Mozilla Firefox — свободный браузер на движке Gecko
Релизный цикл, информация об уязвимостях
График релизов
Релизные элементы
| KB | Версия | Билд | Дата доступности |
|---|---|---|---|
| 138.0.4 | 138.0.4 | ||
| 138.0.3 | 138.0.3 | ||
| 138.0.1 | 138.0.1 | ||
| 138.0 | 138.0 |
Показывать по
Количество 17 337
CVE-2014-1592
Use-after-free vulnerability in the nsHtml5TreeOperation function in x ...
CVE-2014-1592
Use-after-free vulnerability in the nsHtml5TreeOperation function in xul.dll in Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey before 2.31 allows remote attackers to execute arbitrary code by adding a second root element to an HTML5 document during parsing.
CVE-2014-1591
Mozilla Firefox 33.0 and SeaMonkey before 2.31 include path strings in ...
CVE-2014-1591
Mozilla Firefox 33.0 and SeaMonkey before 2.31 include path strings in CSP violation reports, which allows remote attackers to obtain sensitive information via a web site that receives a report after a redirect.
CVE-2014-1590
The XMLHttpRequest.prototype.send method in Mozilla Firefox before 34. ...
CVE-2014-1590
The XMLHttpRequest.prototype.send method in Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey before 2.31 allows remote attackers to cause a denial of service (application crash) via a crafted JavaScript object.
CVE-2014-1589
Mozilla Firefox before 34.0 and SeaMonkey before 2.31 provide styleshe ...
CVE-2014-1589
Mozilla Firefox before 34.0 and SeaMonkey before 2.31 provide stylesheets with an incorrect primary namespace, which allows remote attackers to bypass intended access restrictions via an XBL binding.
CVE-2014-1588
Multiple unspecified vulnerabilities in the browser engine in Mozilla ...
CVE-2014-1588
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 34.0 and SeaMonkey before 2.31 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| CVE-2014-1592 Use-after-free vulnerability in the nsHtml5TreeOperation function in x ... | CVSS2: 6.8 | 3% Низкий | больше 11 лет назад |
 | CVE-2014-1592 Use-after-free vulnerability in the nsHtml5TreeOperation function in xul.dll in Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey before 2.31 allows remote attackers to execute arbitrary code by adding a second root element to an HTML5 document during parsing. | CVSS2: 6.8 | 3% Низкий | больше 11 лет назад |
| CVE-2014-1591 Mozilla Firefox 33.0 and SeaMonkey before 2.31 include path strings in ... | CVSS2: 4.3 | 1% Низкий | больше 11 лет назад |
| CVE-2014-1591 Mozilla Firefox 33.0 and SeaMonkey before 2.31 include path strings in CSP violation reports, which allows remote attackers to obtain sensitive information via a web site that receives a report after a redirect. | CVSS2: 4.3 | 1% Низкий | больше 11 лет назад |
| CVE-2014-1590 The XMLHttpRequest.prototype.send method in Mozilla Firefox before 34. ... | CVSS2: 4.3 | 2% Низкий | больше 11 лет назад |
| CVE-2014-1590 The XMLHttpRequest.prototype.send method in Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey before 2.31 allows remote attackers to cause a denial of service (application crash) via a crafted JavaScript object. | CVSS2: 4.3 | 2% Низкий | больше 11 лет назад |
| CVE-2014-1589 Mozilla Firefox before 34.0 and SeaMonkey before 2.31 provide styleshe ... | CVSS2: 6.8 | 2% Низкий | больше 11 лет назад |
| CVE-2014-1589 Mozilla Firefox before 34.0 and SeaMonkey before 2.31 provide stylesheets with an incorrect primary namespace, which allows remote attackers to bypass intended access restrictions via an XBL binding. | CVSS2: 6.8 | 2% Низкий | больше 11 лет назад |
| CVE-2014-1588 Multiple unspecified vulnerabilities in the browser engine in Mozilla ... | CVSS2: 6.8 | 4% Низкий | больше 11 лет назад |
| CVE-2014-1588 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 34.0 and SeaMonkey before 2.31 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. | CVSS2: 6.8 | 4% Низкий | больше 11 лет назад |
Уязвимостей на страницу