Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

mozilla firefox esr 31.5.2 vulnerabilities and exploits

(subscribe to this query)

7.5
CVSSv2
CVE-2015-0801
Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 allow remote attackers to bypass the Same Origin Policy and execute arbitrary JavaScript code with chrome privileges via vectors involving anchor navigation, a similar issue to CVE-2015-0818....
Mozilla FirefoxMozilla Firefox Esr 31.0Mozilla Firefox Esr 31.1Mozilla Firefox Esr 31.1.0Mozilla Firefox Esr 31.1.1Mozilla Firefox Esr 31.2Mozilla Firefox Esr 31.3Mozilla Firefox Esr 31.3.0Mozilla Firefox Esr 31.4Mozilla Firefox Esr 31.5Mozilla Firefox Esr 31.5.1Mozilla Firefox Esr 31.5.2Mozilla Firefox EsrMozilla Thunderbird
7.5
CVSSv2
CVE-2015-0818
Mozilla Firefox before 36.0.4, Firefox ESR 31.x before 31.5.3, and SeaMonkey before 2.33.1 allow remote attackers to bypass the Same Origin Policy and execute arbitrary JavaScript code with chrome privileges via vectors involving SVG hash navigation....
Mozilla FirefoxMozilla Firefox Esr 31.0Mozilla Firefox Esr 31.1Mozilla Firefox Esr 31.1.0Mozilla Firefox Esr 31.1.1Mozilla Firefox Esr 31.2Mozilla Firefox Esr 31.3Mozilla Firefox Esr 31.3.0Mozilla Firefox Esr 31.4Mozilla Firefox Esr 31.5Mozilla Firefox Esr 31.5.1Mozilla Firefox Esr 31.5.2Mozilla Seamonkey
6.8
CVSSv2
CVE-2015-0807
The navigator.sendBeacon implementation in Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 processes HTTP 30x status codes for redirects after a preflight request has occurred, which allows remote attackers to bypass intended CORS...
Mozilla FirefoxMozilla Firefox Esr 31.0Mozilla Firefox Esr 31.1Mozilla Firefox Esr 31.1.0Mozilla Firefox Esr 31.1.1Mozilla Firefox Esr 31.2Mozilla Firefox Esr 31.3Mozilla Firefox Esr 31.3.0Mozilla Firefox Esr 31.4Mozilla Firefox Esr 31.5Mozilla Firefox Esr 31.5.1Mozilla Firefox Esr 31.5.2Mozilla Firefox Esr 31.5.3Mozilla Thunderbird
5
CVSSv2
CVE-2015-2729
The AudioParamTimeline::AudioNodeInputValue function in the Web Audio implementation in Mozilla Firefox before 39.0 and Firefox ESR 38.x before 38.1 does not properly calculate an oscillator rendering range, which allows remote attackers to obtain sensitive information from...
Mozilla Firefox Esr 31.0Mozilla Firefox Esr 31.1Mozilla Firefox Esr 31.1.0Mozilla Firefox Esr 31.1.1Mozilla Firefox Esr 31.2Mozilla Firefox Esr 31.3Mozilla Firefox Esr 31.3.0Mozilla Firefox Esr 31.4Mozilla Firefox Esr 31.5Mozilla Firefox Esr 31.5.1Mozilla Firefox Esr 31.5.2Mozilla Firefox Esr 31.5.3Mozilla Firefox Esr 31.6.0Mozilla Firefox Esr 31.7.0Mozilla Firefox Esr 38.0Mozilla ThunderbirdMozilla FirefoxOracle Solaris 11.3
4.3
CVSSv2
CVE-2015-2741
Mozilla Firefox before 39.0, Firefox ESR 38.x before 38.1, and Thunderbird before 38.1 do not enforce key pinning upon encountering an X.509 certificate problem that generates a user dialog, which allows user-assisted man-in-the-middle attackers to bypass intended access...
Mozilla FirefoxOracle Solaris 11.3Mozilla Firefox Esr 31.0Mozilla Firefox Esr 31.1Mozilla Firefox Esr 31.1.0Mozilla Firefox Esr 31.1.1Mozilla Firefox Esr 31.2Mozilla Firefox Esr 31.3Mozilla Firefox Esr 31.3.0Mozilla Firefox Esr 31.4Mozilla Firefox Esr 31.5Mozilla Firefox Esr 31.5.1Mozilla Firefox Esr 31.5.2Mozilla Firefox Esr 31.5.3Mozilla Firefox Esr 31.6.0Mozilla Firefox Esr 31.7.0Mozilla Firefox Esr 38.0
10
CVSSv2
CVE-2015-2731
Use-after-free vulnerability in the CSPService::ShouldLoad function in the microtask implementation in Mozilla Firefox before 39.0, Firefox ESR 38.x before 38.1, and Thunderbird before 38.1 allows remote attackers to execute arbitrary code by leveraging client-side JavaScript...
Mozilla FirefoxMozilla ThunderbirdOracle Solaris 11.3Mozilla Firefox Esr 31.0Mozilla Firefox Esr 31.1Mozilla Firefox Esr 31.1.0Mozilla Firefox Esr 31.1.1Mozilla Firefox Esr 31.2Mozilla Firefox Esr 31.3Mozilla Firefox Esr 31.3.0Mozilla Firefox Esr 31.4Mozilla Firefox Esr 31.5Mozilla Firefox Esr 31.5.1Mozilla Firefox Esr 31.5.2Mozilla Firefox Esr 31.5.3Mozilla Firefox Esr 31.6.0Mozilla Firefox Esr 31.7.0Mozilla Firefox Esr 38.0
10
CVSSv2
CVE-2015-2733
Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 allows remote attackers to execute arbitrary code via vectors involving attachment of an XMLHttpRequest object to a...
Mozilla FirefoxOracle Solaris 11.3Mozilla Firefox Esr 31.0Mozilla Firefox Esr 31.1Mozilla Firefox Esr 31.1.0Mozilla Firefox Esr 31.1.1Mozilla Firefox Esr 31.2Mozilla Firefox Esr 31.3Mozilla Firefox Esr 31.3.0Mozilla Firefox Esr 31.4Mozilla Firefox Esr 31.5Mozilla Firefox Esr 31.5.1Mozilla Firefox Esr 31.5.2Mozilla Firefox Esr 31.5.3Mozilla Firefox Esr 31.6.0Mozilla Firefox Esr 31.7.0Mozilla Firefox Esr 38.0Novell Suse Linux Enterprise Desktop 11Novell Suse Linux Enterprise Desktop 12.0Novell Suse Linux Enterprise Server 12.0
7.5
CVSSv2
CVE-2015-2708
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code...
Novell Suse Linux Enterprise Desktop 12.0Novell Suse Linux Enterprise Server 12.0Novell Suse Linux Enterprise Software Development Kit 12.0Opensuse Opensuse 13.1Opensuse Opensuse 13.2Mozilla FirefoxMozilla ThunderbirdMozilla Firefox Esr 31.0Mozilla Firefox Esr 31.1Mozilla Firefox Esr 31.1.0Mozilla Firefox Esr 31.1.1Mozilla Firefox Esr 31.2Mozilla Firefox Esr 31.3Mozilla Firefox Esr 31.3.0Mozilla Firefox Esr 31.4Mozilla Firefox Esr 31.5Mozilla Firefox Esr 31.5.1Mozilla Firefox Esr 31.5.2Mozilla Firefox Esr 31.5.3Mozilla Firefox Esr 31.6.0
7.5
CVSSv2
CVE-2015-2728
The IndexedDatabaseManager class in the IndexedDB implementation in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 misinterprets an unspecified IDBDatabase field as a pointer, which allows remote attackers to execute arbitrary code or cause a...
Novell Suse Linux Enterprise Desktop 12.0Novell Suse Linux Enterprise Server 11Novell Suse Linux Enterprise Server 12.0Mozilla Firefox Esr 31.0Mozilla Firefox Esr 31.1Mozilla Firefox Esr 31.1.0Mozilla Firefox Esr 31.1.1Mozilla Firefox Esr 31.2Mozilla Firefox Esr 31.3Mozilla Firefox Esr 31.3.0Mozilla Firefox Esr 31.4Mozilla Firefox Esr 31.5Mozilla Firefox Esr 31.5.1Mozilla Firefox Esr 31.5.2Mozilla Firefox Esr 31.5.3Mozilla Firefox Esr 31.6.0Mozilla Firefox Esr 31.7.0Mozilla Firefox Esr 38.0Mozilla FirefoxOracle Solaris 11.3
10
CVSSv2
CVE-2015-2722
Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 allows remote attackers to execute arbitrary code via vectors involving attachment of an XMLHttpRequest object to a...
Oracle Solaris 11.3Mozilla Firefox Esr 31.0Mozilla Firefox Esr 31.1Mozilla Firefox Esr 31.1.0Mozilla Firefox Esr 31.1.1Mozilla Firefox Esr 31.2Mozilla Firefox Esr 31.3Mozilla Firefox Esr 31.3.0Mozilla Firefox Esr 31.4Mozilla Firefox Esr 31.5Mozilla Firefox Esr 31.5.1Mozilla Firefox Esr 31.5.2Mozilla Firefox Esr 31.5.3Mozilla Firefox Esr 31.6.0Mozilla Firefox Esr 31.7.0Mozilla Firefox Esr 38.0Mozilla FirefoxNovell Suse Linux Enterprise Desktop 12.0Novell Suse Linux Enterprise Server 11Novell Suse Linux Enterprise Server 12.0Novell Suse Linux Enterprise Software Development Kit 12.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
wirelesstoodeequinn projecttype confusionCVE-2021-26857scratchpadCVE-2020-29020man-in-the-middleibmCVE-2021-26971CVE-2021-28032CVE-2021-21725CVE-2021-26855