Approved changes feed: RSS · Atom

cpe:2.3:a:mozilla:thunderbird_esr:17.0.4:*:*:*:*:*:*:*

part: a version: 17.0.4 update: *

VendorMozilla (be1b0d4e-21a7-5a25-9982-bbda6ef43ec1)
ProductThunderbird Esr (8cda75e7-5b98-5e3e-b343-10e3be29a684)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/thunderbird purl2cpe 2026-06-01 10:17:53.581751
pkg:mozilla/comm-central purl2cpe 2026-06-01 10:17:53.581752
pkg:rpm/fedora/thunderbird purl2cpe 2026-06-01 10:17:53.581754
pkg:rpm/opensuse/mozillathunderbird purl2cpe 2026-06-01 10:17:53.581755

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-2018 vulnerable 2026-06-08 05:05:27.230740 Details available
Cross-site scripting (XSS) vulnerability in Mozilla Thunderbird 17.x through 17.0.8, Thunderbird ESR 17.x through 17.0.10, and SeaMonkey before 2.20 allows user-assisted remote attackers to inject arbitrary web script or HTML via an e-mail message containing a data: URL in a (1) OBJECT or (2) EMBED element, a related issue to CVE-2013-6674.
Published: 2014-02-17T22:00:00.000Z
Updated: 2024-08-06T09:58:16.231Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6674 vulnerable 2026-06-08 05:04:57.784987 Details available
Cross-site scripting (XSS) vulnerability in Mozilla Thunderbird 17.x through 17.0.8, Thunderbird ESR 17.x through 17.0.10, and SeaMonkey before 2.20 allows user-assisted remote attackers to inject arbitrary web script or HTML via an e-mail message containing a data: URL in an IFRAME element, a related issue to CVE-2014-2018.
Published: 2014-02-17T22:00:00.000Z
Updated: 2024-08-06T17:46:22.408Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5604 vulnerable 2026-06-08 05:04:52.457417 Details available
The txXPathNodeUtils::getBaseURI function in the XSLT processor in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before 2.22 does not properly initialize data, which allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow and application crash) via crafted documents.
Published: 2013-10-30T10:00:00.000Z
Updated: 2024-08-06T17:15:21.510Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5602 vulnerable 2026-06-08 05:04:52.452789 Details available
The Worker::SetEventListener function in the Web workers implementation in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before 2.22 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors related to direct proxies.
Published: 2013-10-30T10:00:00.000Z
Updated: 2024-08-06T17:15:21.408Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5601 vulnerable 2026-06-08 05:04:52.448171 Details available
Use-after-free vulnerability in the nsEventListenerManager::SetEventHandler function in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before 2.22 allows remote attackers to execute arbitrary code via vectors related to a memory allocation through the garbage collection (GC) API.
Published: 2013-10-30T10:00:00.000Z
Updated: 2024-08-06T17:15:21.550Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5600 vulnerable 2026-06-08 05:04:52.444094 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5599 vulnerable 2026-06-08 05:04:52.439931 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5597 vulnerable 2026-06-08 05:04:52.422620 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5595 vulnerable 2026-06-08 05:04:52.415231 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5590 vulnerable 2026-06-08 05:04:52.397065 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1737 vulnerable 2026-06-08 05:03:55.970930 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1736 vulnerable 2026-06-08 05:03:55.969653 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1735 vulnerable 2026-06-08 05:03:55.964321 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1732 vulnerable 2026-06-08 05:03:55.792842 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1730 vulnerable 2026-06-08 05:03:55.789037 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1726 vulnerable 2026-06-08 05:03:55.779587 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1725 vulnerable 2026-06-08 05:03:55.775896 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1722 vulnerable 2026-06-08 05:03:55.766924 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1718 vulnerable 2026-06-08 05:03:55.696872 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1717 vulnerable 2026-06-08 05:03:55.692807 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1714 vulnerable 2026-06-08 05:03:55.691180 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1713 vulnerable 2026-06-08 05:03:55.687126 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1712 vulnerable 2026-06-08 05:03:55.578961 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1710 vulnerable 2026-06-08 05:03:55.573088 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1709 vulnerable 2026-06-08 05:03:55.566403 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1707 vulnerable 2026-06-08 05:03:55.560754 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1706 vulnerable 2026-06-08 05:03:55.559938 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1701 vulnerable 2026-06-08 05:03:55.545280 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1697 vulnerable 2026-06-08 05:03:55.506185 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1694 vulnerable 2026-06-08 05:03:55.504305 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1693 vulnerable 2026-06-08 05:03:55.503225 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1692 vulnerable 2026-06-08 05:03:55.502184 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1687 vulnerable 2026-06-08 05:03:55.479775 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1686 vulnerable 2026-06-08 05:03:55.478755 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1685 vulnerable 2026-06-08 05:03:55.477671 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1684 vulnerable 2026-06-08 05:03:55.476648 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1682 vulnerable 2026-06-08 05:03:55.473736 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1681 vulnerable 2026-06-08 05:03:55.456571 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1680 vulnerable 2026-06-08 05:03:55.455666 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1679 vulnerable 2026-06-08 05:03:55.454757 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1678 vulnerable 2026-06-08 05:03:55.453765 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1677 vulnerable 2026-06-08 05:03:55.452863 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1676 vulnerable 2026-06-08 05:03:55.451938 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1674 vulnerable 2026-06-08 05:03:55.430755 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1672 vulnerable 2026-06-08 05:03:55.429325 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1670 vulnerable 2026-06-08 05:03:55.428034 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0801 vulnerable 2026-06-08 05:03:50.200138 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0799 vulnerable 2026-06-08 05:03:50.122128 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0797 vulnerable 2026-06-08 05:03:50.118172 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0795 vulnerable 2026-06-08 05:03:50.113955 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0793 vulnerable 2026-06-08 05:03:50.107017 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0788 vulnerable 2026-06-08 05:03:50.039204 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.