SE
Product
Seamonkey
On CISA KEVExploited in the wild
704
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 17High 14Medium 6Low 1
Watch
Add Seamonkey to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2010-1585 | – | Apr 28 | The nsIScriptableUnescapeHTML.parseFragment method in the ParanoidFragmentSink protection mechanism in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, Thunderbird before… Affected: through 2.0.11; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2010-0182 | – | Apr 5 | The XMLDocument::load function in Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4 does not perform the expected… Affected: through 2.0.3; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2010-0181 | – | Apr 5 | Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, executes a mail application in situations where an IMG element has a SRC attribute that is a… Affected: through 2.0.3; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2010-0179 | – | Apr 5 | Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, when the XMLHttpRequestSpy module in the Firebug add-on is used, does not properly handle… Affected: through 2.0.2; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2010-0178 | – | Apr 5 | Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, does not prevent applets from interpreting mouse clicks as drag-and-drop… Affected: through 2.0.3; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2010-0177 | – | Apr 5 | Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, frees the contents of the window.navigator.plugins array while a reference… Affected: through 2.0.3; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2010-0176 | – | Apr 5 | Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2; Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 do not properly manage reference counts for option… Affected: through 2.0.3; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2010-0175 | – | Apr 5 | Use-after-free vulnerability in the nsTreeSelection implementation in Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.9, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4… Affected: through 2.0.3; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2010-0174 | – | Apr 5 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2; Thunderbird before 3.0.4; and SeaMonkey… Affected: through 2.0.3; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2010-0173 | – | Apr 5 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4 allow… Affected: through 2.0.3; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2010-1125 | – | Mar 26 | The JavaScript implementation in Mozilla Firefox 3.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote attackers to send selected keystrokes to a… Affected: through 2.0.4; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2010-0171 | – | Mar 25 | Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 allow remote attackers to perform… Affected: through 2.0.2; 1.1; 1.1; 1.1; 1.1.1; 1.1.2; +27 more |
| CVE-2010-0169 | – | Mar 25 | The CSSLoaderImpl::DoSheetComplete function in layout/style/nsCSSLoader.cpp in Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before… Affected: through 2.0.2; 1.1; 1.1; 1.1; 1.1.1; 1.1.2; +27 more |
| CVE-2010-0167 | – | Mar 25 | The browser engine in Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 allows remote attackers… Affected: through 2.0.2; 1.1; 1.1; 1.1; 1.1.1; 1.1.2; +27 more |
| CVE-2010-0163 | – | Mar 23 | Mozilla Thunderbird before 2.0.0.24 and SeaMonkey before 1.1.19 process e-mail attachments with a parser that performs casts and line termination incorrectly, which allows remote… Affected: through 1.1.18; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +27 more |
| CVE-2010-0161 | – | Mar 23 | The nsAuthSSPI::Unwrap function in extensions/auth/nsAuthSSPI.cpp in Mozilla Thunderbird before 2.0.0.24 and SeaMonkey before 1.1.19 on Windows Vista, Windows Server 2008 R2, and… Affected: through 1.1.18; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +27 more |
| CVE-2009-3385 | – | Mar 23 | The mail component in Mozilla SeaMonkey before 1.1.19 does not properly restrict execution of scriptable plugin content, which allows user-assisted remote attackers to obtain… Affected: through 1.1.18; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +27 more |
| CVE-2010-0162 | – | Feb 22 | Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly support the application/octet-stream content type as a protection… Affected: 1.0; 1.0; 1.0; 1.0.1; 1.0.2; 1.0.3; +33 more |
| CVE-2010-0160 | – | Feb 22 | The Web Worker functionality in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly handle array data types for posted… Affected: through 2.0.2; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2010-0159 | – | Feb 22 | The browser engine in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows remote attackers to cause a denial of… Affected: before 2.0.3 |
| CVE-2009-3988 | – | Feb 22 | Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly restrict read access to object properties in showModalDialog, which… Affected: 2.0; 2.0; 2.0; 2.0; 2.0; 2.0; +2 more |
| CVE-2009-1571 | – | Feb 22 | Use-after-free vulnerability in the HTML parser in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows remote… Affected: 1.0; 1.0; 1.0; 1.0.1; 1.0.2; 1.0.3; +33 more |
| CVE-2010-0654 | – | Feb 18 | Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 permit cross-origin loading of CSS… Affected: through 2.0.5; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2009-4630 | – | Jan 29 | Mozilla Necko, as used in Firefox, SeaMonkey, and other applications, performs DNS prefetching of domain names contained in links within local HTML documents, which makes it… Affected: All versions, or not specified |
| CVE-2009-4629 | – | Jan 29 | Mozilla Necko, as used in Thunderbird 3.0.1, SeaMonkey, and other applications, performs DNS prefetching even when the app type is APP_TYPE_MAIL or APP_TYPE_EDITOR, which makes it… Affected: All versions, or not specified |
| CVE-2009-3987 | – | Dec 17 | The GeckoActiveXObject function in Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, generates different exception messages depending on whether… Affected: through 2.0; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2009-3986 | – | Dec 17 | Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to execute arbitrary JavaScript with chrome privileges by leveraging a… Affected: through 2.0; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2009-3985 | – | Dec 17 | Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to associate spoofed content with an invalid URL by setting… Affected: through 2.0; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2009-3984 | – | Dec 17 | Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to spoof an SSL indicator for an http URL or a file URL by setting… Affected: through 2.0; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2009-3983 | – | Dec 17 | Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to send authenticated requests to arbitrary applications by replaying the… Affected: through 2.0; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2009-3982 | – | Dec 17 | Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox 3.5.x before 3.5.6, SeaMonkey before 2.0.1, and Thunderbird allow remote attackers to cause a… Affected: through 2.0; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2009-3981 | – | Dec 17 | Unspecified vulnerability in the browser engine in Mozilla Firefox before 3.0.16, SeaMonkey before 2.0.1, and Thunderbird allows remote attackers to cause a denial of service… Affected: through 2.0; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2009-3980 | – | Dec 17 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.6, SeaMonkey before 2.0.1, and Thunderbird allow remote attackers to cause a denial… Affected: through 2.0; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2009-3979 | – | Dec 17 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, SeaMonkey before 2.0.1, and Thunderbird allow remote attackers… Affected: through 2.0; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2009-3389 | – | Dec 17 | Integer overflow in libtheora in Xiph.Org Theora before 1.1, as used in Mozilla Firefox 3.5 before 3.5.6 and SeaMonkey before 2.0.1, allows remote attackers to cause a denial of… Affected: through 2.0; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2009-3388 | – | Dec 17 | liboggplay in Mozilla Firefox 3.5.x before 3.5.6 and SeaMonkey before 2.0.1 might allow context-dependent attackers to cause a denial of service (application crash) or execute… Affected: through 2.0; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2009-3376 | – | Oct 29 | Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, does not properly handle a right-to-left override (aka RLO or U+202E) Unicode character in a… Affected: through 1.5.0.10; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +29 more |
| CVE-2009-3373 | – | Oct 29 | Heap-based buffer overflow in the GIF image parser in Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, allows remote attackers to execute arbitrary… Affected: through 1.5.0.10; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +29 more |
| CVE-2009-3372 | – | Oct 29 | Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, allows remote attackers to execute arbitrary code via a crafted regular expression in a Proxy… Affected: through 1.5.0.10; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +29 more |
| CVE-2009-3014 | – | Aug 31 | Mozilla Firefox 3.0.13 and earlier, 3.5, 3.6 a1 pre, and 3.7 a1 pre; SeaMonkey 1.1.17; and Mozilla 1.7.x and earlier do not properly handle javascript: URIs in HTML links within… Affected: 1.1.17 |
| CVE-2009-3010 | – | Aug 31 | Mozilla Firefox 3.0.13 and earlier, 3.5, 3.6 a1 pre, and 3.7 a1 pre; SeaMonkey 1.1.17; and Mozilla 1.7.x and earlier do not properly block data: URIs in Refresh headers in HTTP… Affected: 1.1.17 |
| CVE-2009-3007 | – | Aug 28 | Mozilla Firefox 3.5.1 and SeaMonkey 1.1.17, and Flock 2.5.1, allow context-dependent attackers to spoof the address bar, via window.open with a relative URI, to show an arbitrary… Affected: 1.1.7 |
| CVE-2008-6961 | – | Aug 13 | mailnews in Mozilla Thunderbird before 2.0.0.18 and SeaMonkey before 1.1.13, when JavaScript is enabled in mail, allows remote attackers to obtain sensitive information about the… Affected: through 1.1.12; 1.0; 1.0; 1.0; 1.0; 1.0; +14 more |
| CVE-2009-2464 | – | Jul 22 | The nsXULTemplateQueryProcessorRDF::CheckIsSeparator function in Mozilla Firefox before 3.0.12, SeaMonkey 2.0a1pre, and Thunderbird allows remote attackers to cause a denial of… Affected: 2.0a1pre |
| CVE-2009-2535 | – | Jul 20 | Mozilla Firefox before 2.0.0.19 and 3.x before 3.0.5, SeaMonkey, and Thunderbird allow remote attackers to cause a denial of service (memory consumption and application crash) via… Affected: 1.0; 1.0; 1.0; 1.0; 1.0; 1.0; +33 more |
| CVE-2009-0689 | – | Jul 1 | Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation in gdtoa/misc.c in libc, as used in multiple operating… Affected: 1.1.8 |
| CVE-2009-2210 | – | Jun 25 | Mozilla Thunderbird before 2.0.0.22 and SeaMonkey before 1.1.17 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a… Affected: through 1.1.16; 1.0; 1.0; 1.0; 1.0; 1.0.1; +31 more |
| CVE-2009-1841 | – | Jun 12 | js/src/xpconnect/src/xpcwrappedjsclass.cpp in Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allows remote attackers to execute arbitrary… Affected: through 1.1.16; 1.0; 1.0; 1.0; 1.0; 1.0; +24 more |
| CVE-2009-1840 | – | Jun 12 | Mozilla Firefox before 3.0.11, Thunderbird, and SeaMonkey do not check content policy before loading a script file into a XUL document, which allows remote attackers to bypass… Affected: All versions, or not specified |
| CVE-2009-1838 | – | Jun 12 | The garbage-collection implementation in Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 sets an element's owner document to null in… Affected: through 1.1.16; 1.0; 1.0; 1.0; 1.0; 1.0; +24 more |
The 500 most important CVEs for this product (exploited first, then by severity)