Approved changes feed: RSS · Atom

cpe:2.3:a:mozilla:thunderbird_esr:17.0.1:*:*:*:*:*:*:*

part: a version: 17.0.1 update: *

VendorMozilla (be1b0d4e-21a7-5a25-9982-bbda6ef43ec1)
ProductThunderbird Esr (8cda75e7-5b98-5e3e-b343-10e3be29a684)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/thunderbird purl2cpe 2026-06-01 10:17:53.581724
pkg:mozilla/comm-central purl2cpe 2026-06-01 10:17:53.581725
pkg:rpm/fedora/thunderbird purl2cpe 2026-06-01 10:17:53.581727
pkg:rpm/opensuse/mozillathunderbird purl2cpe 2026-06-01 10:17:53.581728

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-2018 vulnerable 2026-06-08 05:05:27.228949 Details available
Cross-site scripting (XSS) vulnerability in Mozilla Thunderbird 17.x through 17.0.8, Thunderbird ESR 17.x through 17.0.10, and SeaMonkey before 2.20 allows user-assisted remote attackers to inject arbitrary web script or HTML via an e-mail message containing a data: URL in a (1) OBJECT or (2) EMBED element, a related issue to CVE-2013-6674.
Published: 2014-02-17T22:00:00.000Z
Updated: 2024-08-06T09:58:16.231Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6674 vulnerable 2026-06-08 05:04:57.784936 Details available
Cross-site scripting (XSS) vulnerability in Mozilla Thunderbird 17.x through 17.0.8, Thunderbird ESR 17.x through 17.0.10, and SeaMonkey before 2.20 allows user-assisted remote attackers to inject arbitrary web script or HTML via an e-mail message containing a data: URL in an IFRAME element, a related issue to CVE-2014-2018.
Published: 2014-02-17T22:00:00.000Z
Updated: 2024-08-06T17:46:22.408Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5604 vulnerable 2026-06-08 05:04:52.457363 Details available
The txXPathNodeUtils::getBaseURI function in the XSLT processor in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before 2.22 does not properly initialize data, which allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow and application crash) via crafted documents.
Published: 2013-10-30T10:00:00.000Z
Updated: 2024-08-06T17:15:21.510Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5602 vulnerable 2026-06-08 05:04:52.452733 Details available
The Worker::SetEventListener function in the Web workers implementation in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before 2.22 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors related to direct proxies.
Published: 2013-10-30T10:00:00.000Z
Updated: 2024-08-06T17:15:21.408Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5601 vulnerable 2026-06-08 05:04:52.448116 Details available
Use-after-free vulnerability in the nsEventListenerManager::SetEventHandler function in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before 2.22 allows remote attackers to execute arbitrary code via vectors related to a memory allocation through the garbage collection (GC) API.
Published: 2013-10-30T10:00:00.000Z
Updated: 2024-08-06T17:15:21.550Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5600 vulnerable 2026-06-08 05:04:52.444047 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5599 vulnerable 2026-06-08 05:04:52.439881 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5597 vulnerable 2026-06-08 05:04:52.422567 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5595 vulnerable 2026-06-08 05:04:52.415172 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5590 vulnerable 2026-06-08 05:04:52.395506 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1737 vulnerable 2026-06-08 05:03:55.970878 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1736 vulnerable 2026-06-08 05:03:55.969607 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1735 vulnerable 2026-06-08 05:03:55.964266 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1732 vulnerable 2026-06-08 05:03:55.792793 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1730 vulnerable 2026-06-08 05:03:55.788991 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1726 vulnerable 2026-06-08 05:03:55.779527 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1725 vulnerable 2026-06-08 05:03:55.775848 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1722 vulnerable 2026-06-08 05:03:55.766876 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1718 vulnerable 2026-06-08 05:03:55.696819 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1717 vulnerable 2026-06-08 05:03:55.692755 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1714 vulnerable 2026-06-08 05:03:55.691126 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1713 vulnerable 2026-06-08 05:03:55.687077 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1712 vulnerable 2026-06-08 05:03:55.578910 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1710 vulnerable 2026-06-08 05:03:55.573040 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1709 vulnerable 2026-06-08 05:03:55.566356 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1707 vulnerable 2026-06-08 05:03:55.560709 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1706 vulnerable 2026-06-08 05:03:55.559886 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1701 vulnerable 2026-06-08 05:03:55.545226 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1697 vulnerable 2026-06-08 05:03:55.506132 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1694 vulnerable 2026-06-08 05:03:55.504257 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1693 vulnerable 2026-06-08 05:03:55.503179 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1692 vulnerable 2026-06-08 05:03:55.502130 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1687 vulnerable 2026-06-08 05:03:55.479729 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1686 vulnerable 2026-06-08 05:03:55.478706 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1685 vulnerable 2026-06-08 05:03:55.477624 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1684 vulnerable 2026-06-08 05:03:55.476599 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1682 vulnerable 2026-06-08 05:03:55.473680 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1681 vulnerable 2026-06-08 05:03:55.456523 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1680 vulnerable 2026-06-08 05:03:55.455619 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1679 vulnerable 2026-06-08 05:03:55.454713 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1678 vulnerable 2026-06-08 05:03:55.453718 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1677 vulnerable 2026-06-08 05:03:55.452816 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1676 vulnerable 2026-06-08 05:03:55.451887 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1674 vulnerable 2026-06-08 05:03:55.430706 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1672 vulnerable 2026-06-08 05:03:55.429277 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1670 vulnerable 2026-06-08 05:03:55.427981 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0801 vulnerable 2026-06-08 05:03:50.200085 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0799 vulnerable 2026-06-08 05:03:50.122079 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0797 vulnerable 2026-06-08 05:03:50.118118 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0795 vulnerable 2026-06-08 05:03:50.113907 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0793 vulnerable 2026-06-08 05:03:50.106967 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0788 vulnerable 2026-06-08 05:03:50.038106 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0787 vulnerable 2026-06-08 05:03:50.028573 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.