NVD List

Id Name Description Reject CVSS Version CVSS Score Severity Pub Date Modified Date Actions
566  CVE-2008-0591  Mozilla Firefox before 2.0.0.12 and Thunderbird before 2.0.0.12 does not properly manage a delay timer used in confirmation dialogs, which might allow remote attackers to trick users into confirming an unsafe action, such as remote file execution, by using a timer to change the window focus, aka the "dialog refocus bug" or "ffclick2".    4.3  Medium  2017-01-03  2011-09-20  View
567  CVE-2008-0592  Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8 allows user-assisted remote attackers to cause a denial of service via a plain .txt file with a "Content-Disposition: attachment" and an invalid "Content-Type: plain/text," which prevents Firefox from rendering future plain text files within the browser.    4.3  Medium  2017-01-03  2011-03-07  View
568  CVE-2008-0593  Gecko-based browsers, including Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8, modify the .href property of stylesheet DOM nodes to the final URI of a 302 redirect, which might allow remote attackers to bypass the Same Origin Policy and read sensitive information from the original URL, such as with Single-Signon systems.    4.3  Medium  2017-01-03  2011-10-18  View
569  CVE-2008-0594  Mozilla Firefox before 2.0.0.12 does not always display a web forgery warning dialog if the entire contents of a web page are in a DIV tag that uses absolute positioning, which makes it easier for remote attackers to conduct phishing attacks.    Medium  2017-01-03  2011-03-07  View
570  CVE-2008-0595  dbus-daemon in D-Bus before 1.0.3, and 1.1.x before 1.1.20, recognizes send_interface attributes in allow directives in the security policy only for fully qualified method calls, which allows local users to bypass intended access restrictions via a method call with a NULL interface.    4.6  Medium  2017-01-03  2014-05-05  View

Page 114 of 17672, showing 5 records out of 88360 total, starting on record 566, ending on 570

Actions