Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Vendors
Mozilla

Mozilla vulnerabilities

Products

Newest

Known exploitedIn KEVPublic exploitFix available

mozilla firefox, opensuse, oracle solaris +2 moreDouble free vulnerability in the nsXMLHttpRequest::GetResponse function in Mozilla Firefox before...CVE-2015-08286.8 MediumFebruary 25, 2015
mozilla firefoxMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 36.0 allow...CVE-2015-0835Fix available7.5 HighFebruary 25, 2015
mozilla firefox, canonical ubuntu linux, opensuse +2 moreThe WebRTC subsystem in Mozilla Firefox before 36.0 recognizes turns: and stuns: URIs but...CVE-2015-0834Fix available4.3 MediumFebruary 25, 2015
mozilla firefox, canonical ubuntu linux, opensuse +2 moreMozilla Firefox before 36.0 does not properly recognize the equivalence of domain names with and...CVE-2015-0832Fix available5.0 MediumFebruary 25, 2015
mozilla firefox, canonical ubuntu linux, opensuse +2 moreThe WebGL implementation in Mozilla Firefox before 36.0 does not properly allocate memory for...CVE-2015-0830Fix available5.0 MediumFebruary 25, 2015
mozilla firefox, canonical ubuntu linux, opensuse +1 more +3 moreBuffer overflow in libstagefright in Mozilla Firefox before 36.0 allows remote attackers to...CVE-2015-0829Fix available6.8 MediumFebruary 25, 2015
mozilla firefox, canonical ubuntu linux, opensuse +2 moreThe nsTransformedTextRun::SetCapitalization function in Mozilla Firefox before 36.0 allows remote...CVE-2015-0826Fix available6.8 MediumFebruary 25, 2015
mozilla firefox, canonical ubuntu linux, opensuse +2 moreStack-based buffer underflow in the mozilla::MP3FrameParser::ParseBuffer function in Mozilla...CVE-2015-0825Fix available4.3 MediumFebruary 25, 2015
mozilla firefox, canonical ubuntu linux, opensuse +2 moreThe mozilla::layers::BufferTextureClient::AllocateForSurface function in Mozilla Firefox before...CVE-2015-0824Fix available5.0 MediumFebruary 25, 2015
mozilla firefox, opentype sanitiser project sanitiser, canonical ubuntu linux +1 more +3 moreMultiple use-after-free vulnerabilities in OpenType Sanitiser, as used in Mozilla Firefox before...CVE-2015-0823Fix available7.5 HighFebruary 25, 2015
mozilla firefox, canonical ubuntu linux, opensuse +2 moreMozilla Firefox before 36.0 allows user-assisted remote attackers to read arbitrary files or...CVE-2015-0821Fix available6.8 MediumFebruary 25, 2015
mozilla firefox, canonical ubuntu linux, opensuse +2 moreMozilla Firefox before 36.0 does not properly restrict transitions of JavaScript objects from a...CVE-2015-0820Fix available2.6 LowFebruary 25, 2015
mozilla firefox, canonical ubuntu linux, opensuse +2 moreThe UITour::onPageEvent function in Mozilla Firefox before 36.0 does not ensure that an API call...CVE-2015-0819Fix available4.3 MediumFebruary 25, 2015
mozilla bugzilla, fedoraproject fedora +1 moreBugzilla before 4.0.16, 4.1.x and 4.2.x before 4.2.12, 4.3.x and 4.4.x before 4.4.7, and 5.x...CVE-2014-8630Fix available6.5 MediumJanuary 31, 2015
mozilla firefox, opensuse +1 moreMozilla Firefox before 35.0 on Windows allows remote attackers to bypass the Gecko Media Plugin ...CVE-2014-86437.1 HighJanuary 14, 2015
mozilla firefox, seamonkey, opensuse +2 moreMozilla Firefox before 35.0 and SeaMonkey before 2.32 do not consider the id-pkix-ocsp-nocheck...CVE-2014-8642Fix available4.3 MediumJanuary 14, 2015
mozilla firefox, firefox esr, seamonkey +2 moreUse-after-free vulnerability in the WebRTC implementation in Mozilla Firefox before 35.0, Firefox...CVE-2014-8641Fix available7.5 HighJanuary 14, 2015
mozilla firefox, seamonkey, opensuse +2 moreThe mozilla::dom::AudioParamTimeline::AudioNodeInputValue function in the Web Audio API...CVE-2014-8640Fix available5.0 MediumJanuary 14, 2015
mozilla firefox, firefox esr, seamonkey +1 more +3 moreMozilla Firefox before 35.0, Firefox ESR 31.x before 31.4, Thunderbird before 31.4, and SeaMonkey...CVE-2014-8639Fix available6.8 MediumJanuary 14, 2015
mozilla firefox, firefox esr, seamonkey +1 more +3 moreThe navigator.sendBeacon implementation in Mozilla Firefox before 35.0, Firefox ESR 31.x before...CVE-2014-8638Fix available6.8 MediumJanuary 14, 2015
mozilla firefox, seamonkey +1 moreMozilla Firefox before 35.0 and SeaMonkey before 2.32 do not properly initialize memory for BMP...CVE-2014-8637Fix available5.0 MediumJanuary 14, 2015
mozilla firefox, seamonkey +1 moreThe XrayWrapper implementation in Mozilla Firefox before 35.0 and SeaMonkey before 2.32 does not...CVE-2014-8636Public exploitFix availableEPSS 63.9%7.5 HighJanuary 14, 2015
mozilla firefox, seamonkey +1 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 35.0 and...CVE-2014-8635Fix available7.5 HighJanuary 14, 2015
mozilla firefox, firefox esr, seamonkey +1 more +3 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 35.0,...CVE-2014-8634Fix available7.5 HighJanuary 14, 2015
mozilla firefox, firefox esr, thunderbird +2 moreMozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, and Thunderbird before 31.3 on Apple...CVE-2014-15952.1 LowDecember 11, 2014
mozilla firefox, seamonkey +1 moreThe structured-clone implementation in Mozilla Firefox before 34.0 and SeaMonkey before 2.31 does...CVE-2014-86324.3 MediumDecember 9, 2014
mozilla firefox, seamonkey +1 moreThe Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 34.0 and SeaMonkey...CVE-2014-86314.3 MediumDecember 9, 2014
mozilla network security servicesThe definite_length_decoder function in lib/util/quickder.c in Mozilla Network Security Services ...CVE-2014-1569Fix available7.5 HighDecember 3, 2014
mozilla firefox, seamonkey, thunderbird +2 moreMozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey...CVE-2014-1594Fix available6.8 MediumDecember 2, 2014
mozilla firefox, seamonkey, thunderbird +2 moreStack-based buffer overflow in the mozilla::FileBlockCache::Read function in Mozilla Firefox...CVE-2014-1593Fix available6.8 MediumDecember 2, 2014
mozilla firefox, seamonkey, thunderbird +2 moreUse-after-free vulnerability in the nsHtml5TreeOperation function in xul.dll in Mozilla Firefox...CVE-2014-1592Fix available6.8 MediumDecember 2, 2014
mozilla firefox, seamonkey +1 moreMozilla Firefox 33.0 and SeaMonkey before 2.31 include path strings in CSP violation reports,...CVE-2014-1591Fix available4.3 MediumDecember 2, 2014
mozilla firefox, seamonkey, thunderbird +2 moreThe XMLHttpRequest.prototype.send method in Mozilla Firefox before 34.0, Firefox ESR 31.x before...CVE-2014-1590Fix available4.3 MediumDecember 2, 2014
mozilla firefox, seamonkey +1 moreMozilla Firefox before 34.0 and SeaMonkey before 2.31 provide stylesheets with an incorrect...CVE-2014-1589Fix available6.8 MediumDecember 2, 2014
mozilla firefox, seamonkey +1 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 34.0 and...CVE-2014-1588Fix available6.8 MediumDecember 2, 2014
mozilla firefox, seamonkey, thunderbird +2 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 34.0,...CVE-2014-1587Fix available6.8 MediumDecember 2, 2014
mozilla firefox, oracle jdk, jre +2 moreUnspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, when running on Firefox, allows...CVE-2014-64927.6 HighOctober 15, 2014
mozilla firefox, thunderbird +1 morecontent/base/src/nsDocument.cpp in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and...CVE-2014-1586Fix available5.0 MediumOctober 14, 2014
mozilla firefox, thunderbird +1 moreThe WebRTC video-sharing feature in dom/media/MediaManager.cpp in Mozilla Firefox before 33.0,...CVE-2014-1585Fix available5.0 MediumOctober 14, 2014
mozilla firefoxThe Public Key Pinning (PKP) implementation in Mozilla Firefox before 33.0 skips pinning checks...CVE-2014-1584Fix available4.3 MediumOctober 14, 2014
mozilla firefoxThe Alarm API in Mozilla Firefox before 33.0 and Firefox ESR 31.x before 31.2 does not properly...CVE-2014-1583Fix available5.0 MediumOctober 14, 2014
mozilla firefoxThe Public Key Pinning (PKP) implementation in Mozilla Firefox before 33.0 does not properly...CVE-2014-1582Fix available4.3 MediumOctober 14, 2014
mozilla firefox, thunderbird +1 moreUse-after-free vulnerability in DirectionalityUtils.cpp in Mozilla Firefox before 33.0, Firefox...CVE-2014-1581Fix available7.5 HighOctober 14, 2014
mozilla firefoxMozilla Firefox before 33.0 does not properly initialize memory for GIF images, which allows...CVE-2014-1580Fix available5.0 MediumOctober 14, 2014
mozilla firefox, thunderbird +1 moreThe get_tile function in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and...CVE-2014-1578Fix available7.5 HighOctober 14, 2014
mozilla firefox, thunderbird +1 moreThe mozilla::dom::OscillatorNodeEngine::ComputeCustom function in the Web Audio subsystem in...CVE-2014-1577Fix available6.4 MediumOctober 14, 2014
mozilla firefox, thunderbird +1 moreHeap-based buffer overflow in the nsTransformedTextRun function in Mozilla Firefox before 33.0,...CVE-2014-1576Fix available7.5 HighOctober 14, 2014
mozilla firefoxMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 33.0 allow...CVE-2014-1575Fix available7.5 HighOctober 14, 2014
mozilla firefox, thunderbird +1 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 33.0,...CVE-2014-1574Fix available7.5 HighOctober 14, 2014
mozilla bugzilla, fedoraproject fedora +1 moreBugzilla 2.x through 4.0.x before 4.0.15, 4.1.x and 4.2.x before 4.2.11, 4.3.x and 4.4.x before 4...CVE-2014-15734.3 MediumOctober 9, 2014
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open