Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.4When an email contains multiple attachments with external links via the X-Mozilla-External-Attachment-URL header, only the last link is shown when hovering over any attachment.Check if you run itEPSS 0.32%Apr 15, 2025
- Medium6.3Thunderbird processes the X-Mozilla-External-Attachment-URL header to handle attachments which can be hosted externally.Check if you run itEPSS 0.27%Apr 15, 2025
- Medium6.3By crafting a malformed file name for an attachment in a multipart message, an attacker can trick Thunderbird into including a directory listing of /tmp when the message is forwardCheck if you run itEPSS 0.36%Apr 15, 2025
- Medium6.5A race condition existed in nsHttpTransaction that could have been exploited to cause memory corruption, potentially leading to an exploitable condition.Check if you run itEPSS 0.32%Apr 15, 2025
- Critical9.8Mozilla Firefox Use-After-Free VulnerabilityPatch nowKEVEPSS 23.18%Oct 9, 2024
- UnknownFirefox for Android iframe Sandbox Bypass via intent: url Scheme VulnerabilityPatch nowKEVEPSS 0.79%Sep 27, 2023
- UnknownMozilla Firefox Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 29.73%Nov 8, 2022
- UnknownMozilla Firefox Out-of-bounds WritePatch nowKEVEPSS 2.56%Aug 15, 2022
- UnknownMozilla Firefox Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')Patch nowKEVEPSS 26.71%Aug 15, 2022
- UnknownMozilla Firefox Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')Patch nowKEVEPSS 17.10%Aug 15, 2022
- UnknownMozilla Firefox Use After FreePatch nowKEVEPSS 0.92%Aug 15, 2022
- UnknownThunderbird for Windows ms-msdt, search, and search-ms Protocols VulnerabilityPatch nowKEVEPSS 0.78%Jun 15, 2022
- Critical9.6Mozilla Firefox Use-After-Free VulnerabilityPatch nowKEVEPSS 2.35%Mar 5, 2022
- High8.8Mozilla Firefox Use-After-Free VulnerabilityPatch nowKEVEPSS 14.26%Mar 5, 2022
- UnknownMozilla Firefox Loop with Unreachable Exit Condition ('Infinite Loop')Patch nowKEVEPSS 1.42%Aug 6, 2020
- High8.1Mozilla Firefox And Thunderbird Use-After-Free VulnerabilityPatch nowKEVEPSS 7.06%Apr 1, 2020
- High8.1Mozilla Firefox And Thunderbird Use-After-Free VulnerabilityPatch nowKEVEPSS 3.04%Mar 8, 2020
- High8.8Mozilla Firefox And Thunderbird Type Confusion VulnerabilityPatch nowKEVEPSS 46.31%Jan 7, 2020
- Critical10.0Mozilla Firefox and Thunderbird Sandbox Escape VulnerabilityPatch nowKEVEPSS 55.87%Jun 20, 2019
- High8.8Mozilla Firefox and Thunderbird Type Confusion VulnerabilityPatch nowKEVEPSS 37.70%Jun 18, 2019
- UnknownMozilla Firefox Custom Cursor VulnerabilityPatch nowKEVEPSS 0.73%Feb 6, 2019
- UnknownMozilla Firefox Denial of Service Through Successive FTP Authorization PromptsPatch nowKEVEPSS 1.08%Feb 4, 2019
- UnknownMozilla Firefox Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 64.76%Jan 9, 2017
- UnknownMozilla seamonkey Improper Input ValidationPatch nowKEVEPSS 40.12%Jan 9, 2017
- UnknownMozilla Firefox Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 10.89%Jan 9, 2017