Vulnerabilities (CVE)

Filtered by vendor Mozilla Subscribe
Filtered by product Firefox
Total 3284 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2004-0648 1 Mozilla 3 Firefox, Mozilla, Thunderbird 2026-06-16 10.0 HIGH N/A
Mozilla (Suite) before 1.7.1, Firefox before 0.9.2, and Thunderbird before 0.7.2 allow remote attackers to launch arbitrary programs via a URI referencing the shell: protocol.
CVE-2003-1492 2 Mozilla, Netscape 2 Firefox, Navigator 2026-06-16 5.0 MEDIUM N/A
Netscape Navigator 7.0.2 and Mozilla allows remote attackers to access cookie information in a different domain via an HTTP request for a domain with an extra . (dot) at the end.
CVE-2002-2437 1 Mozilla 3 Firefox, Seamonkey, Thunderbird 2026-06-16 5.0 MEDIUM N/A
The JavaScript implementation in Mozilla Firefox before 4.0, Thunderbird before 3.3, and SeaMonkey before 2.1 does not properly restrict the set of values contained in the object returned by the getComputedStyle method, which allows remote attackers to obtain sensitive information about visited web pages by calling this method.
CVE-2002-2436 1 Mozilla 3 Firefox, Seamonkey, Thunderbird 2026-06-16 4.3 MEDIUM N/A
The Cascading Style Sheets (CSS) implementation in Mozilla Firefox before 4.0, Thunderbird before 3.3, and SeaMonkey before 2.1 does not properly handle the :visited pseudo-class, which allows remote attackers to obtain sensitive information about visited web pages via a crafted HTML document, a related issue to CVE-2010-2264.