SE
Product
Seamonkey
On CISA KEVExploited in the wild
704
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 17High 14Medium 6Low 1
Watch
Add Seamonkey to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2012-4205 | – | Nov 21 | Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 assign the system principal, rather than the sandbox principal, to XMLHttpRequest objects created… Affected: before 2.14 |
| CVE-2012-4204 | – | Nov 21 | The str_unescape function in the JavaScript engine in Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary… Affected: before 2.14 |
| CVE-2012-4202 | – | Nov 21 | Heap-based buffer overflow in the image::RasterImage::DrawFrameTo function in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird… Affected: before 2.14 |
| CVE-2012-4201 | – | Nov 21 | The evalInSandbox implementation in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey… Affected: before 2.14 |
| CVE-2012-4196 | – | Oct 29 | Mozilla Firefox before 16.0.2, Firefox ESR 10.x before 10.0.10, Thunderbird before 16.0.2, Thunderbird ESR 10.x before 10.0.10, and SeaMonkey before 2.13.2 allow remote attackers… Affected: before 2.13.2 |
| CVE-2012-4195 | – | Oct 29 | The nsLocation::CheckURL function in Mozilla Firefox before 16.0.2, Firefox ESR 10.x before 10.0.10, Thunderbird before 16.0.2, Thunderbird ESR 10.x before 10.0.10, and SeaMonkey… Affected: before 2.13.2 |
| CVE-2012-4194 | – | Oct 29 | Mozilla Firefox before 16.0.2, Firefox ESR 10.x before 10.0.10, Thunderbird before 16.0.2, Thunderbird ESR 10.x before 10.0.10, and SeaMonkey before 2.13.2 do not prevent use of… Affected: before 2.13.2 |
| CVE-2012-4193 | – | Oct 12 | Mozilla Firefox before 16.0.1, Firefox ESR 10.x before 10.0.9, Thunderbird before 16.0.1, Thunderbird ESR 10.x before 10.0.9, and SeaMonkey before 2.13.1 omit a security check in… Affected: before 2.13.1 |
| CVE-2012-4192 | – | Oct 12 | Mozilla Firefox 16.0, Thunderbird 16.0, and SeaMonkey 2.13 allow remote attackers to bypass the Same Origin Policy and read the properties of a Location object via a crafted web… Affected: 2.13 |
| CVE-2012-4191 | – | Oct 12 | The mozilla::net::FailDelayManager::Lookup function in the WebSockets implementation in Mozilla Firefox before 16.0.1, Thunderbird before 16.0.1, and SeaMonkey before 2.13.1… Affected: before 2.13.1 |
| CVE-2012-5354 | – | Oct 10 | Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly handle navigation away from a web page that has multiple menus of SELECT elements… Affected: before 2.13 |
| CVE-2012-4188 | – | Oct 10 | Heap-based buffer overflow in the Convolve3x3 function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8,… Affected: before 2.13 |
| CVE-2012-4187 | – | Oct 10 | Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly manage a… Affected: before 2.13 |
| CVE-2012-4186 | – | Oct 10 | Heap-based buffer overflow in the nsWaveReader::DecodeAudioData function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR… Affected: before 2.13 |
| CVE-2012-4185 | – | Oct 10 | Buffer overflow in the nsCharTraits::length function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8,… Affected: before 2.13 |
| CVE-2012-4184 | – | Oct 10 | The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and… Affected: before 2.13 |
| CVE-2012-4183 | – | Oct 10 | Use-after-free vulnerability in the DOMSVGTests::GetRequiredFeatures function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird… Affected: before 2.13 |
| CVE-2012-4182 | – | Oct 10 | Use-after-free vulnerability in the nsTextEditRules::WillInsert function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR… Affected: before 2.13 |
| CVE-2012-4181 | – | Oct 10 | Use-after-free vulnerability in the nsSMILAnimationController::DoSample function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0,… Affected: before 2.13 |
| CVE-2012-4180 | – | Oct 10 | Heap-based buffer overflow in the nsHTMLEditor::IsPrevCharInNodeWhitespace function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0,… Affected: before 2.13 |
| CVE-2012-4179 | – | Oct 10 | Use-after-free vulnerability in the nsHTMLCSSUtils::CreateCSSPropertyTxn function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0,… Affected: before 2.13 |
| CVE-2012-3995 | – | Oct 10 | The IsCSSWordSpacingSpace function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey… Affected: before 2.13 |
| CVE-2012-3994 | – | Oct 10 | Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allow remote attackers to… Affected: before 2.13 |
| CVE-2012-3993 | – | Oct 10 | The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and… Affected: through 2.13; 2.0; 2.0; 2.0; 2.0; 2.0; +34 more |
| CVE-2012-3992 | – | Oct 10 | Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly manage history… Affected: before 2.13 |
| CVE-2012-3991 | – | Oct 10 | Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly restrict JSAPI… Affected: before 2.13 |
| CVE-2012-3990 | – | Oct 10 | Use-after-free vulnerability in the IME State Manager implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x… Affected: before 2.13 |
| CVE-2012-3989 | – | Oct 10 | Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly perform a cast of an unspecified variable during use of the instanceof operator on… Affected: before 2.13 |
| CVE-2012-3988 | – | Oct 10 | Use-after-free vulnerability in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13… Affected: before 2.13 |
| CVE-2012-3986 | – | Oct 10 | Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly restrict calls… Affected: before 2.13 |
| CVE-2012-3985 | – | Oct 10 | Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly implement the HTML5 Same Origin Policy, which allows remote attackers to conduct… Affected: before 2.13 |
| CVE-2012-3984 | – | Oct 10 | Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly handle navigation away from a web page that has a SELECT element's menu active,… Affected: before 2.13 |
| CVE-2012-3983 | – | Oct 10 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 allow remote attackers to cause a… Affected: before 2.13 |
| CVE-2012-3982 | – | Oct 10 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before… Affected: before 2.13 |
| CVE-2012-3978 | – | Aug 29 | The nsLocation::CheckURL function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before… Affected: through 2.11; 2.0; 2.0; 2.0; 2.0; 2.0; +34 more |
| CVE-2012-3976 | – | Aug 29 | Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, and SeaMonkey before 2.12 do not properly handle onLocationChange events during navigation between different https… Affected: before 2.12 |
| CVE-2012-3975 | – | Aug 29 | The DOMParser component in Mozilla Firefox before 15.0, Thunderbird before 15.0, and SeaMonkey before 2.12 loads subresources during parsing of text/html data within an extension,… Affected: through 2.11; 2.0; 2.0; 2.0; 2.0; 2.0; +34 more |
| CVE-2012-3972 | – | Aug 29 | The format-number functionality in the XSLT implementation in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before… Affected: before 2.12 |
| CVE-2012-3971 | – | Aug 29 | Summer Institute of Linguistics (SIL) Graphite 2, as used in Mozilla Firefox before 15.0, Thunderbird before 15.0, and SeaMonkey before 2.12, allows remote attackers to execute… Affected: through 2.11; 2.0; 2.0; 2.0; 2.0; 2.0; +34 more |
| CVE-2012-3970 | – | Aug 29 | Use-after-free vulnerability in the nsTArray_base::Length function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x… Affected: through 2.11; 2.0; 2.0; 2.0; 2.0; 2.0; +34 more |
| CVE-2012-3969 | – | Aug 29 | Integer overflow in the nsSVGFEMorphologyElement::Filter function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x… Affected: through 2.11; 2.0; 2.0; 2.0; 2.0; 2.0; +34 more |
| CVE-2012-3968 | – | Aug 29 | Use-after-free vulnerability in the WebGL implementation in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before… Affected: before 2.12 |
| CVE-2012-3967 | – | Aug 29 | The WebGL implementation in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 on… Affected: before 2.12 |
| CVE-2012-3966 | – | Aug 29 | Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allow remote attackers to… Affected: through 2.11; 2.0; 2.0; 2.0; 2.0; 2.0; +34 more |
| CVE-2012-3964 | – | Aug 29 | Use-after-free vulnerability in the gfxTextRun::GetUserData function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x… Affected: through 2.11; 2.0; 2.0; 2.0; 2.0; 2.0; +34 more |
| CVE-2012-3963 | – | Aug 29 | Use-after-free vulnerability in the js::gc::MapAllocToTraceKind function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR… Affected: before 2.12 |
| CVE-2012-3962 | – | Aug 29 | Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 do not properly iterate through… Affected: through 2.11; 2.0; 2.0; 2.0; 2.0; 2.0; +34 more |
| CVE-2012-3961 | – | Aug 29 | Use-after-free vulnerability in the RangeData implementation in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before… Affected: before 2.12 |
| CVE-2012-3960 | – | Aug 29 | Use-after-free vulnerability in the mozSpellChecker::SetCurrentDictionary function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0,… Affected: before 2.12 |
| CVE-2012-3959 | – | Aug 29 | Use-after-free vulnerability in the nsRangeUpdater::SelAdjDeleteNode function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird… Affected: before 2.12 |
The 500 most important CVEs for this product (exploited first, then by severity)