Mozilla Firefox — свободный браузер на движке Gecko
Релизный цикл, информация об уязвимостях
График релизов
Релизные элементы
| KB | Версия | Билд | Дата доступности |
|---|---|---|---|
| 138.0.4 | 138.0.4 | ||
| 138.0.3 | 138.0.3 | ||
| 138.0.1 | 138.0.1 | ||
| 138.0 | 138.0 |
Показывать по
Количество 17 337
CVE-2014-1487
The Web workers implementation in Mozilla Firefox before 27.0, Firefox ...
CVE-2014-1487
The Web workers implementation in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 allows remote attackers to bypass the Same Origin Policy and obtain sensitive authentication information via vectors involving error messages.
CVE-2014-1486
Use-after-free vulnerability in the imgRequestProxy function in Mozill ...
CVE-2014-1486
Use-after-free vulnerability in the imgRequestProxy function in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 allows remote attackers to execute arbitrary code via vectors involving unspecified Content-Type values for image data.
CVE-2014-1485
The Content Security Policy (CSP) implementation in Mozilla Firefox be ...
CVE-2014-1485
The Content Security Policy (CSP) implementation in Mozilla Firefox before 27.0 and SeaMonkey before 2.24 operates on XSLT stylesheets according to style-src directives instead of script-src directives, which might allow remote attackers to execute arbitrary XSLT code by leveraging insufficient style-src restrictions.
CVE-2014-1484
Mozilla Firefox before 27.0 on Android 4.2 and earlier creates system- ...
CVE-2014-1484
Mozilla Firefox before 27.0 on Android 4.2 and earlier creates system-log entries containing profile paths, which allows attackers to obtain sensitive information via a crafted application.
CVE-2014-1483
Mozilla Firefox before 27.0 and SeaMonkey before 2.24 allow remote att ...
CVE-2014-1483
Mozilla Firefox before 27.0 and SeaMonkey before 2.24 allow remote attackers to bypass the Same Origin Policy and obtain sensitive information by using an IFRAME element in conjunction with certain timing measurements involving the document.caretPositionFromPoint and document.elementFromPoint functions.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| CVE-2014-1487 The Web workers implementation in Mozilla Firefox before 27.0, Firefox ... | CVSS3: 7.5 | 2% Низкий | больше 12 лет назад |
 | CVE-2014-1487 The Web workers implementation in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 allows remote attackers to bypass the Same Origin Policy and obtain sensitive authentication information via vectors involving error messages. | CVSS3: 7.5 | 2% Низкий | больше 12 лет назад |
| CVE-2014-1486 Use-after-free vulnerability in the imgRequestProxy function in Mozill ... | CVSS3: 9.8 | 7% Низкий | больше 12 лет назад |
| CVE-2014-1486 Use-after-free vulnerability in the imgRequestProxy function in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 allows remote attackers to execute arbitrary code via vectors involving unspecified Content-Type values for image data. | CVSS3: 9.8 | 7% Низкий | больше 12 лет назад |
| CVE-2014-1485 The Content Security Policy (CSP) implementation in Mozilla Firefox be ... | CVSS2: 7.5 | 3% Низкий | больше 12 лет назад |
| CVE-2014-1485 The Content Security Policy (CSP) implementation in Mozilla Firefox before 27.0 and SeaMonkey before 2.24 operates on XSLT stylesheets according to style-src directives instead of script-src directives, which might allow remote attackers to execute arbitrary XSLT code by leveraging insufficient style-src restrictions. | CVSS2: 7.5 | 3% Низкий | больше 12 лет назад |
| CVE-2014-1484 Mozilla Firefox before 27.0 on Android 4.2 and earlier creates system- ... | CVSS2: 5 | 2% Низкий | больше 12 лет назад |
| CVE-2014-1484 Mozilla Firefox before 27.0 on Android 4.2 and earlier creates system-log entries containing profile paths, which allows attackers to obtain sensitive information via a crafted application. | CVSS2: 5 | 2% Низкий | больше 12 лет назад |
| CVE-2014-1483 Mozilla Firefox before 27.0 and SeaMonkey before 2.24 allow remote att ... | CVSS2: 5 | 2% Низкий | больше 12 лет назад |
| CVE-2014-1483 Mozilla Firefox before 27.0 and SeaMonkey before 2.24 allow remote attackers to bypass the Same Origin Policy and obtain sensitive information by using an IFRAME element in conjunction with certain timing measurements involving the document.caretPositionFromPoint and document.elementFromPoint functions. | CVSS2: 5 | 2% Низкий | больше 12 лет назад |
Уязвимостей на страницу