Search CVE reports
51 – 60 of 127 results
Cross-site scripting (XSS) vulnerability in Mozilla Firefox 1.5 before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to inject arbitrary web script or HTML via...
6 affected packages
firefox, firefox-granparadiso, lightning-sunbird, midbrowser, mozilla-thunderbird, xulrunner
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
---|---|---|---|---|
firefox | — | — | — | — |
firefox-granparadiso | — | — | — | — |
lightning-sunbird | — | — | — | — |
midbrowser | — | — | — | — |
mozilla-thunderbird | — | — | — | — |
xulrunner | — | — | — | — |
Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows scripts with the UniversalBrowserRead privilege to gain UniversalXPConnect privileges and possibly execute code or obtain sensitive data...
6 affected packages
firefox, firefox-granparadiso, lightning-sunbird, midbrowser, mozilla-thunderbird, xulrunner
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
---|---|---|---|---|
firefox | — | — | — | — |
firefox-granparadiso | — | — | — | — |
lightning-sunbird | — | — | — | — |
midbrowser | — | — | — | — |
mozilla-thunderbird | — | — | — | — |
xulrunner | — | — | — | — |
Mozilla Firefox before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote Proxy AutoConfig (PAC) servers to execute code with elevated privileges via a PAC script that sets the FindProxyForURL function to an eval method on...
5 affected packages
firefox, firefox-granparadiso, lightning-sunbird, midbrowser, xulrunner
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
---|---|---|---|---|
firefox | — | — | — | — |
firefox-granparadiso | — | — | — | — |
lightning-sunbird | — | — | — | — |
midbrowser | — | — | — | — |
xulrunner | — | — | — | — |
The Javascript engine in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 might allow remote attackers to execute arbitrary code via vectors involving garbage collection that causes deletion...
6 affected packages
firefox, firefox-granparadiso, lightning-sunbird, midbrowser, mozilla-thunderbird, xulrunner
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
---|---|---|---|---|
firefox | — | — | — | — |
firefox-granparadiso | — | — | — | — |
lightning-sunbird | — | — | — | — |
midbrowser | — | — | — | — |
mozilla-thunderbird | — | — | — | — |
xulrunner | — | — | — | — |
Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to hijack native DOM methods from objects in another domain and conduct cross-site scripting (XSS) attacks using DOM...
6 affected packages
firefox, firefox-granparadiso, lightning-sunbird, midbrowser, mozilla-thunderbird, xulrunner
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
---|---|---|---|---|
firefox | — | — | — | — |
firefox-granparadiso | — | — | — | — |
lightning-sunbird | — | — | — | — |
midbrowser | — | — | — | — |
mozilla-thunderbird | — | — | — | — |
xulrunner | — | — | — | — |
Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 does not properly clear a JavaScript reference to a frame or window, which leaves a pointer to a deleted object that allows remote attackers to execute arbitrary native code.
5 affected packages
firefox, firefox-granparadiso, lightning-sunbird, midbrowser, xulrunner
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
---|---|---|---|---|
firefox | — | — | — | — |
firefox-granparadiso | — | — | — | — |
lightning-sunbird | — | — | — | — |
midbrowser | — | — | — | — |
xulrunner | — | — | — | — |
Mozilla Firefox 1.5 before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via simultaneous XPCOM events, which...
6 affected packages
firefox, firefox-granparadiso, lightning-sunbird, midbrowser, mozilla-thunderbird, xulrunner
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
---|---|---|---|---|
firefox | — | — | — | — |
firefox-granparadiso | — | — | — | — |
lightning-sunbird | — | — | — | — |
midbrowser | — | — | — | — |
mozilla-thunderbird | — | — | — | — |
xulrunner | — | — | — | — |
Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to execute arbitrary code via script that changes the standard Object() constructor to return a reference to...
6 affected packages
firefox, firefox-granparadiso, lightning-sunbird, midbrowser, mozilla-thunderbird, xulrunner
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
---|---|---|---|---|
firefox | — | — | — | — |
firefox-granparadiso | — | — | — | — |
lightning-sunbird | — | — | — | — |
midbrowser | — | — | — | — |
mozilla-thunderbird | — | — | — | — |
xulrunner | — | — | — | — |
Multiple integer overflows in the Javascript engine in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 might allow remote attackers to execute arbitrary code via vectors involving (1) long...
6 affected packages
firefox, firefox-granparadiso, lightning-sunbird, midbrowser, mozilla-thunderbird, xulrunner
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
---|---|---|---|---|
firefox | — | — | — | — |
firefox-granparadiso | — | — | — | — |
lightning-sunbird | — | — | — | — |
midbrowser | — | — | — | — |
mozilla-thunderbird | — | — | — | — |
xulrunner | — | — | — | — |
Race condition in the JavaScript garbage collection in Mozilla Firefox 1.5 before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 might allow remote attackers to execute arbitrary code by causing the garbage...
6 affected packages
firefox, firefox-granparadiso, lightning-sunbird, midbrowser, mozilla-thunderbird, xulrunner
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
---|---|---|---|---|
firefox | — | — | — | — |
firefox-granparadiso | — | — | — | — |
lightning-sunbird | — | — | — | — |
midbrowser | — | — | — | — |
mozilla-thunderbird | — | — | — | — |
xulrunner | — | — | — | — |