Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Vendors
Mozilla

Mozilla vulnerabilities

Products

Newest

Known exploitedIn KEVPublic exploitFix available

mozilla firefox, seamonkey, thunderbird +12 more +14 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 29.0,...CVE-2014-1518Fix available8.8 HighApril 29, 2014
mozilla bugzilla, fedoraproject fedora +1 moreThe login form in Bugzilla 2.x, 3.x, 4.x before 4.4.3, and 4.5.x before 4.5.3 does not properly...CVE-2014-1517Fix available4.0 MediumApril 20, 2014
mozilla firefoxThe saltProfileName function in base/GeckoProfileDirectories.java in Mozilla Firefox through 28.0...CVE-2014-15165.0 MediumMarch 29, 2014
mozilla firefoxMozilla Firefox before 28.0.1 on Android processes a file: URL by copying a local file onto the...CVE-2014-15151.9 LowMarch 25, 2014
mozilla network security servicesThe cert_TestHostName function in lib/certdb/certdb.c in the certificate-checking implementation...CVE-2014-1492Fix available4.3 MediumMarch 20, 2014
mozilla firefoxos, oracle solaris +1 moreDirectory traversal vulnerability in the DeviceStorage API in Mozilla FirefoxOS before 1.2.2...CVE-2014-15079.3 HighMarch 19, 2014
mozilla firefox, oracle solaris +1 moreDirectory traversal vulnerability in Android Crash Reporter in Mozilla Firefox before 28.0 on...CVE-2014-15066.4 MediumMarch 19, 2014
mozilla firefox, seamonkey, opensuse +4 more +6 moreThe session-restore feature in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 does not...CVE-2014-15042.6 LowMarch 19, 2014
mozilla firefox, seamonkey, opensuse +4 more +6 moreThe (1) WebGL.compressedTexImage2D and (2) WebGL.compressedTexSubImage2D functions in Mozilla...CVE-2014-15026.8 MediumMarch 19, 2014
mozilla firefox, oracle solaris, suse linux enterprise desktop +2 more +4 moreMozilla Firefox before 28.0 on Android allows remote attackers to bypass the Same Origin Policy...CVE-2014-15015.8 MediumMarch 19, 2014
mozilla firefox, seamonkey, opensuse +4 more +6 moreMozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to cause a denial of...CVE-2014-15005.0 MediumMarch 19, 2014
mozilla firefox, seamonkey, opensuse +4 more +6 moreMozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to spoof the domain...CVE-2014-14994.3 MediumMarch 19, 2014
mozilla firefox, seamonkey, opensuse +4 more +6 moreThe crypto.generateCRMFRequest method in Mozilla Firefox before 28.0 and SeaMonkey before 2.25...CVE-2014-14985.0 MediumMarch 19, 2014
mozilla firefox, seamonkey, thunderbird +3 more +5 moreMozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey...CVE-2014-14965.5 MediumMarch 19, 2014
mozilla firefox, seamonkey, opensuse +4 more +6 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 28.0 and...CVE-2014-14949.3 HighMarch 19, 2014
mozilla firefox, seamonkey, thunderbird +13 more +15 morevmtypedarrayobject.cpp in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird...CVE-2014-15149.8 CriticalMarch 19, 2014
mozilla firefox, seamonkey, thunderbird +13 more +15 moreTypedArrayObject.cpp in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird...CVE-2014-15138.8 HighMarch 19, 2014
mozilla firefox, seamonkey, thunderbird +13 more +15 moreUse-after-free vulnerability in the TypeObject class in the JavaScript engine in Mozilla Firefox...CVE-2014-1512EPSS 29.1%10.0 HighMarch 19, 2014
mozilla firefox, seamonkey, thunderbird +13 more +15 moreMozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey...CVE-2014-1511Public exploitEPSS 83.5%9.8 CriticalMarch 19, 2014
mozilla firefox, seamonkey, thunderbird +13 more +15 moreThe Web IDL implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4,...CVE-2014-1510Public exploitEPSS 82.2%9.8 CriticalMarch 19, 2014
mozilla firefox, seamonkey, thunderbird +12 more +14 moreBuffer overflow in the _cairo_truetype_index_to_ucs4 function in cairo, as used in Mozilla...CVE-2014-15098.8 HighMarch 19, 2014
mozilla firefox, seamonkey, thunderbird +13 more +15 moreThe libxul.so!gfxContext::Polygon function in Mozilla Firefox before 28.0, Firefox ESR 24.x...CVE-2014-15089.1 CriticalMarch 19, 2014
mozilla firefox, seamonkey, thunderbird +13 more +15 moreThe SVG filter implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4,...CVE-2014-15057.5 HighMarch 19, 2014
mozilla firefox, seamonkey, thunderbird +13 more +15 moreThe mozilla::WaveReader::DecodeAudioData function in Mozilla Firefox before 28.0, Firefox ESR 24...CVE-2014-14978.8 HighMarch 19, 2014
mozilla firefox, seamonkey, thunderbird +13 more +15 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 28.0,...CVE-2014-14939.8 CriticalMarch 19, 2014
mozilla seamonkey, thunderbird, thunderbird esr +2 moreCross-site scripting (XSS) vulnerability in Mozilla Thunderbird 17.x through 17.0.8, Thunderbird...CVE-2014-20184.3 MediumFebruary 17, 2014
mozilla seamonkey, thunderbird, thunderbird esr +2 moreCross-site scripting (XSS) vulnerability in Mozilla Thunderbird 17.x through 17.0.8, Thunderbird...CVE-2013-6674Public exploit4.3 MediumFebruary 17, 2014
mozilla firefoxMozilla Firefox through 27 sends HTTP Cookie headers without first validating that they have the...CVE-2013-6167Public exploit6.8 MediumFebruary 15, 2014
mozilla firefox, network security services, seamonkey +10 more +12 moreMozilla Network Security Services (NSS) before 3.15.4, as used in Mozilla Firefox before 27.0,...CVE-2014-1491Fix available4.3 MediumFebruary 6, 2014
mozilla firefox, network security services, seamonkey +10 more +12 moreRace condition in libssl in Mozilla Network Security Services (NSS) before 3.15.4, as used in...CVE-2014-1490Fix available9.3 HighFebruary 6, 2014
mozilla firefox, canonical ubuntu linux, opensuse +4 more +6 moreMozilla Firefox before 27.0 does not properly restrict access to about:home buttons by script on...CVE-2014-14894.3 MediumFebruary 6, 2014
mozilla firefox, seamonkey, canonical ubuntu linux +5 more +7 moreThe Web workers implementation in Mozilla Firefox before 27.0 and SeaMonkey before 2.24 allows...CVE-2014-148810.0 HighFebruary 6, 2014
mozilla firefox, seamonkey, thunderbird +14 more +16 moreThe Web workers implementation in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3,...CVE-2014-14877.5 HighFebruary 6, 2014
mozilla firefox, seamonkey, thunderbird +13 more +15 moreUse-after-free vulnerability in the imgRequestProxy function in Mozilla Firefox before 27.0,...CVE-2014-14869.8 CriticalFebruary 6, 2014
mozilla firefox, seamonkey, canonical ubuntu linux +5 more +7 moreThe Content Security Policy (CSP) implementation in Mozilla Firefox before 27.0 and SeaMonkey...CVE-2014-14857.5 HighFebruary 6, 2014
mozilla firefox, opensuse, oracle solaris +3 more +5 moreMozilla Firefox before 27.0 on Android 4.2 and earlier creates system-log entries containing...CVE-2014-14845.0 MediumFebruary 6, 2014
mozilla firefox, seamonkey, canonical ubuntu linux +5 more +7 moreMozilla Firefox before 27.0 and SeaMonkey before 2.24 allow remote attackers to bypass the Same...CVE-2014-14835.0 MediumFebruary 6, 2014
mozilla firefox, seamonkey, thunderbird +14 more +16 moreRasterImage.cpp in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before...CVE-2014-14828.8 HighFebruary 6, 2014
mozilla firefox, seamonkey, thunderbird +14 more +16 moreMozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey...CVE-2014-14817.5 HighFebruary 6, 2014
mozilla firefox, seamonkey, canonical ubuntu linux +5 more +7 moreThe file-download implementation in Mozilla Firefox before 27.0 and SeaMonkey before 2.24 does...CVE-2014-14804.3 MediumFebruary 6, 2014
mozilla firefox, seamonkey, thunderbird +14 more +16 moreThe System Only Wrapper (SOW) implementation in Mozilla Firefox before 27.0, Firefox ESR 24.x...CVE-2014-14797.5 HighFebruary 6, 2014
mozilla firefox, seamonkey, canonical ubuntu linux +2 more +4 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 27.0 and...CVE-2014-147810.0 HighFebruary 6, 2014
mozilla firefox, seamonkey, thunderbird +14 more +16 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 27.0,...CVE-2014-14779.8 CriticalFebruary 6, 2014
mozilla network security servicesThe ssl_Do1stHandshake function in sslsecur.c in libssl in Mozilla Network Security Services (NSS...CVE-2013-1740Fix available5.8 MediumJanuary 18, 2014
mozilla firefox, seamonkey, thunderbird +6 more +8 moreMozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey...CVE-2013-66735.9 MediumDecember 11, 2013
mozilla firefox, seamonkey, canonical ubuntu linux +6 more +8 moreMozilla Firefox before 26.0 and SeaMonkey before 2.23 on Linux allow user-assisted remote...CVE-2013-66724.3 MediumDecember 11, 2013
mozilla firefox, seamonkey, thunderbird +13 more +15 moreThe nsGfxScrollFrameInner::IsLTR function in Mozilla Firefox before 26.0, Firefox ESR 24.x before...CVE-2013-6671EPSS 11.1%9.8 CriticalDecember 11, 2013
mozilla firefox, seamonkey, canonical ubuntu linux +6 more +8 moreMultiple integer overflows in the binary-search implementation in SpiderMonkey in Mozilla Firefox...CVE-2013-56197.5 HighDecember 11, 2013
mozilla firefox, seamonkey, thunderbird +13 more +15 moreUse-after-free vulnerability in the nsNodeUtils::LastRelease function in the table-editing user...CVE-2013-5618EPSS 10.4%9.8 CriticalDecember 11, 2013
mozilla firefox, seamonkey, thunderbird +13 more +15 moreUse-after-free vulnerability in the nsEventListenerManager::HandleEventSubType function in...CVE-2013-56169.8 CriticalDecember 11, 2013
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open