All products

Red Hat Enterprise Linux 5/firefox

Red Hat · Package
190 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
firefox: Does not choose the challenge with the strongest authentication scheme available as required by RFC2617CVE-2005-2395 Red Hat Enterprise Linux 5/firefoxRed Hat Enterprise Linux 6/firefox Red Hat Low No fix reported
firefox: unable to restrict modifications to cookies in HTTPS sessions due to loack of HSTS supportCVE-2008-7293 Red Hat Enterprise Linux 4/firefoxRed Hat Enterprise Linux 5/firefox Red Hat Medium No fix reported
nsCycleCollector:: MarkRoots()CVE-2010-0183 Red Hat Enterprise Linux 4/firefoxRed Hat Enterprise Linux 5/firefox Red Hat Critical No fix reported
firefox: information leak due to XSLTCVE-2011-1712 Red Hat Enterprise Linux 4/firefoxRed Hat Enterprise Linux 5/firefox Red Hat Low No fix reported
Mozilla: Possible XSS via HTTP 0.9 errors and content-sniffingCVE-2011-3656 Red Hat Enterprise Linux 4/firefoxRed Hat Enterprise Linux 4/seamonkey Red Hat Medium No fix reported
Mozilla: defaultValue security checks not applied (MFSA 2012-89)CVE-2012-4193 Red Hat Enterprise Linux 5/firefox Red Hat Critical No fix reported
Mozilla: Use-after-free in HTML Editor (MFSA 2013-29)CVE-2013-0787 Red Hat Enterprise Linux 5/firefox Red Hat Critical No fix reported
Mozilla: browser document.cookie DoS vulnerabilityCVE-2013-6167 Red Hat Enterprise Linux 5/firefoxRed Hat Enterprise Linux 6/firefox Red Hat Medium No fix reported
Mozilla: Inconsistent video sharing within iframe (MFSA 2014-81)CVE-2014-1586 Red Hat Enterprise Linux 5/firefoxRed Hat Enterprise Linux 5/thunderbird Red Hat Medium No fix reported
Mozilla: Inconsistent video sharing within iframe (MFSA 2014-81)CVE-2014-1585 Red Hat Enterprise Linux 5/firefoxRed Hat Enterprise Linux 5/thunderbird Red Hat Medium No fix reported
libevent: potential heap overflow in buffer/bufferevent APIsCVE-2014-6272 Red Hat Enterprise Linux 4/nfs-utilsRed Hat Enterprise Linux 4/openmpi Red Hat Medium No fix reported
Mozilla: Delegated OCSP responder certificates failure with id-pkix-ocsp-nocheck extension (MFSA 2015-08)CVE-2014-8642 Red Hat Enterprise Linux 5/firefoxRed Hat Enterprise Linux 6/firefox Red Hat Medium No fix reported
libevent: multiple integer overflows in the evbuffer APIsCVE-2015-6525 Red Hat Enterprise Linux 5/firefoxRed Hat Enterprise Linux 5/thunderbird Red Hat Medium No fix reported
libevent: Stack-buffer overflow in evutil_parse_sockaddr_port()CVE-2016-10196 Red Hat Enterprise Linux 5/firefoxRed Hat Enterprise Linux 5/thunderbird Red Hat Medium No fix reported
libevent: Stack-buffer overflow in the name_parse() functionCVE-2016-10195 Red Hat Enterprise Linux 5/firefoxRed Hat Enterprise Linux 5/libevent Red Hat Medium No fix reported
libevent: Out-of-bounds read in search_make_new()CVE-2016-10197 Red Hat Enterprise Linux 5/firefoxRed Hat Enterprise Linux 5/libevent Red Hat Low No fix reported
expat: Undefined behavior and pointer overflowsCVE-2016-4472 Red Hat Enterprise Linux 5/expatRed Hat Enterprise Linux 5/firefox Red Hat Medium No fix reported
opus: Memory corruption during media file and data processingCVE-2017-0381 Red Hat Enterprise Linux 5/firefoxRed Hat Enterprise Linux 5/thunderbird Red Hat Low No fix reported
Mozilla: Addressbar spoofing with onblur event (MFSA 2017-12)CVE-2017-5451 Red Hat Enterprise Linux 5/firefoxRed Hat Enterprise Linux 5/thunderbird Red Hat Medium No fix reported
Mozilla: Sandbox escape allowing file system read access through file picker (MFSA 2017-12)CVE-2017-5454 Red Hat Enterprise Linux 5/firefoxRed Hat Enterprise Linux 5/thunderbird Red Hat High No fix reported