Approved changes feed: RSS · Atom

cpe:2.3:a:mozilla:firefox:31.5.2:*:*:*:*:*:*:*

part: a version: 31.5.2 update: *

VendorMozilla (be1b0d4e-21a7-5a25-9982-bbda6ef43ec1)
ProductFirefox (d152d976-2d5e-5cc4-89b6-e80c6d067896)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/firefox purl2cpe 2026-06-01 10:17:52.870238
pkg:mozilla/mozilla-central purl2cpe 2026-06-01 10:17:52.870239
pkg:rpm/fedora/firefox purl2cpe 2026-06-01 10:17:52.870241
pkg:rpm/opensuse/mozillafirefox purl2cpe 2026-06-01 10:17:52.870242

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-2743 vulnerable 2026-06-08 05:06:35.689165 Details available
PDF.js in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 enables excessive privileges for internal Workers, which might allow remote attackers to execute arbitrary code by leveraging a Same Origin Policy bypass.
Published: 2015-07-06T01:00:00.000Z
Updated: 2024-08-06T05:24:38.425Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2741 vulnerable 2026-06-08 05:06:35.669202 Details available
Mozilla Firefox before 39.0, Firefox ESR 38.x before 38.1, and Thunderbird before 38.1 do not enforce key pinning upon encountering an X.509 certificate problem that generates a user dialog, which allows user-assisted man-in-the-middle attackers to bypass intended access restrictions by triggering a (1) expired certificate or (2) mismatched hostname for a domain with pinning enabled.
Published: 2015-07-06T01:00:00.000Z
Updated: 2024-08-06T05:24:38.454Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2740 vulnerable 2026-06-08 05:06:35.668221 Details available
Buffer overflow in the nsXMLHttpRequest::AppendToResponseText function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 might allow remote attackers to cause a denial of service or have unspecified other impact via unknown vectors.
Published: 2015-07-06T01:00:00.000Z
Updated: 2024-08-06T05:24:38.471Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2739 vulnerable 2026-06-08 05:06:35.667268 Details available
The ArrayBufferBuilder::append function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 accesses unintended memory locations, which has unspecified impact and attack vectors.
Published: 2015-07-06T01:00:00.000Z
Updated: 2024-08-06T05:24:38.416Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2738 vulnerable 2026-06-08 05:06:35.666069 Details available
The YCbCrImageDataDeserializer::ToDataSourceSurface function in the YCbCr implementation in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 reads data from uninitialized memory locations, which has unspecified impact and attack vectors.
Published: 2015-07-06T01:00:00.000Z
Updated: 2024-08-06T05:24:38.469Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2737 vulnerable 2026-06-08 05:06:35.664740 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2736 vulnerable 2026-06-08 05:06:35.663564 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2735 vulnerable 2026-06-08 05:06:35.662421 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2734 vulnerable 2026-06-08 05:06:35.661283 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2733 vulnerable 2026-06-08 05:06:35.651561 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2731 vulnerable 2026-06-08 05:06:35.650625 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2730 not_vulnerable 2026-06-08 05:06:35.649591 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2729 vulnerable 2026-06-08 05:06:35.636054 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2728 vulnerable 2026-06-08 05:06:35.635313 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2725 vulnerable 2026-06-08 05:06:35.633407 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2724 vulnerable 2026-06-08 05:06:35.632205 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2722 vulnerable 2026-06-08 05:06:35.631023 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2721 not_vulnerable 2026-06-08 05:06:35.626214 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2716 vulnerable 2026-06-08 05:06:35.618533 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2713 vulnerable 2026-06-08 05:06:35.610907 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2710 vulnerable 2026-06-08 05:06:35.609166 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2708 vulnerable 2026-06-08 05:06:35.604143 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0818 vulnerable 2026-06-08 05:06:22.966383 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0807 vulnerable 2026-06-08 05:06:22.952166 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0801 vulnerable 2026-06-08 05:06:22.945129 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.