Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Vendors
Mozilla

Mozilla vulnerabilities

Products

Newest

Known exploitedIn KEVPublic exploitFix available

mozilla firefox, novell suse linux enterprise desktop, suse linux enterprise server +2 more +4 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0 allow...CVE-2015-2726Fix available10.0 HighJuly 5, 2015
mozilla firefox, firefox esr, thunderbird +4 more +6 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0,...CVE-2015-2725Fix available10.0 HighJuly 5, 2015
mozilla firefox, firefox esr, novell suse linux enterprise desktop +3 more +5 moreUse-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox...CVE-2015-2722Fix available10.0 HighJuly 5, 2015
mozilla firefox, firefox esr, novell suse linux enterprise desktop +3 more +5 morePDF.js in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1...CVE-2015-2743Fix available7.5 HighJuly 4, 2015
mozilla firefox, firefox esr, thunderbird +6 more +8 moreBuffer overflow in the nsXMLHttpRequest::AppendToResponseText function in Mozilla Firefox before...CVE-2015-2740Fix available10.0 HighJuly 4, 2015
mozilla firefox, firefox esr, thunderbird +6 more +8 moreThe ArrayBufferBuilder::append function in Mozilla Firefox before 39.0, Firefox ESR 31.x before...CVE-2015-2739Fix available10.0 HighJuly 4, 2015
mozilla firefox, firefox esr, thunderbird +6 more +8 moreThe YCbCrImageDataDeserializer::ToDataSourceSurface function in the YCbCr implementation in...CVE-2015-2738Fix available10.0 HighJuly 4, 2015
mozilla firefox, firefox esr, thunderbird +6 more +8 moreThe rx::d3d11::SetBufferData function in the Direct3D 11 implementation in Mozilla Firefox before...CVE-2015-2737Fix available10.0 HighJuly 4, 2015
mozilla firefox, firefox esr, thunderbird +6 more +8 moreThe nsZipArchive::BuildFileList function in Mozilla Firefox before 39.0, Firefox ESR 31.x before...CVE-2015-2736Fix available9.3 HighJuly 4, 2015
mozilla firefox, firefox esr, thunderbird +6 more +8 morensZipArchive.cpp in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38...CVE-2015-2735Fix available9.3 HighJuly 4, 2015
mozilla firefox, firefox esr, thunderbird +6 more +8 moreThe CairoTextureClientD3D9::BorrowDrawTarget function in the Direct3D 9 implementation in Mozilla...CVE-2015-2734Fix available10.0 HighJuly 4, 2015
mozilla firefox, firefox esr, thunderbird +1 more +3 moreUse-after-free vulnerability in the CSPService::ShouldLoad function in the microtask...CVE-2015-2731Fix available10.0 HighJuly 4, 2015
mozilla firefox, firefox esr, novell suse linux enterprise desktop +2 more +4 moreThe IndexedDatabaseManager class in the IndexedDB implementation in Mozilla Firefox before 39.0...CVE-2015-2728Fix available7.5 HighJuly 4, 2015
mozilla firefox, firefox esr, thunderbird +6 more +8 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0,...CVE-2015-2724Fix available10.0 HighJuly 4, 2015
mozilla network security services, canonical ubuntu linux, debian linux +5 more +7 moreMozilla Network Security Services (NSS) before 3.19, as used in Mozilla Firefox before 39.0,...CVE-2015-2721Fix available4.3 MediumJuly 4, 2015
mozilla firefoxThe update implementation in Mozilla Firefox before 38.0 on Windows does not ensure that the...CVE-2015-27204.4 MediumMay 14, 2015
mozilla firefoxMozilla Firefox before 38.0 on Android does not properly restrict writing URL data to the Android...CVE-2015-27142.1 LowMay 14, 2015
mozilla firefox, opensuse +1 moreThe WebChannel.jsm module in Mozilla Firefox before 38.0 allows remote attackers to bypass the...CVE-2015-2718Fix available4.3 MediumMay 13, 2015
mozilla firefox, opensuse +1 moreInteger overflow in libstagefright in Mozilla Firefox before 38.0 allows remote attackers to...CVE-2015-2717Fix available6.8 MediumMay 13, 2015
mozilla firefox, firefox esr, thunderbird +5 more +7 moreBuffer overflow in the XML parser in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7,...CVE-2015-2716Fix available7.5 HighMay 13, 2015
mozilla firefox, opensuse +1 moreRace condition in the nsThreadManager::RegisterCurrentThread function in Mozilla Firefox before...CVE-2015-2715Fix available6.8 MediumMay 13, 2015
mozilla firefox, firefox esr, thunderbird +4 more +6 moreUse-after-free vulnerability in the SetBreaks function in Mozilla Firefox before 38.0, Firefox...CVE-2015-2713Fix available6.8 MediumMay 13, 2015
mozilla firefox, opensuse +1 moreThe asm.js implementation in Mozilla Firefox before 38.0 does not properly determine heap lengths...CVE-2015-2712Fix available7.5 HighMay 13, 2015
mozilla firefox, opensuse +1 moreMozilla Firefox before 38.0 does not recognize a referrer policy delivered by a referrer META...CVE-2015-2711Fix available4.3 MediumMay 13, 2015
mozilla firefox, firefox esr, thunderbird +4 more +6 moreHeap-based buffer overflow in the SVGTextFrame class in Mozilla Firefox before 38.0, Firefox ESR...CVE-2015-2710Fix available6.8 MediumMay 13, 2015
mozilla firefox, novell suse linux enterprise desktop, suse linux enterprise server +2 more +4 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 38.0 allow...CVE-2015-2709Fix available7.5 HighMay 13, 2015
mozilla firefox, firefox esr, thunderbird +4 more +6 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 38.0,...CVE-2015-2708Fix available7.5 HighMay 13, 2015
mozilla firefoxRace condition in the AsyncPaintWaitEvent::AsyncPaintWaitEvent function in Mozilla Firefox before...CVE-2015-2706Fix available6.8 MediumApril 21, 2015
debian linux, gstreamer, mozilla firefox +11 more +13 moreGStreamer before 1.4.5, as used in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and...CVE-2015-0797Fix available6.8 MediumApril 15, 2015
mozilla firefox, oracle solaris +1 moreThe Reader mode feature in Mozilla Firefox before 37.0.1 on Android, and Desktop Firefox pre...CVE-2015-07985.0 MediumApril 8, 2015
mozilla firefox, canonical ubuntu linux, opensuse +2 moreThe HTTP Alternative Services feature in Mozilla Firefox before 37.0.1 allows man-in-the-middle...CVE-2015-0799Fix available4.3 MediumApril 6, 2015
mozilla firefoxMozilla Firefox before 37.0 on OS X does not ensure that the cursor is visible, which allows...CVE-2015-08104.3 MediumApril 1, 2015
mozilla firefoxThe PRNG implementation in the DNS resolver in Mozilla Firefox (aka Fennec) before 37.0 on...CVE-2015-08005.0 MediumApril 1, 2015
mozilla firefox, thunderbird +1 moreMozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 do not...CVE-2015-0816Public exploitFix availableEPSS 64.6%5.0 MediumApril 1, 2015
mozilla firefox, thunderbird +1 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 37.0,...CVE-2015-0815Fix available7.5 HighApril 1, 2015
mozilla firefoxMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 37.0 allow...CVE-2015-0814Fix available7.5 HighApril 1, 2015
mozilla firefox, thunderbird +1 moreUse-after-free vulnerability in the AppendElements function in Mozilla Firefox before 37.0,...CVE-2015-0813Fix available5.1 MediumApril 1, 2015
mozilla firefox, canonical ubuntu linux, opensuse +2 moreMozilla Firefox before 37.0 does not require an HTTPS session for lightweight theme add-on...CVE-2015-0812Fix available4.3 MediumApril 1, 2015
mozilla firefox, canonical ubuntu linux, opensuse +2 moreThe QCMS implementation in Mozilla Firefox before 37.0 allows remote attackers to obtain...CVE-2015-0811Fix available6.4 MediumApril 1, 2015
mozilla firefox, canonical ubuntu linux, opensuse +2 moreThe webrtc::VPMContentAnalysis::Release function in the WebRTC implementation in Mozilla Firefox...CVE-2015-0808Fix available5.0 MediumApril 1, 2015
mozilla firefox, firefox esr, thunderbird +2 moreThe navigator.sendBeacon implementation in Mozilla Firefox before 37.0, Firefox ESR 31.x before...CVE-2015-0807Fix available6.8 MediumApril 1, 2015
mozilla firefox, canonical ubuntu linux, opensuse +2 moreThe Off Main Thread Compositing (OMTC) implementation in Mozilla Firefox before 37.0 attempts to...CVE-2015-0806Fix available7.5 HighApril 1, 2015
mozilla firefox, canonical ubuntu linux, opensuse +2 moreThe Off Main Thread Compositing (OMTC) implementation in Mozilla Firefox before 37.0 makes an...CVE-2015-0805Fix available7.5 HighApril 1, 2015
mozilla firefox, canonical ubuntu linux, opensuse +2 moreThe HTMLSourceElement::BindToTree function in Mozilla Firefox before 37.0 does not properly...CVE-2015-0804Fix available7.5 HighApril 1, 2015
mozilla firefox, canonical ubuntu linux, opensuse +2 moreThe HTMLSourceElement::AfterSetAttr function in Mozilla Firefox before 37.0 does not properly...CVE-2015-0803Fix available7.5 HighApril 1, 2015
mozilla firefox, canonical ubuntu linux, opensuse +2 moreMozilla Firefox before 37.0 relies on docshell type information instead of page principal...CVE-2015-0802Public exploitFix availableEPSS 65.0%5.0 MediumApril 1, 2015
mozilla firefox, firefox esr, thunderbird +2 moreMozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 allow...CVE-2015-0801Fix available7.5 HighApril 1, 2015
mozilla firefox, firefox esr, seamonkey +2 moreMozilla Firefox before 36.0.4, Firefox ESR 31.x before 31.5.3, and SeaMonkey before 2.33.1 allow...CVE-2015-0818Fix available7.5 HighMarch 22, 2015
mozilla firefox, firefox esr, seamonkey +2 moreThe asm.js implementation in Mozilla Firefox before 36.0.3, Firefox ESR 31.x before 31.5.2, and...CVE-2015-0817Fix available6.8 MediumMarch 22, 2015
mozilla firefox, firefox esr, thunderbird +2 more +4 moreMultiple untrusted search path vulnerabilities in updater.exe in Mozilla Firefox before 36.0,...CVE-2015-08336.9 MediumFebruary 25, 2015
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open