Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2016-01-09	CVE-2015-8512	Improper Access Control vulnerability in Mozilla Firefox OS 2.2 The lockscreen feature in Mozilla Firefox OS before 2.5 does not properly restrict failed authentication attempts, which makes it easier for physically proximate attackers to obtain access by entering many passcode guesses. low complexity mozilla CWE-284	4.6
2016-01-09	CVE-2015-8511	Race Condition vulnerability in Mozilla Firefox OS 2.2 Race condition in the lockscreen feature in Mozilla Firefox OS before 2.5 allows physically proximate attackers to bypass an intended passcode requirement via unspecified vectors. high complexity mozilla CWE-362	6.4
2016-01-09	CVE-2015-8510	Cross-site Scripting vulnerability in Mozilla Firefox OS 2.2 Cross-site scripting (XSS) vulnerability in the internationalization feature in the default homescreen app in Mozilla Firefox OS before 2.5 allows user-assisted remote attackers to inject arbitrary web script or HTML via a crafted web site that is mishandled during "Add to home screen" bookmarking. network low complexity mozilla CWE-79	6.1