Input Validation and Logic

Every one of the 266 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can result in the non-sandboxed parent process opening web content ch…CVE-2019-11708Mozilla · CVSS 10 · 56% likely

   CWE-20

2. Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, does not properly use nsTreeRange data structures, which allows remote attackers to execute arb…CVE-2011-0073Mozilla · 71% likely

   CWE-20

3. A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context. This vulnerability affects Firefox < 126, Firefox E…CVE-2024-4367Mozilla · CVSS 5.6 · 71% likely

   CWE-754

4. The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.2, and S…CVE-2013-0757Mozilla · 61% likely

   CWE-20

5. The crypto.generateCRMFRequest function in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonke…CVE-2013-1710Mozilla · 42% likely

   CWE-20

6. If a long user name is used in a username/password combination in a site URL (such as " http://UserName:Password@example.com"), the resulting modal prompt will hang in a non-respo…CVE-2017-7783Mozilla · 14% likely

   CWE-20

7. CRLF injection vulnerability in the Digest Authentication support for Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 allows remote attackers to conduct HTTP request spl…CVE-2007-2292Mozilla · 13% likely

   CWE-20

8. An attack can use a blob URL and script to spoof an arbitrary addressbar URL prefaced by "blob:" as the protocol, leading to user confusion and further spoofing attacks. This vuln…CVE-2017-5415Mozilla · 12% likely

   CWE-20

9. Mozilla Firefox 1.5.0.4, 2.0.x before 2.0.0.8, Mozilla Suite 1.7.13, Mozilla SeaMonkey 1.0.2 and other versions before 1.1.5, and Netscape 8.1 and earlier allow user-assisted remo…CVE-2006-2894Mozilla · 9.8% likely

   CWE-20

10. A vulnerability where the JavaScript JIT compiler inlines Array.prototype.push with multiple arguments that results in the stack pointer being off by 8 bytes after a bailout. This…CVE-2018-12387Mozilla · 9.6% likely

    CWE-20

11. Mozilla 1.0 allows remote attackers to steal cookies from other domains via a javascript: URL with a leading "//" and ending in a newline, which causes the host/path check to fail.CVE-2002-2314Mozilla · 8.5% likely

    CWE-20

12. Mozilla Firefox 3.0.5 on Windows Vista allows remote attackers to cause a denial of service (application crash) via JavaScript code with a long string value for the hash property…CVE-2008-5715Mozilla · 8.5% likely

    CWE-20

13. Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2, allows remote attackers to cause a denial of service via (1) a large cookie path param…CVE-2007-1362Mozilla · 7.8% likely

    CWE-20

14. The WYSIWYG rendering engine ("rich mail" editor) in Mozilla Thunderbird 1.0.7 and earlier allows user-assisted attackers to bypass javascript security settings and obtain sensiti…CVE-2006-0884Mozilla · 7.2% likely

    CWE-20

15. Mozilla Firefox 1.5.0.6 allows remote attackers to cause a denial of service (crash) via a crafted FTP response, when attempting to connect with a username and password via the FT…CVE-2006-4310Mozilla · 6.1% likely

    CWE-20

16. Mozilla Firefox 3.0.10 and earlier on Linux allows remote attackers to cause a denial of service (application crash) via a URI for a large GIF image in the BACKGROUND attribute of…CVE-2009-2044Mozilla · 5.9% likely

    CWE-20

17. jslock.cpp in Mozilla Firefox 3.x before 3.0.2, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a de…CVE-2008-5014Mozilla · 5.9% likely

    CWE-20

18. Mozilla Firefox 3.0.8 and earlier 3.0.x versions allows remote attackers to cause a denial of service (memory corruption) via an XML document composed of a long series of start-ta…CVE-2009-1232Mozilla · 5.5% likely

    CWE-20

19. Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, Thunderbird before 3.0.11 and 3.1.x before 3.1.7, and SeaMonkey before 2.0.11 do not properly validate downloadable fonts be…CVE-2010-3768Mozilla · 4.8% likely

    CWE-20

20. Mozilla Firefox before 3.0.13, and 3.5.x before 3.5.2, allows remote attackers to spoof the address bar, and possibly conduct phishing attacks, via a crafted web page that calls w…CVE-2009-2654Mozilla · 4.7% likely

    CWE-20

21. Use-after-free vulnerability in the mozilla::layout::ScrollbarActivity function in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbir…CVE-2013-1735Mozilla · 4.7% likely

    CWE-20

22. The PreserveWrapper implementation in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 does not prope…CVE-2013-1694Mozilla · 4.6% likely

    CWE-20

23. The nsIScriptableUnescapeHTML.parseFragment method in the ParanoidFragmentSink protection mechanism in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, Thunderbird before 3.…CVE-2010-1585Mozilla · 4.5% likely

    CWE-20

24. Mozilla Network Security Services (NSS) 3.14 before 3.14.5 and 3.15 before 3.15.3 allows remote attackers to cause a denial of service or possibly have unspecified other impact vi…CVE-2013-5605Mozilla · 4.4% likely

    CWE-20

25. nsViewManager.cpp in Mozilla Firefox 3.0.2 through 3.0.10 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors related…CVE-2009-2043Mozilla · 4.4% likely

    CWE-20

26. The nsWindow implementation in the browser engine in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through…CVE-2012-0463Mozilla · 4.1% likely

    CWE-20

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.