Approved changes feed: RSS · Atom

cpe:2.3:a:mozilla:firefox:31.5.3:*:*:*:*:*:*:*

part: a version: 31.5.3 update: *

VendorMozilla (be1b0d4e-21a7-5a25-9982-bbda6ef43ec1)
ProductFirefox (d152d976-2d5e-5cc4-89b6-e80c6d067896)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/firefox purl2cpe 2026-06-01 10:17:52.870249
pkg:mozilla/mozilla-central purl2cpe 2026-06-01 10:17:52.870250
pkg:rpm/fedora/firefox purl2cpe 2026-06-01 10:17:52.870251
pkg:rpm/opensuse/mozillafirefox purl2cpe 2026-06-01 10:17:52.870253

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-2743 vulnerable 2026-06-08 05:06:35.689182 Details available
PDF.js in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 enables excessive privileges for internal Workers, which might allow remote attackers to execute arbitrary code by leveraging a Same Origin Policy bypass.
Published: 2015-07-06T01:00:00.000Z
Updated: 2024-08-06T05:24:38.425Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2741 vulnerable 2026-06-08 05:06:35.669219 Details available
Mozilla Firefox before 39.0, Firefox ESR 38.x before 38.1, and Thunderbird before 38.1 do not enforce key pinning upon encountering an X.509 certificate problem that generates a user dialog, which allows user-assisted man-in-the-middle attackers to bypass intended access restrictions by triggering a (1) expired certificate or (2) mismatched hostname for a domain with pinning enabled.
Published: 2015-07-06T01:00:00.000Z
Updated: 2024-08-06T05:24:38.454Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2740 vulnerable 2026-06-08 05:06:35.668236 Details available
Buffer overflow in the nsXMLHttpRequest::AppendToResponseText function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 might allow remote attackers to cause a denial of service or have unspecified other impact via unknown vectors.
Published: 2015-07-06T01:00:00.000Z
Updated: 2024-08-06T05:24:38.471Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2739 vulnerable 2026-06-08 05:06:35.667284 Details available
The ArrayBufferBuilder::append function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 accesses unintended memory locations, which has unspecified impact and attack vectors.
Published: 2015-07-06T01:00:00.000Z
Updated: 2024-08-06T05:24:38.416Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2738 vulnerable 2026-06-08 05:06:35.666085 Details available
The YCbCrImageDataDeserializer::ToDataSourceSurface function in the YCbCr implementation in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 reads data from uninitialized memory locations, which has unspecified impact and attack vectors.
Published: 2015-07-06T01:00:00.000Z
Updated: 2024-08-06T05:24:38.469Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2737 vulnerable 2026-06-08 05:06:35.664757 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2736 vulnerable 2026-06-08 05:06:35.663580 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2735 vulnerable 2026-06-08 05:06:35.662436 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2734 vulnerable 2026-06-08 05:06:35.661302 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2733 vulnerable 2026-06-08 05:06:35.651580 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2731 vulnerable 2026-06-08 05:06:35.650644 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2730 not_vulnerable 2026-06-08 05:06:35.649610 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2729 vulnerable 2026-06-08 05:06:35.636070 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2728 vulnerable 2026-06-08 05:06:35.635329 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2725 vulnerable 2026-06-08 05:06:35.633422 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2724 vulnerable 2026-06-08 05:06:35.632221 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2722 vulnerable 2026-06-08 05:06:35.631039 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2721 not_vulnerable 2026-06-08 05:06:35.626232 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2716 vulnerable 2026-06-08 05:06:35.618549 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2713 vulnerable 2026-06-08 05:06:35.610923 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2710 vulnerable 2026-06-08 05:06:35.609183 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2708 vulnerable 2026-06-08 05:06:35.604665 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0807 vulnerable 2026-06-08 05:06:22.956511 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.