Mozilla

Seamonkey

704 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2009-1306

  • EPSS 1.36%
  • Published 22.04.2009 18:30:00
  • Last modified 09.04.2025 00:30:58

The jar: URI implementation in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey does not follow the Content-Disposition header of the inner URI, which allows remote attackers to conduct cross-site scripting (XSS) attacks and possibly other at...

6.8

CVE-2009-1307

  • EPSS 1.37%
  • Published 22.04.2009 18:30:00
  • Last modified 09.04.2025 00:30:58

The view-source: URI implementation in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey does not properly implement the Same Origin Policy, which allows remote attackers to (1) bypass crossdomain.xml restrictions and connect to arbitrary web ...

4.3

CVE-2009-1308

Exploit
  • EPSS 1.1%
  • Published 22.04.2009 18:30:00
  • Last modified 09.04.2025 00:30:58

Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey allows remote attackers to inject arbitrary web script or HTML via vectors involving XBL JavaScript bindings and remote stylesheets, as exploited in ...

4.3

CVE-2009-1309

  • EPSS 1.3%
  • Published 22.04.2009 18:30:00
  • Last modified 09.04.2025 00:30:58

Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey do not properly implement the Same Origin Policy for (1) XMLHttpRequest, involving a mismatch for a document's principal, and (2) XPCNativeWrapper.toString, involving an incorrect __proto__ sco...

4.3

CVE-2009-1311

Exploit
  • EPSS 0.87%
  • Published 22.04.2009 18:30:00
  • Last modified 09.04.2025 00:30:58

Mozilla Firefox before 3.0.9 and SeaMonkey before 1.1.17 allow user-assisted remote attackers to obtain sensitive information via a web page with an embedded frame, which causes POST data from an outer page to be sent to the inner frame's URL during ...

4.3

CVE-2009-1312

  • EPSS 6.17%
  • Published 22.04.2009 18:30:00
  • Last modified 09.04.2025 00:30:58

Mozilla Firefox before 3.0.9 and SeaMonkey 1.1.17 do not block javascript: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header or...

10

CVE-2009-0771

  • EPSS 7.68%
  • Published 05.03.2009 02:30:00
  • Last modified 09.04.2025 00:30:58

The layout engine in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1.15 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via certain vectors that trigger memory corruption a...

9.3

CVE-2009-0772

  • EPSS 7.32%
  • Published 05.03.2009 02:30:00
  • Last modified 09.04.2025 00:30:58

The layout engine in Mozilla Firefox 2 and 3 before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1.15 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to nsCSSStyleSheet::GetO...

10

CVE-2009-0773

Exploit
  • EPSS 9.17%
  • Published 05.03.2009 02:30:00
  • Last modified 09.04.2025 00:30:58

The JavaScript engine in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1.15 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) a splice of an array that contains "some...

9.3

CVE-2009-0774

  • EPSS 7.46%
  • Published 05.03.2009 02:30:00
  • Last modified 09.04.2025 00:30:58

The layout engine in Mozilla Firefox 2 and 3 before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1.15 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to gczeal, a different v...