Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

georgi guninski vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2005-2353
run-mozilla.sh in Thunderbird, with debugging enabled, allows local users to create or overwrite arbitrary files via a symlink attack on temporary files.
Mozilla Thunderbird 1.5.0.9
NA
CVE-2008-5019
The session restore feature in Mozilla Firefox 3.x prior to 3.0.4 and 2.x prior to 2.0.0.18 allows remote malicious users to violate the same origin policy to conduct cross-site scripting (XSS) attacks and execute arbitrary JavaScript with chrome privileges via unknown vectors.
Mozilla FirefoxDebian Debian Linux 4.0Canonical Ubuntu Linux 6.06Canonical Ubuntu Linux 7.10Canonical Ubuntu Linux 8.04Canonical Ubuntu Linux 8.10
NA
CVE-2008-5015
Mozilla Firefox 3.x prior to 3.0.4 assigns chrome privileges to a file: URI when it is accessed in the same tab from a chrome or privileged about: page, which makes it easier for user-assisted malicious users to execute arbitrary JavaScript with chrome privileges via malicious co...
Mozilla Firefox 3.0Mozilla FirefoxMozilla Firefox 3.0.1Mozilla Firefox 3.0.2
NA
CVE-2009-0776
nsIRDFService in Mozilla Firefox prior to 3.0.7, Thunderbird prior to 2.0.0.21, and SeaMonkey prior to 1.1.15 allows remote malicious users to bypass the same-origin policy and read XML data from another domain via a cross-domain redirect.
Mozilla Firefox 3.0.3Mozilla Firefox 2.0.0.17Mozilla Firefox 2.0.0.9Mozilla Firefox 2.0.0.8Mozilla Firefox 2.0.0.1Mozilla Firefox 2.0Mozilla Thunderbird 2.0.0.5Mozilla Thunderbird 2.0.0.4Mozilla Thunderbird 2.0.0.0Mozilla Seamonkey 1.0.7Mozilla Seamonkey 1.0.8Mozilla Seamonkey 1.1.3Mozilla Seamonkey 1.1.4Mozilla Seamonkey 1.1.12Mozilla Firefox 3.0.4Mozilla Firefox 1.0.4Mozilla Firefox 1.0.5Mozilla Firefox 1.5.0.11Mozilla Firefox 1.5.0.12Mozilla Firefox 1.5.0.9Mozilla Firefox 2.0.0.18Mozilla Thunderbird
NA
CVE-2012-0954
APT 0.7.x prior to 0.7.25 and 0.8.x prior to 0.8.16, when using the apt-key net-update to import keyrings, relies on GnuPG argument order and does not check GPG subkeys, which might allow remote malicious users to install altered packages via a man-in-the-middle (MITM) attack. NO...
Debian Advanced Package Tool 0.7.24Debian Advanced Package Tool 0.7.23.1Debian Advanced Package Tool 0.7.23Debian Advanced Package Tool 0.7.22.2Debian Advanced Package Tool 0.7.17Debian Advanced Package Tool 0.7.16Debian Advanced Package Tool 0.7.15Debian Advanced Package Tool 0.8.15.8Debian Advanced Package Tool 0.8.15.7Debian Advanced Package Tool 0.8.15.6Debian Advanced Package Tool 0.8.15Debian Advanced Package Tool 0.8.11.2Debian Advanced Package Tool 0.8.11.1Debian Advanced Package Tool 0.8.11Debian Advanced Package Tool 0.8.10.3Debian Advanced Package Tool 0.7.22.1Debian Advanced Package Tool 0.7.21Debian Advanced Package Tool 0.7.18Debian Advanced Package Tool 0.7.14Debian Advanced Package Tool 0.7.1Debian Advanced Package Tool 0.8.15.10Debian Advanced Package Tool 0.8.11.5
NA
CVE-2009-0772
The layout engine in Mozilla Firefox 2 and 3 prior to 3.0.7, Thunderbird prior to 2.0.0.21, and SeaMonkey 1.1.15 allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to nsCSSStyleSheet::GetOwnerNode, events, an...
Mozilla Firefox 2.0.0.16Mozilla Firefox 2.0.0.15Mozilla Firefox 2.0.0.8Mozilla Firefox 2.0.0.7Mozilla Firefox 2.0Mozilla Thunderbird 2.0.0.17Mozilla Thunderbird 2.0.0.0Mozilla Seamonkey 1.0Mozilla Seamonkey 1.0.8Mozilla Seamonkey 1.0.9Mozilla Seamonkey 1.1.4Mozilla Seamonkey 1.1.5Mozilla Firefox 3.0.4Mozilla Firefox 3.0.5Mozilla Firefox 1.0.5Mozilla Firefox 1.0.6Mozilla Firefox 1.5.0.12Mozilla Firefox 1.5.0.2Mozilla Firefox 1.5.0.3Mozilla Firefox 2.0.0.18Mozilla Firefox 3.0.3Mozilla Firefox 2.0.0.17
NA
CVE-2009-0774
The layout engine in Mozilla Firefox 2 and 3 prior to 3.0.7, Thunderbird prior to 2.0.0.21, and SeaMonkey 1.1.15 allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to gczeal, a different vulnerability than CV...
Mozilla Firefox 3.0.2Mozilla Firefox 3.0.3Mozilla Firefox 2.0.0.11Mozilla Firefox 2.0.0.10Mozilla Firefox 2.0.0.3Mozilla Firefox 2.0.0.2Mozilla Firefox 2.0.0.1Mozilla Thunderbird 2.0.0.6Mozilla Thunderbird 2.0.0.5Mozilla Seamonkey 1.0.5Mozilla Seamonkey 1.0.6Mozilla Seamonkey 1.1.1Mozilla Seamonkey 1.1.2Mozilla Seamonkey 1.1.3Mozilla Seamonkey 1.1.10Mozilla Seamonkey 1.1.11Mozilla Firefox 1.0.2Mozilla Firefox 1.0.3Mozilla Firefox 1.5.0.10Mozilla Firefox 1.5.0.11Mozilla Firefox 1.5.0.7Mozilla Firefox 1.5.0.8
NA
CVE-2004-0399
Stack-based buffer overflow in Exim 3.35, and other versions prior to 4, when the sender_verify option is true, allows remote malicious users to cause a denial of service and possibly execute arbitrary code during sender verification.
University Of Cambridge Exim 3.35University Of Cambridge Exim
NA
CVE-2004-0400
Stack-based buffer overflow in Exim 4 prior to 4.33, when the headers_check_syntax option is enabled, allows remote malicious users to cause a denial of service and possibly execute arbitrary code during the header check.
University Of Cambridge Exim
NA
CVE-2005-1531
Firefox prior to 1.0.4 and Mozilla Suite prior to 1.7.8 does not properly implement certain security checks for script injection, which allows remote malicious users to execute script via "Wrapped" javascript: URLs, as demonstrated using (1) a javascript: URL in a view-...
Mozilla Firefox 0.9.2Mozilla Firefox 0.9.3Mozilla Mozilla 1.5.1Mozilla Mozilla 1.5Mozilla Mozilla 1.7.1Mozilla Mozilla 1.7.2Mozilla Mozilla 1.7Mozilla Firefox 0.10.1Mozilla Firefox 0.8Mozilla Firefox 1.0.2Mozilla Firefox 1.0.3Mozilla Mozilla 1.6Mozilla Mozilla 1.7.6Mozilla Mozilla 1.7.7Mozilla Firefox 0.9Mozilla Firefox 0.9.1Mozilla Mozilla 1.4.1Mozilla Firefox 0.10Mozilla Firefox 1.0Mozilla Firefox 1.0.1Mozilla Mozilla 1.7.3Mozilla Mozilla 1.7.5
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48693CVE-2024-30851CVE-2024-34460CVE-2024-2887localCVE-2024-27956remote code executionCVE-2024-34475privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook