Approved changes feed: RSS · Atom

cpe:2.3:a:mozilla:mozilla:1.6:alpha:*:*:*:*:*:*

part: a version: 1.6 update: alpha

VendorMozilla (be1b0d4e-21a7-5a25-9982-bbda6ef43ec1)
ProductMozilla (5488dee4-fdb9-5fdb-bb63-5465af3d7de9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github//mozilla/gecko-dev purl2cpe 2026-06-01 10:17:52.533185
pkg:mozilla/mozilla-release purl2cpe 2026-06-01 10:17:52.533187

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-3014 vulnerable 2026-06-08 04:51:31.849129 Details available
Mozilla Firefox 3.0.13 and earlier, 3.5, 3.6 a1 pre, and 3.7 a1 pre; SeaMonkey 1.1.17; and Mozilla 1.7.x and earlier do not properly handle javascript: URIs in HTML links within 302 error documents sent from web servers, which allows user-assisted remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Location HTTP response header or (2) specifying the content of a Location HTTP response header.
Published: 2009-08-31T16:00:00.000Z
Updated: 2024-08-07T06:14:55.185Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-2270 vulnerable 2026-06-08 04:48:28.782957 Details available
Firefox before 1.0.5 and Mozilla before 1.7.9 does not properly clone base objects, which allows remote attackers to execute arbitrary code by navigating the prototype chain to reach a privileged object.
Published: 2005-07-13T04:00:00.000Z
Updated: 2024-08-07T22:22:48.688Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-2269 vulnerable 2026-06-08 04:48:28.781651 Details available
Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 does not properly verify the associated types of DOM node names within the context of their namespaces, which allows remote attackers to modify certain tag properties, possibly leading to execution of arbitrary script or code, as demonstrated using an XHTML document with IMG tags with custom properties ("XHTML node spoofing").
Published: 2005-07-13T04:00:00.000Z
Updated: 2024-08-07T22:22:47.768Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-2268 vulnerable 2026-06-08 04:48:28.780457 Details available
Firefox before 1.0.5 and Mozilla before 1.7.9 does not clearly associate a Javascript dialog box with the web page that generated it, which allows remote attackers to spoof a dialog box from a trusted site and facilitates phishing attacks, aka the "Dialog Origin Spoofing Vulnerability."
Published: 2005-07-13T04:00:00.000Z
Updated: 2024-08-07T22:22:48.903Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-2266 vulnerable 2026-06-08 04:48:28.778681 Details available
Firefox before 1.0.5 and Mozilla before 1.7.9 allows a child frame to call top.focus and other methods in a parent frame, even when the parent is in a different domain, which violates the same origin policy and allows remote attackers to steal sensitive information such as cookies and passwords from web sites whose child frames do not verify that they are in the same domain as their parents.
Published: 2005-07-13T04:00:00.000Z
Updated: 2024-08-07T22:22:48.659Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-2265 vulnerable 2026-06-08 04:48:28.777540 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-2263 vulnerable 2026-06-08 04:48:28.775719 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-2261 vulnerable 2026-06-08 04:48:28.757879 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-2260 vulnerable 2026-06-08 04:48:28.756451 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1532 vulnerable 2026-06-08 04:48:26.865504 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1531 vulnerable 2026-06-08 04:48:26.861628 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1160 vulnerable 2026-06-08 04:48:25.700540 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1159 vulnerable 2026-06-08 04:48:25.699407 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1157 vulnerable 2026-06-08 04:48:25.697802 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1156 vulnerable 2026-06-08 04:48:25.685008 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1155 vulnerable 2026-06-08 04:48:25.683840 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1154 vulnerable 2026-06-08 04:48:25.682760 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1153 vulnerable 2026-06-08 04:48:25.675161 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0593 vulnerable 2026-06-08 04:48:13.062374 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0592 vulnerable 2026-06-08 04:48:13.061434 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0590 vulnerable 2026-06-08 04:48:13.059720 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0588 vulnerable 2026-06-08 04:48:13.058237 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0586 vulnerable 2026-06-08 04:48:13.047859 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0585 vulnerable 2026-06-08 04:48:13.046868 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0584 vulnerable 2026-06-08 04:48:13.045951 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0578 vulnerable 2026-06-08 04:48:13.029504 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0401 vulnerable 2026-06-08 04:48:12.553111 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0399 vulnerable 2026-06-08 04:48:12.547641 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0143 vulnerable 2026-06-08 04:48:11.492495 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1381 vulnerable 2026-06-08 04:47:53.900923 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1380 vulnerable 2026-06-08 04:47:53.899746 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1316 vulnerable 2026-06-08 04:47:53.600173 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.