Firefox Os (Mozilla) - vulnerabilities (CVEs)
14 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2016-01-09. Vendor: Mozilla.
CVEs of Firefox Os
- CVE-2015-8512 - CVSS 4.6 (medium), 2016-01-09: The lockscreen feature in Mozilla Firefox OS before 2.5 does not properly restrict failed authentication attempts, which makes it easier for physically…
- CVE-2015-8511 - CVSS 6.4 (medium), 2016-01-09: Race condition in the lockscreen feature in Mozilla Firefox OS before 2.5 allows physically proximate attackers to bypass an intended passcode requirement via…
- CVE-2015-8510 - CVSS 6.1 (medium), 2016-01-09: Cross-site scripting (XSS) vulnerability in the internationalization feature in the default homescreen app in Mozilla Firefox OS before 2.5 allows…
- CVE-2015-4489 - CVSS 7.5 (high), 2015-08-16: The nsTArray_Impl class in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 might allow remote attackers to cause a denial…
- CVE-2015-4488 - CVSS 7.5 (high), 2015-08-16: Use-after-free vulnerability in the StyleAnimationValue class in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 allows…
- CVE-2015-4487 - CVSS 7.5 (high), 2015-08-16: The nsTSubstring::ReplacePrep function in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 might allow remote attackers to…
- CVE-2015-5962 - CVSS 5 (medium), 2015-08-08: Integer signedness error in the SharedBufferManagerParent::RecvAllocateGrallocBuffer function in the buffer-management implementation in the graphics layer in…
- CVE-2015-5961 - CVSS 3.3 (low), 2015-08-08: The COPPA error page in the Accounts setup dialog in Mozilla Firefox OS before 2.2 embeds content from an external web server URL into the System process,…
- CVE-2015-5960 - CVSS 1.9 (low), 2015-08-08: Mozilla Firefox OS before 2.2 allows physically proximate attackers to bypass the pass-code protection mechanism and access USB Mass Storage (UMS) media…
- CVE-2015-4495 - CVSS 8.8 (high), 2015-08-08: The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows remote attackers to bypass the Same Origin…
- CVE-2015-4494 - CVSS 4.3 (medium), 2015-08-08: Mozilla Firefox OS before 2.2 does not require the wifi-manage privilege for reading a Wi-Fi system message, which allows attackers to obtain potentially…
- CVE-2015-2745 - CVSS 4.3 (medium), 2015-08-08: Multiple cross-site scripting (XSS) vulnerabilities in the Search app in Gaia in Mozilla Firefox OS before 2.2 allow remote attackers to inject arbitrary HTML…
- CVE-2015-2744 - CVSS 4.3 (medium), 2015-08-08: Cross-site scripting (XSS) vulnerability in the Search app in Gaia in Mozilla Firefox OS before 2.2 allows remote attackers to inject arbitrary HTML via a…
- CVE-2015-4000 - CVSS 3.7 (low), 2015-05-21: The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice,…
