CVSS: 5.5EPSS: 0%CPEs: 9EXPL: 0CVE-2005-0142
https://notcve.org/view.php?id=CVE-2005-0142
29 Jan 2005 — Firefox 0.9, Thunderbird 0.6 and other versions before 0.9, and Mozilla 1.7 before 1.7.5 save temporary files with world-readable permissions, which allows local users to read certain web content or attachments that belong to other users, e.g. content that is managed by helper applications such as PDF. • http://secunia.com/advisories/19823 •
CVSS: 9.1EPSS: 0%CPEs: 62EXPL: 0CVE-2005-0143
https://notcve.org/view.php?id=CVE-2005-0143
29 Jan 2005 — Firefox before 1.0 and Mozilla before 1.7.5 display the SSL lock icon when an insecure page loads a binary file from a trusted site, which could facilitate phishing attacks. • http://www.mozilla.org/security/announce/mfsa2005-03.html •
CVSS: 9.1EPSS: 0%CPEs: 10EXPL: 0CVE-2005-0144
https://notcve.org/view.php?id=CVE-2005-0144
29 Jan 2005 — Firefox before 1.0 and Mozilla before 1.7.5 display the secure site lock icon when a view-source: URL references a secure SSL site while an insecure page is being loaded, which could facilitate phishing attacks. • http://www.mozilla.org/security/announce/mfsa2005-04.html •
CVSS: 7.5EPSS: 0%CPEs: 10EXPL: 0CVE-2005-0146
https://notcve.org/view.php?id=CVE-2005-0146
29 Jan 2005 — Firefox before 1.0 and Mozilla before 1.7.5 allow remote attackers to obtain sensitive data from the clipboard via Javascript that generates a middle-click event on systems for which a middle-click performs a paste operation. • http://www.mozilla.org/security/announce/mfsa2005-08.html •
CVSS: 9.8EPSS: 1%CPEs: 10EXPL: 0CVE-2005-0147
https://notcve.org/view.php?id=CVE-2005-0147
29 Jan 2005 — Firefox before 1.0 and Mozilla before 1.7.5, when configured to use a proxy, respond to 407 proxy auth requests from arbitrary servers, which allows remote attackers to steal NTLM or SPNEGO credentials. • http://www.mozilla.org/security/announce/mfsa2005-09.html •
CVSS: 8.1EPSS: 0%CPEs: 43EXPL: 0CVE-2004-1449
https://notcve.org/view.php?id=CVE-2004-1449
31 Dec 2004 — Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7 allows remote attackers to determine the location of files on a user's hard drive by obscuring a file upload control and tricking the user into dragging text into that control. • http://bugzilla.mozilla.org/show_bug.cgi?id=206859#c0 •
CVSS: 4.3EPSS: 0%CPEs: 35EXPL: 2CVE-2004-1451
https://notcve.org/view.php?id=CVE-2004-1451
31 Dec 2004 — Mozilla before 1.6 does not display the entire URL in the status bar when a link contains %00, which could allow remote attackers to trick users into clicking on unknown or untrusted sites and facilitate phishing attacks. • http://bugzilla.mozilla.org/show_bug.cgi?id=228176 •
CVSS: 6.5EPSS: 1%CPEs: 53EXPL: 0CVE-2004-1156
https://notcve.org/view.php?id=CVE-2004-1156
10 Dec 2004 — Mozilla before 1.7.6, and Firefox before 1.0.1, allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the "window injection" vulnerability. • http://secunia.com/advisories/13129 •
CVSS: 5.0EPSS: 13%CPEs: 30EXPL: 1CVE-2004-1380 – Multiple Browsers - Tabbed Browsing
https://notcve.org/view.php?id=CVE-2004-1380
20 Oct 2004 — Firefox before 1.0 and Mozilla before 1.7.5 allows inactive (background) tabs to launch dialog boxes, which can allow remote attackers to spoof the dialog boxes from web sites in other windows and facilitate phishing attacks, aka the "Dialog Box Spoofing Vulnerability." • https://www.exploit-db.com/exploits/589 •
CVSS: 7.5EPSS: 13%CPEs: 30EXPL: 2CVE-2004-1381 – Multiple Browsers - Tabbed Browsing
https://notcve.org/view.php?id=CVE-2004-1381
20 Oct 2004 — Firefox before 1.0 and Mozilla before 1.7.5 allow inactive (background) tabs to focus on input being entered in the active tab, as originally reported using form fields, which allows remote attackers to steal sensitive data that is intended for other sites, which could facilitate phishing attacks. • https://www.exploit-db.com/exploits/589 •