Skip to contentMozilla vulnerabilities
Newest
- mozilla firefoxMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.14 allow...CVE-2009-307010.0 High
- mozilla firefoxUnspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.3 allows...CVE-2009-306910.0 High
- mozilla firefox, mozilla, mozilla seamonkey +2 moreMozilla Firefox 3.0.13 and earlier, 3.5, 3.6 a1 pre, and 3.7 a1 pre; SeaMonkey 1.1.17; and...CVE-2009-30144.3 Medium
- mozilla firefoxMozilla Firefox 3.0.13 and earlier, 3.5, 3.6 a1 pre, and 3.7 a1 pre does not properly block data:...CVE-2009-30124.3 Medium
- mozilla firefox, mozilla, mozilla seamonkey +2 moreMozilla Firefox 3.0.13 and earlier, 3.5, 3.6 a1 pre, and 3.7 a1 pre; SeaMonkey 1.1.17; and...CVE-2009-30104.3 Medium
- flock, mozilla firefox, seamonkey +2 moreMozilla Firefox 3.5.1 and SeaMonkey 1.1.17, and Flock 2.5.1, allow context-dependent attackers to...CVE-2009-30074.3 Medium
- mozilla firefoxMozilla Firefox 3.5.2 on Windows XP, in some situations possibly involving an incompletely...CVE-2009-29755.0 Medium
- mozilla firefoxMozilla Firefox 3.0.6 through 3.0.13, and 3.5.x, allows remote attackers to cause a denial of...CVE-2009-2953Public exploit5.0 Medium
- mozilla seamonkey, thunderbird +1 moremailnews in Mozilla Thunderbird before 2.0.0.18 and SeaMonkey before 1.1.13, when JavaScript is...CVE-2008-69614.3 Medium
- mozilla firefoxThe nsDocument::SetScriptGlobalObject function in content/base/src/nsDocument.cpp in Mozilla...CVE-2009-266510.0 High
- mozilla firefoxThe js_watch_set function in js/src/jsdbgapi.cpp in the JavaScript engine in Mozilla Firefox...CVE-2009-26645.0 Medium
- mozilla firefoxlibvorbis before r16182, as used in Mozilla Firefox 3.5.x before 3.5.2 and other products, allows...CVE-2009-2663Fix available9.3 High
- mozilla firefoxThe browser engine in Mozilla Firefox 3.5.x before 3.5.2 allows remote attackers to cause a...CVE-2009-266210.0 High
- mozilla firefoxMozilla Firefox before 3.0.13, and 3.5.x before 3.5.2, allows remote attackers to spoof the...CVE-2009-2654Public exploit5.8 Medium
- mozilla network security servicesHeap-based buffer overflow in a regular-expression parser in Mozilla Network Security Services ...CVE-2009-2404Fix available9.3 High
- gnu gnutls, mozilla network security services, openssl +2 moreThe Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6...CVE-2009-2409Fix available5.1 Medium
- mozilla firefox, network security services, seamonkey +6 more +8 moreMozilla Network Security Services (NSS) before 3.12.3, Firefox before 3.0.13, Thunderbird before...CVE-2009-2408Fix available5.9 Medium
- mozilla firefoxMozilla Firefox before 3.0.12, and 3.5.x before 3.5.2, allows remote SOCKS5 proxy servers to...CVE-2009-24705.0 Medium
- mozilla firefox, fedoraproject fedora, opensuse +3 more +5 moreMozilla Firefox before 3.0.12 does not always use XPCCrossOriginWrapper when required during...CVE-2009-24724.3 Medium
- mozilla firefoxThe setTimeout function in Mozilla Firefox before 3.0.12 does not properly preserve object...CVE-2009-247110.0 High
- mozilla firefoxMozilla Firefox before 3.0.12 does not properly handle an SVG element that has a property with a...CVE-2009-246910.0 High
- mozilla firefoxInteger overflow in Apple CoreGraphics, as used in Safari before 4.0.3, Mozilla Firefox before 3...CVE-2009-246810.0 High
- mozilla firefoxMozilla Firefox before 3.0.12 and 3.5 before 3.5.1 allows remote attackers to cause a denial of...CVE-2009-246710.0 High
- mozilla firefox, thunderbird +1 moreThe JavaScript engine in Mozilla Firefox before 3.0.12 and Thunderbird allows remote attackers to...CVE-2009-246610.0 High
- mozilla firefox, thunderbird +1 moreMozilla Firefox before 3.0.12 and Thunderbird allow remote attackers to cause a denial of service...CVE-2009-246510.0 High
- mozilla firefox, seamonkey, thunderbird +2 moreThe nsXULTemplateQueryProcessorRDF::CheckIsSeparator function in Mozilla Firefox before 3.0.12,...CVE-2009-2464Public exploitEPSS 13.2%10.0 High
- mozilla firefox, thunderbird +1 moreMultiple integer overflows in the (1) PL_Base64Decode and (2) PL_Base64Encode functions in...CVE-2009-2463Fix available10.0 High
- mozilla firefox, thunderbird +1 moreThe browser engine in Mozilla Firefox before 3.0.12 and Thunderbird allows remote attackers to...CVE-2009-246210.0 High
- mozilla firefox, seamonkey, thunderbird +2 moreMozilla Firefox before 2.0.0.19 and 3.x before 3.0.5, SeaMonkey, and Thunderbird allow remote...CVE-2009-2535Public exploit5.0 Medium
- mozilla firefoxMozilla Firefox 3.0.x, 3.5, and 3.5.1 on Windows allows remote attackers to cause a denial of...CVE-2009-2479Public exploitEPSS 12.1%7.8 High
- mozilla firefoxMozilla Firefox 3.5 allows remote attackers to cause a denial of service (NULL pointer...CVE-2009-2478Public exploit5.0 Medium
- mozilla firefoxjs/src/jstracer.cpp in the Just-in-time (JIT) JavaScript compiler (aka TraceMonkey) in Mozilla...CVE-2009-2477Public exploitEPSS 42.5%9.3 High
- freebsd, k-meleon project k-meleon, mozilla firefox +3 more +5 moreArray index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka...CVE-2009-0689Public exploitFix availableEPSS 29.4%6.8 Medium
- mozilla seamonkey, thunderbird +1 moreMozilla Thunderbird before 2.0.0.22 and SeaMonkey before 1.1.17 allow remote attackers to cause a...CVE-2009-2210Fix available9.3 High
- mozilla firefoxMozilla Firefox 3.0.10, and possibly other versions, detects http content in https web pages only...CVE-2009-20656.8 Medium
- mozilla firefoxMozilla Firefox before 3.0.10 processes a 3xx HTTP CONNECT response before a successful SSL...CVE-2009-20619.3 High
- mozilla firefoxMozilla Firefox 3.0.10 and earlier on Linux allows remote attackers to cause a denial of service ...CVE-2009-2044Public exploitFix available4.3 Medium
- mozilla firefoxnsViewManager.cpp in Mozilla Firefox 3.0.2 through 3.0.10 allows remote attackers to cause a...CVE-2009-2043Public exploit4.3 Medium
- mozilla firefox, seamonkey, thunderbird +2 morejs/src/xpconnect/src/xpcwrappedjsclass.cpp in Mozilla Firefox before 3.0.11, Thunderbird before 2...CVE-2009-18419.3 High
- mozilla firefox, seamonkey, thunderbird +2 moreMozilla Firefox before 3.0.11, Thunderbird, and SeaMonkey do not check content policy before...CVE-2009-18409.3 High
- mozilla firefoxMozilla Firefox 3 before 3.0.11 associates an incorrect principal with a file: URL loaded through...CVE-2009-1839Public exploit5.4 Medium
- mozilla firefox, seamonkey, thunderbird +2 moreThe garbage-collection implementation in Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0...CVE-2009-18389.3 High
- mozilla firefox, debian linux, fedoraproject fedora +6 more +8 moreRace condition in the NPObjWrapper_NewResolve function in modules/plugin/base/src/nsJSNPRuntime...CVE-2009-18377.5 High
- mozilla firefox, seamonkey, thunderbird +2 moreMozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 use the...CVE-2009-18366.8 Medium
- mozilla firefox, seamonkey +1 moreMozilla Firefox before 3.0.11 and SeaMonkey before 1.1.17 associate local documents with external...CVE-2009-18354.3 Medium
- mozilla firefox, seamonkey +1 moreVisual truncation vulnerability in netwerk/dns/src/nsIDNService.cpp in Mozilla Firefox before 3.0...CVE-2009-1834Public exploit4.3 Medium
- mozilla firefox, seamonkey, thunderbird +2 moreThe JavaScript engine in Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and...CVE-2009-18339.3 High
- mozilla firefox, seamonkey, thunderbird +2 moreMozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allow...CVE-2009-18329.3 High
- mozilla firefox, seamonkey, thunderbird +2 moreThe browser engine in Mozilla Firefox 3 before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey...CVE-2009-13929.3 High
- mozilla firefoxMozilla Firefox 3.0.10 allows remote attackers to cause a denial of service (infinite loop,...CVE-2009-1828Public exploit5.0 Medium
- Show moreLoading…