CVE-2014-8638

CVE-2014-8638 affects Firefox up to 35.0 (ESR 31.x before 31.4), Thunderbird before 31.4, and SeaMonkey before 2.32. The navigator.sendBeacon implementation omits the CORS Origin header, allowing remote attackers to bypass intended CORS checks and conduct cross-site request forgery via a crafted ...

CVE-2014-8634

CVE-2014-8634 affects Mozilla Firefox (and related Mozilla products) with memory-safety and implementation issues in the browser engine that could allow remote code execution or a crash. Public disclosures across multiple advisories confirm additional related CVEs (e.g., 8638, 8639, 8641, etc.) a...

CVE-2014-8639

CVE-2014-8639 affects Mozilla Firefox before 35.0, Firefox ESR 31.x before 31.4, Thunderbird before 31.4, and SeaMonkey before 2.32. It improperly interprets Set-Cookie headers in responses with a 407 Proxy Authentication Required status, enabling a remote proxy to perform session fixation by inj...