Approved changes feed: RSS · Atom

cpe:2.3:a:mozilla:mozilla:1.7.6:*:*:*:*:*:*:*

part: a version: 1.7.6 update: *

VendorMozilla (be1b0d4e-21a7-5a25-9982-bbda6ef43ec1)
ProductMozilla (5488dee4-fdb9-5fdb-bb63-5465af3d7de9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github//mozilla/gecko-dev purl2cpe 2026-06-01 10:17:52.541147
pkg:mozilla/mozilla-release purl2cpe 2026-06-01 10:17:52.541148

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-0496 vulnerable 2026-06-08 04:48:54.153060 Details available
Cross-site scripting (XSS) vulnerability in Mozilla 1.7.12 and possibly earlier, Mozilla Firefox 1.0.7 and possibly earlier, and Netscape 8.1 and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the -moz-binding (Cascading Style Sheets) CSS property, which does not require that the style sheet have the same origin as the web page, as demonstrated by the compromise of a large number of LiveJournal accounts.
Published: 2006-02-01T02:00:00.000Z
Updated: 2024-08-07T16:34:14.832Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-4809 vulnerable 2026-06-08 04:48:45.190753 Details available
Mozilla Firefox 1.0.1 and possibly other versions, including Mozilla and Thunderbird, allows remote attackers to spoof the URL in the Status Bar via an A HREF tag that contains a TABLE tag that contains another A tag.
Published: 2006-08-30T01:00:00.000Z
Updated: 2024-08-08T00:01:23.331Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-4685 vulnerable 2026-06-08 04:48:44.729756 Details available
Firefox and Mozilla can associate a cookie with multiple domains when the DNS resolver has a non-root domain in its search list, which allows remote attackers to trick a user into accepting a cookie for a hostname formed via search-list expansion of the hostname entered by the user, or steal a cookie for an expanded hostname, as demonstrated by an attacker who operates an ap1.com Internet web site to steal cookies associated with an ap1.com.example.com intranet web site.
Published: 2006-02-01T02:00:00.000Z
Updated: 2024-08-07T23:53:28.695Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-2270 vulnerable 2026-06-08 04:48:28.783160 Details available
Firefox before 1.0.5 and Mozilla before 1.7.9 does not properly clone base objects, which allows remote attackers to execute arbitrary code by navigating the prototype chain to reach a privileged object.
Published: 2005-07-13T04:00:00.000Z
Updated: 2024-08-07T22:22:48.688Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-2269 vulnerable 2026-06-08 04:48:28.781851 Details available
Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 does not properly verify the associated types of DOM node names within the context of their namespaces, which allows remote attackers to modify certain tag properties, possibly leading to execution of arbitrary script or code, as demonstrated using an XHTML document with IMG tags with custom properties ("XHTML node spoofing").
Published: 2005-07-13T04:00:00.000Z
Updated: 2024-08-07T22:22:47.768Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-2268 vulnerable 2026-06-08 04:48:28.780643 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-2266 vulnerable 2026-06-08 04:48:28.778874 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-2265 vulnerable 2026-06-08 04:48:28.777732 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-2263 vulnerable 2026-06-08 04:48:28.775911 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-2261 vulnerable 2026-06-08 04:48:28.758074 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-2260 vulnerable 2026-06-08 04:48:28.756777 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1532 vulnerable 2026-06-08 04:48:26.865696 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1531 vulnerable 2026-06-08 04:48:26.861822 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1160 vulnerable 2026-06-08 04:48:25.700726 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1159 vulnerable 2026-06-08 04:48:25.699591 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1157 vulnerable 2026-06-08 04:48:25.697995 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1156 vulnerable 2026-06-08 04:48:25.685208 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1155 vulnerable 2026-06-08 04:48:25.684099 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1154 vulnerable 2026-06-08 04:48:25.682957 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1153 vulnerable 2026-06-08 04:48:25.681810 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0989 vulnerable 2026-06-08 04:48:14.163922 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.