Approved changes feed: RSS · Atom

cpe:2.3:a:mozilla:mozilla:1.0:rc3:*:*:*:*:*:*

part: a version: 1.0 update: rc3

VendorMozilla (be1b0d4e-21a7-5a25-9982-bbda6ef43ec1)
ProductMozilla (5488dee4-fdb9-5fdb-bb63-5465af3d7de9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github//mozilla/gecko-dev purl2cpe 2026-06-01 10:17:52.533120
pkg:mozilla/mozilla-release purl2cpe 2026-06-01 10:17:52.533121

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-3014 vulnerable 2026-06-03 14:29:44.460442 Details available
Mozilla Firefox 3.0.13 and earlier, 3.5, 3.6 a1 pre, and 3.7 a1 pre; SeaMonkey 1.1.17; and Mozilla 1.7.x and earlier do not properly handle javascript: URIs in HTML links within 302 error documents sent from web servers, which allows user-assisted remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Location HTTP response header or (2) specifying the content of a Location HTTP response header.
Published: 2009-08-31T16:00:00.000Z
Updated: 2024-08-07T06:14:55.185Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-0354 vulnerable 2026-06-03 14:26:14.045123 Details available
The XMLHttpRequest object (XMLHTTP) in Netscape 6.1 and Mozilla 0.9.7 allows remote attackers to read arbitrary files and list directories on a client system by opening a URL that redirects the browser to the file on the client, then reading the result using the responseText property.
Published: 2002-05-03T04:00:00.000Z
Updated: 2024-08-08T02:49:27.374Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.