Approved changes feed: RSS · Atom

cpe:2.3:a:mozilla:seamonkey:2.9:beta4:*:*:*:*:*:*

part: a version: 2.9 update: beta4

VendorMozilla (be1b0d4e-21a7-5a25-9982-bbda6ef43ec1)
ProductSeamonkey (9b67c4f8-e83e-55c8-8c3d-4a52e7d74102)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:gitlab/seamonkey-project/seamonkey-2.53-comm purl2cpe 2026-06-01 10:17:53.427906
pkg:mozilla/seamonkey purl2cpe 2026-06-01 10:17:53.427907
pkg:rpm/fedora/seamonkey purl2cpe 2026-06-01 10:17:53.427909

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-1717 vulnerable 2026-06-08 05:03:55.694284 Details available
Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 do not properly restrict local-filesystem access by Java applets, which allows user-assisted remote attackers to read arbitrary files by leveraging a download to a fixed pathname or other predictable pathname.
Published: 2013-08-07T01:00:00.000Z
Updated: 2024-08-06T15:13:31.688Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1714 vulnerable 2026-06-08 05:03:55.689632 Details available
The Web Workers implementation in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 does not properly restrict XMLHttpRequest calls, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via unspecified vectors.
Published: 2013-08-07T01:00:00.000Z
Updated: 2024-08-06T15:13:32.319Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1713 vulnerable 2026-06-08 05:03:55.685633 Details available
Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 use an incorrect URI within unspecified comparisons during enforcement of the Same Origin Policy, which allows remote attackers to conduct cross-site scripting (XSS) attacks or install arbitrary add-ons via a crafted web site.
Published: 2013-08-07T01:00:00.000Z
Updated: 2024-08-06T15:13:32.704Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1711 vulnerable 2026-06-08 05:03:55.576029 Details available
The XrayWrapper implementation in Mozilla Firefox before 23.0 and SeaMonkey before 2.20 does not properly address the possibility of an XBL scope bypass resulting from non-native arguments in XBL function calls, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks by leveraging access to an unprivileged object.
Published: 2013-08-07T01:00:00.000Z
Updated: 2024-08-06T15:13:32.669Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1710 vulnerable 2026-06-08 05:03:55.571671 Details available
The crypto.generateCRMFRequest function in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 allows remote attackers to execute arbitrary JavaScript code or conduct cross-site scripting (XSS) attacks via vectors related to Certificate Request Message Format (CRMF) request generation.
Published: 2013-08-07T01:00:00.000Z
Updated: 2024-08-06T15:13:31.636Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1709 vulnerable 2026-06-08 05:03:55.567922 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1708 vulnerable 2026-06-08 05:03:55.563379 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1705 vulnerable 2026-06-08 05:03:55.557747 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1704 vulnerable 2026-06-08 05:03:55.554030 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1702 vulnerable 2026-06-08 05:03:55.550274 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1701 vulnerable 2026-06-08 05:03:55.522502 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0797 vulnerable 2026-06-08 05:03:50.119520 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0795 vulnerable 2026-06-08 05:03:50.115260 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0794 vulnerable 2026-06-08 05:03:50.111583 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0793 vulnerable 2026-06-08 05:03:50.108333 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0792 vulnerable 2026-06-08 05:03:50.104654 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0789 vulnerable 2026-06-08 05:03:50.061731 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0788 vulnerable 2026-06-08 05:03:50.041687 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0751 vulnerable 2026-06-08 05:03:49.836451 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3993 vulnerable 2026-06-08 05:02:15.407142 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.