Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
mozilla firefox esr vulnerabilities and exploits
(subscribe to this query)
4.6
CVSSv2
CVE-2015-4482
mar_read.c in the Updater in Mozilla Firefox prior to 40.0 and Firefox ESR 38.x prior to 38.2 allows local users to gain privileges or cause a denial of service (out-of-bounds write) via a crafted name of a Mozilla Archive (aka MAR) file.
Opensuse Opensuse 13.1
Opensuse Opensuse 13.2
Mozilla Firefox Esr 38.0
Mozilla Firefox Esr 38.1.0
Mozilla Firefox
Mozilla Firefox Esr 38.0.5
Mozilla Firefox Esr 38.0.1
Oracle Solaris 11.3
3.3
CVSSv2
CVE-2015-4481
Race condition in the Mozilla Maintenance Service in Mozilla Firefox prior to 40.0 and Firefox ESR 38.x prior to 38.2 on Windows allows local users to write to arbitrary files and consequently gain privileges via vectors involving a hard link to a log file during an update.
Mozilla Firefox
Mozilla Firefox Esr 38.0
Mozilla Firefox Esr 38.0.1
Mozilla Firefox Esr 38.0.5
Mozilla Firefox Esr 38.1.0
Opensuse Opensuse 13.1
Opensuse Opensuse 13.2
Oracle Solaris 11.3
1 EDB exploit
6.8
CVSSv2
CVE-2016-1950
Heap-based buffer overflow in Mozilla Network Security Services (NSS) prior to 3.19.2.3 and 3.20.x and 3.21.x prior to 3.21.1, as used in Mozilla Firefox prior to 45.0 and Firefox ESR 38.x prior to 38.7, allows remote malicious users to execute arbitrary code via crafted ASN.1 da...
Mozilla Network Security Services 3.19.2
Mozilla Network Security Services 3.20
Mozilla Network Security Services 3.20.1
Mozilla Network Security Services 3.21
Mozilla Firefox
Mozilla Firefox Esr 38.0
Mozilla Firefox Esr 38.0.1
Mozilla Firefox Esr 38.0.5
Mozilla Firefox Esr 38.1.0
Mozilla Firefox Esr 38.1.1
Mozilla Firefox Esr 38.2.0
Mozilla Firefox Esr 38.2.1
Mozilla Firefox Esr 38.3.0
Mozilla Firefox Esr 38.4.0
Mozilla Firefox Esr 38.5.0
Mozilla Firefox Esr 38.5.1
Mozilla Firefox Esr 38.6.0
Mozilla Firefox Esr 38.6.1
Oracle Linux 5.0
Oracle Vm Server 3.2
Oracle Linux 6
Oracle Linux 7
4.3
CVSSv2
CVE-2012-0455
Mozilla Firefox prior to 3.6.28 and 4.x up to and including 10.0, Firefox ESR 10.x prior to 10.0.3, Thunderbird prior to 3.1.20 and 5.0 up to and including 10.0, Thunderbird ESR 10.x prior to 10.0.3, and SeaMonkey prior to 2.8 do not properly restrict drag-and-drop operations on ...
Mozilla Firefox
Mozilla Firefox 4.0
Mozilla Firefox 8.0
Mozilla Firefox 5.0.1
Mozilla Firefox 5.0
Mozilla Firefox 7.0
Mozilla Firefox 6.0.2
Mozilla Firefox 6.0.1
Mozilla Firefox 6.0
Mozilla Firefox 7.0.1
Mozilla Firefox 8.0.1
Mozilla Firefox 9.0.1
Mozilla Firefox 9.0
Mozilla Firefox 4.0.1
Mozilla Firefox Esr 10.2
Mozilla Firefox Esr 10.0
Mozilla Firefox Esr 10.1
Mozilla Thunderbird
Mozilla Thunderbird 6.0.1
Mozilla Thunderbird 5.0
Mozilla Thunderbird 6.0.2
Mozilla Thunderbird 8.0
5
CVSSv2
CVE-2018-5174
In the Windows 10 April 2018 Update, Windows Defender SmartScreen honors the "SEE_MASK_FLAG_NO_UI" flag associated with downloaded files and will not show any UI. Files that are unknown and potentially dangerous will be allowed to run because SmartScreen will not prompt...
Mozilla Firefox
Mozilla Firefox Esr
Mozilla Thunderbird
Mozilla Thunderbird Esr
10
CVSSv2
CVE-2013-5590
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox prior to 25.0, Firefox ESR 17.x prior to 17.0.10 and 24.x prior to 24.1, Thunderbird prior to 24.1, Thunderbird ESR 17.x prior to 17.0.10, and SeaMonkey prior to 2.22 allow remote malicious users to cau...
Mozilla Seamonkey 2.0.10
Mozilla Seamonkey 2.13.1
Mozilla Seamonkey 2.21
Mozilla Seamonkey 2.15
Mozilla Seamonkey 2.20
Mozilla Seamonkey 2.0.13
Mozilla Seamonkey 2.12.1
Mozilla Seamonkey 2.13.2
Mozilla Seamonkey 2.14
Mozilla Seamonkey 2.12
Mozilla Seamonkey 2.0.4
Mozilla Seamonkey 2.10
Mozilla Seamonkey 2.1
Mozilla Seamonkey 2.11
Mozilla Seamonkey 2.0.3
Mozilla Seamonkey 2.0.2
Mozilla Seamonkey 2.16
Mozilla Seamonkey 2.13
Mozilla Seamonkey 2.16.1
Mozilla Seamonkey 2.0
Mozilla Seamonkey 2.0.8
Mozilla Seamonkey 2.19
10
CVSSv2
CVE-2013-5597
Use-after-free vulnerability in the nsDocLoader::doStopDocumentLoad function in Mozilla Firefox prior to 25.0, Firefox ESR 17.x prior to 17.0.10 and 24.x prior to 24.1, Thunderbird prior to 24.1, Thunderbird ESR 17.x prior to 17.0.10, and SeaMonkey prior to 2.22 allows remote mal...
Mozilla Thunderbird Esr 17.0.8
Mozilla Thunderbird Esr 17.0.1
Mozilla Thunderbird Esr 17.0.2
Mozilla Thunderbird Esr 17.0.3
Mozilla Thunderbird Esr 17.0.7
Mozilla Thunderbird Esr 17.0.5
Mozilla Thunderbird Esr 17.0.6
Mozilla Thunderbird Esr 17.0.9
Mozilla Thunderbird Esr 17.0.4
Mozilla Thunderbird Esr 17.0
Mozilla Thunderbird 17.0.7
Mozilla Thunderbird 17.0.3
Mozilla Thunderbird 17.0.1
Mozilla Thunderbird 17.0.4
Mozilla Thunderbird 17.0
Mozilla Thunderbird 17.0.2
Mozilla Thunderbird 17.0.8
Mozilla Thunderbird
Mozilla Thunderbird 17.0.6
Mozilla Thunderbird 24.0
Mozilla Thunderbird 17.0.5
Mozilla Firefox Esr 17.0.5
10
CVSSv2
CVE-2013-5599
Use-after-free vulnerability in the nsIPresShell::GetPresContext function in the PresShell (aka presentation shell) implementation in Mozilla Firefox prior to 25.0, Firefox ESR 17.x prior to 17.0.10 and 24.x prior to 24.1, Thunderbird prior to 24.1, Thunderbird ESR 17.x prior to ...
Mozilla Firefox 19.0
Mozilla Firefox
Mozilla Firefox 23.0.1
Mozilla Firefox 19.0.2
Mozilla Firefox 20.0.1
Mozilla Firefox 19.0.1
Mozilla Firefox 21.0
Mozilla Firefox 20.0
Mozilla Firefox 22.0
Mozilla Firefox 23.0
Mozilla Seamonkey 2.0.10
Mozilla Seamonkey 2.13.1
Mozilla Seamonkey 2.21
Mozilla Seamonkey 2.15
Mozilla Seamonkey 2.20
Mozilla Seamonkey 2.0.13
Mozilla Seamonkey 2.12.1
Mozilla Seamonkey 2.13.2
Mozilla Seamonkey 2.14
Mozilla Seamonkey 2.12
Mozilla Seamonkey 2.0.4
Mozilla Seamonkey 2.10
10
CVSSv2
CVE-2013-5600
Use-after-free vulnerability in the nsIOService::NewChannelFromURIWithProxyFlags function in Mozilla Firefox prior to 25.0, Firefox ESR 17.x prior to 17.0.10 and 24.x prior to 24.1, Thunderbird prior to 24.1, Thunderbird ESR 17.x prior to 17.0.10, and SeaMonkey prior to 2.22 allo...
Mozilla Firefox 19.0
Mozilla Firefox
Mozilla Firefox 23.0.1
Mozilla Firefox 19.0.2
Mozilla Firefox 20.0.1
Mozilla Firefox 19.0.1
Mozilla Firefox 21.0
Mozilla Firefox 20.0
Mozilla Firefox 22.0
Mozilla Firefox 23.0
Mozilla Thunderbird 17.0.7
Mozilla Thunderbird 17.0.3
Mozilla Thunderbird 17.0.1
Mozilla Thunderbird 17.0.4
Mozilla Thunderbird 17.0
Mozilla Thunderbird 17.0.2
Mozilla Thunderbird 17.0.8
Mozilla Thunderbird
Mozilla Thunderbird Esr 17.0.9
Mozilla Thunderbird 17.0.6
Mozilla Thunderbird 24.0
Mozilla Thunderbird 17.0.5
10
CVSSv2
CVE-2013-5601
Use-after-free vulnerability in the nsEventListenerManager::SetEventHandler function in Mozilla Firefox prior to 25.0, Firefox ESR 17.x prior to 17.0.10 and 24.x prior to 24.1, Thunderbird prior to 24.1, Thunderbird ESR 17.x prior to 17.0.10, and SeaMonkey prior to 2.22 allows re...
Mozilla Seamonkey 2.0.10
Mozilla Seamonkey 2.13.1
Mozilla Seamonkey 2.21
Mozilla Seamonkey 2.15
Mozilla Seamonkey 2.20
Mozilla Seamonkey 2.0.13
Mozilla Seamonkey 2.12.1
Mozilla Seamonkey 2.13.2
Mozilla Seamonkey 2.14
Mozilla Seamonkey 2.12
Mozilla Seamonkey 2.0.4
Mozilla Seamonkey 2.10
Mozilla Seamonkey 2.1
Mozilla Seamonkey 2.11
Mozilla Seamonkey 2.0.3
Mozilla Seamonkey 2.0.2
Mozilla Seamonkey 2.16
Mozilla Seamonkey 2.13
Mozilla Seamonkey 2.16.1
Mozilla Seamonkey 2.0
Mozilla Seamonkey 2.0.8
Mozilla Seamonkey 2.19
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
logic flaw
CVE-2024-23692
CVE-2024-26229
CVE-2024-35255
CVE-2024-5835
CVE-2024-5837
XML external entity
dos
CVE-2024-5813
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
9
10
NEXT »