CVSS: 2.1EPSS: 0%CPEs: 9EXPL: 0CVE-2005-0142
https://notcve.org/view.php?id=CVE-2005-0142
Firefox 0.9, Thunderbird 0.6 and other versions before 0.9, and Mozilla 1.7 before 1.7.5 save temporary files with world-readable permissions, which allows local users to read certain web content or attachments that belong to other users, e.g. content that is managed by helper applications such as PDF. • http://secunia.com/advisories/19823 http://www.mozilla.org/security/announce/mfsa2005-02.html http://www.novell.com/linux/security/advisories/2006_04_25.html http://www.redhat.com/support/errata/RHSA-2005-335.html http://www.redhat.com/support/errata/RHSA-2005-384.html https://bugzilla.mozilla.org/show_bug.cgi?id=251297 https://exchange.xforce.ibmcloud.com/vulnerabilities/17832 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100056 https://oval& •
CVSS: 2.6EPSS: 32%CPEs: 9EXPL: 0CVE-2005-0145
https://notcve.org/view.php?id=CVE-2005-0145
Firefox before 1.0 does not properly distinguish between user-generated and synthetic click events, which allows remote attackers to use Javascript to bypass the file download prompt when the user uses the Alt-click feature. • http://www.mozilla.org/security/announce/mfsa2005-07.html http://www.securityfocus.com/bid/12407 https://bugzilla.mozilla.org/show_bug.cgi?id=265176 https://exchange.xforce.ibmcloud.com/vulnerabilities/19170 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100051 •
CVSS: 1.7EPSS: 0%CPEs: 1EXPL: 0CVE-2004-2657
https://notcve.org/view.php?id=CVE-2004-2657
Mozilla Firefox 1.5.0.1, and possibly other versions, preserves some records of user activity even after uninstalling, which allows local users who share a Windows profile to view the records after a new installation of Firefox, as reported for the list of Passwords Never Saved web sites. NOTE: The vendor has disputed this issue, stating that "The uninstaller is primarily there to uninstall the application. It is not there to uninstall user data. For the moment I will stick by my module-owner decision. • http://www.securityfocus.com/archive/1/431021/100/0/threaded http://www.securityfocus.com/archive/1/431063/100/0/threaded https://bugzilla.mozilla.org/show_bug.cgi?id=234680 https://bugzilla.mozilla.org/show_bug.cgi?id=330884 •
CVSS: 5.0EPSS: 76%CPEs: 8EXPL: 0CVE-2004-2225
https://notcve.org/view.php?id=CVE-2004-2225
Mozilla Firefox before 0.10.1 allows remote attackers to delete arbitrary files in the download directory via a crafted data: URI that is not properly handled when the user clicks the Save button. • http://secunia.com/advisories/12708 http://securitytracker.com/id?1011501 http://www.mozilla.org/projects/security/older-vulnerabilities.html#firefox0.10.1 http://www.osvdb.org/10478 http://www.securityfocus.com/bid/11311 https://bugzilla.mozilla.org/show_bug.cgi?id=259708 •
CVSS: 2.6EPSS: 0%CPEs: 4EXPL: 5CVE-2004-1753
https://notcve.org/view.php?id=CVE-2004-1753
The Apple Java plugin, as used in Netscape 7.1 and 7.2, Mozilla 1.7.2, and Firefox 0.9.3 on MacOS X 10.3.5, when tabbed browsing is enabled, does not properly handle SetWindow(NULL) calls, which allows Java applets from one tab to draw to other tabs and facilitates phishing attacks that spoof tabs. • http://bugzilla.mozilla.org/show_bug.cgi?id=162134 http://secunia.com/advisories/12392 http://www.securityfocus.com/archive/1/373080 http://www.securityfocus.com/archive/1/373232 http://www.securityfocus.com/archive/1/373309 http://www.securityfocus.com/bid/11059 https://exchange.xforce.ibmcloud.com/vulnerabilities/17137 •