mozilla

3,621 tracked vulnerabilities.

CVE-2008-5022
Firefox 2.0-2.0.0.17 and 3.0-3.0.3 - Same-Origin Policy Bypass via nsXMLHttpRequest Event Listeners
Nov 13, 2008
EPSS 0.03
CVE-2008-5021
Firefox 2.0-2.0.0.17 and 3.x < 3.0.4 - Remote Code Execution via File Input Element Race Condition
Nov 13, 2008
EPSS 0.04
CVE-2008-5019
Firefox 2.0-2.0.0.17 and 3.x < 3.0.4 - Cross-Site Scripting via Session Restore Feature
Nov 13, 2008
EPSS 0.03
CVE-2008-5018
Firefox 2.0-2.0.0.17 and 3.x < 3.0.4 - Denial of Service via JavaScript Date Class
Nov 13, 2008
EPSS 0.04
CVE-2008-5017
Mozilla Firefox 2.0-2.0.0.17 - Denial of Service via Integer Overflow in nsEscape.cpp
Nov 13, 2008
EPSS 0.04
CVE-2008-5016
Firefox < 3.0.4 and SeaMonkey < 1.1.13 - Denial of Service via Layout Engine
Nov 13, 2008
EPSS 0.02
CVE-2008-5015
Firefox < 3.0.4 - Privilege Escalation via file: URI Chrome Privilege Assignment
Nov 13, 2008
EPSS 0.02
CVE-2008-5014
Firefox 2.0-2.0.0.17 and 3.0-3.0.1 - Remote Code Execution via Window Prototype Manipulation
Nov 13, 2008
EPSS 0.06
CVE-2008-5013
Firefox < 2.0.0.18 - Remote Code Execution via Flash Module Unload Bypass
Nov 13, 2008
EPSS 0.05
CVE-2008-5012
Firefox < 2.0.0.18 - Same-Origin Policy Bypass via Canvas HTTP Redirect
Nov 13, 2008
EPSS 0.02
CVE-2008-0017
Firefox <3.0.4-2.0.0.18 & SeaMonkey <1.1.13 - DoS/Buffer Overflow
Nov 13, 2008
EPSS 0.08
CVE-2008-4723
Firefox 3.0.1-3.0.3 - Cross-Site Scripting via FTP URL in HTML Document
Oct 23, 2008
EPSS 0.01
CVE-2008-4582
Debian Linux - Access Control
Oct 15, 2008
EPSS 0.10
CVE-2008-4437
Bugzilla < 2.22.5 and 3.x < 3.0.5 - Path Traversal via XML Import Data Element
Oct 03, 2008
EPSS 0.06
CVE-2008-4324
Firefox 3.0.2-3.0.3 - Denial of Service via Event Dispatcher Null Pointer Dereference
Sep 29, 2008
EPSS 0.09
CVE-2008-4070
SeaMonkey < 1.1.12 - Heap-Based Buffer Overflow via Long Newsgroup Message Header
Sep 27, 2008
EPSS 0.07
CVE-2008-4069
Firefox < 2.0.0.16 - Uninitialized Memory Exposure via XBM Image Decoder
Sep 24, 2008
EPSS 0.02
CVE-2008-4068
Mozilla Firefox < 2.0.0.17 and 3.x < 3.0.2 - Directory Traversal via Resource URI
Sep 24, 2008
EPSS 0.04
CVE-2008-4067
Firefox < 2.0.0.17 and 3.x < 3.0.2 - Directory Traversal via Resource URI
Sep 24, 2008
EPSS 0.04
CVE-2008-4066
Firefox < 2.0.0.17 - Cross-Site Scripting via HTML-Escaped Low Surrogate Characters
Sep 24, 2008
EPSS 0.02
CVE-2008-4065
Mozilla Firefox < 2.0.0.17/3.x < 3.0.2, Thunderbird < 2.0.0.17, SeaMonkey < 1.1.12 - XSS via BOM Bypass
Sep 24, 2008
EPSS 0.04
CVE-2008-4064
Firefox < 3.0.2 - Memory Corruption and Remote Code Execution via Graphics Rendering
Sep 24, 2008
EPSS 0.05
CVE-2008-4063
Canonical Ubuntu Linux < 3.0.1 - Denial of Service
Sep 24, 2008
EPSS 0.04
CVE-2008-4062
Mozilla Firefox < 2.0.0.17 and 3.x < 3.0.2 - Remote Code Execution via JavaScript Engine Memory Corruption
Sep 24, 2008
EPSS 0.05
CVE-2008-4061
Mozilla Firefox < 2.0.0.17 and 3.x < 3.0.2 - Remote Code Execution via MathML mtd Element
Sep 24, 2008
EPSS 0.05
Products
firefox 3,181 thunderbird 1,773 seamonkey 704 firefox_esr 488 Firefox 434 Thunderbird 403 thunderbird_esr 228 bugzilla 145 mozilla 108 network_security_services 50 Firefox ESR 44 mozilla_suite 27 Firefox for iOS 25 firefox_mobile 23 firefox_focus 20 focus 16 firefox_os 14 Focus for iOS 6 nss 6 bleach 5 bonsai 4 camino 4 vpn 4 convict 3 netscape_portable_runtime 3 geckodriver 2 mozjpeg 2 nunjucks 2 pollbot 2 webthings_gateway 2
Quick Filters
Critical CVEs With Exploits In CISA KEV