1,441 results · Feed
-
Unscored —
The graphite2::TtfUtil::CmapSubtable12NextCodepoint function in Graphite 2 before 1.3.6, as used in Mozilla Firefox bef…
-
Unscored —
The graphite2::GlyphCache::Loader::Loader function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 a…
-
Unscored —
The graphite2::GlyphCache::glyph function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefo…
-
Unscored —
The graphite2::Slot::getAttr function in Slot.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 an…
-
Unscored —
The graphite2::FileFace::get_table_fn function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and F…
-
Unscored —
CachedCmap.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, all…
-
Unscored —
The graphite2::TtfUtil::GetTableInfo function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Fi…
-
Unscored —
Mozilla Firefox before 44.0.2 does not properly restrict the interaction between Service Workers and plugins, which all…
-
Unscored —
Buffer overflow in the BufferSubData function in Mozilla Firefox before 44.0 and Firefox ESR 38.x before 38.6 allows re…
-
Unscored —
Mozilla Firefox 43.x mishandles attempts to connect to the Application Reputation service, which makes it easier for re…
-
Unscored —
The nsZipArchive function in Mozilla Firefox before 44.0 might allow remote attackers to cause a denial of service or p…
-
Unscored —
The protocol-handler dialog in Mozilla Firefox before 44.0 allows remote attackers to conduct clickjacking attacks via …
-
Unscored —
Integer overflow in the image-deinterlacing functionality in Mozilla Firefox before 44.0 allows remote attackers to cau…
-
Unscored —
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 44.0 and Firefox ESR 38.x before 3…
-
Unscored —
The s_mp_div function in lib/freebl/mpi/mpi.c in Mozilla Network Security Services (NSS) before 3.21, as used in Mozill…
-
Unscored —
The MoofParser::Metadata function in binding/MoofParser.cpp in libstagefright in Mozilla Firefox before 44.0 does not l…
-
Unscored —
The Buffer11::NativeBuffer11::map function in ANGLE, as used in Mozilla Firefox before 44.0, might allow remote attacke…
-
Unscored —
Mozilla Firefox before 44.0 stores cookies with names containing vertical tab characters, which allows remote attackers…
-
Unscored —
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 44.0 allow remote attackers to cau…
-
Unscored —
Mozilla Firefox before 44.0 allows user-assisted remote attackers to spoof a trailing substring in the address bar by l…
-
Unscored —
Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x be…
-
Unscored —
Integer overflow in the mozilla::layers::BufferTextureClient::AllocateForSurface function in Mozilla Firefox before 43.…
-
Unscored —
Mozilla Firefox before 43.0 does not properly restrict the availability of IFRAME Resource Timing API times, which allo…
-
Unscored —
Buffer overflow in the nsDeque::GrowCapacity function in xpcom/glue/nsDeque.cpp in Mozilla Firefox before 43.0 might al…
-
Unscored —
Mozilla Firefox before 43.0 stores cookies containing vertical tab characters, which allows remote attackers to obtain …
-
Unscored —
Buffer overflow in the XDRBuffer::grow function in js/src/vm/Xdr.cpp in Mozilla Firefox before 43.0 might allow remote …
-
Unscored —
The gdk-pixbuf configuration in Mozilla Firefox before 43.0 on Linux GNOME platforms incorrectly enables the TGA decode…
-
Unscored —
Integer underflow in the RTPReceiverVideo::ParseRtpPacket function in Mozilla Firefox before 43.0 and Firefox ESR 38.x …
-
Unscored —CVE-2015-7214 Public exploit
Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allow remote attackers to bypass the Same Origin Policy vi…
-
Unscored —
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 3…
-
Unscored —
The gdk-pixbuf configuration in Mozilla Firefox before 43.0 on Linux GNOME platforms incorrectly enables the JasPer dec…
-
Unscored —
Mozilla Firefox before 43.0 mishandles the # (number sign) character in a data: URI, which allows remote attackers to s…
-
Unscored —
Mozilla Firefox before 43.0 does not properly store the properties of unboxed objects, which allows remote attackers to…
-
Unscored —
Use-after-free vulnerability in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allows remote attackers to…
-
Unscored —
The HTTP/2 implementation in Mozilla Firefox before 43.0 allows remote attackers to cause a denial of service (integer …
-
Unscored —
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 43.0 allow remote attackers to cau…
-
Unscored —
The HTTP/2 implementation in Mozilla Firefox before 43.0 allows remote attackers to cause a denial of service (integer …
-
Unscored —
Integer underflow in the Metadata::setData function in MetaData.cpp in libstagefright in Mozilla Firefox before 43.0 an…
-
Unscored —
The WebExtension APIs in Mozilla Firefox before 43.0 allow remote attackers to gain privileges, and possibly obtain sen…
-
Unscored —
The importScripts function in the Web Workers API implementation in Mozilla Firefox before 43.0 allows remote attackers…