Vulnerabilities (CVE)

Vendor filter

Mozilla Subscribe

Filter

2083 total CVE
CVE Vendors Products Updated CVSS
CVE-2018-8024 2 Apache, Mozilla 2 Spark, Firefox 2019-02-20 3.5
In Apache Spark 2.1.0 to 2.1.2, 2.2.0 to 2.2.1, and 2.3.0, it's possible for a malicious user to construct a URL pointing to a Spark cluster's UI's job and stage info pages, and if a user can be tricked into accessing the URL, can be used to...
CVE-2018-18505 4 Mozilla, Canonical, Debian and 1 more 11 Firefox, Firefox Esr, Thunderbird and 8 more 2019-02-17 7.5
An earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added authentication to communication between IPC endpoints and server parents during IPC process creation. This authentication is insufficient for channels...
CVE-2018-18501 4 Mozilla, Canonical, Debian and 1 more 10 Firefox, Firefox Esr, Thunderbird and 7 more 2019-02-17 7.5
Mozilla developers and community members reported memory safety bugs present in Firefox 64 and Firefox ESR 60.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited...
CVE-2018-18500 4 Mozilla, Canonical, Debian and 1 more 10 Firefox, Firefox Esr, Thunderbird and 7 more 2019-02-17 7.5
A use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom HTML elements. This results in the stream parser object being freed while still in use, leading to a potentially exploitable crash. This vulnerability...
CVE-2015-4000 12 Google, Openssl, Apple and 9 more 25 Safari, Network Security Services, Ie and 22 more 2019-02-12 4.3
The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct cipher-downgrade attacks by rewriting a...
CVE-2018-18506 2 Mozilla, Canonical 2 Firefox, Ubuntu Linux 2019-02-08 4.3
When proxy auto-detection is enabled, if a web server serves a Proxy Auto-Configuration (PAC) file or if a PAC file is loaded locally, this PAC file can specify that requests to the localhost are to be sent through the proxy to another server....
CVE-2018-18503 2 Mozilla, Canonical 2 Firefox, Ubuntu Linux 2019-02-08 6.8
When JavaScript is used to create and manipulate an audio buffer, a potentially exploitable crash may occur because of a compartment mismatch in some situations. This vulnerability affects Firefox < 65.
CVE-2018-18504 2 Mozilla, Canonical 2 Firefox, Ubuntu Linux 2019-02-07 7.5
A crash and out-of-bounds read can occur when the buffer of a texture client is freed while it is still in use during graphic operations. This results is a potentially exploitable crash and the possibility of reading from the memory of the freed...
CVE-2018-18502 2 Mozilla, Canonical 2 Firefox, Ubuntu Linux 2019-02-07 10.0
Mozilla developers and community members reported memory safety bugs present in Firefox 64. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary...
CVE-2018-12374 4 Mozilla, Canonical, Debian and 1 more 7 Thunderbird, Ubuntu Linux, Debian Linux and 4 more 2018-12-26 4.3
Plaintext of decrypted emails can leak through by user submitting an embedded form by pressing enter key within a text input field. This vulnerability affects Thunderbird < 52.9.
CVE-2018-12373 4 Mozilla, Canonical, Debian and 1 more 7 Thunderbird, Ubuntu Linux, Debian Linux and 4 more 2018-12-26 4.3
dDecrypted S/MIME parts hidden with CSS or the plaintext HTML tag can leak plaintext when included in a HTML reply/forward. This vulnerability affects Thunderbird < 52.9.
CVE-2018-12372 4 Mozilla, Canonical, Debian and 1 more 7 Thunderbird, Ubuntu Linux, Debian Linux and 4 more 2018-12-26 4.3
Decrypted S/MIME parts, when included in HTML crafted for an attack, can leak plaintext when included in a a HTML reply/forward. This vulnerability affects Thunderbird < 52.9.
CVE-2018-12375 2 Mozilla, Canonical 2 Firefox, Ubuntu Linux 2018-12-06 6.8
Memory safety bugs present in Firefox 61. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 62.
CVE-2018-12385 4 Mozilla, Canonical, Debian and 1 more 11 Firefox, Firefox Esr, Thunderbird and 8 more 2018-12-06 4.4
A potentially exploitable crash in TransportSecurityInfo used for SSL can be triggered by data stored in the local cache in the user profile directory. This issue is only exploitable in combination with another vulnerability allowing an attacker...
CVE-2018-12381 1 Mozilla 2 Firefox, Firefox Esr 2018-12-06 5.0
Manually dragging and dropping an Outlook email message into the browser will trigger a page navigation when the message's mail columns are incorrectly interpreted as a URL. *Note: this issue only affects Windows operating systems with Outlook...
CVE-2018-5188 4 Mozilla, Canonical, Debian and 1 more 11 Firefox, Firefox Esr, Thunderbird and 8 more 2018-12-06 7.5
Memory safety bugs present in Firefox 60, Firefox ESR 60, and Firefox ESR 52.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This...
CVE-2018-5187 3 Mozilla, Canonical, Debian 5 Firefox, Firefox Esr, Thunderbird and 2 more 2018-12-06 7.5
Memory safety bugs present in Firefox 60 and Firefox ESR 60. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects...
CVE-2018-5156 4 Mozilla, Canonical, Debian and 1 more 11 Firefox, Firefox Esr, Thunderbird and 8 more 2018-12-06 7.5
A vulnerability can occur when capturing a media stream when the media source type is changed as the capture is occurring. This can result in stream data being cast to the wrong type causing a potentially exploitable crash. This vulnerability...
CVE-2018-12387 4 Mozilla, Canonical, Debian and 1 more 10 Firefox, Firefox Esr, Ubuntu Linux and 7 more 2018-12-06 6.4
A vulnerability where the JavaScript JIT compiler inlines Array.prototype.push with multiple arguments that results in the stack pointer being off by 8 bytes after a bailout. This leaks a memory address to the calling function which can be used...
CVE-2018-12386 4 Mozilla, Canonical, Debian and 1 more 10 Firefox, Firefox Esr, Ubuntu Linux and 7 more 2018-12-06 5.8
A vulnerability in register allocation in JavaScript can lead to type confusion, allowing for an arbitrary read and write. This leads to remote code execution inside the sandboxed content process when triggered. This vulnerability affects Firefox...