Linux Enterprise Sdk

19 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2014-1504 LOW Monitor

The session-restore feature in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 does not consider the Content Security Policy of a data: URL, which makes it easier for remote attackers to. Rated low severity (CVSS 2.6), this vulnerability is remotely exploitable. No vendor patch available.

XSS Mozilla Privilege Escalation Firefox Seamonkey +5

NVD VulDB

CVSS 2.0

2.6

EPSS

0.6%

CVE-2013-4002 Maven HIGH PATCH This Week

XMLscanner.java in Apache Xerces2 Java Parser before 2.12.0, as used in the Java Runtime Environment (JRE) in IBM Java 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable.

Java Denial Of Service Apache Oracle IBM +14

NVD

CVSS 2.0

7.1

EPSS

5.6%

CVE-2012-4188 CRITICAL Emergency

Heap-based buffer overflow in the Convolve3x3 function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Epss exploitation probability 52.5% and no vendor patch available.

Buffer Overflow Mozilla RCE Firefox Thunderbird Esr +11

NVD

CVSS 2.0

9.3

EPSS

52.5%

CVE-2012-4187 CRITICAL Act Now

Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly manage a certain insPos variable,. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Epss exploitation probability 20.0% and no vendor patch available.

Buffer Overflow Denial Of Service Mozilla RCE Firefox +11

NVD

CVSS 2.0

9.3

EPSS

20.0%

CVE-2012-4186 CRITICAL Emergency

Heap-based buffer overflow in the nsWaveReader::DecodeAudioData function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8,. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Epss exploitation probability 52.5% and no vendor patch available.

Buffer Overflow Mozilla RCE Firefox Thunderbird Esr +11

NVD

CVSS 2.0

9.3

EPSS

52.5%

CVE-2012-4185 CRITICAL Act Now

Buffer overflow in the nsCharTraits::length function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. No vendor patch available.

Buffer Overflow Denial Of Service Mozilla RCE Firefox +11

NVD

CVSS 2.0

9.3

EPSS

5.2%

CVE-2012-4184 MEDIUM This Month

The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Mozilla Google XSS Firefox Thunderbird Esr +11

NVD

CVSS 2.0

4.3

EPSS

1.1%

CVE-2012-4183 CRITICAL Act Now

Use-after-free vulnerability in the DOMSVGTests::GetRequiredFeatures function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. No vendor patch available.

Mozilla Use After Free Denial Of Service Buffer Overflow Memory Corruption +14

NVD

CVSS 2.0

9.3

EPSS

2.7%

CVE-2012-4182 CRITICAL Act Now

Use-after-free vulnerability in the nsTextEditRules::WillInsert function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8,. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. No vendor patch available.

Mozilla Use After Free Denial Of Service Buffer Overflow Memory Corruption +14

NVD

CVSS 2.0

9.3

EPSS

4.8%

CVE-2012-4180 CRITICAL Act Now

Heap-based buffer overflow in the nsHTMLEditor::IsPrevCharInNodeWhitespace function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. No vendor patch available.

Buffer Overflow Mozilla RCE Firefox Thunderbird Esr +11

NVD

CVSS 2.0

9.3

EPSS

9.5%

CVE-2012-4179 CRITICAL Act Now

Use-after-free vulnerability in the nsHTMLCSSUtils::CreateCSSPropertyTxn function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. No vendor patch available.

Mozilla Use After Free Denial Of Service Buffer Overflow Memory Corruption +14

NVD

CVSS 2.0

9.3

EPSS

6.1%

CVE-2012-3995 CRITICAL Act Now

The IsCSSWordSpacingSpace function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. No vendor patch available.

Mozilla Denial Of Service Buffer Overflow Information Disclosure RCE +12

NVD

CVSS 2.0

9.3

EPSS

2.0%

CVE-2012-3994 MEDIUM This Month

Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allow remote attackers to conduct cross-site. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Mozilla XSS Firefox Thunderbird Esr Thunderbird +9

NVD

CVSS 2.0

4.3

EPSS

0.9%

CVE-2012-3992 MEDIUM This Month

Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly manage history data, which allows. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Mozilla XSS Firefox Thunderbird Esr Thunderbird +9

NVD

CVSS 2.0

4.3

EPSS

1.1%

CVE-2012-3991 CRITICAL Act Now

Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly restrict JSAPI access to the. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Mozilla Firefox Thunderbird Esr Thunderbird +9

NVD

CVSS 2.0

9.3

EPSS

1.4%

CVE-2012-3990 CRITICAL Act Now

Use-after-free vulnerability in the IME State Manager implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. No vendor patch available.

RCE Mozilla Memory Corruption Use After Free Firefox +12

NVD

CVSS 2.0

9.3

EPSS

6.1%

CVE-2012-3988 CRITICAL Act Now

Use-after-free vulnerability in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 might allow. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. No vendor patch available.

RCE Mozilla Memory Corruption Use After Free Firefox +11

NVD

CVSS 2.0

9.3

EPSS

4.0%

CVE-2012-3986 MEDIUM This Month

Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly restrict calls to DOMWindowUtils. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Mozilla Authentication Bypass Firefox Thunderbird Esr Thunderbird +10

NVD

CVSS 2.0

4.3

EPSS

0.8%

CVE-2012-3982 CRITICAL Act Now

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. No vendor patch available.

Buffer Overflow Denial Of Service Mozilla RCE Firefox +12

NVD

CVSS 2.0

9.3

EPSS

1.3%

CVE-2014-1504

EPSS 1% CVSS 2.6

LOW Monitor

XSS Mozilla Privilege Escalation +7

NVD VulDB

CVE-2013-4002 Maven

EPSS 6% CVSS 7.1

HIGH PATCH This Week

Java Denial Of Service Apache +16

NVD

CVE-2012-4188

EPSS 53% CVSS 9.3

CRITICAL Emergency

Buffer Overflow Mozilla RCE +13

NVD

CVE-2012-4187

EPSS 20% CVSS 9.3

CRITICAL Act Now

Buffer Overflow Denial Of Service Mozilla +13

NVD

CVE-2012-4186

EPSS 53% CVSS 9.3

CRITICAL Emergency

Buffer Overflow Mozilla RCE +13

NVD

CVE-2012-4185

EPSS 5% CVSS 9.3

CRITICAL Act Now

Buffer Overflow Denial Of Service Mozilla +13

NVD

CVE-2012-4184

EPSS 1% CVSS 4.3

MEDIUM This Month

Mozilla Google XSS +13

NVD

CVE-2012-4183

EPSS 3% CVSS 9.3

CRITICAL Act Now

Mozilla Use After Free Denial Of Service +16

NVD

CVE-2012-4182

EPSS 5% CVSS 9.3

CRITICAL Act Now

Mozilla Use After Free Denial Of Service +16

NVD

CVE-2012-4180

EPSS 9% CVSS 9.3

CRITICAL Act Now

Buffer Overflow Mozilla RCE +13

NVD

CVE-2012-4179

EPSS 6% CVSS 9.3

CRITICAL Act Now

Mozilla Use After Free Denial Of Service +16

NVD

CVE-2012-3995

EPSS 2% CVSS 9.3

CRITICAL Act Now

Mozilla Denial Of Service Buffer Overflow +14

NVD

CVE-2012-3994

EPSS 1% CVSS 4.3

MEDIUM This Month

Mozilla XSS Firefox +11

NVD

CVE-2012-3992

EPSS 1% CVSS 4.3

MEDIUM This Month

Mozilla XSS Firefox +11

NVD

CVE-2012-3991

EPSS 1% CVSS 9.3

CRITICAL Act Now

Privilege Escalation Mozilla Firefox +11

NVD

CVE-2012-3990

EPSS 6% CVSS 9.3

CRITICAL Act Now

RCE Mozilla Memory Corruption +14

NVD

CVE-2012-3988

EPSS 4% CVSS 9.3

CRITICAL Act Now

RCE Mozilla Memory Corruption +13

NVD

CVE-2012-3986

EPSS 1% CVSS 4.3

MEDIUM This Month

Mozilla Authentication Bypass Firefox +12

NVD

CVE-2012-3982

EPSS 1% CVSS 9.3

CRITICAL Act Now

Buffer Overflow Denial Of Service Mozilla +14

NVD