Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

TI-2016-08023 CVE-2016-9903 · GHSA-9fhg-wr6f-g4x9

Cross-site scripting in Mozilla Firefox

Priority LOW 29

Mozilla's add-ons SDK had a world-accessible resource with an HTML injection vulnerability.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.0112 Published 2018-06-11 Fixed in 50.1 CWE-79
TI-2016-08016 CVE-2016-9896 · GHSA-r97x-58x3-7qgg

Use after free in Mozilla Firefox

Priority LOW 39

Use-after-free while manipulating the "navigator" object within WebVR.

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.01922 Published 2018-06-11 Fixed in 50.1 CWE-416
TI-2016-08014 CVE-2016-9894 · GHSA-xfhf-q7xr-xpw6

Memory corruption in Mozilla Firefox

Priority MEDIUM 41

A buffer overflow in SkiaGl caused when a GrGLBuffer is truncated during allocation.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.04971 Published 2018-06-11 Fixed in 50.1 CWE-119
TI-2016-07434 CVE-2016-9080 · GHSA-9rjc-h49g-75c4

Memory corruption in Mozilla Firefox

Priority MEDIUM 46

Memory safety bugs were reported in Firefox 50.0.2.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.0225 Published 2018-06-11 Fixed in 50.1 CWE-119