SE
Product
Seamonkey
On CISA KEVExploited in the wild
704
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 17High 14Medium 6Low 1
Watch
Add Seamonkey to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2010-3772 | – | Dec 10 | Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, does not properly calculate index values for certain child content in a XUL tree, which allows… Affected: through 2.0.10; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2010-3771 | – | Dec 10 | Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, does not properly handle injection of an ISINDEX element into an about:blank page, which allows… Affected: through 2.0.10; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2010-3770 | – | Dec 10 | Multiple cross-site scripting (XSS) vulnerabilities in the rendering engine in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, allow remote… Affected: through 2.0.10; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2010-3769 | – | Dec 10 | The line-breaking implementation in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, Thunderbird before 3.0.11 and 3.1.x before 3.1.7, and SeaMonkey before 2.0.11 on Windows… Affected: through 2.0.10; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2010-3768 | – | Dec 10 | Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, Thunderbird before 3.0.11 and 3.1.x before 3.1.7, and SeaMonkey before 2.0.11 do not properly validate downloadable fonts… Affected: through 2.0.10; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2010-3767 | – | Dec 10 | Integer overflow in the NewIdArray function in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, allows remote attackers to execute arbitrary… Affected: 1.0; 1.0; 1.0; 1.0.1; 1.0.2; 1.0.3; +34 more |
| CVE-2010-3766 | – | Dec 10 | Use-after-free vulnerability in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, allows remote attackers to execute arbitrary code via vectors… Affected: 1.0; 1.0; 1.0; 1.0.1; 1.0.2; 1.0.3; +34 more |
| CVE-2010-3183 | – | Oct 21 | The LookupGetterOrSetter function in js3250.dll in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before… Affected: through 2.0.8; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2010-3182 | – | Oct 21 | A certain application-launch script in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 on Linux… Affected: through 2.0.8; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2010-3181 | – | Oct 21 | Untrusted search path vulnerability in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 on… Affected: through 2.0.8; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2010-3180 | – | Oct 21 | Use-after-free vulnerability in the nsBarProp function in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey… Affected: through 2.0.8; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2010-3179 | – | Oct 21 | Stack-based buffer overflow in the text-rendering functionality in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and… Affected: through 2.0.8; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2010-3178 | – | Oct 21 | Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 do not properly handle certain modal calls made… Affected: through 2.0.8; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2010-3177 | – | Oct 21 | Multiple cross-site scripting (XSS) vulnerabilities in the Gopher parser in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, and SeaMonkey before 2.0.9, allow remote… Affected: through 2.0.8; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2010-3176 | – | Oct 21 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and… Affected: through 2.0.8; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2010-3174 | – | Oct 21 | Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.14, Thunderbird before 3.0.9, and SeaMonkey before 2.0.9 allows remote attackers to cause a… Affected: through 2.0.8; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2010-3173 | – | Oct 21 | The SSL implementation in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 does not properly set… Affected: through 2.0.8; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2010-3170 | – | Oct 21 | Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 recognize a wildcard IP address in the subject's… Affected: through 2.0.8; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2010-3400 | – | Sep 15 | The js_InitRandom function in the JavaScript implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, uses the current time for… Affected: through 2.0.4; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2010-3169 | – | Sep 9 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey… Affected: through 2.0.6; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2010-3168 | – | Sep 9 | Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 do not properly restrict the role of property… Affected: through 2.0.6; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2010-3167 | – | Sep 9 | The nsTreeContentView function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 does not… Affected: through 2.0.6; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2010-3166 | – | Sep 9 | Heap-based buffer overflow in the nsTextFrameUtils::TransformText function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before… Affected: through 2.0.6; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2010-2770 | – | Sep 9 | Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 on Mac OS X allow remote attackers to cause a… Affected: through 2.0.6; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2010-2769 | – | Sep 9 | Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7… Affected: through 2.0.6; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2010-2768 | – | Sep 9 | Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 do not properly restrict use of the type… Affected: through 2.0.6; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2010-2767 | – | Sep 9 | The navigator.plugins implementation in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 does not… Affected: through 2.0.6; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2010-2766 | – | Sep 9 | The normalizeDocument function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 does not… Affected: through 2.0.6; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2010-2765 | – | Sep 9 | Integer overflow in the FRAMESET element implementation in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey… Affected: through 2.0.6; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2010-2764 | – | Sep 9 | Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 do not properly restrict read access to the… Affected: through 2.0.6; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2010-2763 | – | Sep 9 | The XPCSafeJSObjectWrapper class in the SafeJSObjectWrapper (aka SJOW) implementation in Mozilla Firefox before 3.5.12, Thunderbird before 3.0.7, and SeaMonkey before 2.0.7 does… Affected: through 2.0.6; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2010-2760 | – | Sep 9 | Use-after-free vulnerability in the nsTreeSelection function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and… Affected: through 2.0.6; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2010-3131 | – | Aug 26 | Untrusted search path vulnerability in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 on Windows… Affected: through 2.0.6; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2010-2752 | – | Jul 30 | Integer overflow in an array class in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6… Affected: through 2.0.5; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2010-2751 | – | Jul 30 | The nsDocShell::OnRedirectStateChange function in docshell/base/nsDocShell.cpp in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows… Affected: through 2.0.5; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2010-1214 | – | Jul 30 | Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to execute arbitrary code via plugin content… Affected: through 2.0.5; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2010-1213 | – | Jul 30 | The importScripts Web Worker method in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before… Affected: through 2.0.5; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2010-1211 | – | Jul 30 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1,… Affected: through 2.0.5; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2010-1209 | – | Jul 30 | Use-after-free vulnerability in the NodeIterator implementation in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers… Affected: through 2.0.5; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2010-2754 | – | Jul 30 | dom/base/nsJSEnvironment.cpp in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 does… Affected: through 2.0.5; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2010-1206 | – | Jun 25 | The startDocumentLoad function in browser/base/content/browser.js in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, does not properly… Affected: through 2.0.5; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2010-1202 | – | Jun 24 | Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5… Affected: through 2.0.4; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2010-1201 | – | Jun 24 | Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.10, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to cause a… Affected: through 2.0.4; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2010-1200 | – | Jun 24 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5… Affected: through 2.0.4; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2010-1199 | – | Jun 24 | Integer overflow in the XSLT node sorting implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allows… Affected: through 2.0.4; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2010-1198 | – | Jun 24 | Use-after-free vulnerability in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote attackers to execute arbitrary code via… Affected: through 2.0.4; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2010-1197 | – | Jun 24 | Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, does not properly handle situations in which both "Content-Disposition: attachment" and… Affected: through 2.0.4; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2010-1196 | – | Jun 24 | Integer overflow in the nsGenericDOMDataNode::SetTextInternal function in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey… Affected: through 2.0.4; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2010-0183 | – | Jun 24 | Use-after-free vulnerability in the nsCycleCollector::MarkRoots function in Mozilla Firefox 3.5.x before 3.5.10 and SeaMonkey before 2.0.5 allows remote attackers to execute… Affected: through 2.0.4; 1.0; 1.0; 1.0; 1.0.1; 1.0.2; +34 more |
| CVE-2010-1990 | – | May 20 | Mozilla Firefox 3.6.x, 3.5.x, 3.0.19, and earlier, and SeaMonkey, executes a mail application in situations where an IFRAME element has a mailto: URL in its SRC attribute, which… Affected: All versions, or not specified |
The 500 most important CVEs for this product (exploited first, then by severity)