Approved changes feed: RSS · Atom

cpe:2.3:a:mozilla:firefox:31.3.0:*:*:*:*:*:*:*

part: a version: 31.3.0 update: *

VendorMozilla (be1b0d4e-21a7-5a25-9982-bbda6ef43ec1)
ProductFirefox (d152d976-2d5e-5cc4-89b6-e80c6d067896)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/firefox purl2cpe 2026-06-01 10:17:52.870200
pkg:mozilla/mozilla-central purl2cpe 2026-06-01 10:17:52.870201
pkg:rpm/fedora/firefox purl2cpe 2026-06-01 10:17:52.870203
pkg:rpm/opensuse/mozillafirefox purl2cpe 2026-06-01 10:17:52.870204

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-2743 vulnerable 2026-06-08 05:06:35.689125 Details available
PDF.js in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 enables excessive privileges for internal Workers, which might allow remote attackers to execute arbitrary code by leveraging a Same Origin Policy bypass.
Published: 2015-07-06T01:00:00.000Z
Updated: 2024-08-06T05:24:38.425Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2741 vulnerable 2026-06-08 05:06:35.669169 Details available
Mozilla Firefox before 39.0, Firefox ESR 38.x before 38.1, and Thunderbird before 38.1 do not enforce key pinning upon encountering an X.509 certificate problem that generates a user dialog, which allows user-assisted man-in-the-middle attackers to bypass intended access restrictions by triggering a (1) expired certificate or (2) mismatched hostname for a domain with pinning enabled.
Published: 2015-07-06T01:00:00.000Z
Updated: 2024-08-06T05:24:38.454Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2740 vulnerable 2026-06-08 05:06:35.668189 Details available
Buffer overflow in the nsXMLHttpRequest::AppendToResponseText function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 might allow remote attackers to cause a denial of service or have unspecified other impact via unknown vectors.
Published: 2015-07-06T01:00:00.000Z
Updated: 2024-08-06T05:24:38.471Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2739 vulnerable 2026-06-08 05:06:35.667238 Details available
The ArrayBufferBuilder::append function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 accesses unintended memory locations, which has unspecified impact and attack vectors.
Published: 2015-07-06T01:00:00.000Z
Updated: 2024-08-06T05:24:38.416Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2738 vulnerable 2026-06-08 05:06:35.666036 Details available
The YCbCrImageDataDeserializer::ToDataSourceSurface function in the YCbCr implementation in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 reads data from uninitialized memory locations, which has unspecified impact and attack vectors.
Published: 2015-07-06T01:00:00.000Z
Updated: 2024-08-06T05:24:38.469Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2737 vulnerable 2026-06-08 05:06:35.664705 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2736 vulnerable 2026-06-08 05:06:35.663532 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2735 vulnerable 2026-06-08 05:06:35.662389 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2734 vulnerable 2026-06-08 05:06:35.661244 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2733 vulnerable 2026-06-08 05:06:35.651523 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2731 vulnerable 2026-06-08 05:06:35.650590 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2730 not_vulnerable 2026-06-08 05:06:35.649552 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2729 vulnerable 2026-06-08 05:06:35.636021 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2728 vulnerable 2026-06-08 05:06:35.635283 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2725 vulnerable 2026-06-08 05:06:35.633376 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2724 vulnerable 2026-06-08 05:06:35.632174 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2722 vulnerable 2026-06-08 05:06:35.630989 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2721 not_vulnerable 2026-06-08 05:06:35.626179 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2716 vulnerable 2026-06-08 05:06:35.618500 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2713 vulnerable 2026-06-08 05:06:35.610873 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2710 vulnerable 2026-06-08 05:06:35.609126 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2708 vulnerable 2026-06-08 05:06:35.603097 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0818 vulnerable 2026-06-08 05:06:22.966350 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0817 vulnerable 2026-06-08 05:06:22.965684 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0807 vulnerable 2026-06-08 05:06:22.952125 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0801 vulnerable 2026-06-08 05:06:22.944055 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8641 vulnerable 2026-06-08 05:06:09.800706 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8639 vulnerable 2026-06-08 05:06:09.799454 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8638 vulnerable 2026-06-08 05:06:09.798361 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8634 vulnerable 2026-06-08 05:06:09.794087 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.