NVD List

Id Name Description Reject CVSS Version CVSS Score Severity Pub Date Modified Date Actions
18266  CVE-2016-1952  Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.    6.8  Medium  2017-01-19  2016-12-02  View
18265  CVE-2016-1951  Multiple integer overflows in io/prprf.c in Mozilla Netscape Portable Runtime (NSPR) before 4.12 allow remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a long string to a PR_*printf function.    7.5  High  2017-01-19  2016-11-28  View
18264  CVE-2016-1950  Heap-based buffer overflow in Mozilla Network Security Services (NSS) before 3.19.2.3 and 3.20.x and 3.21.x before 3.21.1, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to execute arbitrary code via crafted ASN.1 data in an X.509 certificate.    6.8  Medium  2017-01-19  2016-12-02  View
18263  CVE-2016-1949  Mozilla Firefox before 44.0.2 does not properly restrict the interaction between Service Workers and plugins, which allows remote attackers to bypass the Same Origin Policy via a crafted web site that triggers spoofed responses to requests that use NPAPI, as demonstrated by a request for a crossdomain.xml file.    6.8  Medium  2017-01-19  2016-12-05  View
18262  CVE-2016-1948  Mozilla Firefox before 44.0 on Android does not ensure that HTTPS is used for a lightweight-theme installation, which allows man-in-the-middle attackers to replace a theme"s images and colors by modifying the client-server data stream.    4.3  Medium  2017-01-19  2016-11-30  View

Page 2115 of 17672, showing 5 records out of 88360 total, starting on record 10571, ending on 10575

Actions