Approved changes feed: RSS · Atom

cpe:2.3:a:mozilla:firefox:31.1.1:*:*:*:*:*:*:*

part: a version: 31.1.1 update: *

VendorMozilla (be1b0d4e-21a7-5a25-9982-bbda6ef43ec1)
ProductFirefox (d152d976-2d5e-5cc4-89b6-e80c6d067896)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/firefox purl2cpe 2026-06-01 10:17:52.870179
pkg:mozilla/mozilla-central purl2cpe 2026-06-01 10:17:52.870180
pkg:rpm/fedora/firefox purl2cpe 2026-06-01 10:17:52.870181
pkg:rpm/opensuse/mozillafirefox purl2cpe 2026-06-01 10:17:52.870183

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-2743 vulnerable 2026-06-08 05:06:35.689107 Details available
PDF.js in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 enables excessive privileges for internal Workers, which might allow remote attackers to execute arbitrary code by leveraging a Same Origin Policy bypass.
Published: 2015-07-06T01:00:00.000Z
Updated: 2024-08-06T05:24:38.425Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2741 vulnerable 2026-06-08 05:06:35.669147 Details available
Mozilla Firefox before 39.0, Firefox ESR 38.x before 38.1, and Thunderbird before 38.1 do not enforce key pinning upon encountering an X.509 certificate problem that generates a user dialog, which allows user-assisted man-in-the-middle attackers to bypass intended access restrictions by triggering a (1) expired certificate or (2) mismatched hostname for a domain with pinning enabled.
Published: 2015-07-06T01:00:00.000Z
Updated: 2024-08-06T05:24:38.454Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2740 vulnerable 2026-06-08 05:06:35.668173 Details available
Buffer overflow in the nsXMLHttpRequest::AppendToResponseText function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 might allow remote attackers to cause a denial of service or have unspecified other impact via unknown vectors.
Published: 2015-07-06T01:00:00.000Z
Updated: 2024-08-06T05:24:38.471Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2739 vulnerable 2026-06-08 05:06:35.667221 Details available
The ArrayBufferBuilder::append function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 accesses unintended memory locations, which has unspecified impact and attack vectors.
Published: 2015-07-06T01:00:00.000Z
Updated: 2024-08-06T05:24:38.416Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2738 vulnerable 2026-06-08 05:06:35.666020 Details available
The YCbCrImageDataDeserializer::ToDataSourceSurface function in the YCbCr implementation in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 reads data from uninitialized memory locations, which has unspecified impact and attack vectors.
Published: 2015-07-06T01:00:00.000Z
Updated: 2024-08-06T05:24:38.469Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2737 vulnerable 2026-06-08 05:06:35.664687 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2736 vulnerable 2026-06-08 05:06:35.663512 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2735 vulnerable 2026-06-08 05:06:35.662372 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2734 vulnerable 2026-06-08 05:06:35.661226 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2733 vulnerable 2026-06-08 05:06:35.651497 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2731 vulnerable 2026-06-08 05:06:35.650572 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2730 not_vulnerable 2026-06-08 05:06:35.649532 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2729 vulnerable 2026-06-08 05:06:35.636004 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2728 vulnerable 2026-06-08 05:06:35.635267 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2725 vulnerable 2026-06-08 05:06:35.633360 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2724 vulnerable 2026-06-08 05:06:35.632157 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2722 vulnerable 2026-06-08 05:06:35.630972 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2721 not_vulnerable 2026-06-08 05:06:35.626161 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2716 vulnerable 2026-06-08 05:06:35.618483 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2713 vulnerable 2026-06-08 05:06:35.610858 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2710 vulnerable 2026-06-08 05:06:35.609109 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2708 vulnerable 2026-06-08 05:06:35.602551 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0836 vulnerable 2026-06-08 05:06:23.917555 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0833 vulnerable 2026-06-08 05:06:23.903394 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0831 vulnerable 2026-06-08 05:06:23.323116 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0827 vulnerable 2026-06-08 05:06:23.276302 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0822 vulnerable 2026-06-08 05:06:23.230817 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0818 vulnerable 2026-06-08 05:06:22.966332 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0817 vulnerable 2026-06-08 05:06:22.965667 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0807 vulnerable 2026-06-08 05:06:22.952106 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0801 vulnerable 2026-06-08 05:06:22.943505 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8641 vulnerable 2026-06-08 05:06:09.800687 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8639 vulnerable 2026-06-08 05:06:09.799438 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8638 vulnerable 2026-06-08 05:06:09.798344 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8634 vulnerable 2026-06-08 05:06:09.793535 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1595 vulnerable 2026-06-08 05:05:25.669029 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.