Skip to contentMozilla vulnerabilities
Newest
- mozilla firefoxUnspecified vulnerability in Mozilla Firefox allows remote attackers to execute arbitrary code...CVE-2007-217610.0 High
- gnu iceweasel, mozilla firefox +1 more(1) Mozilla Firefox 2.0.0.3 and (2) GNU IceWeasel 2.0.0.3 allow remote attackers to cause a...CVE-2007-21627.8 High
- mozilla firefoxMozilla Firefox does not warn the user about HTTP elements on an HTTPS page when the HTTP...CVE-2007-19705.0 Medium
- mozillaThe Javascript engine in Mozilla 1.7 and earlier on Sun Solaris 8, 9, and 10 might allow remote...CVE-2007-179410.0 High
- mozilla firefoxMozilla Firefox 2.0.0.1 through 2.0.0.3 does not canonicalize URLs before checking them against...CVE-2007-17625.0 Medium
- mozilla firefoxMozilla Firefox 2.0.0.3 does not check URLs embedded in (1) object or (2) iframe HTML tags...CVE-2007-17367.5 High
- mozilla firefox, canonical ubuntu linux +1 moreThe FTP protocol implementation in Mozilla Firefox before 1.5.0.11 and 2.x before 2.0.0.3 allows...CVE-2007-1562Public exploitEPSS 14.3%6.8 Medium
- mozilla firefox, adobe acrobat reader, netscape navigator +1 more +3 moreAcroPDF.DLL in Adobe Reader 8.0, when accessed from Mozilla Firefox, Netscape, or Opera, allows...CVE-2007-1377Public exploitEPSS 18.1%5.0 Medium
- mozilla seamonkey, thunderbird +1 moreInteger overflow in Mozilla Thunderbird before 1.5.0.10 and SeaMonkey before 1.0.8 allows remote...CVE-2007-12829.3 High
- mozilla firefox, seamonkey, debian linux +2 moreA regression error in Mozilla Firefox 2.x before 2.0.0.2 and 1.x before 1.5.0.10, and SeaMonkey 1...CVE-2007-09946.8 Medium
- mozilla firefoxMozilla Firefox 2.0.0.2 allows remote attackers to spoof the address bar, favicons, and document...CVE-2007-12566.8 Medium
- mozilla firefox, seamonkey +1 moreThe child frames in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before...CVE-2007-09965.8 Medium
- mozilla firefoxThe CheckLoadURI function in Mozilla Firefox 1.8 lists the about: URI as a ChromeProtocol and can...CVE-2007-11165.0 Medium
- mozilla firefox, seamonkey, canonical ubuntu linux +2 morebrowser.js in Mozilla Firefox 1.5.x before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before...CVE-2007-07806.8 Medium
- mozilla firefox, seamonkey +1 moreGUI overlay vulnerability in Mozilla Firefox 1.5.x before 1.5.0.10 and 2.x before 2.0.0.2, and...CVE-2007-07796.4 Medium
- mozilla firefox, seamonkey, canonical ubuntu linux +1 more +3 moreThe page cache feature in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey...CVE-2007-07785.4 Medium
- mozilla firefox, network security services, seamonkey +3 more +5 moreStack-based buffer overflow in the SSLv2 support in Mozilla Network Security Services (NSS)...CVE-2007-0009EPSS 50.6%6.8 Medium
- mozilla firefox, network security services, seamonkey +1 more +3 moreInteger underflow in the SSLv2 support in Mozilla Network Security Services (NSS) before 3.11.5,...CVE-2007-00086.8 Medium
- mozilla firefox, seamonkey +1 moreMozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 ignores...CVE-2007-09954.3 Medium
- mozilla firefox, seamonkey, thunderbird +1 more +3 moreThe JavaScript engine in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, Thunderbird...CVE-2007-07779.3 High
- mozilla firefox, seamonkey, thunderbird +2 moreHeap-based buffer overflow in the _cairo_pen_init function in Mozilla Firefox 2.x before 2.0.0.2,...CVE-2007-07769.3 High
- mozilla firefox, seamonkey, thunderbird +2 moreMultiple unspecified vulnerabilities in the layout engine in Mozilla Firefox before 1.5.0.10 and...CVE-2007-07753.7 Low
- mozilla firefox, seamonkey +1 moreMozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 do not properly implement JavaScript...CVE-2007-10956.8 Medium
- mozilla firefox, seamonkey +1 moreMozilla Firefox 1.5.0.9 and 2.0.0.1, and SeaMonkey before 1.0.8 allow remote attackers to execute...CVE-2007-10929.3 High
- mozilla firefoxMozilla Firefox 2.0.0.1 and earlier does not prompt users before saving bookmarklets, which...CVE-2007-10846.8 Medium
- mozilla firefoxMozilla Firefox might allow remote attackers to conduct spoofing and phishing attacks by writing...CVE-2007-10044.3 Medium
- mozilla firefox, seamonkey +1 moreMozilla based browsers, including Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey...CVE-2007-0981Public exploitEPSS 12.8%7.5 High
- mozilla firefox, opera browser +1 moreMozilla Firefox 2.0.0.1 allows remote attackers to bypass the Phishing Protection mechanism by...CVE-2007-08026.4 Medium
- mozilla firefoxThe nsExternalAppHandler::SetUpTempFile function in Mozilla Firefox 1.5.0.9 creates temporary...CVE-2007-0801Fix available4.3 Medium
- mozilla firefoxCross-zone vulnerability in Mozilla Firefox 1.5.0.9 considers blocked popups to have an internal...CVE-2007-08004.3 Medium
- mozilla firefoxMozilla Firefox 2.0, possibly only when running on Windows, allows remote attackers to bypass the...CVE-2006-69715.0 Medium
- mozilla bugzillaThe mod_perl initialization script in Bugzilla 2.23.3 does not set the Bugzilla Apache...CVE-2007-07927.5 High
- mozilla bugzillaCross-site scripting (XSS) vulnerability in Atom feeds in Bugzilla 2.20.3, 2.22.1, and 2.23.3,...CVE-2007-07914.3 Medium
- mozilla durian web application serverBuffer overflow in Durian Web Application Server 3.02 freeware on Windows allows remote attackers...CVE-2006-6853Public exploit10.0 High
- mozilla firefoxMozilla Firefox 2.0 before 2.0.0.1 allows remote attackers to bypass Cross-Site Scripting (XSS)...CVE-2006-65074.3 Medium
- mozilla firefoxThe "Feed Preview" feature in Mozilla Firefox 2.0 before 2.0.0.1 sends the URL of the feed when...CVE-2006-65064.3 Medium
- mozilla seamonkey, thunderbird +1 moreMultiple heap-based buffer overflows in Mozilla Thunderbird before 1.5.0.9 and SeaMonkey before 1...CVE-2006-65056.8 Medium
- mozilla firefox, seamonkey, canonical ubuntu linux +2 moreMozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, and SeaMonkey before 1.0.7 allows...CVE-2006-6504Fix available9.3 High
- mozilla firefox, seamonkey, thunderbird +2 more +4 moreMozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and...CVE-2006-6503Fix available6.8 Medium
- mozilla firefox, seamonkey, thunderbird +2 moreUse-after-free vulnerability in the LiveConnect bridge code for Mozilla Firefox 2.x before 2.0.0...CVE-2006-6502Fix available7.1 High
- mozilla firefox, seamonkey, thunderbird +2 more +4 moreUnspecified vulnerability in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9,...CVE-2006-6501Fix available6.8 Medium
- mozilla firefox, seamonkey, thunderbird +2 more +4 moreHeap-based buffer overflow in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9,...CVE-2006-65006.8 Medium
- mozilla firefox, seamonkey, thunderbird +2 more +4 moreThe js_dtoa function in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird...CVE-2006-6499Fix available4.3 Medium
- mozilla firefox, mozilla, mozilla seamonkey +1 more +3 moreMultiple unspecified vulnerabilities in the JavaScript engine for Mozilla Firefox 2.x before 2.0...CVE-2006-6498Fix available6.8 Medium
- mozilla firefox, seamonkey, thunderbird +2 moreMultiple unspecified vulnerabilities in the layout engine for Mozilla Firefox 2.x before 2.0.0.1,...CVE-2006-6497Fix available6.8 Medium
- mozilla firefoxThe Extensions manager in Mozilla Firefox 2.0 does not properly populate the list of local...CVE-2006-6585Fix available6.4 Medium
- mozilla firefox, netscape navigator +1 moreThe (1) Password Manager in Mozilla Firefox 2.0, and 1.5.0.8 and earlier; and the (2) Passcard...CVE-2006-60775.0 Medium
- mozilla firefox, seamonkey, thunderbird +2 moreUnspecified vulnerability in Mozilla Firefox before 1.5.0.8, Thunderbird before 1.5.0.8, and...CVE-2006-5463Fix available7.5 High
- mozilla firefox, seamonkey, thunderbird +2 moreMultiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox before 1.5.0.8,...CVE-2006-5748Fix available5.0 Medium
- mozilla firefox, seamonkey, thunderbird +2 moreUnspecified vulnerability in Mozilla Firefox before 1.5.0.8, Thunderbird before 1.5.0.8, and...CVE-2006-5747Fix available7.5 High
- Show moreLoading…