NVD List
| Id | Name | Description | Reject | CVSS Version | CVSS Score | Severity | Pub Date | Modified Date | Actions |
|---|---|---|---|---|---|---|---|---|---|
| 18266 | CVE-2016-1952 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. | 2 | 6.8 | Medium | 2017-01-19 | 2016-12-02 | View | |
| 18265 | CVE-2016-1951 | Multiple integer overflows in io/prprf.c in Mozilla Netscape Portable Runtime (NSPR) before 4.12 allow remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a long string to a PR_*printf function. | 2 | 7.5 | High | 2017-01-19 | 2016-11-28 | View | |
| 18264 | CVE-2016-1950 | Heap-based buffer overflow in Mozilla Network Security Services (NSS) before 3.19.2.3 and 3.20.x and 3.21.x before 3.21.1, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to execute arbitrary code via crafted ASN.1 data in an X.509 certificate. | 2 | 6.8 | Medium | 2017-01-19 | 2016-12-02 | View | |
| 18263 | CVE-2016-1949 | Mozilla Firefox before 44.0.2 does not properly restrict the interaction between Service Workers and plugins, which allows remote attackers to bypass the Same Origin Policy via a crafted web site that triggers spoofed responses to requests that use NPAPI, as demonstrated by a request for a crossdomain.xml file. | 2 | 6.8 | Medium | 2017-01-19 | 2016-12-05 | View | |
| 18262 | CVE-2016-1948 | Mozilla Firefox before 44.0 on Android does not ensure that HTTPS is used for a lightweight-theme installation, which allows man-in-the-middle attackers to replace a theme"s images and colors by modifying the client-server data stream. | 2 | 4.3 | Medium | 2017-01-19 | 2016-11-30 | View |
Page 2115 of 17672, showing 5 records out of 88360 total, starting on record 10571, ending on 10575