mozilla

3,621 tracked vulnerabilities.

CVE-2008-2419
Mozilla Firefox 2.0.0.14 - Remote Code Execution via Iframe Java Applet Error
May 23, 2008
EPSS 0.07
CVE-2008-2103
Bugzilla 2.17.2 and later - Cross-Site Scripting via id Parameter
May 07, 2008
EPSS 0.01
CVE-2008-2104
Bugzilla 3.1.3 - Authenticated Privilege Escalation via XML-RPC Interface
May 07, 2008
EPSS 0.01
CVE-2008-2105
Bugzilla 2.23.4 3.0.x<3.0.4 3.1.x<3.1.4 - Authenticated Bug Changer Spoofing via @reporter Command
May 07, 2008
EPSS 0.01
CVE-2008-2014
Firefox 3.0 beta 5 - Denial of Service via Infinite document.write Loop
Apr 30, 2008
EPSS 0.01
CVE-2008-1380
Firefox < 2.0.0.14 and SeaMonkey < 1.1.10 - Denial of Service via JavaScript Garbage Collector
Apr 17, 2008
EPSS 0.03
CVE-2008-1240
Mozilla Firefox <2.0.0.13 & SeaMonkey <1.1.9 - SSRF
Mar 28, 2008
EPSS 0.03
CVE-2008-1233
Mozilla Firefox < 2.0.0.12, SeaMonkey < 1.1.8, Thunderbird < 2.0.0.12 - RCE via XPCNativeWrapper Pollution
Mar 27, 2008
EPSS 0.04
CVE-2008-1234
Firefox < 2.0.0.12, SeaMonkey < 1.1.8, Thunderbird < 2.0.0.12 - Cross-Site Scripting via Event Handlers
Mar 27, 2008
EPSS 0.03
CVE-2008-1235
Mozilla Firefox <2.0.0.13 - Privilege Escalation
Mar 27, 2008
EPSS 0.06
CVE-2008-1236
Mozilla Firefox < 2.0.0.13, Thunderbird < 2.0.0.13, and SeaMonkey < 1.1.9 - Remote Code Execution
Mar 27, 2008
EPSS 0.03
CVE-2008-1237
Mozilla Firefox < 2.0.0.12, SeaMonkey < 1.1.8, Thunderbird < 2.0.0.12 - Remote Code Execution
Mar 27, 2008
EPSS 0.03
CVE-2008-1238
Mozilla Firefox <2.0.0.13 & SeaMonkey <1.1.9 - CSRF
Mar 27, 2008
EPSS 0.02
CVE-2008-1241
Mozilla Firefox <2.0.0.13 & SeaMonkey <1.1.9 - XSS
Mar 27, 2008
EPSS 0.02
CVE-2008-0304
SeaMonkey < 1.1.8 - Remote Code Execution via Crafted External-Body MIME Type
Feb 29, 2008
EPSS 0.06
CVE-2008-0416
Firefox < 2.0.0.11, SeaMonkey < 1.1.7, Thunderbird < 2.0.0.11 - Cross-Site Scripting via Character Encoding Bypass
Feb 12, 2008
EPSS 0.02
CVE-2008-0420
Firefox < 2.0.0.11 - Memory Exposure via BMP Image Decoding
Feb 12, 2008
EPSS 0.02
CVE-2008-0593
Firefox < 2.0.0.12 and SeaMonkey < 1.1.8 - Same Origin Policy Bypass via Stylesheet DOM Node .href Property
Feb 09, 2008
EPSS 0.02
CVE-2008-0594
Firefox < 2.0.0.12 - Phishing Attack via Absolute Positioning DIV Tag
Feb 09, 2008
EPSS 0.02
CVE-2008-0591
Mozilla Firefox <2.0.0.12 & Thunderbird <2.0.0.12 - CSRF
Feb 09, 2008
EPSS 0.04
CVE-2008-0592
Firefox < 2.0.0.12 and SeaMonkey < 1.1.8 - Denial of Service via Invalid Content-Type Header
Feb 09, 2008
EPSS 0.02
CVE-2008-0412
Mozilla Firefox/Thunderbird < 2.0.0.12, SeaMonkey < 1.1.8 - Remote Code Execution
Feb 08, 2008
EPSS 0.03
CVE-2008-0413
Mozilla Firefox < 2.0.0.11, SeaMonkey < 1.1.7, Thunderbird < 2.0.0.11 - Remote Denial of Service via JavaScript Engine
Feb 08, 2008
EPSS 0.02
CVE-2008-0414
Firefox < 2.0.0.12 and SeaMonkey < 1.1.8 - Arbitrary File Upload via Focus Spoofing
Feb 08, 2008
EPSS 0.02
CVE-2008-0415
Mozilla Firefox < 2.0.0.12, Thunderbird < 2.0.0.12, and SeaMonkey < 1.1.8 - Cross-Site Scripting via XMLDocument.load
Feb 08, 2008
EPSS 0.02
Products
firefox 3,181 thunderbird 1,773 seamonkey 704 firefox_esr 488 Firefox 434 Thunderbird 403 thunderbird_esr 228 bugzilla 145 mozilla 108 network_security_services 50 Firefox ESR 44 mozilla_suite 27 Firefox for iOS 25 firefox_mobile 23 firefox_focus 20 focus 16 firefox_os 14 Focus for iOS 6 nss 6 bleach 5 bonsai 4 camino 4 vpn 4 convict 3 netscape_portable_runtime 3 geckodriver 2 mozjpeg 2 nunjucks 2 pollbot 2 webthings_gateway 2
Quick Filters
Critical CVEs With Exploits In CISA KEV