Lucene search
+L

66 matches found

OSV
OSV
•added 2006/06/02 8:02 p.m.•7 views

DEBIAN-CVE-2006-2787

EvalInSandbox in Mozilla Firefox and Thunderbird before 1.5.0.4 allows remote attackers to gain privileges via javascript that calls the valueOf method on objects that were created outside of the sandbox...

9.3CVSS6AI score0.02753EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2006/06/02 8:00 p.m.•39 views

CVE-2006-2787

EvalInSandbox in Mozilla Firefox and Thunderbird before 1.5.0.4 allows remote attackers to gain privileges via javascript that calls the valueOf method on objects that were created outside of the sandbox...

9.3CVSS6.8AI score0.02753EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/06/02 12:00 a.m.•3 views

CVE-2006-2787: Undefined Security Weakness

EvalInSandbox in Mozilla Firefox and Thunderbird before 1.5.0.4 allows remote attackers to gain privileges via javascript that calls the valueOf method on objects that were created outside of the sandbox...

9.3CVSS5.9AI score0.02753EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2006/04/18 11:12 a.m.•16 views

security flaw

Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 returns the Object class prototype instead of the global window object when 1 .valueOf.call or 2 .valueOf.apply are called without any arguments, which allows remote...

4.3CVSS5.7AI score0.01822EPSS
SaveExploits0References4
OSV
OSV
•added 2006/04/14 10:02 a.m.•10 views

DEBIAN-CVE-2006-1733

Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 does not properly protect the compilation scope of privileged built-in XBL bindings, which allows remote attackers to execute arbitrary code via the 1 valueOf.call or 2...

6.8CVSS6.8AI score0.05196EPSS
SaveExploits0References1
OSV
OSV
•added 2006/04/14 10:02 a.m.•10 views

DEBIAN-CVE-2006-1731

Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 returns the Object class prototype instead of the global window object when 1 .valueOf.call or 2 .valueOf.apply are called without any arguments, which allows remote...

4.3CVSS5.6AI score0.01822EPSS
SaveExploits0References1
Rows per page
Query Builder