Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:mozilla/Firefox%20ESR@10.0.5
purl pkg:mozilla/Firefox%20ESR@10.0.5
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (6)
Vulnerability Summary Aliases
VCID-1szy-64t4-2bab Multiple vulnerabilities have been found in Mozilla Firefox, Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may allow execution of arbitrary code or local privilege escalation. CVE-2012-1938
VCID-5y7y-3fnf-cueh Multiple vulnerabilities have been found in Mozilla Firefox, Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may allow execution of arbitrary code or local privilege escalation. CVE-2012-1945
VCID-bfd8-7p4k-abae Multiple vulnerabilities have been found in Mozilla Firefox, Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may allow execution of arbitrary code or local privilege escalation. CVE-2012-0441
VCID-cq4q-mh6g-aub7 Security researcher Adam Barth found that inline event handlers, such as onclick, were no longer blocked by Content Security Policy's (CSP) inline-script blocking feature. Web applications relying on this feature of CSP to protect against cross-site scripting (XSS) were not fully protected. CVE-2012-1944
VCID-s3m1-pnhd-n3ex Multiple vulnerabilities have been found in Mozilla Firefox, Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may allow execution of arbitrary code or local privilege escalation. CVE-2012-1947
VCID-v5y5-u355-mbdd Multiple vulnerabilities have been found in Mozilla Firefox, Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may allow execution of arbitrary code or local privilege escalation. CVE-2012-1946

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T13:17:59.860351+00:00 Mozilla Importer Fixing VCID-v5y5-u355-mbdd https://github.com/mozilla/foundation-security-advisories/blob/master/announce/2012/mfsa2012-38.md 38.0.0
2026-04-01T13:17:58.670354+00:00 Mozilla Importer Fixing VCID-1szy-64t4-2bab https://github.com/mozilla/foundation-security-advisories/blob/master/announce/2012/mfsa2012-34.md 38.0.0
2026-04-01T13:17:57.133036+00:00 Mozilla Importer Fixing VCID-cq4q-mh6g-aub7 https://github.com/mozilla/foundation-security-advisories/blob/master/announce/2012/mfsa2012-36.md 38.0.0
2026-04-01T13:17:56.695288+00:00 Mozilla Importer Fixing VCID-s3m1-pnhd-n3ex https://github.com/mozilla/foundation-security-advisories/blob/master/announce/2012/mfsa2012-40.md 38.0.0
2026-04-01T13:17:54.737422+00:00 Mozilla Importer Fixing VCID-bfd8-7p4k-abae https://github.com/mozilla/foundation-security-advisories/blob/master/announce/2012/mfsa2012-39.md 38.0.0
2026-04-01T13:17:50.753334+00:00 Mozilla Importer Fixing VCID-5y7y-3fnf-cueh https://github.com/mozilla/foundation-security-advisories/blob/master/announce/2012/mfsa2012-37.md 38.0.0