28.0

DATE	CVE	VULNERABILITY TITLE	RISK
2014-12-11	CVE-2014-1590	Improper Input Validation vulnerability in Mozilla Firefox, Firefox ESR and Seamonkey The XMLHttpRequest.prototype.send method in Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey before 2.31 allows remote attackers to cause a denial of service (application crash) via a crafted JavaScript object. network mozilla CWE-20	4.3
2014-12-11	CVE-2014-1587	Improper Input Validation vulnerability in Mozilla Firefox, Firefox ESR and Seamonkey Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey before 2.31 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. network mozilla CWE-20	6.8
2012-05-01	CVE-2011-3079	Resource Management Errors vulnerability in multiple products The Inter-process Communication (IPC) implementation in Google Chrome before 18.0.1025.168, as used in Mozilla Firefox before 38.0 and other products, does not properly validate messages, which has unspecified impact and attack vectors. network low complexity opensuse google mozilla CWE-399 critical	10.0