mozilla

3,621 tracked vulnerabilities.

CVE-2010-0181
Firefox < 3.5.9 and 3.6.x < 3.6.2 - Denial of Service via IMG SRC Redirect to mailto: URL
Apr 05, 2010
EPSS 0.02
CVE-2010-0179
Firefox < 3.0.19 and 3.5.x < 3.5.8 - Remote Code Execution via XMLHttpRequestSpy and Chrome Privilege Escalation
Apr 05, 2010
EPSS 0.03
CVE-2010-0178
Firefox < 3.0.19, 3.5.x < 3.5.9, 3.6.x < 3.6.2 - Remote Code Execution via Drag-and-Drop Action
Apr 05, 2010
EPSS 0.03
CVE-2010-0177
Firefox < 3.0.19, 3.5.x < 3.5.9, 3.6.x < 3.6.2 - Remote Code Execution via Dangling Pointer in Plugin Array
Apr 05, 2010
EPSS 0.07
CVE-2010-0176
Firefox < 3.0.19, 3.5.x < 3.5.9, 3.6.x < 3.6.2 - Remote Code Execution via Dangling Pointer in XUL Tree Optgroup
Apr 05, 2010
EPSS 0.05
CVE-2010-0175
Firefox < 3.0.19 and 3.5.x < 3.5.9 - Use-After-Free in nsTreeSelection
Apr 05, 2010
EPSS 0.07
CVE-2010-0174
Firefox < 3.0.19, 3.5.x < 3.5.9, 3.6.x < 3.6.2 - Remote Code Execution
Apr 05, 2010
EPSS 0.06
CVE-2010-0173
Firefox < 3.5.9 and 3.6.x < 3.6.2 - Remote Code Execution
Apr 05, 2010
EPSS 0.05
CVE-2010-1125
Mozilla Firefox <3.5.10 & SeaMonkey <2.0.5 - XSS
Mar 26, 2010
EPSS 0.02
CVE-2010-1122
Firefox 3.5.x-3.5.8 - Memory Corruption via Compressed Data Handling
Mar 25, 2010
EPSS 0.03
CVE-2010-1121
Mozilla Firefox <3.6.3 - Use After Free
Mar 25, 2010
EPSS 0.06
CVE-2010-0172
Mozilla Firefox <3.6.2 - Info Disclosure
Mar 25, 2010
EPSS 0.01
CVE-2010-0171
Firefox 3.0.x < 3.0.18, 3.5.x < 3.5.8, 3.6.x < 3.6.2 - Cross-Site Scripting via Event Listener and Timeout Functions
Mar 25, 2010
EPSS 0.02
CVE-2010-0170
Firefox < 3.6.2 - Cross-Site Scripting via Plugin Window Location Bypass
Mar 25, 2010
EPSS 0.02
CVE-2010-0169
Mozilla Firefox <3.0.18-3.6.2, Thunderbird <3.0.2, SeaMonkey <2.0.3...
Mar 25, 2010
EPSS 0.02
CVE-2010-0168
Firefox < 3.6.2 - Denial of Service via IMG SRC Attribute URL Scheme Handling
Mar 25, 2010
EPSS 0.12
CVE-2010-0167
Firefox 3.0.x-3.0.17, 3.5.x-3.5.7, 3.6.x-3.6.1 - Remote Code Execution via Memory Corruption
Mar 25, 2010
EPSS 0.11
CVE-2010-0166
Firefox 3.6 - Memory Corruption via Invisible Unicode Characters
Mar 25, 2010
EPSS 0.07
CVE-2010-0165
Firefox < 3.6.2 - Memory Corruption via JavaScript eval Indirect Calls
Mar 25, 2010
EPSS 0.04
CVE-2010-0164
Firefox < 3.6.2 - Use-After-Free in imgContainer::InternalAddFrameHelper
Mar 25, 2010
EPSS 0.06
CVE-2010-0163
Mozilla Thunderbird < 2.0.0.24 - Denial of Service or Remote Code Execution via Malformed Email Attachment
Mar 23, 2010
EPSS 0.03
CVE-2010-0161
Thunderbird < 2.0.0.24 - Remote Code Execution via SSPI Session Data
Mar 23, 2010
EPSS 0.02
CVE-2010-1028
Firefox 3.6-3.6.1 and 3.7 alpha - Remote Code Execution via WOFF Decompression Integer Overflow
Mar 19, 2010
EPSS 0.09
CVE-2010-0162
Firefox 3.0.x-3.0.17 and 3.5.x-3.5.7 - Cross-Site Scripting via SVG EMBED Element
Feb 22, 2010
EPSS 0.03
CVE-2010-0160
SeaMonkey < 2.0.3 - Remote Code Execution via Web Worker Message Handling
Feb 22, 2010
EPSS 0.06
Products
firefox 3,181 thunderbird 1,773 seamonkey 704 firefox_esr 488 Firefox 434 Thunderbird 403 thunderbird_esr 228 bugzilla 145 mozilla 108 network_security_services 50 Firefox ESR 44 mozilla_suite 27 Firefox for iOS 25 firefox_mobile 23 firefox_focus 20 focus 16 firefox_os 14 Focus for iOS 6 nss 6 bleach 5 bonsai 4 camino 4 vpn 4 convict 3 netscape_portable_runtime 3 geckodriver 2 mozjpeg 2 nunjucks 2 pollbot 2 webthings_gateway 2
Quick Filters
Critical CVEs With Exploits In CISA KEV