Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Vendors
Mozilla

Mozilla vulnerabilities

Products

Newest

Known exploitedIn KEVPublic exploitFix available

mozilla firefox, fedoraproject fedora, opensuse leap +1 more +3 moreMozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allow remote attackers to bypass the...CVE-2015-7214Public exploitFix available5.0 MediumDecember 15, 2015
mozilla firefox, fedoraproject fedora, opensuse leap +1 more +3 moreInteger overflow in the MPEG4Extractor::readMetaData function in MPEG4Extractor.cpp in...CVE-2015-7213Fix available6.8 MediumDecember 15, 2015
mozilla firefox, fedoraproject fedora, opensuse leap +1 more +3 moreInteger overflow in the mozilla::layers::BufferTextureClient::AllocateForSurface function in...CVE-2015-7212Fix available7.5 HighDecember 15, 2015
mozilla firefox, fedoraproject fedora, opensuse leap +1 more +3 moreMozilla Firefox before 43.0 mishandles the # (number sign) character in a data: URI, which allows...CVE-2015-7211Fix available5.0 MediumDecember 15, 2015
mozilla firefox, fedoraproject fedora, opensuse leap +1 more +3 moreUse-after-free vulnerability in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5...CVE-2015-7210Fix available7.5 HighDecember 15, 2015
mozilla firefox, fedoraproject fedora, opensuse leap +1 more +3 moreMozilla Firefox before 43.0 stores cookies containing vertical tab characters, which allows...CVE-2015-7208Fix available5.0 MediumDecember 15, 2015
mozilla firefox, fedoraproject fedora, opensuse leap +1 more +3 moreMozilla Firefox before 43.0 does not properly restrict the availability of IFRAME Resource Timing...CVE-2015-7207Fix available5.0 MediumDecember 15, 2015
mozilla firefox, fedoraproject fedora, opensuse leap +1 more +3 moreInteger underflow in the RTPReceiverVideo::ParseRtpPacket function in Mozilla Firefox before 43.0...CVE-2015-7205Fix available10.0 HighDecember 15, 2015
mozilla firefox, fedoraproject fedora, opensuse leap +1 more +3 moreMozilla Firefox before 43.0 does not properly store the properties of unboxed objects, which...CVE-2015-7204Fix available6.8 MediumDecember 15, 2015
mozilla firefox, fedoraproject fedora, opensuse leap +1 more +3 moreBuffer overflow in the DirectWriteFontInfo::LoadFontFamilyData function in gfx/thebes...CVE-2015-7203Fix available10.0 HighDecember 15, 2015
mozilla firefox, fedoraproject fedora, opensuse leap +1 more +3 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 43.0 allow...CVE-2015-7202Fix available10.0 HighDecember 15, 2015
mozilla firefox, fedoraproject fedora, opensuse leap +1 more +3 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 43.0 and...CVE-2015-7201Fix available10.0 HighDecember 15, 2015
mozilla firefoxThe accessibility-tools feature in Mozilla Firefox before 42.0 on OS X improperly interacts with...CVE-2015-71927.5 HighNovember 5, 2015
mozilla firefoxMozilla Firefox before 42.0 on Android improperly restricts URL strings in intents, which allows...CVE-2015-71914.3 MediumNovember 5, 2015
mozilla firefoxThe Search feature in Mozilla Firefox before 42.0 on Android through 4.4 supports search-engine...CVE-2015-71905.0 MediumNovember 5, 2015
mozilla firefoxMozilla Firefox before 42.0 on Android allows user-assisted remote attackers to bypass the Same...CVE-2015-71864.3 MediumNovember 5, 2015
mozilla firefoxMozilla Firefox before 42.0 on Android does not ensure that the address bar is restored upon...CVE-2015-71854.3 MediumNovember 5, 2015
mozilla firefoxThe CryptoKey interface implementation in Mozilla Firefox before 42.0 and Firefox ESR 38.x before...CVE-2015-7200Fix available7.5 HighNovember 4, 2015
mozilla firefoxThe (1) AddWeightedPathSegLists and (2) SVGPathSegListSMILType::Interpolate functions in Mozilla...CVE-2015-7199Fix available7.5 HighNovember 4, 2015
mozilla firefoxBuffer overflow in the rx::TextureStorage11 class in ANGLE, as used in Mozilla Firefox before 42...CVE-2015-7198Fix available7.5 HighNovember 4, 2015
mozilla firefoxMozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 improperly control the ability of a...CVE-2015-7197Fix available5.0 MediumNovember 4, 2015
mozilla firefoxMozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4, when a Java plugin is enabled,...CVE-2015-7196Fix available6.8 MediumNovember 4, 2015
mozilla firefoxThe URL parsing implementation in Mozilla Firefox before 42.0 improperly recognizes escaped...CVE-2015-7195Fix available5.0 MediumNovember 4, 2015
mozilla firefoxBuffer underflow in libjar in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allows...CVE-2015-7194Fix available7.5 HighNovember 4, 2015
mozilla firefoxMozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 improperly follow the CORS cross...CVE-2015-7193Fix available7.5 HighNovember 4, 2015
mozilla firefoxRace condition in the JPEGEncoder function in Mozilla Firefox before 42.0 and Firefox ESR 38.x...CVE-2015-7189Fix available6.8 MediumNovember 4, 2015
mozilla firefoxMozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allow remote attackers to bypass the...CVE-2015-7188Fix available7.5 HighNovember 4, 2015
mozilla firefoxThe Add-on SDK in Mozilla Firefox before 42.0 misinterprets a "script: false" panel setting,...CVE-2015-7187Fix available4.3 MediumNovember 4, 2015
mozilla firefox, network security services +1 moreInteger overflow in the PL_ARENA_ALLOCATE implementation in Netscape Portable Runtime (NSPR) in...CVE-2015-7183Fix available7.5 HighNovember 4, 2015
mozilla firefox, network security services, oracle glassfish server +4 more +6 moreHeap-based buffer overflow in the ASN.1 decoder in Mozilla Network Security Services (NSS) before...CVE-2015-7182Fix availableEPSS 10.2%9.8 CriticalNovember 4, 2015
mozilla firefox, network security services +1 moreThe sec_asn1d_parse_leaf function in Mozilla Network Security Services (NSS) before 3.19.2.1 and...CVE-2015-7181Fix available7.5 HighNovember 4, 2015
mozilla firefoxThe Reader View implementation in Mozilla Firefox before 42.0 has an improper whitelist, which...CVE-2015-4518Fix available4.3 MediumNovember 4, 2015
mozilla firefoxMozilla Firefox before 42.0, when NTLM v1 is enabled for HTTP authentication, allows remote...CVE-2015-4515Fix available4.3 MediumNovember 4, 2015
mozilla firefoxMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 42.0 allow...CVE-2015-4514Fix available7.5 HighNovember 4, 2015
mozilla firefoxMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 42.0 and...CVE-2015-4513Fix available7.5 HighNovember 4, 2015
mozilla firefoxThe fetch API implementation in Mozilla Firefox before 41.0.2 does not restrict access to the...CVE-2015-7184Fix available6.8 MediumOctober 16, 2015
mozilla firefoxMozilla Firefox before 41.0 does not properly restrict the availability of High Resolution Time...CVE-2015-73274.3 MediumSeptember 24, 2015
mozilla firefoxThe VertexBufferInterface::reserveVertexSpace function in libGLES in ANGLE, as used in Mozilla...CVE-2015-71797.5 HighSeptember 24, 2015
mozilla firefoxThe ProgramBinary::linkAttributes function in libGLES in ANGLE, as used in Mozilla Firefox before...CVE-2015-71787.5 HighSeptember 24, 2015
mozilla firefoxupdater.exe in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 on Windows allows...CVE-2015-45056.6 MediumSeptember 24, 2015
mozilla firefoxThe TCP Socket API implementation in Mozilla Firefox before 41.0 mishandles array boundaries that...CVE-2015-45035.0 MediumSeptember 24, 2015
mozilla firefoxMozilla Firefox before 41.0 on Android allows user-assisted remote attackers to spoof address-bar...CVE-2015-44764.3 MediumSeptember 24, 2015
mozilla firefoxHeap-based buffer overflow in the nestegg_track_codec_data function in Mozilla Firefox before 41...CVE-2015-4511Fix available6.8 MediumSeptember 23, 2015
mozilla firefoxThe ReadbackResultWriterD3D11::Run function in Mozilla Firefox before 41.0 and Firefox ESR 38.x...CVE-2015-7180Fix available7.5 HighSeptember 22, 2015
mozilla firefoxThe InitTextures function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might...CVE-2015-7177Fix available7.5 HighSeptember 22, 2015
mozilla firefoxThe AnimationThread function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 uses...CVE-2015-7176Fix available7.5 HighSeptember 22, 2015
mozilla firefoxThe XULContentSinkImpl::AddText function in Mozilla Firefox before 41.0 and Firefox ESR 38.x...CVE-2015-7175Fix available7.5 HighSeptember 22, 2015
mozilla firefoxThe nsAttrAndChildArray::GrowBy function in Mozilla Firefox before 41.0 and Firefox ESR 38.x...CVE-2015-7174Fix available7.5 HighSeptember 22, 2015
mozilla firefoxThe nsUnicodeToUTF8::GetMaxLength function in Mozilla Firefox before 41.0 and Firefox ESR 38.x...CVE-2015-4522Fix available7.5 HighSeptember 22, 2015
mozilla firefoxThe ConvertDialogOptions function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3...CVE-2015-4521Fix available7.5 HighSeptember 22, 2015
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open