Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Vendors
Mozilla

Mozilla vulnerabilities

Products

Newest

Known exploitedIn KEVPublic exploitFix available

mozilla firefox, mozilla, netscape navigator +2 moreThe Apple Java plugin, as used in Netscape 7.1 and 7.2, Mozilla 1.7.2, and Firefox 0.9.3 on MacOS...CVE-2004-17532.6 LowDecember 31, 2004
mozillaMozilla before 1.6 does not display the entire URL in the status bar when a link contains %00,...CVE-2004-14512.6 LowDecember 31, 2004
mozillaUnknown vulnerability in LiveConnect in Mozilla 1.7 beta allows remote attackers to read...CVE-2004-14505.0 MediumDecember 31, 2004
mozilla, mozilla thunderbird, firebirdsql firebird +2 moreMozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7 allows remote attackers to...CVE-2004-14492.6 LowDecember 31, 2004
mozilla bugzillaCross-site scripting (XSS) vulnerability in Bugzilla before 2.18, including 2.16.x before 2.16.11...CVE-2004-10614.3 MediumDecember 31, 2004
mozillaHeap-based buffer overflow in MSG_UnEscapeSearchUrl in nsNNTPProtocol.cpp for Mozilla 1.7.3 and...CVE-2004-13165.0 MediumDecember 29, 2004
mozilla firefoxFirefox and Mozilla allow remote attackers to cause a denial of service (application crash from...CVE-2004-12005.0 MediumDecember 15, 2004
mozilla firefox, mozilla +1 moreMozilla before 1.7.6, and Firefox before 1.0.1, allows remote attackers to spoof arbitrary web...CVE-2004-11564.3 MediumDecember 10, 2004
mozilla bugzillashow_bug.cgi in Bugzilla 2.17.1 through 2.18rc2 and 2.19 from CVS, when using the insidergroup...CVE-2004-16345.0 MediumOctober 25, 2004
mozilla bugzillaprocess_bug.cgi in Bugzilla 2.9 through 2.18rc2 and 2.19 from CVS does not check edit permissions...CVE-2004-16335.0 MediumOctober 25, 2004
mozilla firefox, mozilla +1 moreFirefox before 1.0 and Mozilla before 1.7.5 allow inactive (background) tabs to focus on input...CVE-2004-1381Public exploit5.0 MediumOctober 20, 2004
mozilla firefox, mozilla +1 moreFirefox before 1.0 and Mozilla before 1.7.5 allows inactive (background) tabs to launch dialog...CVE-2004-1380Public exploit5.0 MediumOctober 20, 2004
mozillaMozilla allows remote attackers to cause a denial of service (application crash from invalid...CVE-2004-16145.0 MediumOctober 18, 2004
mozilla, redhat enterprise linux, enterprise linux desktop +4 more +6 moreMozilla allows remote attackers to cause a denial of service (application crash from null...CVE-2004-16135.0 MediumOctober 18, 2004
mozilla, mozilla thunderbird +1 moreMozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 may...CVE-2004-09095.1 MediumSeptember 24, 2004
mozilla, mozilla thunderbird +1 moreMozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8...CVE-2004-09084.0 MediumSeptember 24, 2004
mozilla, mozilla thunderbird +1 moreThe Linux install .tar.gz archives for Mozilla Firefox before the Preview Release, Mozilla before...CVE-2004-09074.6 MediumSeptember 24, 2004
mozilla, mozilla thunderbird +1 moreThe XPInstall installer in Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and...CVE-2004-09064.6 MediumSeptember 24, 2004
mozilla firefox, mozilla, mozilla thunderbird +6 more +8 moreInteger overflow in the bitmap (BMP) decoder for Mozilla Firefox before the Preview Release,...CVE-2004-090410.0 HighSeptember 24, 2004
mozilla, mozilla thunderbird, conectiva linux +4 more +6 moreStack-based buffer overflow in the writeGroup function in nsVCardObj.cpp for Mozilla Firefox...CVE-2004-090310.0 HighSeptember 24, 2004
mozilla, mozilla thunderbird, conectiva linux +4 more +6 moreMultiple heap-based buffer overflows in Mozilla Firefox before the Preview Release, Mozilla...CVE-2004-0902EPSS 10.1%10.0 HighSeptember 24, 2004
microsoft ie, mozilla firefox, kde konqueror +2 more +4 moreMozilla Firefox 0.9.2 allows web sites to set cookies for country-specific top-level domains,...CVE-2004-0867EPSS 17.2%7.5 HighSeptember 24, 2004
mozillaMozilla does not prevent cookies that are sent over an insecure channel (HTTP) from also being...CVE-2004-08715.0 MediumSeptember 16, 2004
microsoft ie, internet explorer, kde konqueror +2 more +4 moreInternet Explorer 6.0 allows web sites to set cookies for country-specific top-level domains,...CVE-2004-0866EPSS 10.1%7.5 HighSeptember 16, 2004
mozilla firefox, mozilla, conectiva linux +5 more +7 moreMozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8...CVE-2004-09054.6 MediumSeptember 14, 2004
mozilla network security services, hp hp-ux, netscape certificate server +7 more +9 moreHeap-based buffer overflow in Netscape Network Security Services (NSS) library allows remote...CVE-2004-0826EPSS 22.5%7.5 HighSeptember 2, 2004
firebirdsql firebird, mozilla firefox, mozilla +2 moreThe (1) Mozilla 1.6, (2) Firebird 0.7 and (3) Firefox 0.8 web browsers do not properly verify...CVE-2004-07797.5 HighAugust 14, 2004
mozilla bugzillaBuffer overflow in LHA allows remote attackers to execute arbitrary code via long pathnames in...CVE-2004-076910.0 HighAugust 4, 2004
mozilla firefox, mozilla, mozilla thunderbird +2 moreThe cert_TestHostName function in Mozilla before 1.7, Firefox before 0.9, and Thunderbird before...CVE-2004-07657.5 HighAugust 3, 2004
mozilla firefox, mozilla, mozilla thunderbird +2 moreMozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote web sites to...CVE-2004-076410.0 HighAugust 3, 2004
mozilla firefoxMozilla Firefox 0.9.1 and 0.9.2 allows remote web sites to spoof certificates of trusted web...CVE-2004-0763Public exploit5.0 MediumAugust 3, 2004
mozilla firefox, mozilla, mozilla thunderbird +2 moreMozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote web sites to...CVE-2004-07625.0 MediumAugust 3, 2004
mozilla firefox, mozilla, mozilla thunderbird +2 moreMozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote attackers to use...CVE-2004-07615.0 MediumAugust 3, 2004
mozillaMozilla allows remote attackers to cause Mozilla to open a URI as a different MIME type than...CVE-2004-0760Public exploit6.4 MediumAugust 3, 2004
mozillaMozilla before 1.7 allows remote web servers to read arbitrary files via Javascript that sets the...CVE-2004-07596.4 MediumAugust 3, 2004
mozillaMozilla 1.5 through 1.7 allows a CA certificate to be imported even when their DN is the same as...CVE-2004-07585.0 MediumAugust 3, 2004
mozilla firefox, mozilla, mozilla thunderbird +2 moreHeap-based buffer overflow in the SendUidl in the POP3 capability for Mozilla before 1.7, Firefox...CVE-2004-075710.0 HighAugust 3, 2004
mozilla, netscape navigator +1 moreInteger overflow in the SOAPParameter object constructor in (1) Netscape version 7.0 and 7.1 and ...CVE-2004-0722Public exploitEPSS 13.2%10.0 HighAugust 3, 2004
firebirdsql firebird, mozilla, netscape navigator +2 moreThe (1) Mozilla 1.6, (2) Firebird 0.7, (3) Firefox 0.8, and (4) Netscape 7.1 web browsers do not...CVE-2004-07187.5 HighJuly 23, 2004
mozilla bugzillaSQL injection vulnerability in editusers.cgi in Bugzilla 2.16.x before 2.16.6, and 2.18 before 2...CVE-2004-07077.5 HighJuly 21, 2004
mozilla bugzillaBugzilla 2.17.5 through 2.17.7 embeds the password in an image URL, which could allow local users...CVE-2004-07062.1 LowJuly 21, 2004
mozilla bugzillaUnknown vulnerability in the administrative controls in Bugzilla 2.17.1 through 2.17.7 allows...CVE-2004-07037.5 HighJuly 21, 2004
mozilla bugzillaDBI in Bugzilla 2.17.1 through 2.17.7 displays the database password in an error message when the...CVE-2004-07025.0 MediumJuly 21, 2004
mozilla firefox, mozilla, mozilla thunderbird +2 moreMozilla (Suite) before 1.7.1, Firefox before 0.9.2, and Thunderbird before 0.7.2 allow remote...CVE-2004-0648Public exploit10.0 HighJuly 13, 2004
mozilla bugzilladescribecomponents.cgi in Bugzilla 2.17.3 and 2.17.4 does not properly verify group membership...CVE-2003-10467.5 HighJune 3, 2004
mozilla bugzillavotes.cgi in Bugzilla 2.16.3 and earlier, and 2.17.1 through 2.17.4, allows remote attackers to...CVE-2003-10455.0 MediumJune 3, 2004
mozilla bugzillaeditproducts.cgi in Bugzilla 2.16.3 and earlier, when usebuggroups is enabled, does not properly...CVE-2003-10447.5 HighJune 3, 2004
mozilla bugzillaSQL injection vulnerability in Bugzilla 2.16.3 and earlier, and 2.17.1 through 2.17.4, allows...CVE-2003-104310.0 HighJune 3, 2004
mozilla bugzillaSQL injection vulnerability in collectstats.pl for Bugzilla 2.16.3 and earlier allows remote...CVE-2003-104210.0 HighJune 3, 2004
mozillaUnknown versions of Mozilla allow remote attackers to cause a denial of service (high CPU/RAM...CVE-2004-04782.6 LowMay 20, 2004
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open