Skip to contentMozilla vulnerabilities
Newest
- mozilla firefox, sil graphite2, opensuse leap +3 more +5 moreThe graphite2::TtfUtil::CmapSubtable12Lookup function in TtfUtil.cpp in Graphite 2 before 1.3.6,...CVE-2016-2801Fix available8.8 High
- mozilla firefox, sil graphite2, opensuse leap +3 more +5 moreThe graphite2::Slot::getAttr function in Slot.cpp in Graphite 2 before 1.3.6, as used in Mozilla...CVE-2016-2800Fix available8.8 High
- mozilla firefox, sil graphite2, opensuse leap +3 more +5 moreHeap-based buffer overflow in the graphite2::Slot::setAttr function in Graphite 2 before 1.3.6,...CVE-2016-2799Fix available8.8 High
- mozilla firefox, sil graphite2, opensuse leap +3 more +5 moreThe graphite2::GlyphCache::Loader::Loader function in Graphite 2 before 1.3.6, as used in Mozilla...CVE-2016-2798Fix available8.8 High
- mozilla firefox, sil graphite2, opensuse leap +3 more +5 moreThe graphite2::TtfUtil::CmapSubtable12Lookup function in Graphite 2 before 1.3.6, as used in...CVE-2016-2797Fix available8.8 High
- mozilla firefox, sil graphite2, opensuse leap +3 more +5 moreHeap-based buffer overflow in the graphite2::vm::Machine::Code::Code function in Graphite 2...CVE-2016-2796Fix available8.8 High
- mozilla firefox, sil graphite2, opensuse leap +3 more +5 moreThe graphite2::FileFace::get_table_fn function in Graphite 2 before 1.3.6, as used in Mozilla...CVE-2016-2795Fix available8.8 High
- mozilla firefox, sil graphite2, opensuse leap +3 more +5 moreThe graphite2::TtfUtil::CmapSubtable12NextCodepoint function in Graphite 2 before 1.3.6, as used...CVE-2016-2794Fix available8.8 High
- mozilla firefox, opensuse leap, opensuse +3 more +5 moreCachedCmap.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR...CVE-2016-2793Fix available8.8 High
- mozilla firefox, sil graphite2, opensuse leap +3 more +5 moreThe graphite2::Slot::getAttr function in Slot.cpp in Graphite 2 before 1.3.6, as used in Mozilla...CVE-2016-2792Fix available8.8 High
- mozilla firefox, sil graphite2, opensuse leap +3 more +5 moreThe graphite2::GlyphCache::glyph function in Graphite 2 before 1.3.6, as used in Mozilla Firefox...CVE-2016-2791Fix available8.8 High
- mozilla firefox, sil graphite2, opensuse leap +3 more +5 moreThe graphite2::TtfUtil::GetTableInfo function in Graphite 2 before 1.3.6, as used in Mozilla...CVE-2016-2790Fix available8.8 High
- mozilla firefox, opensuse leap, opensuse +3 more +5 moreThe Machine::Code::decoder::analysis::set_ref function in Graphite 2 before 1.3.6, as used in...CVE-2016-1977Fix available8.8 High
- mozilla firefox, sil graphite2 +1 moreThe setAttr function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and...CVE-2016-1969Fix available8.8 High
- mozilla firefoxMozilla Firefox before 44.0.2 does not properly restrict the interaction between Service Workers...CVE-2016-1949Fix available8.8 High
- mozilla firefox, debian linux, fedoraproject fedora +2 more +4 moreThe TtfUtil:LocaLookup function in TtfUtil.cpp in Libgraphite in Graphite 2 1.2.4, as used in...CVE-2016-1526Fix available8.1 High
- mozilla firefox, debian linux, fedoraproject fedora +2 more +4 moreThe SillMap::readFace function in FeatureMap.cpp in Libgraphite in Graphite 2 1.2.4, as used in...CVE-2016-1523Fix available6.5 Medium
- mozilla firefox, debian linux, fedoraproject fedora +2 more +4 moreCode.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox...CVE-2016-1522Fix available8.8 High
- mozilla firefox, debian linux, fedoraproject fedora +2 more +4 moreThe directrun function in directmachine.cpp in Libgraphite in Graphite 2 1.2.4, as used in...CVE-2016-1521Fix available8.8 High
- google android, mozilla firefox +1 moreMozilla Firefox before 44.0 on Android does not ensure that HTTPS is used for a lightweight-theme...CVE-2016-19485.3 Medium
- google android, mozilla firefox, opensuse leap +1 more +3 moreMozilla Firefox before 44.0 on Android allows remote attackers to spoof the address bar via the...CVE-2016-19434.7 Medium
- mozilla firefox, apple mac os x +1 moreThe file-download dialog in Mozilla Firefox before 44.0 on OS X enables a certain button too...CVE-2016-19416.1 Medium
- google android, mozilla firefox +1 moreMozilla Firefox before 44.0 on Android allows remote attackers to spoof the address bar via a...CVE-2016-19405.3 Medium
- mozilla firefox, canonical ubuntu linux, opensuse leap +1 more +3 moreMozilla Firefox 43.x mishandles attempts to connect to the Application Reputation service, which...CVE-2016-1947Fix available4.7 Medium
- mozilla firefox, opensuse leap, opensuse +2 moreThe MoofParser::Metadata function in binding/MoofParser.cpp in libstagefright in Mozilla Firefox...CVE-2016-1946Fix available9.8 Critical
- mozilla firefox, opensuse leap, opensuse +2 moreThe nsZipArchive function in Mozilla Firefox before 44.0 might allow remote attackers to cause a...CVE-2016-1945Fix available8.8 High
- mozilla firefox, opensuse leap, opensuse +2 moreThe Buffer11::NativeBuffer11::map function in ANGLE, as used in Mozilla Firefox before 44.0,...CVE-2016-1944Fix available9.8 Critical
- mozilla firefox, opensuse leap, opensuse +2 moreMozilla Firefox before 44.0 allows user-assisted remote attackers to spoof a trailing substring...CVE-2016-1942Fix available7.4 High
- mozilla firefox, opensuse leap, opensuse +2 moreMozilla Firefox before 44.0 stores cookies with names containing vertical tab characters, which...CVE-2016-1939Fix available5.3 Medium
- mozilla firefox, nss, opensuse leap +1 more +3 moreThe s_mp_div function in lib/freebl/mpi/mpi.c in Mozilla Network Security Services (NSS) before 3...CVE-2016-1938Fix available6.5 Medium
- mozilla firefox, opensuse leap, opensuse +2 moreThe protocol-handler dialog in Mozilla Firefox before 44.0 allows remote attackers to conduct...CVE-2016-1937Fix available6.1 Medium
- mozilla firefox, opensuse leap, opensuse +1 more +3 moreBuffer overflow in the BufferSubData function in Mozilla Firefox before 44.0 and Firefox ESR 38.x...CVE-2016-1935Fix available8.8 High
- mozilla firefox, opensuse leap, opensuse +2 moreInteger overflow in the image-deinterlacing functionality in Mozilla Firefox before 44.0 allows...CVE-2016-1933Fix available6.5 Medium
- mozilla firefox, opensuse leap, opensuse +2 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 44.0 allow...CVE-2016-1931Fix available10.0 Critical
- mozilla firefox, opensuse leap, opensuse +1 more +3 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 44.0 and...CVE-2016-1930Fix available9.8 Critical
- mozilla firefox osThe lockscreen feature in Mozilla Firefox OS before 2.5 does not properly restrict failed...CVE-2015-85124.6 Medium
- mozilla firefox osRace condition in the lockscreen feature in Mozilla Firefox OS before 2.5 allows physically...CVE-2015-85116.4 Medium
- mozilla firefox osCross-site scripting (XSS) vulnerability in the internationalization feature in the default...CVE-2015-85106.1 Medium
- mozilla bugzillaTemplate.pm in Bugzilla 2.x, 3.x, and 4.x before 4.2.16, 4.3.x and 4.4.x before 4.4.11, and 4.5.x...CVE-2015-85093.5 Low
- mozilla bugzillaCross-site scripting (XSS) vulnerability in showdependencygraph.cgi in Bugzilla 2.x, 3.x, and 4.x...CVE-2015-85084.7 Medium
- mozilla firefox, network security services, canonical ubuntu linux +2 more +4 moreMozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2...CVE-2015-7575Fix available5.9 Medium
- mozilla firefox, fedoraproject fedora, opensuse leap +1 more +3 moreThe WebExtension APIs in Mozilla Firefox before 43.0 allow remote attackers to gain privileges,...CVE-2015-7223Fix available4.0 Medium
- mozilla firefox, fedoraproject fedora, opensuse leap +1 more +3 moreInteger underflow in the Metadata::setData function in MetaData.cpp in libstagefright in Mozilla...CVE-2015-7222Fix available6.8 Medium
- mozilla firefox, fedoraproject fedora, opensuse leap +1 more +3 moreBuffer overflow in the nsDeque::GrowCapacity function in xpcom/glue/nsDeque.cpp in Mozilla...CVE-2015-7221Fix available10.0 High
- mozilla firefox, fedoraproject fedora, opensuse leap +1 more +3 moreBuffer overflow in the XDRBuffer::grow function in js/src/vm/Xdr.cpp in Mozilla Firefox before 43...CVE-2015-7220Fix available10.0 High
- mozilla firefox, fedoraproject fedora, opensuse leap +1 more +3 moreThe HTTP/2 implementation in Mozilla Firefox before 43.0 allows remote attackers to cause a...CVE-2015-7219Fix available5.0 Medium
- mozilla firefox, fedoraproject fedora, opensuse leap +1 more +3 moreThe HTTP/2 implementation in Mozilla Firefox before 43.0 allows remote attackers to cause a...CVE-2015-7218Fix available5.0 Medium
- mozilla firefox, fedoraproject fedora, opensuse leap +1 more +3 moreThe gdk-pixbuf configuration in Mozilla Firefox before 43.0 on Linux GNOME platforms incorrectly...CVE-2015-7217Fix available4.3 Medium
- mozilla firefox, fedoraproject fedora, opensuse leap +1 more +3 moreThe gdk-pixbuf configuration in Mozilla Firefox before 43.0 on Linux GNOME platforms incorrectly...CVE-2015-7216Fix available6.8 Medium
- mozilla firefox, fedoraproject fedora, opensuse leap +1 more +3 moreThe importScripts function in the Web Workers API implementation in Mozilla Firefox before 43.0...CVE-2015-7215Fix available5.0 Medium
- Show moreLoading…