Mozilla Firefox — свободный браузер на движке Gecko
Релизный цикл, информация об уязвимостях
График релизов
Количество 15 156
CVE-2008-5505
Mozilla Firefox 3.x before 3.0.5 allows remote attackers to bypass intended privacy restrictions by using the persist attribute in an XUL element to create and access data entities that are similar to cookies.
CVE-2008-5505
Mozilla Firefox 3.x before 3.0.5 allows remote attackers to bypass int ...
CVE-2008-5504
Mozilla Firefox 2.x before 2.0.0.19 allows remote attackers to run arbitrary JavaScript with chrome privileges via vectors related to the feed preview, a different vulnerability than CVE-2008-3836.
CVE-2008-5504
Mozilla Firefox 2.x before 2.0.0.19 allows remote attackers to run arb ...
CVE-2008-5503
The loadBindingDocument function in Mozilla Firefox 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 does not perform any security checks related to the same-domain policy, which allows remote attackers to read or access data from other domains via crafted XBL bindings.
CVE-2008-5503
The loadBindingDocument function in Mozilla Firefox 2.x before 2.0.0.1 ...
CVE-2008-5502
The layout engine in Mozilla Firefox 3.x before 3.0.5, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to cause a denial of service (crash) via vectors that trigger memory corruption, related to the GetXMLEntity and FastAppendChar functions.
CVE-2008-5502
The layout engine in Mozilla Firefox 3.x before 3.0.5, Thunderbird 2.x ...
CVE-2008-5501
The layout engine in Mozilla Firefox 3.x before 3.0.5, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to cause a denial of service via vectors that trigger an assertion failure.
CVE-2008-5501
The layout engine in Mozilla Firefox 3.x before 3.0.5, Thunderbird 2.x ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
 | CVE-2008-5505 Mozilla Firefox 3.x before 3.0.5 allows remote attackers to bypass intended privacy restrictions by using the persist attribute in an XUL element to create and access data entities that are similar to cookies. | CVSS2: 5 | 1% Низкий | почти 17 лет назад |
| CVE-2008-5505 Mozilla Firefox 3.x before 3.0.5 allows remote attackers to bypass int ... | CVSS2: 5 | 1% Низкий | почти 17 лет назад |
| CVE-2008-5504 Mozilla Firefox 2.x before 2.0.0.19 allows remote attackers to run arbitrary JavaScript with chrome privileges via vectors related to the feed preview, a different vulnerability than CVE-2008-3836. | CVSS2: 7.5 | 4% Низкий | почти 17 лет назад |
| CVE-2008-5504 Mozilla Firefox 2.x before 2.0.0.19 allows remote attackers to run arb ... | CVSS2: 7.5 | 4% Низкий | почти 17 лет назад |
| CVE-2008-5503 The loadBindingDocument function in Mozilla Firefox 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 does not perform any security checks related to the same-domain policy, which allows remote attackers to read or access data from other domains via crafted XBL bindings. | CVSS2: 2.6 | 1% Низкий | почти 17 лет назад |
| CVE-2008-5503 The loadBindingDocument function in Mozilla Firefox 2.x before 2.0.0.1 ... | CVSS2: 2.6 | 1% Низкий | почти 17 лет назад |
| CVE-2008-5502 The layout engine in Mozilla Firefox 3.x before 3.0.5, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to cause a denial of service (crash) via vectors that trigger memory corruption, related to the GetXMLEntity and FastAppendChar functions. | CVSS2: 5 | 4% Низкий | почти 17 лет назад |
| CVE-2008-5502 The layout engine in Mozilla Firefox 3.x before 3.0.5, Thunderbird 2.x ... | CVSS2: 5 | 4% Низкий | почти 17 лет назад |
| CVE-2008-5501 The layout engine in Mozilla Firefox 3.x before 3.0.5, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to cause a denial of service via vectors that trigger an assertion failure. | CVSS2: 5 | 5% Низкий | почти 17 лет назад |
| CVE-2008-5501 The layout engine in Mozilla Firefox 3.x before 3.0.5, Thunderbird 2.x ... | CVSS2: 5 | 5% Низкий | почти 17 лет назад |
Уязвимостей на страницу