Approved changes feed: RSS · Atom

cpe:2.3:a:mozilla:mozilla:1.4:*:*:*:*:*:*:*

part: a version: 1.4 update: *

VendorMozilla (be1b0d4e-21a7-5a25-9982-bbda6ef43ec1)
ProductMozilla (5488dee4-fdb9-5fdb-bb63-5465af3d7de9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github//mozilla/gecko-dev purl2cpe 2026-06-01 10:17:52.533147
pkg:mozilla/mozilla-release purl2cpe 2026-06-01 10:17:52.533149

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-3014 vulnerable 2026-06-08 04:51:31.843176 Details available
Mozilla Firefox 3.0.13 and earlier, 3.5, 3.6 a1 pre, and 3.7 a1 pre; SeaMonkey 1.1.17; and Mozilla 1.7.x and earlier do not properly handle javascript: URIs in HTML links within 302 error documents sent from web servers, which allows user-assisted remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Location HTTP response header or (2) specifying the content of a Location HTTP response header.
Published: 2009-08-31T16:00:00.000Z
Updated: 2024-08-07T06:14:55.185Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0292 vulnerable 2026-06-08 04:48:53.278725 Details available
The Javascript interpreter (jsinterp.c) in Mozilla and Firefox before 1.5.1 does not properly dereference objects, which allows remote attackers to cause a denial of service (crash) or execute arbitrary code via unknown attack vectors related to garbage collection.
Published: 2006-02-02T20:00:00.000Z
Updated: 2024-08-07T16:25:34.237Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-4685 vulnerable 2026-06-08 04:48:44.719441 Details available
Firefox and Mozilla can associate a cookie with multiple domains when the DNS resolver has a non-root domain in its search list, which allows remote attackers to trick a user into accepting a cookie for a hostname formed via search-list expansion of the hostname entered by the user, or steal a cookie for an expanded hostname, as demonstrated by an attacker who operates an ap1.com Internet web site to steal cookies associated with an ap1.com.example.com intranet web site.
Published: 2006-02-01T02:00:00.000Z
Updated: 2024-08-07T23:53:28.695Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-2270 vulnerable 2026-06-08 04:48:28.782812 Details available
Firefox before 1.0.5 and Mozilla before 1.7.9 does not properly clone base objects, which allows remote attackers to execute arbitrary code by navigating the prototype chain to reach a privileged object.
Published: 2005-07-13T04:00:00.000Z
Updated: 2024-08-07T22:22:48.688Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-2269 vulnerable 2026-06-08 04:48:28.781510 Details available
Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 does not properly verify the associated types of DOM node names within the context of their namespaces, which allows remote attackers to modify certain tag properties, possibly leading to execution of arbitrary script or code, as demonstrated using an XHTML document with IMG tags with custom properties ("XHTML node spoofing").
Published: 2005-07-13T04:00:00.000Z
Updated: 2024-08-07T22:22:47.768Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-2268 vulnerable 2026-06-08 04:48:28.780314 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-2266 vulnerable 2026-06-08 04:48:28.778541 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-2265 vulnerable 2026-06-08 04:48:28.777319 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-2263 vulnerable 2026-06-08 04:48:28.775574 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-2261 vulnerable 2026-06-08 04:48:28.757738 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-2260 vulnerable 2026-06-08 04:48:28.756301 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1532 vulnerable 2026-06-08 04:48:26.865359 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1160 vulnerable 2026-06-08 04:48:25.700398 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1159 vulnerable 2026-06-08 04:48:25.699265 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1157 vulnerable 2026-06-08 04:48:25.697659 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1156 vulnerable 2026-06-08 04:48:25.684862 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1155 vulnerable 2026-06-08 04:48:25.683698 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1154 vulnerable 2026-06-08 04:48:25.682613 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1153 vulnerable 2026-06-08 04:48:25.669707 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0593 vulnerable 2026-06-08 04:48:13.062230 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0592 vulnerable 2026-06-08 04:48:13.061294 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0590 vulnerable 2026-06-08 04:48:13.059576 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0588 vulnerable 2026-06-08 04:48:13.058078 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0586 vulnerable 2026-06-08 04:48:13.047714 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0585 vulnerable 2026-06-08 04:48:13.046721 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0584 vulnerable 2026-06-08 04:48:13.045806 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0578 vulnerable 2026-06-08 04:48:13.029349 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0401 vulnerable 2026-06-08 04:48:12.552962 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0399 vulnerable 2026-06-08 04:48:12.547480 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0143 vulnerable 2026-06-08 04:48:11.486754 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1614 vulnerable 2026-06-08 04:47:54.613824 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1613 vulnerable 2026-06-08 04:47:54.605336 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1451 vulnerable 2026-06-08 04:47:54.179343 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1449 vulnerable 2026-06-08 04:47:54.177835 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1381 vulnerable 2026-06-08 04:47:53.900748 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1380 vulnerable 2026-06-08 04:47:53.899563 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1316 vulnerable 2026-06-08 04:47:53.596471 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1156 vulnerable 2026-06-08 04:47:53.138419 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0909 vulnerable 2026-06-08 04:47:51.869161 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0908 vulnerable 2026-06-08 04:47:51.867801 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0907 vulnerable 2026-06-08 04:47:51.866313 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0906 vulnerable 2026-06-08 04:47:51.852477 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0905 vulnerable 2026-06-08 04:47:51.846314 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0191 vulnerable 2026-06-08 04:47:48.906530 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-0594 vulnerable 2026-06-08 04:47:21.960908 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.