mozilla
3,621 tracked vulnerabilities.
CVE-2019-11725
MEDIUM
Firefox < 68.0 - Safebrowsing Protection Bypass via WebSocket Resource Loading
Jul 23, 2019
CVSS 6.5
EPSS 0.01
CVE-2019-11724
MEDIUM
Firefox < 68.0 - Incorrect Authorization via Retired Site Permission
Jul 23, 2019
CVSS 6.1
EPSS 0.01
CVE-2019-11723
HIGH
Firefox < 68.0 - Origin Validation Error during Add-on Installation
Jul 23, 2019
CVSS 7.5
EPSS 0.01
CVE-2019-11721
MEDIUM
Firefox < 68.0 - Domain Spoofing via Unicode Latin 'kra' Character
Jul 23, 2019
CVSS 6.5
EPSS 0.01
CVE-2019-11720
MEDIUM
Firefox < 68.0 - Cross-Site Scripting via Unicode Whitespace Parsing Bypass
Jul 23, 2019
CVSS 6.1
EPSS 0.01
CVE-2019-11719
HIGH
Firefox < 68 and Firefox ESR < 60.8 - Out-of-bounds Read in PKCS#8 Curve25519 Key Import
Jul 23, 2019
CVSS 7.5
EPSS 0.02
CVE-2019-11718
MEDIUM
Firefox < 68.0 - Cross-Site Scripting via Activity Stream Snippet Service Content
Jul 23, 2019
CVSS 5.3
EPSS 0.01
CVE-2019-11717
MEDIUM
Firefox ESR <60.8-Firefox <68-Thunderbird <60.8 - SSRF
Jul 23, 2019
CVSS 5.3
EPSS 0.02
CVE-2019-11716
HIGH
Firefox < 68.0 - Sandbox Bypass via Non-Enumerable window.globalThis
Jul 23, 2019
CVSS 8.3
EPSS 0.01
CVE-2019-11715
MEDIUM
Firefox ESR < 60.8 - Firefox < 68 - Thunderbird < 60.8 - XSS
Jul 23, 2019
CVSS 6.1
EPSS 0.02
CVE-2019-11714
CRITICAL
Firefox < 68.0 - Denial of Service via Necko UDP Connection Thread Handling
Jul 23, 2019
CVSS 9.8
EPSS 0.02
CVE-2019-11713
CRITICAL
Firefox < 68 and Firefox ESR < 60.8 - Use-After-Free in HTTP/2 Stream Handling
Jul 23, 2019
CVSS 9.8
EPSS 0.02
CVE-2019-11712
HIGH
Firefox ESR < 60.8 & Firefox < 68 & Thunderbird < 60.8 - CSRF
Jul 23, 2019
CVSS 8.8
EPSS 0.01
CVE-2019-11711
HIGH
Firefox ESR < 60.8, Firefox < 68, Thunderbird < 60.8 - SSRF
Jul 23, 2019
CVSS 8.8
EPSS 0.02
CVE-2019-11710
CRITICAL
Mozilla Firefox <68 - Memory Corruption
Jul 23, 2019
CVSS 9.8
EPSS 0.02
CVE-2019-11709
CRITICAL
Mozilla Firefox <68 - Memory Corruption
Jul 23, 2019
CVSS 9.8
EPSS 0.02
CVE-2019-11708
CRITICAL
KEV
Firefox ESR < 60.7.2, Firefox < 67.0.4, Thunderbird < 60.7.2 - RCE
Jul 23, 2019
CVSS 10.0
EPSS 0.56
CVE-2019-11707
HIGH
KEV
Firefox < 60.7.1, < 67.0.3 and Thunderbird < 60.7.2 - Type Confusion via Array.pop
Jul 23, 2019
CVSS 8.8
EPSS 0.38
CVE-2019-11706
HIGH
Thunderbird <60.7.1 - Use After Free
Jul 23, 2019
CVSS 7.5
EPSS 0.10
CVE-2019-11705
CRITICAL
Thunderbird <60.7.1 - Buffer Overflow
Jul 23, 2019
CVSS 9.8
EPSS 0.10
CVE-2019-11704
CRITICAL
Thunderbird <60.7.1 - Buffer Overflow
Jul 23, 2019
CVSS 9.8
EPSS 0.11
CVE-2019-11703
CRITICAL
Thunderbird <60.7.1 - Buffer Overflow
Jul 23, 2019
CVSS 9.8
EPSS 0.11
CVE-2019-11702
MEDIUM
Firefox < 67.0.2 - Unauthenticated Local File Access via IE Protocol Handler
Jul 23, 2019
CVSS 6.5
EPSS 0.01
CVE-2019-11701
MEDIUM
Firefox < 67.0 - Cross-Site Scripting via webcal: Protocol Handler
Jul 23, 2019
CVSS 6.1
EPSS 0.01
CVE-2019-11700
MEDIUM
Firefox < 67.0 - Unauthenticated Local File Access via res: Protocol Hyperlink
Jul 23, 2019
CVSS 6.5
EPSS 0.01
Products
firefox 3,181
thunderbird 1,773
seamonkey 704
firefox_esr 488
Firefox 434
Thunderbird 403
thunderbird_esr 228
bugzilla 145
mozilla 108
network_security_services 50
Firefox ESR 44
mozilla_suite 27
Firefox for iOS 25
firefox_mobile 23
firefox_focus 20
focus 16
firefox_os 14
Focus for iOS 6
nss 6
bleach 5
bonsai 4
camino 4
vpn 4
convict 3
netscape_portable_runtime 3
geckodriver 2
mozjpeg 2
nunjucks 2
pollbot 2
webthings_gateway 2
Quick Filters