Mozilla Firefox — свободный браузер на движке Gecko
Релизный цикл, информация об уязвимостях
График релизов
Релизные элементы
| KB | Версия | Билд | Дата доступности |
|---|---|---|---|
| 138.0.4 | 138.0.4 | ||
| 138.0.3 | 138.0.3 | ||
| 138.0.1 | 138.0.1 | ||
| 138.0 | 138.0 |
Показывать по
Количество 17 545
CVE-2006-6497
Multiple unspecified vulnerabilities in the layout engine for Mozilla ...
CVE-2006-6500
Heap-based buffer overflow in Mozilla Firefox 2.x before 2.0.0.1, 1.5. ...
CVE-2006-6498
Multiple unspecified vulnerabilities in the JavaScript engine for Mozi ...
CVE-2006-6504
Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, and SeaMonke ...
CVE-2006-6499
The js_dtoa function in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x befo ...
CVE-2006-6502
Use-after-free vulnerability in the LiveConnect bridge code for Mozill ...
CVE-2006-6506
The "Feed Preview" feature in Mozilla Firefox 2.0 before 2.0.0.1 sends ...
CVE-2006-6503
Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to bypass cross-site scripting (XSS) protection by changing the src attribute of an IMG element to a javascript: URI.
CVE-2006-6501
Unspecified vulnerability in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to gain privileges and install malicious code via the watch Javascript function.
CVE-2006-6497
Multiple unspecified vulnerabilities in the layout engine for Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allow remote attackers to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via unknown attack vectors.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| CVE-2006-6497 Multiple unspecified vulnerabilities in the layout engine for Mozilla ... | CVSS2: 6.8 | 4% Низкий | больше 19 лет назад |
| CVE-2006-6500 Heap-based buffer overflow in Mozilla Firefox 2.x before 2.0.0.1, 1.5. ... | CVSS2: 6.8 | 8% Низкий | больше 19 лет назад |
| CVE-2006-6498 Multiple unspecified vulnerabilities in the JavaScript engine for Mozi ... | CVSS2: 6.8 | 4% Низкий | больше 19 лет назад |
| CVE-2006-6504 Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, and SeaMonke ... | CVSS2: 9.3 | 9% Низкий | больше 19 лет назад |
| CVE-2006-6499 The js_dtoa function in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x befo ... | CVSS2: 4.3 | 4% Низкий | больше 19 лет назад |
| CVE-2006-6502 Use-after-free vulnerability in the LiveConnect bridge code for Mozill ... | CVSS2: 7.1 | 2% Низкий | больше 19 лет назад |
| CVE-2006-6506 The "Feed Preview" feature in Mozilla Firefox 2.0 before 2.0.0.1 sends ... | CVSS2: 4.3 | 2% Низкий | больше 19 лет назад |
 | CVE-2006-6503 Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to bypass cross-site scripting (XSS) protection by changing the src attribute of an IMG element to a javascript: URI. | CVSS2: 6.8 | 4% Низкий | больше 19 лет назад |
| CVE-2006-6501 Unspecified vulnerability in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to gain privileges and install malicious code via the watch Javascript function. | CVSS2: 6.8 | 3% Низкий | больше 19 лет назад |
| CVE-2006-6497 Multiple unspecified vulnerabilities in the layout engine for Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allow remote attackers to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via unknown attack vectors. | CVSS2: 6.8 | 4% Низкий | больше 19 лет назад |
Уязвимостей на страницу