Approved changes feed: RSS · Atom

cpe:2.3:a:mozilla:firefox:24.1.1:*:*:*:*:*:*:*

part: a version: 24.1.1 update: *

VendorMozilla (be1b0d4e-21a7-5a25-9982-bbda6ef43ec1)
ProductFirefox (d152d976-2d5e-5cc4-89b6-e80c6d067896)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/firefox purl2cpe 2026-06-01 10:17:52.835264
pkg:mozilla/mozilla-central purl2cpe 2026-06-01 10:17:52.835266
pkg:rpm/fedora/firefox purl2cpe 2026-06-01 10:17:52.835267
pkg:rpm/opensuse/mozillafirefox purl2cpe 2026-06-01 10:17:52.835268

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-0836 vulnerable 2026-06-08 05:06:23.921887 Details available
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Published: 2015-02-25T11:00:00.000Z
Updated: 2024-08-06T04:26:10.603Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0835 vulnerable 2026-06-08 05:06:23.915442 Details available
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 36.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Published: 2015-02-25T11:00:00.000Z
Updated: 2024-08-06T04:26:11.134Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0834 vulnerable 2026-06-08 05:06:23.909411 Details available
The WebRTC subsystem in Mozilla Firefox before 36.0 recognizes turns: and stuns: URIs but accesses the TURN or STUN server without using TLS, which makes it easier for man-in-the-middle attackers to discover credentials by spoofing a server and completing a brute-force attack within a short time window.
Published: 2015-02-25T11:00:00.000Z
Updated: 2024-08-06T04:26:11.083Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0833 vulnerable 2026-06-08 05:06:23.876292 Details available
Multiple untrusted search path vulnerabilities in updater.exe in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 on Windows, when the Maintenance Service is not used, allow local users to gain privileges via a Trojan horse DLL in (1) the current working directory or (2) a temporary directory, as demonstrated by bcrypt.dll.
Published: 2015-02-25T11:00:00.000Z
Updated: 2024-08-06T04:26:11.160Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0832 vulnerable 2026-06-08 05:06:23.335389 Details available
Mozilla Firefox before 36.0 does not properly recognize the equivalence of domain names with and without a trailing . (dot) character, which allows man-in-the-middle attackers to bypass the HPKP and HSTS protection mechanisms by constructing a URL with this character and leveraging access to an X.509 certificate for a domain with this character.
Published: 2015-02-25T11:00:00.000Z
Updated: 2024-08-06T04:26:11.059Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0831 vulnerable 2026-06-08 05:06:23.322568 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0830 vulnerable 2026-06-08 05:06:23.307959 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0829 vulnerable 2026-06-08 05:06:23.297863 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0828 vulnerable 2026-06-08 05:06:23.288696 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0827 vulnerable 2026-06-08 05:06:23.276029 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0826 vulnerable 2026-06-08 05:06:23.261950 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0825 vulnerable 2026-06-08 05:06:23.252440 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0824 vulnerable 2026-06-08 05:06:23.246038 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0823 vulnerable 2026-06-08 05:06:23.239549 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0822 vulnerable 2026-06-08 05:06:23.148282 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0821 vulnerable 2026-06-08 05:06:23.142220 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0820 vulnerable 2026-06-08 05:06:23.135525 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0819 vulnerable 2026-06-08 05:06:23.121448 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1567 vulnerable 2026-06-08 05:05:25.451333 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1562 vulnerable 2026-06-08 05:05:25.441272 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1557 vulnerable 2026-06-08 05:05:25.431690 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1556 vulnerable 2026-06-08 05:05:25.427556 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1555 vulnerable 2026-06-08 05:05:25.426650 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1551 vulnerable 2026-06-08 05:05:25.415322 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1547 vulnerable 2026-06-08 05:05:25.408880 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1544 vulnerable 2026-06-08 05:05:25.353743 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1541 vulnerable 2026-06-08 05:05:25.351863 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1538 vulnerable 2026-06-08 05:05:25.341399 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1533 vulnerable 2026-06-08 05:05:25.333437 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1527 vulnerable 2026-06-08 05:05:25.280571 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1506 vulnerable 2026-06-08 05:05:25.096226 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1501 vulnerable 2026-06-08 05:05:25.050016 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1489 vulnerable 2026-06-08 05:05:24.951857 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1484 vulnerable 2026-06-08 05:05:24.937409 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5611 vulnerable 2026-06-08 05:04:52.792661 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.