Priority HIGH 83
Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allow remote attackers to bypass the popup blocker via unspecified vectors.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.83512 · Published 2014-03-19 · Fixed CWE-269
Priority HIGH 83
The Web IDL implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to execute arbitrary JavaScript code with chrome privile…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.82214 · Published 2014-03-19 · Fixed CWE-269
Priority HIGH 82KEV
The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows local users to cause a denial of service (memory co…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.20329 · Published 2014-05-07 · Fixed CWE-362
Priority HIGH 69
Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.
CVSS 3.1MEDIUM 5.6· Local · Low privileges · No interaction · EPSS 0.93838 · Published 2018-01-04 · Fixed CWE-203
Priority HIGH 69
Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.36806 · Published 2015-04-14 · Fixed
Priority HIGH 66
Use-after-free vulnerability in the TypeObject class in the JavaScript engine in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to ex…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.2907 · Published 2014-03-19 · Fixed CWE-416
Priority MEDIUM 55
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.10378 · Published 2015-04-14 · Fixed
Priority MEDIUM 55
Double free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified ve…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.10378 · Published 2015-04-14 · Fixed
Priority MEDIUM 55
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.09575 · Published 2014-09-10 · Fixed
Priority MEDIUM 55
The nsGfxScrollFrameInner::IsLTR function in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allows remote attackers to execute arbitrary code via crafted use…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.11076 · Published 2013-12-11 · Fixed CWE-94
Priority MEDIUM 55
Use-after-free vulnerability in the nsNodeUtils::LastRelease function in the table-editing user interface in the editor component in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.10407 · Published 2013-12-11 · Fixed CWE-416
Priority MEDIUM 54
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.08151 · Published 2015-04-14 · Fixed
Priority MEDIUM 54
Buffer overflow in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.08759 · Published 2015-04-14 · Fixed CWE-119
Priority MEDIUM 54
Use-after-free vulnerability in the PresShell::DispatchSynthMouseMove function in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allows remote attackers to e…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.09448 · Published 2013-12-11 · Fixed CWE-416
Priority MEDIUM 53
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.0785 · Published 2015-04-14 · Fixed
Priority MEDIUM 53
Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.06966 · Published 2015-04-14 · Fixed
Priority MEDIUM 53
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.0785 · Published 2015-04-14 · Fixed
Priority MEDIUM 53
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allow remote attackers to cause a denial of serv…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.08033 · Published 2014-03-19 · Fixed CWE-119
Priority MEDIUM 53
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allow remote attackers to cause a denial of serv…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.08091 · Published 2013-12-11 · Fixed
Priority MEDIUM 52
Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.05989 · Published 2015-04-14 · Fixed
Priority MEDIUM 52
Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.05989 · Published 2015-04-14 · Fixed
Priority MEDIUM 52
Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.05989 · Published 2015-04-14 · Fixed
Priority MEDIUM 52
Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.05989 · Published 2015-04-14 · Fixed
Priority MEDIUM 52
Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.05989 · Published 2015-04-14 · Fixed
Priority MEDIUM 52
Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.05989 · Published 2015-04-14 · Fixed
Load more