Approved changes feed: RSS · Atom

cpe:2.3:a:mozilla:thunderbird:17.0.5:*:*:*:*:*:*:*

part: a version: 17.0.5 update: *

VendorMozilla (be1b0d4e-21a7-5a25-9982-bbda6ef43ec1)
ProductThunderbird (e5553559-8c71-58cd-a1a6-c5f5cf77e32f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/thunderbird purl2cpe 2026-06-01 10:17:53.858303
pkg:mozilla/comm-central purl2cpe 2026-06-01 10:17:53.858304
pkg:rpm/fedora/thunderbird purl2cpe 2026-06-01 10:17:53.858306
pkg:rpm/opensuse/mozillathunderbird purl2cpe 2026-06-01 10:17:53.858307

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-2018 vulnerable 2026-06-08 05:05:27.236776 Details available
Cross-site scripting (XSS) vulnerability in Mozilla Thunderbird 17.x through 17.0.8, Thunderbird ESR 17.x through 17.0.10, and SeaMonkey before 2.20 allows user-assisted remote attackers to inject arbitrary web script or HTML via an e-mail message containing a data: URL in a (1) OBJECT or (2) EMBED element, a related issue to CVE-2013-6674.
Published: 2014-02-17T22:00:00.000Z
Updated: 2024-08-06T09:58:16.231Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6674 vulnerable 2026-06-08 05:04:57.784851 Details available
Cross-site scripting (XSS) vulnerability in Mozilla Thunderbird 17.x through 17.0.8, Thunderbird ESR 17.x through 17.0.10, and SeaMonkey before 2.20 allows user-assisted remote attackers to inject arbitrary web script or HTML via an e-mail message containing a data: URL in an IFRAME element, a related issue to CVE-2014-2018.
Published: 2014-02-17T22:00:00.000Z
Updated: 2024-08-06T17:46:22.408Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5604 vulnerable 2026-06-08 05:04:52.459804 Details available
The txXPathNodeUtils::getBaseURI function in the XSLT processor in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before 2.22 does not properly initialize data, which allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow and application crash) via crafted documents.
Published: 2013-10-30T10:00:00.000Z
Updated: 2024-08-06T17:15:21.510Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5603 vulnerable 2026-06-08 05:04:52.454015 Details available
Use-after-free vulnerability in the nsContentUtils::ContentIsHostIncludingDescendantOf function in Mozilla Firefox before 25.0, Firefox ESR 24.x before 24.1, Thunderbird before 24.1, and SeaMonkey before 2.22 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors involving HTML document templates.
Published: 2013-10-30T10:00:00.000Z
Updated: 2024-08-06T17:15:21.512Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5602 vulnerable 2026-06-08 05:04:52.449691 Details available
The Worker::SetEventListener function in the Web workers implementation in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before 2.22 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors related to direct proxies.
Published: 2013-10-30T10:00:00.000Z
Updated: 2024-08-06T17:15:21.408Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5601 vulnerable 2026-06-08 05:04:52.447791 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5600 vulnerable 2026-06-08 05:04:52.441845 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5599 vulnerable 2026-06-08 05:04:52.440130 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5597 vulnerable 2026-06-08 05:04:52.422811 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5596 vulnerable 2026-06-08 05:04:52.419216 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5595 vulnerable 2026-06-08 05:04:52.417887 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5593 vulnerable 2026-06-08 05:04:52.411583 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5591 vulnerable 2026-06-08 05:04:52.407697 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5590 vulnerable 2026-06-08 05:04:52.391639 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1738 vulnerable 2026-06-08 05:03:55.975903 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1737 vulnerable 2026-06-08 05:03:55.972930 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1736 vulnerable 2026-06-08 05:03:55.969529 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1735 vulnerable 2026-06-08 05:03:55.966260 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1732 vulnerable 2026-06-08 05:03:55.793020 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1730 vulnerable 2026-06-08 05:03:55.787027 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1728 vulnerable 2026-06-08 05:03:55.785037 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1726 vulnerable 2026-06-08 05:03:55.779767 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1725 vulnerable 2026-06-08 05:03:55.777798 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1724 vulnerable 2026-06-08 05:03:55.774501 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1723 vulnerable 2026-06-08 05:03:55.769795 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1722 vulnerable 2026-06-08 05:03:55.766656 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1720 vulnerable 2026-06-08 05:03:55.761071 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1719 vulnerable 2026-06-08 05:03:55.758011 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1718 vulnerable 2026-06-08 05:03:55.740854 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1717 vulnerable 2026-06-08 05:03:55.695625 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1714 vulnerable 2026-06-08 05:03:55.690969 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1713 vulnerable 2026-06-08 05:03:55.686902 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1712 vulnerable 2026-06-08 05:03:55.578862 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1710 vulnerable 2026-06-08 05:03:55.573408 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1709 vulnerable 2026-06-08 05:03:55.566306 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1707 vulnerable 2026-06-08 05:03:55.560662 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1706 vulnerable 2026-06-08 05:03:55.559837 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1701 vulnerable 2026-06-08 05:03:55.542390 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1697 vulnerable 2026-06-08 05:03:55.506101 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1694 vulnerable 2026-06-08 05:03:55.504225 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1693 vulnerable 2026-06-08 05:03:55.503143 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1692 vulnerable 2026-06-08 05:03:55.502098 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1687 vulnerable 2026-06-08 05:03:55.479699 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1686 vulnerable 2026-06-08 05:03:55.478674 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1685 vulnerable 2026-06-08 05:03:55.477593 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1684 vulnerable 2026-06-08 05:03:55.476564 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1682 vulnerable 2026-06-08 05:03:55.473606 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.