Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

gerry eisenhaur vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2008-0414
Mozilla Firefox prior to 2.0.0.12 and SeaMonkey prior to 1.1.8 allows user-assisted remote malicious users to trick the user into uploading arbitrary files via label tags that shift focus to a file input field, aka "focus spoofing."
Mozilla SeamonkeyMozilla Firefox
NA
CVE-2008-0417
CRLF injection vulnerability in Mozilla Firefox prior to 2.0.0.12 allows remote user-assisted web sites to corrupt the user's password store via newlines that are not properly handled when the user saves a password.
Mozilla Firefox
NA
CVE-2008-0412
The browser engine in Mozilla Firefox prior to 2.0.0.12, Thunderbird prior to 2.0.0.12, and SeaMonkey prior to 1.1.8 allows remote malicious users to cause a denial of service (crash) and possibly trigger memory corruption via vectors related to the (1) nsTableFrame::GetFrameAtOr...
Mozilla ThunderbirdMozilla SeamonkeyMozilla Firefox
NA
CVE-2008-0413
The JavaScript engine in Mozilla Firefox prior to 2.0.0.12, Thunderbird prior to 2.0.0.12, and SeaMonkey prior to 1.1.8 allows remote malicious users to cause a denial of service (crash) and possibly trigger memory corruption via (1) a large switch statement, (2) certain uses of ...
Mozilla ThunderbirdMozilla SeamonkeyMozilla Firefox
NA
CVE-2008-0419
Mozilla Firefox prior to 2.0.0.12 and SeaMonkey prior to 1.1.8 allows remote malicious users to steal navigation history and cause a denial of service (crash) via images in a page that uses designMode frames, which triggers memory corruption related to resize handles.
Mozilla FirefoxMozilla Seamonkey
NA
CVE-2008-0591
Mozilla Firefox prior to 2.0.0.12 and Thunderbird prior to 2.0.0.12 does not properly manage a delay timer used in confirmation dialogs, which might allow remote malicious users to trick users into confirming an unsafe action, such as remote file execution, by using a timer to ch...
Mozilla FirefoxMozilla Thunderbird
NA
CVE-2008-0592
Mozilla Firefox prior to 2.0.0.12 and SeaMonkey prior to 1.1.8 allows user-assisted remote malicious users to cause a denial of service via a plain .txt file with a "Content-Disposition: attachment" and an invalid "Content-Type: plain/text," which prevents Fir...
Mozilla FirefoxMozilla Seamonkey
NA
CVE-2008-0593
Gecko-based browsers, including Mozilla Firefox prior to 2.0.0.12 and SeaMonkey prior to 1.1.8, modify the .href property of stylesheet DOM nodes to the final URI of a 302 redirect, which might allow remote malicious users to bypass the Same Origin Policy and read sensitive infor...
Mozilla Firefox 1.5.0.2Mozilla Firefox 1.5.2Mozilla Firefox 2.0Mozilla Firefox 0.2Mozilla Firefox 0.9.2Mozilla FirefoxMozilla Firefox 2.0.0.1Mozilla Firefox 2.0.0.10Mozilla Firefox 1.0.2Mozilla Firefox 1.5.0.12Mozilla Seamonkey 1.1.14Mozilla SeamonkeyMozilla Seamonkey 1.0Mozilla Seamonkey 1.1.13Mozilla Seamonkey 1.0.1Mozilla Seamonkey 1.1.12Mozilla Seamonkey 1.0.8Mozilla Seamonkey 1.0.7Mozilla Seamonkey 1.0.4Mozilla Seamonkey 1.0.3Mozilla Seamonkey 1.1.15Mozilla Seamonkey 1.1.11
NA
CVE-2008-0594
Mozilla Firefox prior to 2.0.0.12 does not always display a web forgery warning dialog if the entire contents of a web page are in a DIV tag that uses absolute positioning, which makes it easier for remote malicious users to conduct phishing attacks.
Mozilla Firefox
NA
CVE-2008-0415
Mozilla Firefox prior to 2.0.0.12, Thunderbird prior to 2.0.0.12, and SeaMonkey prior to 1.1.8 allows remote malicious users to execute script outside of the sandbox and conduct cross-site scripting (XSS) attacks via multiple vectors including the XMLDocument.load function, aka &...
Mozilla ThunderbirdMozilla SeamonkeyMozilla Firefox
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionSSRFbuffer overflowCVE-2023-28952CVE-2023-41822CVE-2024-27956CVE-2023-7028CVE-2024-34447CVE-2024-34460
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook