Skip to contentMozilla vulnerabilities
Newest
- mozilla firefox, mozilla +1 moreFirefox before 1.0.4 and Mozilla Suite before 1.7.8 does not properly implement certain security...CVE-2005-15317.5 High
- mozilla firefoxThe install function in Firefox 1.0.3 allows remote web sites on the browser's whitelist, such as...CVE-2005-1477Public exploitEPSS 15.2%5.1 Medium
- mozilla firefoxFirefox 1.0.3 allows remote attackers to execute arbitrary Javascript in other domains by using...CVE-2005-1476Public exploitEPSS 16.7%5.1 Medium
- mozilla firefox, mozilla +1 moreThe privileged "chrome" UI code in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows...CVE-2005-11605.1 Medium
- mozilla firefox, mozilla +1 moreThe native implementations of InstallTrigger and other functions in Firefox before 1.0.3 and...CVE-2005-11597.5 High
- mozilla firefoxMultiple "missing security checks" in Firefox before 1.0.3 allow remote attackers to inject...CVE-2005-11585.0 Medium
- mozilla firefox, mozilla, netscape navigator +2 moreFirefox before 1.0.3, Mozilla Suite before 1.7.7, and Netscape 7.2 allows remote attackers to...CVE-2005-11577.5 High
- mozilla firefox, mozilla, netscape navigator +2 moreFirefox before 1.0.3, Mozilla Suite before 1.7.7, and Netscape 7.2 allows remote attackers to...CVE-2005-11567.5 High
- mozilla firefox, mozilla +1 moreThe favicon functionality in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote...CVE-2005-11557.5 High
- mozilla firefox, mozilla +1 moreFirefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to execute arbitrary...CVE-2005-11547.5 High
- mozilla firefox, mozilla +1 moreFirefox before 1.0.3 and Mozilla Suite before 1.7.7, when blocking a popup, allows remote...CVE-2005-11537.5 High
- mozilla firefoxThe Plugin Finder Service (PFS) in Firefox before 1.0.3 allows remote attackers to execute...CVE-2005-07527.5 High
- mozilla firefox, mozilla, netscape navigator +2 moreThe find_replen function in jsstr.c in the Javascript engine for Mozilla Suite 1.7.6, Firefox 1.0...CVE-2005-0989Public exploitEPSS 10.0%5.0 Medium
- mozilla firefoxFirefox before 1.0.2 allows remote attackers to execute arbitrary code by tricking a user into...CVE-2005-04022.6 Low
- mozilla firefox, mozilla +1 moreFireFox 1.0.1 and Mozilla before 1.7.6 do not sufficiently address all attack vectors for loading...CVE-2005-04015.1 Medium
- mozilla firefox, mozilla, mozilla thunderbird +2 moreHeap-based buffer overflow in GIF2.cpp in Firefox before 1.0.2, Mozilla before to 1.7.6, and...CVE-2005-0399EPSS 15.1%5.1 Medium
- mozilla firefox, mozilla +1 moreFirefox before 1.0.1 and Mozilla before 1.7.6 allows remote attackers to spoof the SSL "secure...CVE-2005-05932.6 Low
- mozilla firefox, mozilla +1 moreHeap-based buffer overflow in the UTF8ToNewUnicode function for Firefox before 1.0.1 and Mozilla...CVE-2005-05927.5 High
- mozilla firefoxFirefox before 1.0.1 allows remote attackers to spoof the (1) security and (2) download modal...CVE-2005-05912.6 Low
- mozilla firefox, mozilla, mozilla thunderbird +2 moreThe installation confirmation dialog in Firefox before 1.0.1, Thunderbird before 1.0.1, and...CVE-2005-05905.0 Medium
- mozilla firefoxThe Form Fill feature in Firefox before 1.0.1 allows remote attackers to steal potentially...CVE-2005-05895.0 Medium
- mozilla firefox, mozilla +1 moreFirefox before 1.0.1 and Mozilla before 1.7.6 does not restrict xsl:include and xsl:import tags...CVE-2005-05885.0 Medium
- mozilla firefox, mozilla +1 moreFirefox before 1.0.1 and Mozilla before 1.7.6 allows remote malicious web sites to overwrite...CVE-2005-05876.5 Medium
- mozilla firefox, mozilla +1 moreFirefox before 1.0.1 and Mozilla before 1.7.6 allows remote malicious web sites to spoof the...CVE-2005-05862.6 Low
- mozilla firefox, mozilla +1 moreFirefox before 1.0.1 and Mozilla before 1.7.6 truncates long sub-domains or paths for display,...CVE-2005-05852.6 Low
- mozilla firefox, mozilla +1 moreFirefox before 1.0.1 and Mozilla before 1.7.6, when displaying the HTTP Authentication dialog, do...CVE-2005-05842.6 Low
- mozilla firefox, mozilla, mozilla thunderbird +2 moreString handling functions in Mozilla 1.7.3, Firefox 1.0, and Thunderbird before 1.0.2, such as...CVE-2005-02555.0 Medium
- mozilla firefox, mozilla +1 moreFirefox before 1.0.1 and Mozilla Suite before 1.7.6 use a predictable filename for the plugin...CVE-2005-05782.1 Low
- mozilla firefoxFirefox 1.0 allows remote attackers to execute arbitrary code via plugins that load "privileged...CVE-2005-05275.1 Medium
- mozilla firefoxFirefox 1.0 does not prevent the user from dragging an executable file to the desktop when it has...CVE-2005-02305.1 Medium
- mozilla firefoxFirefox 1.0 allows remote attackers to modify Boolean configuration parameters for the about...CVE-2005-02322.6 Low
- gnome epiphany, mozilla camino, mozilla +2 more +4 moreThe International Domain Name (IDN) support in Epiphany allows remote attackers to spoof domain...CVE-2005-0238Fix available5.0 Medium
- mozilla camino, firefox, mozilla +3 more +5 moreThe International Domain Name (IDN) support in Firefox 1.0, Camino .8.5, and Mozilla before 1.7.6...CVE-2005-0233EPSS 20.4%7.5 High
- mozilla firefoxFirefox 1.0 does not invoke the Javascript Security Manager when a user drags a javascript: or...CVE-2005-02312.6 Low
- mozillaMozilla 1.6 and possibly other versions allows remote attackers to cause a denial of service ...CVE-2005-02155.0 Medium
- mozilla firefoxFirefox before 1.0 allows the user to store a (1) javascript: or (2) data: URLs as a Livefeed...CVE-2005-01505.0 Medium
- mozilla, mozilla thunderbird +1 moreThunderbird 0.6 through 0.9 and Mozilla 1.7 through 1.7.3 does not obey the network.cookie...CVE-2005-01495.0 Medium
- mozilla thunderbirdThunderbird before 0.9, when running on Windows systems, uses the default handler when processing...CVE-2005-01485.0 Medium
- mozilla firefox, mozilla +1 moreFirefox before 1.0 and Mozilla before 1.7.5, when configured to use a proxy, respond to 407 proxy...CVE-2005-01477.5 High
- mozilla firefox, mozilla +1 moreFirefox before 1.0 and Mozilla before 1.7.5 allow remote attackers to obtain sensitive data from...CVE-2005-01465.0 Medium
- mozilla firefox, mozilla +1 moreFirefox before 1.0 and Mozilla before 1.7.5 display the secure site lock icon when a view-source:...CVE-2005-01442.6 Low
- mozilla firefox, mozilla +1 moreFirefox before 1.0 and Mozilla before 1.7.5 display the SSL lock icon when an insecure page loads...CVE-2005-01432.6 Low
- mozilla firefox, mozilla, mozilla thunderbird +2 moreFirefox 0.9, Thunderbird 0.6 and other versions before 0.9, and Mozilla 1.7 before 1.7.5 save...CVE-2005-01422.1 Low
- mozilla firefox, mozilla +1 moreFirefox before 1.0 and Mozilla before 1.7.5 allow remote attackers to load local files via links ...CVE-2005-01412.6 Low
- mozilla firefoxFirefox before 1.0 does not properly distinguish between user-generated and synthetic click...CVE-2005-01452.6 Low
- mozilla, opera browser +1 moreOpera offers an Open button to verify that a user wishes to execute a downloaded file, which...CVE-2004-26594.0 Medium
- mozilla firefox** DISPUTED ** Mozilla Firefox 1.5.0.1, and possibly other versions, preserves some records of...CVE-2004-2657Disputed1.7 Low
- mozilla firefoxMozilla Firefox before 1.0 truncates long filenames in the file download dialog box, which makes...CVE-2004-22275.0 Medium
- mozilla thunderbirdMozilla Mail 1.7.1 and 1.7.3, and Thunderbird before 0.9, when HTML-Mails is enabled, allows...CVE-2004-22265.0 Medium
- mozilla firefoxMozilla Firefox before 0.10.1 allows remote attackers to delete arbitrary files in the download...CVE-2004-22255.0 Medium
- Show moreLoading…