Skip to contentMozilla vulnerabilities
Newest
- mozilla bugzillaBugzilla 3.3.1 through 3.4.4, 3.5.1, and 3.5.2 does not allow group restrictions to be preserved...CVE-2009-33875.0 Medium
- mozilla firefox, seamonkey, thunderbird +2 moreMozilla Necko, as used in Firefox, SeaMonkey, and other applications, performs DNS prefetching of...CVE-2009-46305.0 Medium
- mozilla seamonkey, thunderbird +1 moreMozilla Necko, as used in Thunderbird 3.0.1, SeaMonkey, and other applications, performs DNS...CVE-2009-46295.0 Medium
- mozilla firefoxThe nsObserverList::FillObserverArray function in xpcom/ds/nsObserverList.cpp in Mozilla Firefox...CVE-2010-02205.0 Medium
- mozilla firefox, seamonkey +1 moreThe GeckoActiveXObject function in Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and...CVE-2009-39877.8 High
- mozilla firefox, seamonkey, thunderbird +2 moreMultiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox 3.5.x before 3.5...CVE-2009-39829.3 High
- mozilla firefox, seamonkey, thunderbird +2 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.6,...CVE-2009-39809.3 High
- mozilla firefox, seamonkey +1 moreInteger overflow in libtheora in Xiph.Org Theora before 1.1, as used in Mozilla Firefox 3.5...CVE-2009-3389Fix available9.3 High
- mozilla firefox, seamonkey +1 moreliboggplay in Mozilla Firefox 3.5.x before 3.5.6 and SeaMonkey before 2.0.1 might allow context...CVE-2009-3388Fix available9.3 High
- mozilla firefox, seamonkey +1 moreMozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote...CVE-2009-39867.6 High
- mozilla firefox, seamonkey +1 moreMozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote...CVE-2009-39856.8 Medium
- mozilla firefox, seamonkey, thunderbird +2 moreMozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote...CVE-2009-39846.8 Medium
- mozilla firefox, seamonkey, thunderbird +2 moreMozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote...CVE-2009-39836.8 Medium
- mozilla firefox, seamonkey, thunderbird +2 moreUnspecified vulnerability in the browser engine in Mozilla Firefox before 3.0.16, SeaMonkey...CVE-2009-39819.3 High
- mozilla firefox, seamonkey +1 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.16 and 3...CVE-2009-39799.3 High
- mozilla firefoxVisual truncation vulnerability in the MakeScriptDialogTitle function in nsGlobalWindow.cpp in...CVE-2009-41305.8 Medium
- mozilla firefoxRace condition in Mozilla Firefox allows remote attackers to produce a JavaScript message with a...CVE-2009-41295.8 Medium
- mozilla firefox, sage.mozdev sage +1 moreSage 1.4.3 and earlier extension for Firefox performs certain operations with chrome privileges,...CVE-2009-4102Fix available9.3 High
- mozilla bugzillaTemplate.pm in Bugzilla 3.3.2 through 3.4.3 and 3.5 through 3.5.1 allows remote attackers to...CVE-2009-33865.0 Medium
- mozilla firefoxThe nsGIFDecoder2::GifWrite function in decoders/gif/nsGIFDecoder2.cpp in libpr0n in Mozilla...CVE-2009-39784.3 Medium
- apache http server, gnu gnutls, mozilla nss +5 more +7 moreApache Tomcat affected by vulnerability in TLS and SSL protocolCVE-2009-3555Public exploitFix availableEPSS 87.3%5.8 Medium
- mozilla firefoxMultiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox 3.5.x before 3.5...CVE-2009-338310.0 High
- mozilla firefoxMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.4...CVE-2009-338110.0 High
- mozilla firefoxMultiple unspecified vulnerabilities in libvorbis, as used in Mozilla Firefox 3.5.x before 3.5.4,...CVE-2009-3379Fix available10.0 High
- mozilla firefoxThe oggplay_data_handle_theora_frame function in media/liboggplay/src/liboggplay/oggplay_data.c...CVE-2009-3378Fix available9.3 High
- mozilla firefoxMultiple unspecified vulnerabilities in liboggz before cf5feeaab69b05e24, as used in Mozilla...CVE-2009-3377Fix available10.0 High
- mozilla firefoxUse-after-free vulnerability in Mozilla Firefox 3.5.x before 3.5.4 allows remote attackers to...CVE-2009-337110.0 High
- mozilla seamonkeyThe mail component in Mozilla SeaMonkey before 1.1.19 does not properly restrict execution of...CVE-2009-33857.1 High
- mozilla firefoxlayout/base/nsCSSFrameConstructor.cpp in the browser engine in Mozilla Firefox 3.0.x before 3.0...CVE-2009-3382Public exploitEPSS 10.8%10.0 High
- mozilla firefoxMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.0.x before 3.0.15...CVE-2009-338010.0 High
- mozilla firefox, seamonkey +1 moreMozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, does not properly...CVE-2009-33769.3 High
- mozilla firefoxcontent/html/document/src/nsHTMLDocument.cpp in Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x...CVE-2009-33754.3 Medium
- mozilla firefoxThe XPCVariant::VariantDataToJS function in the XPCOM implementation in Mozilla Firefox 3.0.x...CVE-2009-33747.5 High
- mozilla firefox, seamonkey +1 moreHeap-based buffer overflow in the GIF image parser in Mozilla Firefox before 3.0.15 and 3.5.x...CVE-2009-3373Public exploitEPSS 15.5%10.0 High
- mozilla firefox, seamonkey +1 moreMozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, allows remote...CVE-2009-33729.3 High
- mozilla firefoxMozilla Firefox before 3.0.15, and 3.5.x before 3.5.4, allows remote attackers to read form...CVE-2009-33705.0 Medium
- mozilla firefoxMozilla Firefox 3.6a1, 3.5.3, 3.5.2, and earlier 3.5.x versions, and 3.0.14 and earlier 2.x and 3...CVE-2009-32744.4 Medium
- mozilla firefoxMozilla Firefox 3.0.1 and earlier allows remote attackers to cause a denial of service (browser...CVE-2008-7244Public exploit5.0 Medium
- mozilla bugzillatoken.cgi in Bugzilla 3.4rc1 through 3.4.1 places a password in a URL at the beginning of a login...CVE-2009-31665.0 Medium
- mozilla bugzillaSQL injection vulnerability in the Bug.create WebService function in Bugzilla 2.23.4 through 3.0...CVE-2009-3165Fix available7.5 High
- mozilla bugzillaSQL injection vulnerability in the Bug.search WebService function in Bugzilla 3.3.2 through 3.4.1...CVE-2009-31257.5 High
- mozilla firefoxUnspecified vulnerability in Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, allows remote...CVE-2009-307910.0 High
- mozilla firefoxVisual truncation vulnerability in Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, allows...CVE-2009-30785.0 Medium
- mozilla firefoxMozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, does not properly manage pointers for the...CVE-2009-30779.3 High
- mozilla firefoxMozilla Firefox before 3.0.14 does not properly implement certain dialogs associated with the (1)...CVE-2009-3076Public exploit9.3 High
- mozilla firefoxMultiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox before 3.0.14...CVE-2009-307510.0 High
- mozilla firefoxUnspecified vulnerability in the JavaScript engine in Mozilla Firefox before 3.0.14 allows remote...CVE-2009-307410.0 High
- mozilla firefoxUnspecified vulnerability in the JavaScript engine in Mozilla Firefox 3.5.x before 3.5.3 allows...CVE-2009-307310.0 High
- mozilla firefoxMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.14 and 3...CVE-2009-307210.0 High
- mozilla firefoxMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.14, and...CVE-2009-307110.0 High
- Show moreLoading…