SE
Product
Seamonkey
On CISA KEVExploited in the wild
704
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 17High 14Medium 6Low 1
Watch
Add Seamonkey to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2014-8632 | – | Dec 11 | The structured-clone implementation in Mozilla Firefox before 34.0 and SeaMonkey before 2.31 does not properly interact with XrayWrapper property filtering, which allows remote… Affected: through 2.30 |
| CVE-2014-8631 | – | Dec 11 | The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 34.0 and SeaMonkey before 2.31 supports native-interface passing, which allows remote attackers to bypass… Affected: through 2.30 |
| CVE-2014-1594 | – | Dec 11 | Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey before 2.31 might allow remote attackers to execute arbitrary code by leveraging… Affected: through 2.30 |
| CVE-2014-1593 | – | Dec 11 | Stack-based buffer overflow in the mozilla::FileBlockCache::Read function in Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey… Affected: through 2.30 |
| CVE-2014-1592 | – | Dec 11 | Use-after-free vulnerability in the nsHtml5TreeOperation function in xul.dll in Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey… Affected: through 2.30 |
| CVE-2014-1591 | – | Dec 11 | Mozilla Firefox 33.0 and SeaMonkey before 2.31 include path strings in CSP violation reports, which allows remote attackers to obtain sensitive information via a web site that… Affected: through 2.30 |
| CVE-2014-1590 | – | Dec 11 | The XMLHttpRequest.prototype.send method in Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey before 2.31 allows remote attackers… Affected: through 2.30 |
| CVE-2014-1589 | – | Dec 11 | Mozilla Firefox before 34.0 and SeaMonkey before 2.31 provide stylesheets with an incorrect primary namespace, which allows remote attackers to bypass intended access restrictions… Affected: through 2.30 |
| CVE-2014-1588 | – | Dec 11 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 34.0 and SeaMonkey before 2.31 allow remote attackers to cause a denial of service (memory… Affected: through 2.30 |
| CVE-2014-1587 | – | Dec 11 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey before 2.31 allow… Affected: through 2.30 |
| CVE-2014-1568 | – | Sep 25 | Mozilla Network Security Services (NSS) before 3.16.2.1, 3.16.x before 3.16.5, and 3.17.x before 3.17.1, as used in Mozilla Firefox before 32.0.3, Mozilla Firefox ESR 24.x before… Affected: through 2.29; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2014-1528 | – | Apr 30 | The sse2_composite_src_x888_8888 function in Pixman, as used in Cairo in Mozilla Firefox 28.0 and SeaMonkey 2.25 on Windows, allows remote attackers to execute arbitrary code or… Affected: 2.25 |
| CVE-2014-1526 | – | Apr 30 | The XrayWrapper implementation in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 allows user-assisted remote attackers to bypass intended access restrictions via a crafted… Affected: before 2.26 |
| CVE-2014-1525 | – | Apr 30 | The mozilla::dom::TextTrack::AddCue function in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 does not properly perform garbage collection for Text Track Manager… Affected: before 2.26 |
| CVE-2014-1522 | – | Apr 30 | The mozilla::dom::OscillatorNodeEngine::ComputeCustom function in the Web Audio subsystem in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 allows remote attackers to… Affected: before 2.26 |
| CVE-2014-1519 | – | Apr 30 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 allow remote attackers to cause a denial of service (memory… Affected: before 2.26 |
| CVE-2014-1512 | – | Mar 19 | Use-after-free vulnerability in the TypeObject class in the JavaScript engine in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey… Affected: before 2.25 |
| CVE-2014-1504 | – | Mar 19 | The session-restore feature in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 does not consider the Content Security Policy of a data: URL, which makes it easier for remote… Affected: before 2.25 |
| CVE-2014-1502 | – | Mar 19 | The (1) WebGL.compressedTexImage2D and (2) WebGL.compressedTexSubImage2D functions in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to bypass the… Affected: before 2.25 |
| CVE-2014-1500 | – | Mar 19 | Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to cause a denial of service (resource consumption and application hang) via onbeforeunload events… Affected: before 2.25 |
| CVE-2014-1499 | – | Mar 19 | Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to spoof the domain name in the WebRTC (1) camera or (2) microphone permission prompt by triggering… Affected: before 2.25 |
| CVE-2014-1498 | – | Mar 19 | The crypto.generateCRMFRequest method in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 does not properly validate a certain key type, which allows remote attackers to… Affected: before 2.25 |
| CVE-2014-1494 | – | Mar 19 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to cause a denial of service (memory… Affected: before 2.25 |
| CVE-2014-2018 | – | Feb 17 | Cross-site scripting (XSS) vulnerability in Mozilla Thunderbird 17.x through 17.0.8, Thunderbird ESR 17.x through 17.0.10, and SeaMonkey before 2.20 allows user-assisted remote… Affected: through 2.19; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2013-6674 | – | Feb 17 | Cross-site scripting (XSS) vulnerability in Mozilla Thunderbird 17.x through 17.0.8, Thunderbird ESR 17.x through 17.0.10, and SeaMonkey before 2.20 allows user-assisted remote… Affected: through 2.20; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2014-1491 | – | Feb 6 | Mozilla Network Security Services (NSS) before 3.15.4, as used in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, SeaMonkey before 2.24, and… Affected: before 2.24 |
| CVE-2014-1490 | – | Feb 6 | Race condition in libssl in Mozilla Network Security Services (NSS) before 3.15.4, as used in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3,… Affected: before 2.24 |
| CVE-2014-1488 | – | Feb 6 | The Web workers implementation in Mozilla Firefox before 27.0 and SeaMonkey before 2.24 allows remote attackers to execute arbitrary code via vectors involving termination of a… Affected: before 2.24 |
| CVE-2014-1485 | – | Feb 6 | The Content Security Policy (CSP) implementation in Mozilla Firefox before 27.0 and SeaMonkey before 2.24 operates on XSLT stylesheets according to style-src directives instead of… Affected: before 2.24 |
| CVE-2014-1483 | – | Feb 6 | Mozilla Firefox before 27.0 and SeaMonkey before 2.24 allow remote attackers to bypass the Same Origin Policy and obtain sensitive information by using an IFRAME element in… Affected: before 2.24 |
| CVE-2014-1480 | – | Feb 6 | The file-download implementation in Mozilla Firefox before 27.0 and SeaMonkey before 2.24 does not properly restrict the timing of button selections, which allows remote attackers… Affected: before 2.24 |
| CVE-2014-1478 | – | Feb 6 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 27.0 and SeaMonkey before 2.24 allow remote attackers to cause a denial of service (memory… Affected: before 2.24 |
| CVE-2013-6672 | – | Dec 11 | Mozilla Firefox before 26.0 and SeaMonkey before 2.23 on Linux allow user-assisted remote attackers to read clipboard data by leveraging certain middle-click paste operations Affected: before 2.23 |
| CVE-2013-5619 | – | Dec 11 | Multiple integer overflows in the binary-search implementation in SpiderMonkey in Mozilla Firefox before 26.0 and SeaMonkey before 2.23 might allow remote attackers to cause a… Affected: before 2.23 |
| CVE-2013-5614 | – | Dec 11 | Mozilla Firefox before 26.0 and SeaMonkey before 2.23 do not properly consider the sandbox attribute of an IFRAME element during processing of a contained OBJECT element, which… Affected: before 2.23 |
| CVE-2013-5612 | – | Dec 11 | Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 26.0 and SeaMonkey before 2.23 makes it easier for remote attackers to inject arbitrary web script or HTML by… Affected: before 2.23 |
| CVE-2013-5610 | – | Dec 11 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 26.0 and SeaMonkey before 2.23 allow remote attackers to cause a denial of service (memory… Affected: before 2.23 |
| CVE-2013-5607 | – | Nov 20 | Integer overflow in the PL_ArenaAllocate function in Mozilla Netscape Portable Runtime (NSPR) before 4.10.2, as used in Firefox before 25.0.1, Firefox ESR 17.x before 17.0.11 and… Affected: through 2.22; 2.0; 2.0; 2.0; 2.0; 2.0; +34 more |
| CVE-2013-6629 | – | Nov 19 | The get_sos function in jdmarker.c in (1) libjpeg 6b and (2) libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48, Ghostscript, and other products, does not… Affected: before 2.23 |
| CVE-2013-5604 | – | Oct 30 | The txXPathNodeUtils::getBaseURI function in the XSLT processor in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1,… Affected: through 2.22; 2.0; 2.0; 2.0; 2.0; 2.0; +34 more |
| CVE-2013-5603 | – | Oct 30 | Use-after-free vulnerability in the nsContentUtils::ContentIsHostIncludingDescendantOf function in Mozilla Firefox before 25.0, Firefox ESR 24.x before 24.1, Thunderbird before… Affected: through 2.22; 2.0; 2.0; 2.0; 2.0; 2.0; +34 more |
| CVE-2013-5602 | – | Oct 30 | The Worker::SetEventListener function in the Web workers implementation in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before… Affected: through 2.22; 2.0; 2.0; 2.0; 2.0; 2.0; +34 more |
| CVE-2013-5601 | – | Oct 30 | Use-after-free vulnerability in the nsEventListenerManager::SetEventHandler function in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1,… Affected: through 2.22; 2.0; 2.0; 2.0; 2.0; 2.0; +34 more |
| CVE-2013-5600 | – | Oct 30 | Use-after-free vulnerability in the nsIOService::NewChannelFromURIWithProxyFlags function in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1,… Affected: through 2.22; 2.0; 2.0; 2.0; 2.0; 2.0; +34 more |
| CVE-2013-5599 | – | Oct 30 | Use-after-free vulnerability in the nsIPresShell::GetPresContext function in the PresShell (aka presentation shell) implementation in Mozilla Firefox before 25.0, Firefox ESR 17.x… Affected: through 2.22; 2.0; 2.0; 2.0; 2.0; 2.0; +34 more |
| CVE-2013-5597 | – | Oct 30 | Use-after-free vulnerability in the nsDocLoader::doStopDocumentLoad function in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird… Affected: through 2.22; 2.0; 2.0; 2.0; 2.0; 2.0; +34 more |
| CVE-2013-5596 | – | Oct 30 | The cycle collection (CC) implementation in Mozilla Firefox before 25.0, Firefox ESR 24.x before 24.1, Thunderbird before 24.1, and SeaMonkey before 2.22 does not properly… Affected: through 2.22; 2.0; 2.0; 2.0; 2.0; 2.0; +34 more |
| CVE-2013-5595 | – | Oct 30 | The JavaScript engine in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and… Affected: through 2.22; 2.0; 2.0; 2.0; 2.0; 2.0; +34 more |
| CVE-2013-5593 | – | Oct 30 | The SELECT element implementation in Mozilla Firefox before 25.0, Firefox ESR 24.x before 24.1, Thunderbird before 24.1, and SeaMonkey before 2.22 does not properly restrict the… Affected: through 2.22; 2.0; 2.0; 2.0; 2.0; 2.0; +34 more |
| CVE-2013-5591 | – | Oct 30 | Unspecified vulnerability in the browser engine in Mozilla Firefox before 25.0, Firefox ESR 24.x before 24.1, Thunderbird before 24.1, and SeaMonkey before 2.22 allows remote… Affected: through 2.22; 2.0; 2.0; 2.0; 2.0; 2.0; +34 more |
The 500 most important CVEs for this product (exploited first, then by severity)