5 November 2015

23 results · Feed

• Unscored —
  CVE-2015-7182 EPSS 10%

  Heap-based buffer overflow in the ASN.1 decoder in Mozilla Network Security Services (NSS) before 3.19.2.1 and 3.20.x b…

  thunderbird firefox nss nss Debian Ubuntu
  Nov 5, 2015
• Unscored —
  CVE-2015-7189

  Race condition in the JPEGEncoder function in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allows remot…

  thunderbird firefox Ubuntu
  Nov 5, 2015
• Unscored —
  CVE-2015-7193

  Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 improperly follow the CORS cross-origin request algorithm …

  thunderbird firefox Ubuntu
  Nov 5, 2015
• Unscored —
  CVE-2015-7194

  Buffer underflow in libjar in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allows remote attackers to c…

  thunderbird firefox Ubuntu
  Nov 5, 2015
• Unscored —
  CVE-2015-7187

  The Add-on SDK in Mozilla Firefox before 42.0 misinterprets a "script: false" panel setting, which makes it easier for …

  firefox Ubuntu
  Nov 5, 2015
• Unscored —
  CVE-2015-7195

  The URL parsing implementation in Mozilla Firefox before 42.0 improperly recognizes escaped characters in hostnames wit…

  firefox Ubuntu
  Nov 5, 2015
• Unscored —
  CVE-2015-7198

  Buffer overflow in the rx::TextureStorage11 class in ANGLE, as used in Mozilla Firefox before 42.0 and Firefox ESR 38.x…

  thunderbird firefox Ubuntu
  Nov 5, 2015
• Unscored —
  CVE-2015-7192

  The accessibility-tools feature in Mozilla Firefox before 42.0 on OS X improperly interacts with the implementation of …

  Nov 5, 2015
• Unscored —
  CVE-2015-7181

  The sec_asn1d_parse_leaf function in Mozilla Network Security Services (NSS) before 3.19.2.1 and 3.20.x before 3.20.1, …

  thunderbird firefox nss nss Debian Ubuntu
  Nov 5, 2015
• Unscored —
  CVE-2015-7191

  Mozilla Firefox before 42.0 on Android improperly restricts URL strings in intents, which allows attackers to conduct c…

  Nov 5, 2015
• Unscored —
  CVE-2015-7190

  The Search feature in Mozilla Firefox before 42.0 on Android through 4.4 supports search-engine URL registration throug…

  Nov 5, 2015
• Unscored —
  CVE-2015-7197

  Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 improperly control the ability of a web worker to create a…

  thunderbird firefox Ubuntu
  Nov 5, 2015
• Unscored —
  CVE-2015-7185

  Mozilla Firefox before 42.0 on Android does not ensure that the address bar is restored upon fullscreen-mode exit, whic…

  Nov 5, 2015
• Unscored —
  CVE-2015-7188

  Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allow remote attackers to bypass the Same Origin Policy fo…

  thunderbird firefox Ubuntu
  Nov 5, 2015
• Unscored —
  CVE-2015-7186

  Mozilla Firefox before 42.0 on Android allows user-assisted remote attackers to bypass the Same Origin Policy and trigg…

  Nov 5, 2015
• Unscored —
  CVE-2015-7199

  The (1) AddWeightedPathSegLists and (2) SVGPathSegListSMILType::Interpolate functions in Mozilla Firefox before 42.0 an…

  thunderbird firefox Ubuntu
  Nov 5, 2015
• Unscored —
  CVE-2015-7183

  Integer overflow in the PL_ARENA_ALLOCATE implementation in Netscape Portable Runtime (NSPR) in Mozilla Network Securit…

  thunderbird firefox virtualbox nspr Debian Ubuntu
  Nov 5, 2015
• Unscored —
  CVE-2015-7196

  Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4, when a Java plugin is enabled, allow remote attackers to …

  firefox Ubuntu
  Nov 5, 2015
• Unscored —
  CVE-2015-7200

  The CryptoKey interface implementation in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 lacks status che…

  thunderbird firefox Ubuntu
  Nov 5, 2015
• Unscored —
  CVE-2015-4518

  The Reader View implementation in Mozilla Firefox before 42.0 has an improper whitelist, which makes it easier for remo…

  firefox Ubuntu
  Nov 5, 2015
• Unscored —
  CVE-2015-4514

  Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 42.0 allow remote attackers to cau…

  firefox Ubuntu
  Nov 5, 2015
• Unscored —
  CVE-2015-4515

  Mozilla Firefox before 42.0, when NTLM v1 is enabled for HTTP authentication, allows remote attackers to obtain sensiti…

  firefox Ubuntu
  Nov 5, 2015
• Unscored —
  CVE-2015-4513

  Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 3…

  thunderbird firefox Ubuntu
  Nov 5, 2015