mozilla

3,621 tracked vulnerabilities.

CVE-2012-4197
Bugzilla < 3.6.12, 4.0.9, 4.2.4, 4.4rc1 - Unauthenticated Sensitive Information Exposure
Nov 16, 2012
EPSS 0.02
CVE-2012-4189
Bugzilla 4.1.x-4.2.x < 4.2.4 and 4.3.x-4.4.x < 4.4rc1 - Cross-Site Scripting via Tabular Report Field Value
Nov 16, 2012
EPSS 0.01
CVE-2012-5822 HIGH
Mozilla Zamboni - Improper Certificate Validation in Contribution Feature
Nov 04, 2012
CVSS 7.4
EPSS 0.01
CVE-2012-4196
Mozilla Firefox < 16.0.2 - Same Origin Policy Bypass via Prototype Property Injection
Oct 29, 2012
EPSS 0.03
CVE-2012-4195
Mozilla Firefox/Thunderbird/SeaMonkey XSS via nsLocation::CheckURL
Oct 29, 2012
EPSS 0.02
CVE-2012-4194
Mozilla Firefox < 16.0.2 - Cross-Site Scripting via window.location Shadowing
Oct 29, 2012
EPSS 0.03
CVE-2012-4193
Mozilla Firefox < 16.0.1 - Same Origin Policy Bypass via Security Wrapper Unwrapping
Oct 12, 2012
EPSS 0.01
CVE-2012-4192
Mozilla Firefox 16.0, Thunderbird 16.0, and SeaMonkey 2.13 - Same Origin Policy Bypass via Location Object
Oct 12, 2012
EPSS 0.01
CVE-2012-4191
Firefox < 16.0.1 - Out-of-bounds Write in WebSockets FailDelayManager
Oct 12, 2012
EPSS 0.04
CVE-2012-4190
Firefox < 16.0 - Memory Corruption via FT2FontEntry::CreateFontEntry
Oct 12, 2012
EPSS 0.04
CVE-2012-5354
Mozilla Firefox < 16.0, Thunderbird < 16.0, and SeaMonkey < 2.13 - Clickjacking via SELECT Element Menus
Oct 10, 2012
EPSS 0.02
CVE-2012-4188
Firefox < 16.0 - Remote Code Execution via Heap-Based Buffer Overflow in Convolve3x3
Oct 10, 2012
EPSS 0.15
CVE-2012-4187
Mozilla Firefox < 16.0 - Remote Code Execution via Memory Corruption
Oct 10, 2012
EPSS 0.07
CVE-2012-4186
Firefox < 16.0 - Remote Code Execution via Heap-Based Buffer Overflow in nsWaveReader
Oct 10, 2012
EPSS 0.15
CVE-2012-4185
Firefox < 16.0 - Remote Code Execution via nsCharTraits::length Buffer Overflow
Oct 10, 2012
EPSS 0.09
CVE-2012-4184
Firefox < 16.0 - Remote Code Execution via Chrome Object Wrapper Prototype Access
Oct 10, 2012
EPSS 0.02
CVE-2012-4183
Firefox < 16.0 - Use-After-Free in DOMSVGTests::GetRequiredFeatures
Oct 10, 2012
EPSS 0.05
CVE-2012-4182
Mozilla Firefox < 16.0 - Use-After-Free in nsTextEditRules::WillInsert
Oct 10, 2012
EPSS 0.05
CVE-2012-4181
Firefox < 16.0 - Use-After-Free in nsSMILAnimationController::DoSample
Oct 10, 2012
EPSS 0.05
CVE-2012-4180
Firefox < 16.0 - Remote Code Execution via Heap-Based Buffer Overflow
Oct 10, 2012
EPSS 0.09
CVE-2012-4179
Firefox < 16.0 - Use-After-Free in nsHTMLCSSUtils::CreateCSSPropertyTxn
Oct 10, 2012
EPSS 0.05
CVE-2012-3995
Firefox < 16.0 - Out-of-bounds Read in IsCSSWordSpacingSpace
Oct 10, 2012
EPSS 0.05
CVE-2012-3994
Mozilla Firefox < 16.0 - Cross-Site Scripting via Binary Plugin Object.defineProperty
Oct 10, 2012
EPSS 0.02
CVE-2012-3993
Firefox 5.0 - 15.0.1 __exposedProps__ XCS Code Execution
Oct 10, 2012
EPSS 0.43
CVE-2012-3992
Mozilla Firefox < 16.0 - Cross-Site Scripting via History Navigation
Oct 10, 2012
EPSS 0.03
Products
firefox 3,181 thunderbird 1,773 seamonkey 704 firefox_esr 488 Firefox 434 Thunderbird 403 thunderbird_esr 228 bugzilla 145 mozilla 108 network_security_services 50 Firefox ESR 44 mozilla_suite 27 Firefox for iOS 25 firefox_mobile 23 firefox_focus 20 focus 16 firefox_os 14 Focus for iOS 6 nss 6 bleach 5 bonsai 4 camino 4 vpn 4 convict 3 netscape_portable_runtime 3 geckodriver 2 mozjpeg 2 nunjucks 2 pollbot 2 webthings_gateway 2
Quick Filters
Critical CVEs With Exploits In CISA KEV