2013-10-29

2013-10-30

2013-10-31

All (3) Critical (10) High (1) Medium (3)

CVE-2013-5596 Oct 30, 10:55 MEDIUM This Month

The cycle collection (CC) implementation in Mozilla Firefox before 25.0, Firefox ESR 24.x before 24.1, Thunderbird before 24.1, and SeaMonkey before 2.22 does not properly determine the thread for. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. No vendor patch available.

RCE Buffer Overflow Denial Of Service Mozilla Firefox +3

NVD

CVSS 2.0

6.8

EPSS

1.8%

CVE-2013-5595 Oct 30, 10:55 MEDIUM This Month

The JavaScript engine in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before 2.22. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Buffer Overflow Mozilla Firefox Seamonkey Thunderbird +1

NVD

CVSS 2.0

4.3

EPSS

2.6%

CVE-2013-5593 Oct 30, 10:55 MEDIUM This Month

The SELECT element implementation in Mozilla Firefox before 25.0, Firefox ESR 24.x before 24.1, Thunderbird before 24.1, and SeaMonkey before 2.22 does not properly restrict the nature or placement. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Information Disclosure Mozilla Firefox Seamonkey Thunderbird +1

NVD

CVSS 2.0

4.3

EPSS

0.5%