mozilla

3,621 tracked vulnerabilities.

CVE-2009-1834
Firefox < 3.0.11 - Location Bar Spoofing via Invalid Unicode IDN Characters
Jun 12, 2009
EPSS 0.03
CVE-2009-1833
Firefox < 3.0.11 - Remote Code Execution via JavaScript Engine Memory Corruption
Jun 12, 2009
EPSS 0.09
CVE-2009-1832
Firefox < 3.0.10 - Remote Code Execution via Double Frame Construction
Jun 12, 2009
EPSS 0.09
CVE-2009-1392
Firefox < 3.0.11 and SeaMonkey < 1.1.17 - Remote Code Execution via Browser Engine Memory Corruption
Jun 12, 2009
EPSS 0.09
CVE-2009-1828
Firefox - Denial of Service via KEYGEN Element with Automatic Refresh
May 29, 2009
EPSS 0.09
CVE-2009-1827
Firefox 3.0.4 - Denial of Service via SVG Circle Element Radius Attribute
May 29, 2009
EPSS 0.04
CVE-2009-1597
Mozilla Firefox - Remote Code Execution via Inline PDF Form Submit Element
May 11, 2009
EPSS 0.02
CVE-2009-1313
Firefox 3.0.9 - Memory Corruption and Possible Remote Code Execution in nsTextFrame::ClearTextRun
Apr 30, 2009
EPSS 0.08
CVE-2009-1312
Firefox < 3.0.9 - Cross-Site Scripting via Refresh Header
Apr 22, 2009
EPSS 0.06
CVE-2009-1311
Firefox < 3.0.9 - Exposure of Sensitive Information via Frame POST Data
Apr 22, 2009
EPSS 0.02
CVE-2009-1310
Firefox < 3.0.9 - Cross-Site Scripting via MozSearch Plugin SearchForm Element
Apr 22, 2009
EPSS 0.02
CVE-2009-1309
Firefox < 3.0.9 - Cross-Site Scripting via Same Origin Policy Bypass
Apr 22, 2009
EPSS 0.01
CVE-2009-1308
Firefox < 3.0.9 - Cross-Site Scripting via XBL JavaScript Bindings
Apr 22, 2009
EPSS 0.02
CVE-2009-1307
Firefox < 3.0.9 - Same Origin Policy Bypass via view-source: URI
Apr 22, 2009
EPSS 0.02
CVE-2009-1306
Firefox < 3.0.9 - Cross-Site Scripting via jar: URI Content-Disposition Bypass
Apr 22, 2009
EPSS 0.01
CVE-2009-1305
Firefox < 3.0.9 and SeaMonkey < 1.1.16 - Remote Denial of Service via JavaScript Engine
Apr 22, 2009
EPSS 0.02
CVE-2009-1304
Firefox 3.x < 3.0.9 and SeaMonkey < 1.1.16 - Remote Denial of Service via JavaScript Engine Corruption
Apr 22, 2009
EPSS 0.02
CVE-2009-1303
Firefox < 3.0.9 - Denial of Service via nsSVGElement::BindToTree
Apr 22, 2009
EPSS 0.02
CVE-2009-1302
Firefox 3.x < 3.0.9 and SeaMonkey < 1.1.16 - Remote Denial of Service via Browser Engine Memory Corruption
Apr 22, 2009
EPSS 0.03
CVE-2009-1232
Firefox <= 3.0.10 - Denial of Service via Malformed XML Document
Apr 02, 2009
EPSS 0.05
CVE-2009-1213
Bugzilla 3.2-3.2.2 and 3.3-3.3.3 - Cross-Site Request Forgery via Attachment Editing
Apr 01, 2009
EPSS 0.01
CVE-2009-1169
Firefox < 3.0.8 - Remote Code Execution via Crafted XSLT Transform
Mar 27, 2009
EPSS 0.10
CVE-2009-1044
Mozilla Firefox 3.0.7 - Remote Code Execution via _moveToEdgeShift XUL Tree Method
Mar 23, 2009
EPSS 0.06
CVE-2009-0733
LittleCMS <1.18beta2 - RCE
Mar 23, 2009
EPSS 0.06
CVE-2009-0723
LittleCMS <1.18beta2 - RCE
Mar 23, 2009
EPSS 0.05
Products
firefox 3,181 thunderbird 1,773 seamonkey 704 firefox_esr 488 Firefox 434 Thunderbird 403 thunderbird_esr 228 bugzilla 145 mozilla 108 network_security_services 50 Firefox ESR 44 mozilla_suite 27 Firefox for iOS 25 firefox_mobile 23 firefox_focus 20 focus 16 firefox_os 14 Focus for iOS 6 nss 6 bleach 5 bonsai 4 camino 4 vpn 4 convict 3 netscape_portable_runtime 3 geckodriver 2 mozjpeg 2 nunjucks 2 pollbot 2 webthings_gateway 2
Quick Filters
Critical CVEs With Exploits In CISA KEV