Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Vendors
Mozilla

Mozilla vulnerabilities

Products

Newest

Known exploitedIn KEVPublic exploitFix available

mozilla firefox, seamonkey, thunderbird +2 moreMozilla Firefox before 1.5.0.1, Thunderbird 1.5 if running Javascript in mail, and SeaMonkey...CVE-2006-0294Fix available7.5 HighFebruary 2, 2006
mozilla firefoxThe function allocation code (js_NewFunction in jsfun.c) in Firefox 1.5 allows attackers to cause...CVE-2006-02937.5 HighFebruary 2, 2006
mozilla firefox, mozilla +1 moreThe Javascript interpreter (jsinterp.c) in Mozilla and Firefox before 1.5.1 does not properly...CVE-2006-0292Fix available7.5 HighFebruary 2, 2006
mozilla firefox, mozilla +1 moreCross-site scripting (XSS) vulnerability in Mozilla 1.7.12 and possibly earlier, Mozilla Firefox...CVE-2006-0496Public exploit4.3 MediumFebruary 1, 2006
mozilla thunderbirdGUI display truncation vulnerability in Mozilla Thunderbird 1.0.2, 1.0.6, and 1.0.7 allows user...CVE-2006-02365.1 MediumJanuary 18, 2006
mozillaThe XMLHttpRequest object in Mozilla 1.7.8 supports the HTTP TRACE method, which allows remote...CVE-2005-48744.3 MediumDecember 31, 2005
mozilla firefox, mozilla, mozilla thunderbird +2 moreMozilla Firefox 1.0.1 and possibly other versions, including Mozilla and Thunderbird, allows...CVE-2005-4809Public exploit5.0 MediumDecember 31, 2005
mozilla firefoxMozilla Firefox 1.0.7 and earlier on Linux allows remote attackers to cause a denial of service ...CVE-2005-4720Public exploit5.0 MediumDecember 31, 2005
mozilla firefox, mozilla +1 moreFirefox and Mozilla can associate a cookie with multiple domains when the DNS resolver has a non...CVE-2005-46856.4 MediumDecember 31, 2005
mozilla bugzillaThe shadow database feature (syncshadowdb) in Bugzilla 2.9 through 2.16.10 allows local users to...CVE-2005-45347.5 HighDecember 28, 2005
k-meleon project k-meleon, mozilla firefox, suite +1 more +3 moreMozilla Firefox 1.5, Netscape 8.0.4 and 7.2, and K-Meleon before 0.9.12 allows remote attackers...CVE-2005-4134Public exploitEPSS 12.6%5.0 MediumDecember 9, 2005
mozillaMozilla allows remote attackers to cause a denial of service (CPU consumption) via a Javascript...CVE-2005-38967.8 HighNovember 29, 2005
mozilla thunderbirdThe SMTP client in Mozilla Thunderbird 1.0.5 BETA, 1.0.7, and possibly other versions, does not...CVE-2005-34022.6 LowNovember 1, 2005
mozilla bugzillaBugzilla 2.19.1 through 2.20rc2 and 2.21, with user matching turned on in substring mode, allows...CVE-2005-31395.0 MediumOctober 5, 2005
mozilla bugzillaBugzilla 2.18rc1 through 2.18.3, 2.19 through 2.20rc2, and 2.21 allows remote attackers to obtain...CVE-2005-31385.0 MediumOctober 5, 2005
mozilla firefoxFirefox 1.0.6 allows attackers to cause a denial of service (crash) via a Proxy Auto-Config (PAC)...CVE-2005-30892.6 LowSeptember 28, 2005
mozilla firefox, suite +1 moreFirefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to spawn windows...CVE-2005-27075.0 MediumSeptember 23, 2005
mozilla firefox, suite +1 moreFirefox before 1.0.7 and Mozilla before Suite 1.7.12 allows remote attackers to execute...CVE-2005-27066.4 MediumSeptember 23, 2005
mozilla firefox, suite +1 moreInteger overflow in the JavaScript engine in Firefox before 1.0.7 and Mozilla Suite before 1.7.12...CVE-2005-27057.5 HighSeptember 23, 2005
mozilla firefox, suite +1 moreFirefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to spoof DOM objects...CVE-2005-27045.0 MediumSeptember 23, 2005
mozilla firefox, suite +1 moreFirefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to modify HTTP...CVE-2005-27035.0 MediumSeptember 23, 2005
mozilla firefox, suite +1 moreFirefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to cause a denial of...CVE-2005-27027.5 HighSeptember 23, 2005
mozilla firefox, suite +1 moreHeap-based buffer overflow in Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote...CVE-2005-27017.5 HighSeptember 23, 2005
mozilla firefox, mozilla +1 moreFirefox 1.0.6 and Mozilla 1.7.10 allows attackers to execute arbitrary commands via shell...CVE-2005-2968Public exploitEPSS 10.7%7.5 HighSeptember 20, 2005
mozilla firefoxBuffer overflow in the International Domain Name (IDN) support in Mozilla Firefox 1.0.6 and...CVE-2005-2871Public exploitFix availableEPSS 21.1%7.5 HighSeptember 9, 2005
mozilla firefox, thunderbird +1 moreMozilla Thunderbird 1.0 and Firefox 1.0.6 allows remote attackers to obfuscate URIs via a long...CVE-2005-26022.6 LowAugust 17, 2005
mozilla thunderbirdrun-mozilla.sh in Thunderbird, with debugging enabled, allows local users to create or overwrite...CVE-2005-2353Fix available2.1 LowAugust 5, 2005
mozilla firefoxFirefox, when opening Microsoft Word documents, does not properly set the permissions on shared...CVE-2005-24295.0 MediumAugust 3, 2005
mozilla firefoxMozilla Firefox 1.0.4 and 1.0.5 does not choose the challenge with the strongest authentication...CVE-2005-23955.0 MediumJuly 27, 2005
mozilla firefox, mozilla +1 moreFirefox before 1.0.5 and Mozilla before 1.7.9 does not properly clone base objects, which allows...CVE-2005-22707.5 HighJuly 13, 2005
mozilla firefox, mozilla +1 moreFirefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 does not properly verify the...CVE-2005-22697.5 HighJuly 13, 2005
mozilla firefox, mozilla +1 moreFirefox before 1.0.5 and Mozilla before 1.7.9 does not clearly associate a Javascript dialog box...CVE-2005-22682.6 LowJuly 13, 2005
mozilla firefoxFirefox before 1.0.5 allows remote attackers to steal information and possibly execute arbitrary...CVE-2005-22677.5 HighJuly 13, 2005
mozilla firefox, mozilla +1 moreFirefox before 1.0.5 and Mozilla before 1.7.9 allows a child frame to call top.focus and other...CVE-2005-22665.0 MediumJuly 13, 2005
mozilla firefox, mozilla +1 moreFirefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 and 7.2 allows remote attackers to...CVE-2005-2265Public exploitEPSS 68.1%5.0 MediumJuly 13, 2005
mozilla firefoxFirefox before 1.0.5 allows remote attackers to steal sensitive information by opening a...CVE-2005-22647.5 HighJuly 13, 2005
mozilla firefox, mozilla +1 moreThe InstallTrigger.install method in Firefox before 1.0.5 and Mozilla before 1.7.9 allows remote...CVE-2005-22635.0 MediumJuly 13, 2005
mozilla firefoxFirefox 1.0.3 and 1.0.4, and Netscape 8.0.2, allows remote attackers to execute arbitrary code by...CVE-2005-2262Public exploit5.1 MediumJuly 13, 2005
mozilla firefox, mozilla, mozilla thunderbird +2 moreFirefox before 1.0.5, Thunderbird before 1.0.5, Mozilla before 1.7.9, Netscape 8.0.2, and K...CVE-2005-22617.5 HighJuly 13, 2005
mozilla firefox, mozilla +1 moreThe browser user interface in Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 and...CVE-2005-22607.5 HighJuly 13, 2005
mozilla bugzillaBugzilla 2.17.x, 2.18 before 2.18.2, 2.19.x, and 2.20 before 2.20rc1 inserts a bug into the...CVE-2005-21742.6 LowJuly 8, 2005
mozilla bugzillaThe Flag::validate and Flag::modify functions in Bugzilla 2.17.1 to 2.18.1 and 2.19.1 to 2.19.3...CVE-2005-21735.0 MediumJuly 8, 2005
mozilla camino, firefox, mozilla +2 moreMozilla 1.7.8, Firefox 1.0.4, Camino 0.8.4, Netscape 8.0.2, and K-Meleon 0.9, and possibly other...CVE-2005-21145.0 MediumJuly 1, 2005
mozilla firefox, mozilla +1 moreA regression error in Firefox 1.0.3 and Mozilla 1.7.7 allows remote attackers to inject arbitrary...CVE-2005-19372.6 LowJune 13, 2005
mozilla firefoxThe file download dialog in Mozilla Firefox 0.10.1 and 1.0 for Windows allows remote attackers to...CVE-2005-15755.0 MediumMay 14, 2005
mozilla bugzillaBugzilla 2.10 through 2.18, 2.19.1, and 2.19.2 displays a different error message depending on...CVE-2005-15635.0 MediumMay 14, 2005
mozilla firefoxThe file download dialog in Mozilla Firefox 0.10.1 and 1.0 for Windows uses the Content-Type HTTP...CVE-2005-15762.6 LowMay 12, 2005
mozilla bugzillaBugzilla 2.17.1 through 2.18, 2.19.1, and 2.19.2, when a user is prompted to log in while...CVE-2005-15655.0 MediumMay 12, 2005
mozilla bugzillapost_bug.cgi in Bugzilla 2.10 through 2.18, 2.19.1, and 2.19.2 allows remote authenticated users...CVE-2005-15647.5 HighMay 12, 2005
mozilla firefox, mozilla +1 moreFirefox before 1.0.4 and Mozilla Suite before 1.7.8 do not properly limit privileges of...CVE-2005-1532Public exploit7.5 HighMay 12, 2005
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open