CVE List

Id CVE No. Status Description Phase Votes Comments Actions
13467  CVE-2005-2261  Candidate  Firefox before 1.0.5, Thunderbird before 1.0.5, Mozilla before 1.7.9, Netscape 8.0.2, and K-Meleon 0.9 runs XBL scripts even when Javascript has been disabled, which makes it easier for remote attackers to bypass such protection.  Assigned (20050713)  None (candidate not yet proposed)    View
13468  CVE-2005-2262  Candidate  Firefox 1.0.3 and 1.0.4, and Netscape 8.0.2, allows remote attackers to execute arbitrary code by tricking the user into using the "Set As Wallpaper" (in Firefox) or "Set as Background" (in Netscape) context menu on an image URL that is really a javascript: URL with an eval statement, aka "Firewalling."  Assigned (20050713)  None (candidate not yet proposed)    View
13469  CVE-2005-2263  Candidate  The InstallTrigger.install method in Firefox before 1.0.5 and Mozilla before 1.7.9 allows remote attackers to execute a callback function in the context of another domain by forcing a page navigation after the install method has been called, which causes the callback to be run in the context of the new page and results in a same origin violation.  Assigned (20050713)  None (candidate not yet proposed)    View
13470  CVE-2005-2264  Candidate  Firefox before 1.0.5 allows remote attackers to steal sensitive information by opening a malicious link in the Firefox sidebar using the _search target, then injecting script into other pages via a data: URL.  Assigned (20050713)  None (candidate not yet proposed)    View
13471  CVE-2005-2265  Candidate  Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 and 7.2 allows remote attackers to cause a denial of service (access violation and crash), and possibly execute arbitrary code, by calling InstallVersion.compareTo with an object instead of a string.  Assigned (20050713)  None (candidate not yet proposed)    View

Page 1807 of 20943, showing 5 records out of 104715 total, starting on record 9031, ending on 9035

Actions