Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Vendors
Mozilla

Mozilla vulnerabilities

Products

Newest

Known exploitedIn KEVPublic exploitFix available

mozilla firefox, seamonkey, thunderbird +6 more +8 moreThe JavaScript implementation in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2,...CVE-2013-56159.8 CriticalDecember 11, 2013
mozilla firefox, seamonkey, canonical ubuntu linux +13 more +15 moreMozilla Firefox before 26.0 and SeaMonkey before 2.23 do not properly consider the sandbox...CVE-2013-56144.3 MediumDecember 11, 2013
mozilla firefox, seamonkey, thunderbird +13 more +15 moreUse-after-free vulnerability in the PresShell::DispatchSynthMouseMove function in Mozilla Firefox...CVE-2013-56139.8 CriticalDecember 11, 2013
mozilla firefox, seamonkey, canonical ubuntu linux +13 more +15 moreCross-site scripting (XSS) vulnerability in Mozilla Firefox before 26.0 and SeaMonkey before 2.23...CVE-2013-56124.3 MediumDecember 11, 2013
mozilla firefox, canonical ubuntu linux, fedoraproject fedora +5 more +7 moreMozilla Firefox before 26.0 does not properly remove the Application Installation doorhanger,...CVE-2013-56115.8 MediumDecember 11, 2013
mozilla firefox, seamonkey, canonical ubuntu linux +6 more +8 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 26.0 and...CVE-2013-561010.0 HighDecember 11, 2013
mozilla firefox, seamonkey, thunderbird +13 more +15 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 26.0,...CVE-2013-56099.8 CriticalDecember 11, 2013
mozilla firefox, netscape portable runtime, seamonkey +2 moreInteger overflow in the PL_ArenaAllocate function in Mozilla Netscape Portable Runtime (NSPR)...CVE-2013-5607Fix available7.5 HighNovember 20, 2013
mozilla network security servicesThe CERT_VerifyCert function in lib/certhigh/certvfy.c in Mozilla Network Security Services (NSS)...CVE-2013-5606Fix available5.8 MediumNovember 16, 2013
mozilla network security servicesMozilla Network Security Services (NSS) 3.14 before 3.14.5 and 3.15 before 3.15.3 allows remote...CVE-2013-5605Fix available7.5 HighNovember 16, 2013
mozilla network security servicesInteger overflow in Mozilla Network Security Services (NSS) 3.15 before 3.15.3 allows remote...CVE-2013-1741Fix available7.5 HighNovember 16, 2013
google chrome, libjpeg-turbo, artifex gpl ghostscript +8 more +10 moreThe get_sos function in jdmarker.c in (1) libjpeg 6b and (2) libjpeg-turbo through 1.3.0, as used...CVE-2013-6629Fix available5.0 MediumNovember 13, 2013
mozilla firefox, seamonkey, thunderbird +1 more +3 moreThe txXPathNodeUtils::getBaseURI function in the XSLT processor in Mozilla Firefox before 25.0,...CVE-2013-56049.3 HighOctober 30, 2013
mozilla firefox, seamonkey, thunderbird +1 more +3 moreUse-after-free vulnerability in the nsContentUtils::ContentIsHostIncludingDescendantOf function...CVE-2013-560310.0 HighOctober 30, 2013
mozilla firefox, seamonkey, thunderbird +1 more +3 moreThe Worker::SetEventListener function in the Web workers implementation in Mozilla Firefox before...CVE-2013-560210.0 HighOctober 30, 2013
mozilla firefox, seamonkey, thunderbird +1 more +3 moreUse-after-free vulnerability in the nsEventListenerManager::SetEventHandler function in Mozilla...CVE-2013-560110.0 HighOctober 30, 2013
mozilla firefox, seamonkey, thunderbird +1 more +3 moreUse-after-free vulnerability in the nsIOService::NewChannelFromURIWithProxyFlags function in...CVE-2013-560010.0 HighOctober 30, 2013
mozilla firefox, seamonkey, thunderbird +1 more +3 moreUse-after-free vulnerability in the nsIPresShell::GetPresContext function in the PresShell (aka...CVE-2013-559910.0 HighOctober 30, 2013
mozilla firefoxPDF.js in Mozilla Firefox before 25.0 and Firefox ESR 24.x before 24.1 does not properly handle...CVE-2013-55988.3 HighOctober 30, 2013
mozilla firefox, seamonkey, thunderbird +1 more +3 moreUse-after-free vulnerability in the nsDocLoader::doStopDocumentLoad function in Mozilla Firefox...CVE-2013-559710.0 HighOctober 30, 2013
mozilla firefox, seamonkey, thunderbird +1 more +3 moreThe cycle collection (CC) implementation in Mozilla Firefox before 25.0, Firefox ESR 24.x before...CVE-2013-55966.8 MediumOctober 30, 2013
mozilla firefox, seamonkey, thunderbird +1 more +3 moreThe JavaScript engine in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x...CVE-2013-55954.3 MediumOctober 30, 2013
mozilla firefox, seamonkey, thunderbird +1 more +3 moreThe SELECT element implementation in Mozilla Firefox before 25.0, Firefox ESR 24.x before 24.1,...CVE-2013-55934.3 MediumOctober 30, 2013
mozilla firefoxMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 25.0 allow...CVE-2013-559210.0 HighOctober 30, 2013
mozilla firefox, seamonkey, thunderbird +1 more +3 moreUnspecified vulnerability in the browser engine in Mozilla Firefox before 25.0, Firefox ESR 24.x...CVE-2013-559110.0 HighOctober 30, 2013
mozilla firefox, seamonkey, thunderbird +1 more +3 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 25.0,...CVE-2013-559010.0 HighOctober 30, 2013
mozilla bugzillaMultiple cross-site scripting (XSS) vulnerabilities in report.cgi in Bugzilla 4.1.x and 4.2.x...CVE-2013-1743Public exploit4.3 MediumOctober 24, 2013
mozilla bugzillaMultiple cross-site scripting (XSS) vulnerabilities in editflagtypes.cgi in Bugzilla 2.x, 3.x,...CVE-2013-1742Public exploit4.3 MediumOctober 24, 2013
mozilla bugzillaCross-site request forgery (CSRF) vulnerability in attachment.cgi in Bugzilla 2.x, 3.x, and 4.0.x...CVE-2013-17346.8 MediumOctober 24, 2013
mozilla bugzillaCross-site request forgery (CSRF) vulnerability in process_bug.cgi in Bugzilla 4.4.x before 4.4.1...CVE-2013-17336.8 MediumOctober 24, 2013
mozilla network security servicesMozilla Network Security Services (NSS) before 3.15.2 does not ensure that data structures are...CVE-2013-1739Fix available5.0 MediumOctober 22, 2013
mozilla firefox, firefox esr, thunderbird +2 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 36.0,...CVE-2015-0836Fix available7.5 HighSeptember 19, 2013
mozilla firefox, firefox esr, thunderbird +2 more +4 moreUse-after-free vulnerability in the mozilla::dom::IndexedDB::IDBObjectStore::CreateIndex function...CVE-2015-0831Fix available6.8 MediumSeptember 19, 2013
mozilla firefox, firefox esr, thunderbird +2 moreHeap-based buffer overflow in the mozilla::gfx::CopyRect function in Mozilla Firefox before 36.0,...CVE-2015-0827Fix available4.3 MediumSeptember 19, 2013
mozilla firefox, firefox esr, thunderbird +2 moreThe Form Autocompletion feature in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and...CVE-2015-0822Fix available4.3 MediumSeptember 19, 2013
mozilla firefox, seamonkey, thunderbird +2 moreUse-after-free vulnerability in the JS_GetGlobalForScopeChain function in Mozilla Firefox before...CVE-2013-17389.3 HighSeptember 18, 2013
mozilla firefoxUntrusted search path vulnerability in the GL tracing functionality in Mozilla Firefox before 24...CVE-2013-17316.8 MediumSeptember 18, 2013
mozilla firefoxThe WebGL implementation in Mozilla Firefox before 24.0, when NVIDIA graphics drivers are used on...CVE-2013-17292.6 LowSeptember 18, 2013
mozilla firefox, seamonkey, thunderbird +2 moreThe IonMonkey JavaScript engine in Mozilla Firefox before 24.0, Thunderbird before 24.0, and...CVE-2013-17284.3 MediumSeptember 18, 2013
mozilla firefoxMozilla Firefox before 24.0 on Android allows attackers to bypass the Same Origin Policy, and...CVE-2013-1727Public exploit4.0 MediumSeptember 18, 2013
mozilla firefox, seamonkey, thunderbird +1 more +3 moreMozilla Updater in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird...CVE-2013-17266.2 MediumSeptember 18, 2013
mozilla firefox, seamonkey, thunderbird +2 moreUse-after-free vulnerability in the mozilla::dom::HTMLFormElement::IsDefaultSubmitElement...CVE-2013-17249.3 HighSeptember 18, 2013
mozilla firefox, seamonkey, thunderbird +2 moreThe NativeKey widget in Mozilla Firefox before 24.0, Thunderbird before 24.0, and SeaMonkey...CVE-2013-17234.3 MediumSeptember 18, 2013
mozilla firefox, seamonkey +1 moreInteger overflow in the drawLineLoop function in the libGLESv2 library in Almost Native Graphics...CVE-2013-17219.3 HighSeptember 18, 2013
mozilla firefox, seamonkey, thunderbird +2 moreThe nsHtml5TreeBuilder::resetTheInsertionMode function in the HTML5 Tree Builder in Mozilla...CVE-2013-17206.8 MediumSeptember 18, 2013
mozilla firefox, seamonkey, thunderbird +2 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 24.0,...CVE-2013-171910.0 HighSeptember 18, 2013
mozilla firefox, seamonkey, thunderbird +1 more +3 moreMozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird...CVE-2013-17375.0 MediumSeptember 18, 2013
mozilla firefox, seamonkey, thunderbird +1 more +3 moreThe nsGfxScrollFrameInner::IsLTR function in Mozilla Firefox before 24.0, Firefox ESR 17.x before...CVE-2013-173610.0 HighSeptember 18, 2013
mozilla firefox, seamonkey, thunderbird +1 more +3 moreUse-after-free vulnerability in the mozilla::layout::ScrollbarActivity function in Mozilla...CVE-2013-17359.3 HighSeptember 18, 2013
mozilla firefox, seamonkey, thunderbird +1 more +3 moreBuffer overflow in the nsFloatManager::GetFlowArea function in Mozilla Firefox before 24.0,...CVE-2013-17329.3 HighSeptember 18, 2013
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open