Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

mozilla mozilla 0.9.35 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2004-0191
Mozilla prior to 1.4.2 executes Javascript events in the context of a new page while it is being loaded, allowing it to interact with the previous page (zombie document) and enable cross-domain and cross-site scripting (XSS) attacks, as demonstrated using onmousemove events.
Mozilla Mozilla 0.9.2Mozilla Mozilla 0.9.2.1Mozilla Mozilla 0.9.6Mozilla Mozilla 0.9.7Mozilla Mozilla 1.0Mozilla Mozilla 1.1Mozilla Mozilla 1.3.1Mozilla Mozilla 1.4Mozilla Mozilla 0.9.4Mozilla Mozilla 0.9.4.1Mozilla Mozilla 1.0.1Mozilla Mozilla 1.2.1Mozilla Mozilla 1.2Mozilla Mozilla 1.5Mozilla Mozilla 0.8Mozilla Mozilla 0.9.48Mozilla Mozilla 0.9.5Mozilla Mozilla 1.0.2Mozilla Mozilla 1.3Mozilla Mozilla 0.9.3Mozilla Mozilla 0.9.35Mozilla Mozilla 0.9.8
NA
CVE-2004-1451
Mozilla prior to 1.6 does not display the entire URL in the status bar when a link contains %00, which could allow remote malicious users to trick users into clicking on unknown or untrusted sites and facilitate phishing attacks.
Mozilla Mozilla 0.9.48Mozilla Mozilla 0.9.5Mozilla Mozilla 0.9.6Mozilla Mozilla 0.9.7Mozilla Mozilla 1.2Mozilla Mozilla 1.3Mozilla Mozilla 1.3.1Mozilla Mozilla 1.4Mozilla Mozilla 0.9.3Mozilla Mozilla 0.9.4Mozilla Mozilla 0.9.9Mozilla Mozilla 1.0.1Mozilla Mozilla 1.4.1Mozilla Mozilla 1.4.4Mozilla Mozilla 0.8Mozilla Mozilla 0.9.2Mozilla Mozilla 0.9.2.1Mozilla Mozilla 1.0Mozilla Mozilla 1.1Mozilla Mozilla 1.5Mozilla Mozilla 1.5.1Mozilla Mozilla 0.9.35
NA
CVE-2004-1449
Mozilla prior to 1.7, Firefox prior to 0.9, and Thunderbird prior to 0.7 allows remote malicious users to determine the location of files on a user's hard drive by obscuring a file upload control and tricking the user into dragging text into that control.
Mozilla Mozilla 0.9.2.1Mozilla Mozilla 0.9.3Mozilla Mozilla 0.9.35Mozilla Mozilla 0.9.4Mozilla Mozilla 1.1Mozilla Mozilla 1.2Mozilla Mozilla 1.2.1Mozilla Thunderbird 0.1Mozilla Thunderbird 0.2Mozilla Thunderbird 0.3Mozilla Thunderbird 0.4Mozilla Mozilla 0.8Mozilla Mozilla 0.9.48Mozilla Mozilla 0.9.6Mozilla Mozilla 1.0Mozilla Mozilla 1.3Mozilla Mozilla 1.4Mozilla Mozilla 1.5.1Mozilla Thunderbird 0.6Mozilla Mozilla 0.9.7Mozilla Mozilla 0.9.8Mozilla Mozilla 0.9.9
NA
CVE-2004-1156
Mozilla prior to 1.7.6, and Firefox prior to 1.0.1, allows remote malicious users to spoof arbitrary web sites by injecting content from one window into a target window whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web s...
Mozilla Firefox 0.10.1Mozilla Firefox 0.8Mozilla Mozilla 0.8Mozilla Mozilla 0.9.2Mozilla Mozilla 0.9.6Mozilla Mozilla 0.9.7Mozilla Firefox 0.10Mozilla Firefox 0.9Mozilla Firefox 1.0Mozilla Mozilla 0.9.48Mozilla Mozilla 0.9.5Mozilla Mozilla 1.0.2Mozilla Mozilla 1.0Mozilla Mozilla 1.2Mozilla Mozilla 1.5Mozilla Mozilla 1.5.1Mozilla Mozilla 1.7Mozilla Firefox 0.9.2Mozilla Firefox 0.9.3Mozilla Mozilla 0.9.4Mozilla Mozilla 0.9.4.1Mozilla Mozilla 1.0.1
NA
CVE-2004-0906
The XPInstall installer in Mozilla Firefox before the Preview Release, Mozilla prior to 1.7.3, and Thunderbird prior to 0.8 sets insecure permissions for certain installed files within xpi packages, which could allow local users to overwrite arbitrary files or execute arbitrary c...
Mozilla Mozilla 0.9.35Mozilla Mozilla 0.9.4Mozilla Mozilla 0.9.2.1Mozilla Mozilla 0.9.3Mozilla Mozilla 0.9.7Mozilla Mozilla 0.9.8Mozilla Mozilla 1.1Mozilla Mozilla 1.4Mozilla Mozilla 1.4.1Mozilla Mozilla 1.6Mozilla Mozilla 1.7Mozilla Mozilla 1.7.1Mozilla Thunderbird 0.1Mozilla Thunderbird 0.2Mozilla Thunderbird 0.7.2Mozilla Thunderbird 0.7.3Mozilla Mozilla 0.9.4.1Mozilla Mozilla 0.9.48Mozilla Mozilla 1.0.2Mozilla Mozilla 1.0Mozilla Mozilla 1.2Mozilla Thunderbird 0.5
NA
CVE-2004-0908
Mozilla Firefox before the Preview Release, Mozilla prior to 1.7.3, and Thunderbird prior to 0.8 allows untrusted Javascript code to read and write to the clipboard, and possibly obtain sensitive information, via script-generated events such as Ctrl-Ins.
Mozilla Mozilla 0.9.4.1Mozilla Mozilla 0.9.48Mozilla Mozilla 1.0.1Mozilla Mozilla 1.0.2Mozilla Mozilla 1.2Mozilla Mozilla 1.4Mozilla Mozilla 1.7Mozilla Thunderbird 0.5Mozilla Thunderbird 0.6Mozilla Mozilla 0.9.2.1Mozilla Mozilla 0.9.3Mozilla Mozilla 0.9.7Mozilla Mozilla 0.9.8Mozilla Mozilla 1.1Mozilla Mozilla 1.4.1Mozilla Mozilla 1.6Mozilla Thunderbird 0.1Mozilla Thunderbird 0.2Mozilla Thunderbird 0.7.2Mozilla Mozilla 0.9.35Mozilla Mozilla 0.9.4Mozilla Mozilla 0.9.9
NA
CVE-2004-0907
The Linux install .tar.gz archives for Mozilla Firefox before the Preview Release, Mozilla prior to 1.7.3, and Thunderbird prior to 0.8, create certain files with insecure permissions, which could allow local users to overwrite those files and execute arbitrary code.
Mozilla Mozilla 0.9.4.1Mozilla Mozilla 0.9.48Mozilla Mozilla 1.0.1Mozilla Mozilla 1.0.2Mozilla Mozilla 1.2.1Mozilla Mozilla 1.2Mozilla Mozilla 1.4Mozilla Mozilla 0.9.2Mozilla Mozilla 0.9.2.1Mozilla Mozilla 0.9.7Mozilla Mozilla 0.9.8Mozilla Mozilla 1.1Mozilla Mozilla 1.3.1Mozilla Mozilla 1.6Mozilla Mozilla 1.7Mozilla Thunderbird 0.1Mozilla Thunderbird 0.7.1Mozilla Thunderbird 0.7.2Mozilla Thunderbird 0.4Mozilla Thunderbird 0.5Mozilla Mozilla 0.8Mozilla Mozilla 0.9.5
NA
CVE-2004-0909
Mozilla Firefox before the Preview Release, Mozilla prior to 1.7.3, and Thunderbird prior to 0.8 may allow remote malicious users to trick users into performing unexpected actions, including installing software, via signed scripts that request enhanced abilities using the enableP...
Mozilla Mozilla 0.9.2.1Mozilla Mozilla 0.9.3Mozilla Mozilla 0.9.7Mozilla Mozilla 0.9.8Mozilla Mozilla 1.1Mozilla Mozilla 0.9.4.1Mozilla Mozilla 0.9.48Mozilla Mozilla 1.0.2Mozilla Mozilla 1.0Mozilla Mozilla 1.2Mozilla Mozilla 1.4Mozilla Mozilla 1.7Mozilla Thunderbird 0.5Mozilla Thunderbird 0.6Mozilla Mozilla 0.8Mozilla Mozilla 0.9.2Mozilla Mozilla 0.9.5Mozilla Mozilla 0.9.6Mozilla Mozilla 1.3Mozilla Mozilla 1.3.1Mozilla Mozilla 1.5Mozilla Mozilla 1.5.1
NA
CVE-2005-0143
Firefox prior to 1.0 and Mozilla prior to 1.7.5 display the SSL lock icon when an insecure page loads a binary file from a trusted site, which could facilitate phishing attacks.
Mozilla Mozilla 1.6Mozilla Mozilla 1.7Mozilla Mozilla 1.7.3Mozilla Mozilla 1.7.5Mozilla Mozilla 1.7.1Mozilla Mozilla 1.7.2Mozilla Mozilla 1.8Mozilla Firefox 0.9.1Mozilla Firefox 0.9.2Mozilla Mozilla 0.9.2.1Mozilla Mozilla 0.9.3Mozilla Mozilla 0.9.7Mozilla Mozilla 0.9.8Mozilla Mozilla 0.9.9Mozilla Mozilla 1.1Mozilla Mozilla 1.4Mozilla Mozilla 1.4.1Mozilla Mozilla 1.5Mozilla Firefox 0.8Mozilla Firefox 0.9Mozilla Mozilla 0.8Mozilla Mozilla 0.9.2
NA
CVE-2009-3014
Mozilla Firefox 3.0.13 and previous versions, 3.5, 3.6 a1 pre, and 3.7 a1 pre; SeaMonkey 1.1.17; and Mozilla 1.7.x and previous versions do not properly handle javascript: URIs in HTML links within 302 error documents sent from web servers, which allows user-assisted remote malic...
Mozilla Firefox 3.0.4Mozilla Firefox 3.0.3Mozilla Firefox 3.0.8Mozilla Firefox 3.0.9Mozilla Mozilla 0.9.48Mozilla Mozilla 0.9.35Mozilla Mozilla 1.0Mozilla Mozilla 0.9.8Mozilla Mozilla 1.2Mozilla Mozilla 1.3Mozilla Mozilla 1.4Mozilla Mozilla 1.5Mozilla Firefox 3.0.11Mozilla Firefox 3.0.12Mozilla Firefox 3.6Mozilla Firefox 3.7Mozilla Mozilla 0.8Mozilla Mozilla 0.9.2.1Mozilla Mozilla 0.9.7Mozilla Mozilla 0.9.9Mozilla Mozilla 1.1Mozilla Mozilla 1.5.1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook