMarch 16, 2004
mozillaMozilla before 1.4.2 executes Javascript events in the context of a new page while it is being...CVE-2004-01916.8 MediumMarch 15, 2004
netscape navigator, mozilla firefox +1 moreNetscape Navigator 7.0.2 and Mozilla allows remote attackers to access cookie information in a...CVE-2003-14925.0 MediumDecember 31, 2003
mozilla, netscape navigator +1 moreNetscape 7.0 and Mozilla 5.0 do not immediately delete messages in the trash folder when users...CVE-2003-12652.1 LowDecember 31, 2003
mozilla, sco openserver +1 moreThe Script.prototype.freeze/thaw functionality in Mozilla 1.4 and earlier allows attackers to...CVE-2003-07919.8 CriticalOctober 7, 2003
mozilla bugzillaBugzilla 2.16.x before 2.16.3, 2.17.x before 2.17.4, and earlier versions allows local users to...CVE-2003-06032.1 LowJuly 29, 2003
mozilla bugzillaMultiple cross-site scripting vulnerabilities (XSS) in Bugzilla 2.16.x before 2.16.3 and 2.17.x...CVE-2003-06026.8 MediumJuly 29, 2003
microsoft outlook express, mozilla, mutt +5 more +7 moreThe IMAP Client for Sylpheed 0.8.11 allows remote malicious IMAP servers to cause a denial of...CVE-2003-03005.0 MediumMay 15, 2003
mozillaThe IMAP Client for Mozilla 1.3 and 1.4a allows remote malicious IMAP servers to cause a denial...CVE-2003-02987.5 HighMay 15, 2003
mozilla bonsaibonsai Mozilla CVS query tool allows remote attackers to gain access to the parameters page...CVE-2003-01555.0 MediumMarch 21, 2003
mozilla bonsaiCross-site scripting vulnerabilities (XSS) in bonsai Mozilla CVS query tool allow remote...CVE-2003-0154Public exploit6.8 MediumMarch 21, 2003
mozilla bonsaibonsai Mozilla CVS query tool leaks the absolute pathname of the tool in certain error messages...CVE-2003-0153Public exploit5.0 MediumMarch 21, 2003
mozilla bonsaiUnknown vulnerability in bonsai Mozilla CVS query tool allows remote attackers to execute...CVE-2003-01527.5 HighMarch 21, 2003
mozilla bugzillaThe default .htaccess scripts for Bugzilla 2.14.x before 2.14.5, 2.16.x before 2.16.2, and 2.17.x...CVE-2003-00137.5 HighJanuary 16, 2003
mozilla bugzillaThe data collection script for Bugzilla 2.14.x before 2.14.5, 2.16.x before 2.16.2, and 2.17.x...CVE-2003-00122.1 LowJanuary 16, 2003
mozillaCross-site scripting (XSS) vulnerability in the FTP view feature in Mozilla 1.0 allows remote...CVE-2002-2359Public exploit4.3 MediumDecember 31, 2002
mozilla, netscape communicator, navigator +2 moreThe POP3 mail client in Mozilla 1.0 and earlier, and Netscape Communicator 4.7 and earlier,...CVE-2002-2338Public exploit5.0 MediumDecember 31, 2002
mozillaMozilla 1.0 allows remote attackers to steal cookies from other domains via a javascript: URL...CVE-2002-2314Public exploit5.0 MediumDecember 31, 2002
mozilla, netscape navigator +1 moreHeap-based buffer overflow in Netscape 6.2.3 and Mozilla 1.0 and earlier allows remote attackers...CVE-2002-20617.5 HighDecember 31, 2002
mozilla, netscape communicator, navigator +2 moreMozilla 0.9.6 and earlier and Netscape 6.2 and earlier allows remote attackers to steal cookies...CVE-2002-20135.0 MediumDecember 31, 2002
mozilla bugzillaCross-site scripting (XSS) vulnerability in the quips feature in Mozilla Bugzilla 2.10 through 2...CVE-2002-2260Fix available4.3 MediumDecember 30, 2002
mozilla, netscape navigator +1 moreHeap-based buffer overflow in Netscape and Mozilla allows remote attackers to execute arbitrary...CVE-2002-13087.5 HighNovember 29, 2002
mozilla bugzillaBugzilla 2.16.x before 2.16.1 does not properly filter apostrophes from an email address during...CVE-2002-11987.5 HighOctober 28, 2002
mozilla bugzillabugzilla_email_append.pl in Bugzilla 2.14.x before 2.14.4, and 2.16.x before 2.16.1, allows...CVE-2002-11977.5 HighOctober 28, 2002
mozilla bugzillaeditproducts.cgi in Bugzilla 2.14.x before 2.14.4, and 2.16.x before 2.16.1, when the ...CVE-2002-1196Fix available7.5 HighOctober 9, 2002
mozilla, netscape navigator, opera software web browser +2 moreNetscape 6.2.3 and earlier, and Mozilla 1.0.1, allow remote attackers to corrupt heap memory and...CVE-2002-10917.5 HighOctober 4, 2002
galeon browser, mozilla +1 moreMozilla 1.1 and earlier, and Mozilla-based browsers such as Netscape and Galeon, set the document...CVE-2002-11262.6 LowSeptember 24, 2002
mozilla bugzillaBugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, directs error messages from the...CVE-2002-08105.0 MediumAugust 12, 2002
mozilla bugzillaBugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, does not properly handle URL-encoded field...CVE-2002-08097.5 HighAugust 12, 2002
mozilla bugzillaBugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, when performing a mass change, sets the...CVE-2002-08087.5 HighAugust 12, 2002
mozilla bugzillaBugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, allows authenticated users with editing...CVE-2002-08062.1 LowAugust 12, 2002
mozilla bugzillaBugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, (1) creates new directories with world...CVE-2002-08054.6 MediumAugust 12, 2002
mozilla bugzillaBugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, when configured to perform reverse DNS...CVE-2002-08047.5 HighAugust 12, 2002
microsoft internet explorer, mozilla, netscape navigator +2 moreThe Javascript "Same Origin Policy" (SOP), as implemented in (1) Netscape, (2) Mozilla, and (3)...CVE-2002-08157.5 HighAugust 1, 2002
mozilla bugzillaBugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, may allow remote attackers to cause a...CVE-2002-08117.5 HighJuly 31, 2002
mozilla bugzillaCross-site scripting vulnerabilities in Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2,...CVE-2002-08077.5 HighJuly 31, 2002
mozilla bugzillaBugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, allows remote attackers to display...CVE-2002-08035.0 MediumJuly 31, 2002
mozilla, galeon browser, netscape navigator +2 moreNetscape 6 and Mozilla 1.0 RC1 and earlier allows remote attackers to determine the existence of...CVE-2002-05945.0 MediumJune 18, 2002
mozilla, netscape communicator, navigator +2 moreBuffer overflow in Netscape 6 and Mozilla 1.0 RC1 and earlier allows remote attackers to cause a...CVE-2002-05937.5 HighJune 11, 2002
mozilla, netscape navigator +1 moreThe XMLHttpRequest object (XMLHTTP) in Netscape 6.1 and Mozilla 0.9.7 allows remote attackers to...CVE-2002-03545.0 MediumMay 3, 2002
mozilla bugzillaInformation leak in doeditvotes.cgi in Bugzilla before 2.14.1 may allow remote attackers to more...CVE-2002-00115.0 MediumJanuary 31, 2002
mozilla bugzillashow_bug.cgi in Bugzilla before 2.14.1 allows a user with "Bugs Access" privileges to see other...CVE-2002-00095.0 MediumJanuary 31, 2002
mozilla bugzillaCGI.pl in Bugzilla before 2.14.1, when using LDAP, allows remote attackers to obtain an anonymous...CVE-2002-000710.0 HighJanuary 31, 2002
mozilla bugzillaBugzilla before 2.14.1 allows remote attackers to inject arbitrary SQL code and create files or...CVE-2002-00107.5 HighJanuary 10, 2002
mozilla bugzillaBugzilla before 2.14.1 allows remote attackers to (1) spoof a user comment via an HTTP request to...CVE-2002-00087.5 HighJanuary 10, 2002
mozillaMozilla 0.9.6 allows remote attackers to cause a denial of service (CPU consumption and memory...CVE-2001-1490Public exploit5.0 MediumDecember 31, 2001
mozilla bugzillaBugzilla before 2.14 allows Bugzilla users to bypass group security checks by marking a bug as...CVE-2001-14077.5 HighSeptember 10, 2001
mozilla bugzillaprocess_bug.cgi in Bugzilla before 2.14 does not set the "groupset" bit when a bug is moved...CVE-2001-14062.1 LowSeptember 10, 2001
mozilla bugzillaBugzilla before 2.14 does not restrict access to sanitycheck.cgi, which allows local users to...CVE-2001-14052.1 LowSeptember 10, 2001
mozilla bugzillaBugzilla before 2.14 stores user passwords in plaintext and sends password requests in an email...CVE-2001-14047.5 HighSeptember 10, 2001
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open