Filter
AND
-Infinity
0

ThunderbirdWhen an email contains multiple attachments with external links via the X-Mozilla-External-Attachmen…

First published (updated )

ThunderbirdA vulnerability existed in Firefox for Android where potentially sensitive library locations were lo…

First published (updated )

FirefoxRace Condition

First published (updated )

FirefoxCertificate length was not properly checked when added to a certificate store. In practice only trus…

First published (updated )

ThunderbirdThe Thunderbird Address Book URI fields contained unsanitized links. This could be used by an attack…

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

FirefoxLast updated 24 July 2024

3.7
EPSS
0.04%
First published (updated )

ThunderbirdLast updated 28 February 2025

2.7
EPSS
0.04%
First published (updated )

ThunderbirdWhen handling keypress events, an attacker may have been able to trick a user into bypassing the "Op…

First published (updated )

FirefoxBy sending a specially crafted push message, a remote server could have hung the parent process, cau…

First published (updated )

FirefoxA clipboard "paste" button could persist across tabs which allowed a spoofing attack. This vulnerabi…

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

FirefoxRepeated writes to history interface attributes could have been used to cause a Denial of Service co…

First published (updated )

Mozilla SeaMonkeyInfoleak

2.9
First published (updated )

FirefoxMozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, and Thunderbird before 31.3 on Apple OS X…

2.1
First published (updated )

FirefoxA potential memory corruption vulnerability could be triggered if an attacker had the ability to tri…

First published (updated )

FirefoxBy checking the result of calls to `window.open` with specifically set protocol handlers, an attacke…

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

FirefoxA website configured to initiate a specially crafted WebTransport session could crash the Firefox pr…

First published (updated )

Mozilla FirefoxMozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7 allows remote attackers to determ…

2.6
First published (updated )

ThunderbirdThe SMTP client in Mozilla Thunderbird 1.0.5 BETA, 1.0.7, and possibly other versions, does not noti…

2.6
First published (updated )

ThunderbirdMozilla Thunderbird 1.0 and Firefox 1.0.6 allows remote attackers to obfuscate URIs via a long URI, …

2.6
First published (updated )

Thunderbirdrun-mozilla.sh in Thunderbird, with debugging enabled, allows local users to create or overwrite arb…

2.1
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Mozilla FirefoxFirefox 0.9, Thunderbird 0.6 and other versions before 0.9, and Mozilla 1.7 before 1.7.5 save tempor…

2.1
First published (updated )

FirefoxMozilla Firefox before 1.5.0.7 and Thunderbird before 1.5.0.7 makes it easy for users to accept self…

2.6
First published (updated )

Mozilla SeaMonkeyMozilla Thunderbird before 1.5.0.7 and SeaMonkey before 1.0.5, with "Load Images" enabled, allows re…

2.6
First published (updated )

ThunderbirdMozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote…

2.6
First published (updated )

FirefoxHTTP response smuggling vulnerability in Mozilla Firefox and Thunderbird before 1.5.0.4, when used w…

2.6
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

FirefoxMozilla Firefox 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey be…

2.6
First published (updated )

FirefoxMozilla Firefox 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey be…

2.6
First published (updated )

ThunderbirdThe HTML rendering engine in Mozilla Thunderbird 1.5, when "Block loading of remote images in mail m…

2.6
First published (updated )

ThunderbirdMozilla Thunderbird 1.5 allows user-assisted attackers to cause an unspecified denial of service by …

2.6
First published (updated )

FirefoxMultiple unspecified vulnerabilities in the layout engine in Mozilla Firefox before 1.5.0.10 and 2.x…

3.7
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203