Skip to content
OpenAdvisories

Archive

31 January 2016

Vulnerabilities first published on this day (UTC), newest first.

16 results · Feed

  • Unscored —

    Mozilla Firefox before 44.0 on Android allows remote attackers to spoof the address bar via the scrollTo method.

  • Unscored —

    Buffer overflow in the BufferSubData function in Mozilla Firefox before 44.0 and Firefox ESR 38.x before 38.6 allows re…

  • Unscored —

    Mozilla Firefox 43.x mishandles attempts to connect to the Application Reputation service, which makes it easier for re…

  • Unscored —

    The nsZipArchive function in Mozilla Firefox before 44.0 might allow remote attackers to cause a denial of service or p…

  • Unscored —

    The protocol-handler dialog in Mozilla Firefox before 44.0 allows remote attackers to conduct clickjacking attacks via …

  • Unscored —

    Integer overflow in the image-deinterlacing functionality in Mozilla Firefox before 44.0 allows remote attackers to cau…

  • Unscored —

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 44.0 and Firefox ESR 38.x before 3…

  • Unscored —

    The s_mp_div function in lib/freebl/mpi/mpi.c in Mozilla Network Security Services (NSS) before 3.21, as used in Mozill…

  • Unscored —

    The file-download dialog in Mozilla Firefox before 44.0 on OS X enables a certain button too quickly, which allows remo…

  • Unscored —

    The MoofParser::Metadata function in binding/MoofParser.cpp in libstagefright in Mozilla Firefox before 44.0 does not l…

  • Unscored —

    The Buffer11::NativeBuffer11::map function in ANGLE, as used in Mozilla Firefox before 44.0, might allow remote attacke…

  • Unscored —

    Mozilla Firefox before 44.0 on Android does not ensure that HTTPS is used for a lightweight-theme installation, which a…

  • Unscored —

    Mozilla Firefox before 44.0 stores cookies with names containing vertical tab characters, which allows remote attackers…

  • Unscored —

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 44.0 allow remote attackers to cau…

  • Unscored —

    Mozilla Firefox before 44.0 on Android allows remote attackers to spoof the address bar via a data: URL that is mishand…

  • Unscored —

    Mozilla Firefox before 44.0 allows user-assisted remote attackers to spoof a trailing substring in the address bar by l…