Skip to contentMozilla vulnerabilities
Newest
- mozilla bugzilla, fedoraproject fedora +1 moreThe confirm_create_account function in the account-creation feature in token.cgi in Bugzilla 2.x...CVE-2014-15725.0 Medium
- mozilla bugzilla, fedoraproject fedora +1 moreBugzilla 2.x through 4.0.x before 4.0.15, 4.1.x and 4.2.x before 4.2.11, 4.3.x and 4.4.x before 4...CVE-2014-15714.0 Medium
- google chrome, mozilla firefox, firefox esr +3 more +5 moreMozilla Network Security Services (NSS) before 3.16.2.1, 3.16.x before 3.16.5, and 3.17.x before...CVE-2014-1568Fix availableEPSS 16.7%7.5 High
- mozilla firefoxMozilla Firefox before 31.1 on Android does not properly restrict copying of local files onto the...CVE-2014-15664.3 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreUse-after-free vulnerability in DirectionalityUtils.cpp in Mozilla Firefox before 32.0, Firefox...CVE-2014-1567Fix available9.3 High
- mozilla firefox, thunderbird +1 moreThe mozilla::dom::AudioEventTimeline function in the Web Audio API implementation in Mozilla...CVE-2014-1565Fix available5.0 Medium
- mozilla firefox, thunderbird, opensuse evergreen +1 more +3 moreMozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 do...CVE-2014-1564Public exploitFix available4.3 Medium
- mozilla firefox, thunderbird, opensuse evergreen +2 more +4 moreUse-after-free vulnerability in the mozilla::DOMSVGLength::GetTearOff function in Mozilla Firefox...CVE-2014-1563Fix available10.0 High
- mozilla firefox, firefox esr, thunderbird +2 moreUnspecified vulnerability in the browser engine in Mozilla Firefox before 32.0, Firefox ESR 24.x...CVE-2014-1562Fix available10.0 High
- mozilla firefoxMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 32.0 allow...CVE-2014-1554Fix available10.0 High
- mozilla firefox, thunderbird, opensuse evergreen +1 more +3 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 32.0,...CVE-2014-1553Fix available10.0 High
- mozilla bugzillaThe response function in the JSONP endpoint in WebService/Server/JSONRPC.pm in jsonrpc.cgi in...CVE-2014-1546Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreUse-after-free vulnerability in the FontTableRec destructor in Mozilla Firefox before 31.0,...CVE-2014-155110.0 High
- mozilla firefox, oracle solaris +1 moreMozilla Firefox before 31.0 does not properly restrict use of drag-and-drop events to spoof...CVE-2014-1561Fix available5.8 Medium
- mozilla firefox, thunderbird +1 moreMozilla Firefox before 31.0 and Thunderbird before 31.0 allow remote attackers to cause a denial...CVE-2014-1560Fix available4.3 Medium
- mozilla firefox, thunderbird +1 moreMozilla Firefox before 31.0 and Thunderbird before 31.0 allow remote attackers to cause a denial...CVE-2014-1559Fix available4.3 Medium
- mozilla firefox, thunderbird +1 moreMozilla Firefox before 31.0 and Thunderbird before 31.0 allow remote attackers to cause a denial...CVE-2014-1558Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreThe ConvolveHorizontally function in Skia, as used in Mozilla Firefox before 31.0, Firefox ESR 24...CVE-2014-1557Fix available9.3 High
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7 allow...CVE-2014-1556Fix available9.3 High
- mozilla firefox, firefox esr, thunderbird +2 moreUse-after-free vulnerability in the nsDocLoader::OnProgress function in Mozilla Firefox before 31...CVE-2014-1555Fix available9.3 High
- mozilla firefox, thunderbird +1 moreMozilla Firefox before 31.0 and Thunderbird before 31.0 do not properly implement the sandbox...CVE-2014-1552Fix available5.8 Medium
- mozilla firefox, thunderbird +1 moreUse-after-free vulnerability in the MediaInputPort class in Mozilla Firefox before 31.0 and...CVE-2014-1550Fix available10.0 High
- mozilla firefox, thunderbird +1 moreThe mozilla::dom::AudioBufferSourceNodeEngine::CopyFromInputBuffer function in Mozilla Firefox...CVE-2014-1549Fix available9.3 High
- mozilla firefox, thunderbird +1 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 31.0 and...CVE-2014-1548Fix available10.0 High
- mozilla firefox, firefox esr, thunderbird +2 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 31.0,...CVE-2014-1547Fix available10.0 High
- mozilla firefox, firefox esr, network security services +1 more +3 moreUse-after-free vulnerability in the CERT_DestroyCertificate function in libnss3.so in Mozilla...CVE-2014-1544Fix available10.0 High
- mozilla firefoxMultiple heap-based buffer overflows in the navigator.getGamepads function in the Gamepad API in...CVE-2014-15437.5 High
- mozilla firefox, opensuse, oracle solaris +2 moreBuffer overflow in the Speex resampler in the Web Audio subsystem in Mozilla Firefox before 30.0...CVE-2014-1542Fix available6.8 Medium
- mozilla firefoxUse-after-free vulnerability in the nsEventListenerManager::CompileEventHandlerInternal function...CVE-2014-1540Fix available9.3 High
- mozilla firefox, thunderbird +1 moreMozilla Firefox before 30.0 and Thunderbird through 24.6 on OS X do not ensure visibility of the...CVE-2014-15395.0 Medium
- mozilla firefoxUse-after-free vulnerability in the mozilla::dom::workers::WorkerPrivateParent function in...CVE-2014-1537Fix available10.0 High
- mozilla firefoxThe PropertyProvider::FindJustificationRange function in Mozilla Firefox before 30.0 allows...CVE-2014-1536Fix available10.0 High
- mozilla firefoxMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 30.0 allow...CVE-2014-1534Fix available10.0 High
- mozilla netscape portable runtimeMozilla Netscape Portable Runtime (NSPR) before 4.10.6 allows remote attackers to execute...CVE-2014-1545Fix available10.0 High
- mozilla firefox, firefox esr, thunderbird +2 moreUse-after-free vulnerability in the RefreshDriverTimer::TickDriver function in the SMIL Animation...CVE-2014-1541Fix available10.0 High
- mozilla firefox, firefox esr, thunderbird +2 moreUse-after-free vulnerability in the nsTextEditRules::CreateMozBR function in Mozilla Firefox...CVE-2014-1538Fix available10.0 High
- mozilla firefox, firefox esr +1 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 30.0,...CVE-2014-1533Fix available10.0 High
- mozilla firefox, fedoraproject fedora, oracle solaris +2 moreMozilla Firefox before 29.0 on Android allows remote attackers to spoof the address bar via...CVE-2014-15275.0 Medium
- mozilla firefox, fedoraproject fedora +1 moremaintenservice_installer.exe in the Maintenance Service Installer in Mozilla Firefox before 29.0...CVE-2014-15206.9 Medium
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreUse-after-free vulnerability in the nsHostResolver::ConditionallyRefreshRecord function in libxul...CVE-2014-1532Fix available9.8 Critical
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreUse-after-free vulnerability in the nsGenericHTMLElement::GetWidthHeightForImage function in...CVE-2014-1531Fix available8.8 High
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreThe docshell implementation in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5,...CVE-2014-1530Fix available6.1 Medium
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreThe Web Notification API in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5,...CVE-2014-1529Fix available8.8 High
- mozilla firefox, seamonkey, canonical ubuntu linux +3 more +5 moreThe sse2_composite_src_x888_8888 function in Pixman, as used in Cairo in Mozilla Firefox 28.0 and...CVE-2014-1528Fix available10.0 High
- mozilla firefox, seamonkey, canonical ubuntu linux +2 more +4 moreThe XrayWrapper implementation in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 allows...CVE-2014-1526Fix available6.8 Medium
- mozilla firefox, seamonkey, canonical ubuntu linux +2 more +4 moreThe mozilla::dom::TextTrack::AddCue function in Mozilla Firefox before 29.0 and SeaMonkey before...CVE-2014-1525Fix available9.3 High
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreThe nsXBLProtoImpl::InstallImplementation function in Mozilla Firefox before 29.0, Firefox ESR 24...CVE-2014-1524Fix available9.8 Critical
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreHeap-based buffer overflow in the read_u32 function in Mozilla Firefox before 29.0, Firefox ESR...CVE-2014-1523Fix available6.5 Medium
- mozilla firefox, seamonkey, canonical ubuntu linux +2 more +4 moreThe mozilla::dom::OscillatorNodeEngine::ComputeCustom function in the Web Audio subsystem in...CVE-2014-1522Fix available9.3 High
- mozilla firefox, seamonkey, canonical ubuntu linux +2 more +4 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 29.0 and...CVE-2014-1519Fix available9.3 High
- Show moreLoading…