SE
Product
Seamonkey
On CISA KEVExploited in the wild
704
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 17High 14Medium 6Low 1
Watch
Add Seamonkey to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2012-0469 | – | Apr 25 | Use-after-free vulnerability in the mozilla::dom::indexedDB::IDBKeyRange::cycleCollection::Trace function in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4,… Affected: through 2.9; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2012-0468 | – | Apr 25 | The browser engine in Mozilla Firefox 4.x through 11.0, Thunderbird 5.0 through 11.0, and SeaMonkey before 2.9 allows remote attackers to cause a denial of service (assertion… Affected: through 2.9; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2012-0467 | – | Apr 25 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x… Affected: through 2.9; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2011-3062 | – | Mar 30 | Off-by-one error in the OpenType Sanitizer in Google Chrome before 18.0.1025.142 allows remote attackers to cause a denial of service or possibly have unspecified other impact via… Affected: before 2.9 |
| CVE-2012-0464 | – | Mar 14 | Use-after-free vulnerability in the browser engine in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through… Affected: 1.0; 1.0; 1.0; 1.0.1; 1.0.2; 1.0.3; +34 more |
| CVE-2012-0463 | – | Mar 14 | The nsWindow implementation in the browser engine in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through… Affected: 1.0; 1.0; 1.0; 1.0.1; 1.0.2; 1.0.3; +34 more |
| CVE-2012-0462 | – | Mar 14 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x… Affected: through 2.7; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2012-0461 | – | Mar 14 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0… Affected: 1.0; 1.0; 1.0; 1.0.1; 1.0.2; 1.0.3; +34 more |
| CVE-2012-0460 | – | Mar 14 | Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 do not properly… Affected: through 2.7; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2012-0459 | – | Mar 14 | The Cascading Style Sheets (CSS) implementation in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before… Affected: through 2.7; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2012-0458 | – | Mar 14 | Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and… Affected: 1.0; 1.0; 1.0; 1.0.1; 1.0.2; 1.0.3; +34 more |
| CVE-2012-0457 | – | Mar 14 | Use-after-free vulnerability in the nsSMILTimeValueSpec::ConvertBetweenTimeContainer function in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before… Affected: 1.0; 1.0; 1.0; 1.0.1; 1.0.2; 1.0.3; +34 more |
| CVE-2012-0456 | – | Mar 14 | The SVG Filters implementation in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird… Affected: 1.0; 1.0; 1.0; 1.0.1; 1.0.2; 1.0.3; +34 more |
| CVE-2012-0455 | – | Mar 14 | Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and… Affected: through 2.7 |
| CVE-2012-0454 | – | Mar 14 | Use-after-free vulnerability in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey… Affected: through 2.7; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2012-0451 | – | Mar 14 | CRLF injection vulnerability in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey… Affected: through 2.7; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2012-0452 | – | Feb 11 | Use-after-free vulnerability in Mozilla Firefox 10.x before 10.0.1, Thunderbird 10.x before 10.0.1, and SeaMonkey 2.7 allows remote attackers to cause a denial of service… Affected: 2.7 |
| CVE-2012-0450 | – | Feb 1 | Mozilla Firefox 4.x through 9.0 and SeaMonkey before 2.7 on Linux and Mac OS X set weak permissions for Firefox Recovery Key.html, which might allow local users to read a Firefox… Affected: through 2.7; 1.0; 1.0; 1.0.1; 1.0.2; 1.0.3; +34 more |
| CVE-2012-0449 | – | Feb 1 | Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to cause a denial of service… Affected: before 2.7 |
| CVE-2012-0447 | – | Feb 1 | Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaMonkey before 2.7 do not properly initialize data for image/vnd.microsoft.icon images, which allows remote… Affected: through 2.7; 1.0; 1.0; 1.0.1; 1.0.2; 1.0.3; +34 more |
| CVE-2012-0446 | – | Feb 1 | Multiple cross-site scripting (XSS) vulnerabilities in Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to inject… Affected: through 2.7; 1.0; 1.0; 1.0.1; 1.0.2; 1.0.3; +34 more |
| CVE-2012-0445 | – | Feb 1 | Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to bypass the HTML5 frame-navigation policy and replace arbitrary… Affected: through 2.7; 1.0; 1.0; 1.0.1; 1.0.2; 1.0.3; +34 more |
| CVE-2012-0444 | – | Feb 1 | Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 do not properly initialize nsChildView data structures,… Affected: before 2.7 |
| CVE-2012-0443 | – | Feb 1 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to… Affected: through 2.7; 1.0; 1.0; 1.0.1; 1.0.2; 1.0.3; +34 more |
| CVE-2012-0442 | – | Feb 1 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey… Affected: before 2.7 |
| CVE-2011-3670 | – | Feb 1 | Mozilla Firefox before 3.6.26 and 4.x through 6.0, Thunderbird before 3.1.18 and 5.0 through 6.0, and SeaMonkey before 2.4 do not properly enforce the IPv6 literal address syntax,… Affected: through 2.4; 1.0; 1.0; 1.0.1; 1.0.2; 1.0.3; +34 more |
| CVE-2011-3659 | – | Feb 1 | Use-after-free vulnerability in Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 might allow remote… Affected: before 2.7 |
| CVE-2011-3665 | – | Dec 21 | Mozilla Firefox 4.x through 8.0, Thunderbird 5.0 through 8.0, and SeaMonkey before 2.6 allow remote attackers to cause a denial of service (application crash) or possibly have… Affected: through 2.5; 1.0; 1.0; 1.0; 1.0; 1.0; +34 more |
| CVE-2011-3664 | – | Dec 21 | Mozilla Firefox before 9.0, Thunderbird before 9.0, and SeaMonkey before 2.6 on Mac OS X do not properly handle certain DOM frame deletions by plugins, which allows remote… Affected: through 2.5; 1.0; 1.0; 1.0; 1.0; 1.0; +34 more |
| CVE-2011-3663 | – | Dec 21 | Mozilla Firefox 4.x through 8.0, Thunderbird 5.0 through 8.0, and SeaMonkey before 2.6 allow remote attackers to capture keystrokes entered on a web page, even when JavaScript is… Affected: through 2.5; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2011-3661 | – | Dec 21 | YARR, as used in Mozilla Firefox 4.x through 8.0, Thunderbird 5.0 through 8.0, and SeaMonkey before 2.6, allows remote attackers to cause a denial of service (application crash)… Affected: through 2.5; 1.0; 1.0; 1.0; 1.0; 1.0; +34 more |
| CVE-2011-3660 | – | Dec 21 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 8.0, Thunderbird 5.0 through 8.0, and SeaMonkey before 2.6 allow remote attackers to… Affected: through 2.5; 1.0; 1.0; 1.0; 1.0; 1.0; +34 more |
| CVE-2011-3658 | – | Dec 21 | The SVG implementation in Mozilla Firefox 8.0, Thunderbird 8.0, and SeaMonkey 2.5 does not properly interact with DOMAttrModified event handlers, which allows remote attackers to… Affected: 2.5 |
| CVE-2010-5074 | – | Dec 7 | The layout engine in Mozilla Firefox before 4.0, Thunderbird before 3.3, and SeaMonkey before 2.1 executes different code for visited and unvisited links during the processing of… Affected: through 2.1; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2002-2437 | – | Dec 7 | The JavaScript implementation in Mozilla Firefox before 4.0, Thunderbird before 3.3, and SeaMonkey before 2.1 does not properly restrict the set of values contained in the object… Affected: through 2.1; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2002-2436 | – | Dec 7 | The Cascading Style Sheets (CSS) implementation in Mozilla Firefox before 4.0, Thunderbird before 3.3, and SeaMonkey before 2.1 does not properly handle the :visited pseudo-class,… Affected: through 2.1; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2011-3866 | – | Sep 29 | Mozilla Firefox before 7.0 and SeaMonkey before 2.4 do not properly restrict availability of motion data events, which makes it easier for remote attackers to read keystrokes by… Affected: before 2.4 |
| CVE-2011-3232 | – | Sep 29 | YARR, as used in Mozilla Firefox before 7.0, Thunderbird before 7.0, and SeaMonkey before 2.4, allows remote attackers to cause a denial of service (application crash) or possibly… Affected: through 2.3.3; 1.0; 1.0; 1.0; 1.0; 1.0; +34 more |
| CVE-2011-3005 | – | Sep 29 | Use-after-free vulnerability in Mozilla Firefox 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 allows remote attackers to cause a denial of service (application… Affected: through 2.3.3; 1.0; 1.0; 1.0; 1.0; 1.0; +34 more |
| CVE-2011-3004 | – | Sep 29 | The JSSubScriptLoader in Mozilla Firefox 4.x through 6 and SeaMonkey before 2.4 does not properly handle XPCNativeWrappers during calls to the loadSubScript method in an add-on,… Affected: through 2.3.3; 1.0; 1.0; 1.0; 1.0; 1.0; +34 more |
| CVE-2011-3003 | – | Sep 29 | Mozilla Firefox before 7.0 and SeaMonkey before 2.4 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an unspecified… Affected: before 2.4 |
| CVE-2011-3002 | – | Sep 29 | Almost Native Graphics Layer Engine (ANGLE), as used in Mozilla Firefox before 7.0 and SeaMonkey before 2.4, does not validate the return value of a GrowAtomTable function call,… Affected: before 2.4 |
| CVE-2011-3001 | – | Sep 29 | Mozilla Firefox 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 do not prevent manual add-on installation in response to the holding of the Enter key, which allows… Affected: through 2.3.3; 1.0; 1.0; 1.0; 1.0; 1.0; +34 more |
| CVE-2011-3000 | – | Sep 29 | Mozilla Firefox before 3.6.23 and 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 do not properly handle HTTP responses that contain multiple Location,… Affected: through 2.3.3; 1.0; 1.0; 1.0; 1.0; 1.0; +34 more |
| CVE-2011-2999 | – | Sep 29 | Mozilla Firefox before 3.6.23 and 4.x through 5, Thunderbird before 6.0, and SeaMonkey before 2.3 do not properly handle "location" as the name of a frame, which allows remote… Affected: through 2.1; 1.0; 1.0; 1.0; 1.0; 1.0; +34 more |
| CVE-2011-2997 | – | Sep 29 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 6, Thunderbird before 7.0, and SeaMonkey before 2.4 allow remote attackers to cause a denial of… Affected: through 2.3.3; 1.0; 1.0; 1.0; 1.0; 1.0; +34 more |
| CVE-2011-2995 | – | Sep 29 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.23 and 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 allow remote… Affected: through 2.3.3; 1.0; 1.0; 1.0; 1.0; 1.0; +34 more |
| CVE-2011-2372 | – | Sep 29 | Mozilla Firefox before 3.6.23 and 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 do not prevent the starting of a download in response to the holding of the Enter… Affected: through 2.3.3; 1.0; 1.0; 1.0; 1.0; 1.0; +34 more |
| CVE-2011-2993 | – | Aug 18 | The implementation of digital signatures for JAR files in Mozilla Firefox 4.x through 5, SeaMonkey 2.x before 2.3, and possibly other products does not prevent calls from unsigned… Affected: 2.0; 2.0; 2.0; 2.0; 2.0; 2.0; +16 more |
| CVE-2011-2992 | – | Aug 18 | The Ogg reader in the browser engine in Mozilla Firefox 4.x through 5, SeaMonkey 2.x before 2.3, Thunderbird before 6, and possibly other products allows remote attackers to cause… Affected: 2.0; 2.0; 2.0; 2.0; 2.0; 2.0; +16 more |
The 500 most important CVEs for this product (exploited first, then by severity)