Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownMicrosoft Internet Explorer ASCII encoded Web filter bypassPatch nowKEVEPSS 13.53%Sep 29, 2016
- UnknownMozilla Firefox Improper Privilege ManagementPatch nowKEVEPSS 83.63%Aug 4, 2016
- UnknownMozilla Firefox Improper Privilege ManagementPatch nowKEVEPSS 82.34%Aug 4, 2016
- Medium5.9Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x before 38.5.2, does not reject MD5 signatures in Server Key ExcCheck if you run itEPSS 2.90%Jan 9, 2016
- High8.8Mozilla Firefox Security Feature Bypass VulnerabilityPatch nowKEVEPSS 68.56%Aug 5, 2015
- Medium4.3Mozilla Firefox before 39.0 on OS X includes native key press information during the logging of crashes, which allows remote attackers to obtain sensitive information…Check if you run itEPSS 1.70%Jul 6, 2015
- Medium4.3Cross-site scripting (XSS) vulnerability in clickstream.js in Y! Toolbar plugin for FireFox 3.1.0.20130813024103 for Mac, and 2.5.9.2013418100420 for Windows, allows r…Check if you run itEPSS 1.93%Jan 26, 2014
- High8.8Mozilla Firefox and Thunderbird Denial-of-Service VulnerabilityPatch nowKEVEPSS 69.02%Jun 25, 2013
- Medium6.5Mozilla Firefox Information Disclosure VulnerabilityPatch nowKEVEPSS 6.70%May 16, 2013
- High8.8Adobe Flash Player Incorrect Default Permissions VulnerabilityPatch nowKEVEPSS 10.53%Feb 26, 2013
- Critical9.8Mozilla Multiple Products Remote Code Execution VulnerabilityPatch nowKEVEPSS 83.16%Oct 27, 2010
- UnknownMozilla Firefox Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 42.69%May 1, 2010
- UnknownMozilla Firefox and SeaMonkey 'window.navigator' VulnerabilityPatch nowKEVEPSS 78.69%May 1, 2010
- UnknownMozilla Foundation Security Advisories — MozillaCheck if you run itEPSS 3.28%Apr 5, 2010
- UnknownMozilla Firefox Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 2.29%Apr 22, 2009
- UnknownMicrosoft Windows Improper Input ValidationPatch nowKEVEPSS 53.83%Nov 13, 2007
- UnknownCVE-2026-92056 is listed by Security Vulnerabilities fixed in Firefox ESR 153.3 — Mozilla.Check if you run itEPSS 0.23%Unknown date
- UnknownCVE-2026-92055 is listed by Security Vulnerabilities fixed in Firefox ESR 153.3 — Mozilla.Check if you run itEPSS 0.23%Unknown date
- UnknownCVE-2026-92054 is listed by Security Vulnerabilities fixed in Firefox ESR 153.3 — Mozilla.Check if you run itEPSS 0.24%Unknown date
- UnknownCVE-2026-92053 is listed by Security Vulnerabilities fixed in Firefox ESR 153.3 — Mozilla.Check if you run itEPSS 0.25%Unknown date
- UnknownSecurity Vulnerabilities fixed in Firefox 156 — MozillaCheck if you run itEPSS 0.35%Unknown date
- UnknownSecurity Vulnerabilities fixed in Firefox for iOS 155.1 — MozillaCheck if you run itEPSS 0.28%Unknown date
- UnknownSecurity Vulnerabilities fixed in Firefox ESR 153.5 — MozillaCheck if you run itEPSS 0.16%Unknown date
- UnknownSecurity Vulnerabilities fixed in Firefox ESR 153.5 — MozillaCheck if you run itEPSS 0.28%Unknown date
- UnknownCVE-2026-109712 is listed by [SECURITY] [DSA 6560-1] firefox-esr security update.Check if you run itEPSS 0.22%Unknown date