Skip to contentMozilla vulnerabilities
Newest
- mozilla firefoxThe SVG component in Mozilla Firefox 3.0.4 allows remote attackers to cause a denial of service ...CVE-2009-1827Public exploit5.0 Medium
- mozilla firefoxMozilla Firefox executes DOM calls in response to a javascript: URI in the target attribute of a...CVE-2009-15979.3 High
- mozilla firefoxThe nsTextFrame::ClearTextRun function in layout/generic/nsTextFrameThebes.cpp in Mozilla Firefox...CVE-2009-1313Public exploitFix available9.3 High
- mozilla firefox, seamonkey +1 moreMozilla Firefox before 3.0.9 and SeaMonkey 1.1.17 do not block javascript: URIs in Refresh...CVE-2009-1312Public exploit4.3 Medium
- mozilla firefox, seamonkey +1 moreMozilla Firefox before 3.0.9 and SeaMonkey before 1.1.17 allow user-assisted remote attackers to...CVE-2009-13114.3 Medium
- mozilla firefoxCross-site scripting (XSS) vulnerability in the MozSearch plugin implementation in Mozilla...CVE-2009-13104.3 Medium
- mozilla firefox, seamonkey, thunderbird +2 moreMozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey do not properly implement the Same...CVE-2009-13094.3 Medium
- mozilla firefox, seamonkey, thunderbird +2 moreCross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.0.9, Thunderbird, and...CVE-2009-13084.3 Medium
- mozilla firefox, seamonkey, thunderbird +2 moreThe view-source: URI implementation in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey...CVE-2009-13076.8 Medium
- mozilla firefox, seamonkey, thunderbird +2 moreThe jar: URI implementation in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey does not...CVE-2009-13064.3 Medium
- mozilla firefox, seamonkey, thunderbird +2 moreThe JavaScript engine in Mozilla Firefox before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey...CVE-2009-13055.0 Medium
- mozilla firefox, seamonkey, thunderbird +2 moreThe JavaScript engine in Mozilla Firefox 3.x before 3.0.9, Thunderbird before 2.0.0.22, and...CVE-2009-13045.0 Medium
- mozilla firefox, seamonkey, thunderbird +2 moreThe browser engine in Mozilla Firefox before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey...CVE-2009-13035.0 Medium
- mozilla firefox, seamonkey, thunderbird +2 moreThe browser engine in Mozilla Firefox 3.x before 3.0.9, Thunderbird before 2.0.0.22, and...CVE-2009-13025.0 Medium
- mozilla firefoxMozilla Firefox 3.0.8 and earlier 3.0.x versions allows remote attackers to cause a denial of...CVE-2009-1232Public exploit4.3 Medium
- mozilla bugzillaCross-site request forgery (CSRF) vulnerability in attachment.cgi in Bugzilla 3.2 before 3.2.3, 3...CVE-2009-12136.8 Medium
- mozilla firefoxThe txMozillaXSLTProcessor::TransformToDoc function in Mozilla Firefox before 3.0.8 and SeaMonkey...CVE-2009-1169Public exploitEPSS 10.5%9.3 High
- mozilla firefoxMozilla Firefox 3.0.7 on Windows 7 allows remote attackers to execute arbitrary code via unknown...CVE-2009-10449.3 High
- gimp, mozilla firefox, sun openjdk +1 more +3 moreMultiple stack-based buffer overflows in the ReadSetOfCurves function in LittleCMS (aka lcms or...CVE-2009-07339.3 High
- gimp, mozilla firefox, sun openjdk +1 more +3 moreMultiple integer overflows in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in...CVE-2009-07239.3 High
- gimp, mozilla firefox, oracle openjdk +1 more +3 moreMemory leak in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta,...CVE-2009-05814.3 Medium
- mozilla firefoxMozilla Firefox 2.0.0.20 and earlier allows remote attackers to cause a denial of service ...CVE-2009-0821Public exploit5.0 Medium
- mozilla firefox, seamonkey, thunderbird +2 moreMozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 decode...CVE-2009-07775.8 Medium
- mozilla firefox, seamonkey, thunderbird +2 morensIRDFService in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey before...CVE-2009-07767.1 High
- mozilla firefox, seamonkey, thunderbird +2 moreDouble free vulnerability in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and...CVE-2009-077510.0 High
- mozilla firefox, seamonkey, thunderbird +2 moreThe layout engine in Mozilla Firefox 2 and 3 before 3.0.7, Thunderbird before 2.0.0.21, and...CVE-2009-07749.3 High
- mozilla firefox, seamonkey, thunderbird +2 moreThe JavaScript engine in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey...CVE-2009-077310.0 High
- mozilla firefox, seamonkey, thunderbird +2 moreThe layout engine in Mozilla Firefox 2 and 3 before 3.0.7, Thunderbird before 2.0.0.21, and...CVE-2009-07729.3 High
- mozilla firefox, seamonkey, thunderbird +2 moreThe layout engine in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1...CVE-2009-077110.0 High
- mozilla firefox, seamonkey, thunderbird +2 moreThe Internationalized Domain Names (IDN) blacklist in Mozilla Firefox 3.0.6 and other versions...CVE-2009-06525.8 Medium
- mozilla bugzillaBugzilla 3.2 before 3.2 RC2, 3.0 before 3.0.6, 2.22 before 2.22.6, 2.20 before 2.20.7, and other...CVE-2008-60984.0 Medium
- mozilla bugzillaBugzilla 3.2.1, 3.0.7, and 3.3.2, when running under mod_perl, calls the srand function at...CVE-2009-04867.5 High
- mozilla bugzillaCross-site request forgery (CSRF) vulnerability in Bugzilla 2.17 to 2.22.7, 3.0 before 3.0.7, 3.2...CVE-2009-04855.8 Medium
- mozilla bugzillaCross-site request forgery (CSRF) vulnerability in Bugzilla 3.0 before 3.0.7, 3.2 before 3.2.1,...CVE-2009-04845.8 Medium
- mozilla bugzillaCross-site request forgery (CSRF) vulnerability in Bugzilla 2.22 before 2.22.7, 3.0 before 3.0.7,...CVE-2009-04835.8 Medium
- mozilla bugzillaCross-site request forgery (CSRF) vulnerability in Bugzilla before 3.2 before 3.2.1, 3.3 before 3...CVE-2009-04825.8 Medium
- mozilla bugzillaBugzilla 2.x before 2.22.7, 3.0 before 3.0.7, 3.2 before 3.2.1, and 3.3 before 3.3.2 allows...CVE-2009-04813.5 Low
- mozilla firefoxMozilla Firefox 3.x before 3.0.6 does not properly implement the (1) no-store and (2) no-cache...CVE-2009-03583.3 Low
- mozilla firefox, seamonkey +1 moreMozilla Firefox before 3.0.6 and SeaMonkey before 1.1.15 do not properly restrict access from web...CVE-2009-03575.0 Medium
- mozilla firefoxMozilla Firefox before 3.0.6 and SeaMonkey do not block links to the (1) about:plugins and (2)...CVE-2009-03565.1 Medium
- mozilla firefoxcomponents/sessionstore/src/nsSessionStore.js in Mozilla Firefox before 3.0.6 does not block...CVE-2009-03555.4 Medium
- mozilla firefoxCross-domain vulnerability in js/src/jsobj.cpp in Mozilla Firefox 3.x before 3.0.6 allows remote...CVE-2009-03542.6 Low
- mozilla firefox, seamonkey, thunderbird +2 moreUnspecified vulnerability in Mozilla Firefox 3.x before 3.0.6, Thunderbird before 2.0.0.21, and...CVE-2009-035310.0 High
- mozilla firefox, seamonkey, thunderbird +2 moreMultiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.6, Thunderbird before 2.0...CVE-2009-035210.0 High
- mozilla firefoxMozilla Firefox 3.0.5 allows remote attackers to trick a user into visiting an arbitrary URL via...CVE-2009-0253Public exploit6.8 Medium
- mozilla firefox, seamonkey +1 moreThe Math.random function in the JavaScript implementation in Mozilla Firefox 3.5.x before 3.5.10...CVE-2008-59134.9 Medium
- mozilla firefoxMozilla Firefox 3.0.5 and earlier 3.0.x versions, when designMode is enabled, allows remote...CVE-2009-0071Public exploit2.6 Low
- mozilla libxulMemory leak in Libxul, as used in Mozilla Firefox 3.0.5 and other products, allows remote...CVE-2008-58225.0 Medium
- mozilla firefoxMozilla Firefox 3.0.5 on Windows Vista allows remote attackers to cause a denial of service ...CVE-2008-5715Public exploit5.0 Medium
- mozilla firefox, canonical ubuntu linux, debian linux +2 more +4 moreUnspecified vulnerability in the session-restore feature in Mozilla Firefox 3.x before 3.0.5 and...CVE-2008-55134.3 Medium
- Show moreLoading…