Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

david morgan vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2009-3981
Unspecified vulnerability in the browser engine in Mozilla Firefox prior to 3.0.16, SeaMonkey prior to 2.0.1, and Thunderbird allows remote malicious users to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vector...
Mozilla Seamonkey 1.0.5Mozilla Seamonkey 1.0.4Mozilla Seamonkey 1.1.10Mozilla Seamonkey 1.0.99Mozilla Seamonkey 1.1.17Mozilla Seamonkey 1.1.2Mozilla Seamonkey 1.1.8Mozilla Seamonkey 1.1Mozilla Seamonkey 1.5.0.9Mozilla Seamonkey 2.0Mozilla Firefox 0.6.1Mozilla Firefox 0.3Mozilla Firefox 0.8Mozilla Firefox 0.9.1Mozilla Firefox 1.0.1Mozilla Firefox 1.0Mozilla Firefox 1.0.8Mozilla Firefox 1.5.0.4Mozilla Firefox 1.5.0.1Mozilla Firefox 1.5.0.10Mozilla Firefox 1.5.0.8Mozilla Firefox 1.5.0.9
NA
CVE-2009-3979
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox prior to 3.0.16 and 3.5.x prior to 3.5.6, SeaMonkey prior to 2.0.1, and Thunderbird allow remote malicious users to cause a denial of service (memory corruption and application crash) or possibly execut...
Mozilla Firefox 3.5.4Mozilla Firefox 3.5.5Mozilla Seamonkey 1.0.4Mozilla Seamonkey 1.0.3Mozilla Seamonkey 1.0.99Mozilla Seamonkey 1.0.9Mozilla Seamonkey 1.1.2Mozilla Seamonkey 1.1.13Mozilla Seamonkey 1.1Mozilla Seamonkey 1.1.7Mozilla Seamonkey 2.0Mozilla Firefox 0.3Mozilla Firefox 0.4Mozilla Firefox 0.9.1Mozilla Firefox 0.9Mozilla Firefox 1.0.1Mozilla Firefox 1.0Mozilla Firefox 1.5.0.4Mozilla Firefox 1.4.1Mozilla Firefox 1.5.0.10Mozilla Firefox 1.5Mozilla Firefox 1.5.0.8
NA
CVE-2009-3986
Mozilla Firefox prior to 3.0.16 and 3.5.x prior to 3.5.6, and SeaMonkey prior to 2.0.1, allows remote malicious users to execute arbitrary JavaScript with chrome privileges by leveraging a reference to a chrome window from a content window, related to the window.opener property.
Mozilla Firefox 3.5.1Mozilla Seamonkey 1.0.6Mozilla Seamonkey 1.0.1Mozilla Seamonkey 1.0Mozilla Seamonkey 1.1Mozilla Seamonkey 1.1.1Mozilla Firefox 3.5.2Mozilla Firefox 3.5.3Mozilla Seamonkey 1.0.5Mozilla Seamonkey 1.0.4Mozilla Seamonkey 1.1.10Mozilla Seamonkey 1.0.99Mozilla Seamonkey 1.1.3Mozilla Seamonkey 1.1.17Mozilla Seamonkey 1.1.8Mozilla Seamonkey 1.5.0.9Mozilla Seamonkey 2.0Mozilla Firefox 0.10.1Mozilla Firefox 0.6.1Mozilla Firefox 0.8Mozilla Firefox 0.9.1Mozilla Firefox 0.9
8.8
CVSSv3
CVE-2021-21120
Use after free in WebSQL in Google Chrome before 88.0.4324.96 allowed a remote malicious user to potentially exploit heap corruption via a crafted HTML page.
Google ChromeMicrosoft Edge Chromium
9.6
CVSSv3
CVE-2021-21121
Use after free in Omnibox in Google Chrome on Linux before 88.0.4324.96 allowed a remote malicious user to potentially perform a sandbox escape via a crafted HTML page.
Google ChromeMicrosoft Edge Chromium
8.8
CVSSv3
CVE-2021-21122
Use after free in Blink in Google Chrome before 88.0.4324.96 allowed a remote malicious user to potentially exploit heap corruption via a crafted HTML page.
Google ChromeMicrosoft Edge Chromium
6.5
CVSSv3
CVE-2021-21123
Insufficient data validation in File System API in Google Chrome before 88.0.4324.96 allowed a remote malicious user to bypass filesystem restrictions via a crafted HTML page.
Google ChromeMicrosoft Edge Chromium
8.1
CVSSv3
CVE-2021-21125
Insufficient policy enforcement in File System API in Google Chrome on Windows before 88.0.4324.96 allowed a remote malicious user to bypass filesystem restrictions via a crafted HTML page.
Google ChromeMicrosoft Edge Chromium
4.3
CVSSv3
CVE-2021-21147
Inappropriate implementation in Skia in Google Chrome before 88.0.4324.146 allowed a local malicious user to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
Google ChromeFedoraproject Fedora 32Fedoraproject Fedora 33
7.8
CVSSv3
CVE-2021-21117
Insufficient policy enforcement in Cryptohome in Google Chrome before 88.0.4324.96 allowed a local malicious user to perform OS-level privilege escalation via a crafted file.
Google Chrome
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionSSRFbuffer overflowCVE-2023-28952CVE-2023-41822CVE-2024-27956CVE-2023-7028CVE-2024-34447CVE-2024-34460
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook