Approved changes feed: RSS · Atom

cpe:2.3:a:mozilla:firefox:3.6.25:*:*:*:*:*:*:*

part: a version: 3.6.25 update: *

VendorMozilla (be1b0d4e-21a7-5a25-9982-bbda6ef43ec1)
ProductFirefox (d152d976-2d5e-5cc4-89b6-e80c6d067896)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/firefox purl2cpe 2026-06-01 10:17:52.905908
pkg:mozilla/mozilla-central purl2cpe 2026-06-01 10:17:52.905909
pkg:rpm/fedora/firefox purl2cpe 2026-06-01 10:17:52.905911
pkg:rpm/opensuse/mozillafirefox purl2cpe 2026-06-01 10:17:52.905912

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-0836 vulnerable 2026-06-08 05:06:23.920261 Details available
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Published: 2015-02-25T11:00:00.000Z
Updated: 2024-08-06T04:26:10.603Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0835 vulnerable 2026-06-08 05:06:23.914119 Details available
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 36.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Published: 2015-02-25T11:00:00.000Z
Updated: 2024-08-06T04:26:11.134Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0834 vulnerable 2026-06-08 05:06:23.907898 Details available
The WebRTC subsystem in Mozilla Firefox before 36.0 recognizes turns: and stuns: URIs but accesses the TURN or STUN server without using TLS, which makes it easier for man-in-the-middle attackers to discover credentials by spoofing a server and completing a brute-force attack within a short time window.
Published: 2015-02-25T11:00:00.000Z
Updated: 2024-08-06T04:26:11.083Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0833 vulnerable 2026-06-08 05:06:23.874815 Details available
Multiple untrusted search path vulnerabilities in updater.exe in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 on Windows, when the Maintenance Service is not used, allow local users to gain privileges via a Trojan horse DLL in (1) the current working directory or (2) a temporary directory, as demonstrated by bcrypt.dll.
Published: 2015-02-25T11:00:00.000Z
Updated: 2024-08-06T04:26:11.160Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0832 vulnerable 2026-06-08 05:06:23.332278 Details available
Mozilla Firefox before 36.0 does not properly recognize the equivalence of domain names with and without a trailing . (dot) character, which allows man-in-the-middle attackers to bypass the HPKP and HSTS protection mechanisms by constructing a URL with this character and leveraging access to an X.509 certificate for a domain with this character.
Published: 2015-02-25T11:00:00.000Z
Updated: 2024-08-06T04:26:11.059Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0831 vulnerable 2026-06-08 05:06:23.314762 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0830 vulnerable 2026-06-08 05:06:23.305913 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0829 vulnerable 2026-06-08 05:06:23.295548 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0828 vulnerable 2026-06-08 05:06:23.283915 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0827 vulnerable 2026-06-08 05:06:23.268063 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0826 vulnerable 2026-06-08 05:06:23.257351 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0825 vulnerable 2026-06-08 05:06:23.250777 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0824 vulnerable 2026-06-08 05:06:23.244509 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0823 vulnerable 2026-06-08 05:06:23.238009 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0822 vulnerable 2026-06-08 05:06:23.146814 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0821 vulnerable 2026-06-08 05:06:23.140535 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0820 vulnerable 2026-06-08 05:06:23.133822 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0819 vulnerable 2026-06-08 05:06:23.066564 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1527 vulnerable 2026-06-08 05:05:25.279065 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1506 vulnerable 2026-06-08 05:05:25.094580 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1501 vulnerable 2026-06-08 05:05:25.048430 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1489 vulnerable 2026-06-08 05:05:24.950081 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1484 vulnerable 2026-06-08 05:05:24.890936 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5611 vulnerable 2026-06-08 05:04:52.756572 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0790 vulnerable 2026-06-08 05:03:50.066196 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0751 vulnerable 2026-06-08 05:03:49.735807 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5837 vulnerable 2026-06-08 05:02:58.417895 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4210 vulnerable 2026-06-08 05:02:16.453754 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4206 vulnerable 2026-06-08 05:02:16.428257 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4203 vulnerable 2026-06-08 05:02:16.383995 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4190 vulnerable 2026-06-08 05:02:16.312505 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3993 vulnerable 2026-06-08 05:02:15.367736 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3987 vulnerable 2026-06-08 05:02:15.323513 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3980 vulnerable 2026-06-08 05:02:15.188351 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3979 vulnerable 2026-06-08 05:02:15.164096 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3978 vulnerable 2026-06-08 05:02:15.076070 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3975 vulnerable 2026-06-08 05:02:15.066995 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3974 vulnerable 2026-06-08 05:02:14.794016 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3973 vulnerable 2026-06-08 05:02:14.790016 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3971 vulnerable 2026-06-08 05:02:14.782471 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3970 vulnerable 2026-06-08 05:02:14.774346 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3969 vulnerable 2026-06-08 05:02:14.766848 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3966 vulnerable 2026-06-08 05:02:14.756442 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3965 vulnerable 2026-06-08 05:02:14.751866 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3964 vulnerable 2026-06-08 05:02:14.745303 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3962 vulnerable 2026-06-08 05:02:14.736178 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3958 vulnerable 2026-06-08 05:02:14.651674 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1971 vulnerable 2026-06-08 05:00:52.117232 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1956 vulnerable 2026-06-08 05:00:51.881210 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.