Mozilla Firefox — свободный браузер на движке Gecko
Релизный цикл, информация об уязвимостях
График релизов
Релизные элементы
| KB | Версия | Билд | Дата доступности |
|---|---|---|---|
| 138.0.4 | 138.0.4 | ||
| 138.0.3 | 138.0.3 | ||
| 138.0.1 | 138.0.1 | ||
| 138.0 | 138.0 |
Показывать по
Количество 18 439
CVE-2006-0292
The Javascript interpreter (jsinterp.c) in Mozilla and Firefox before 1.5.1 does not properly dereference objects, which allows remote attackers to cause a denial of service (crash) or execute arbitrary code via unknown attack vectors related to garbage collection.
CVE-2006-0296
The XULDocument.persist function in Mozilla, Firefox before 1.5.0.1, a ...
CVE-2006-0295
Mozilla Firefox 1.5, Thunderbird 1.5 if Javascript is enabled in mail, ...
CVE-2006-0299
The E4X implementation in Mozilla Firefox before 1.5.0.1, Thunderbird ...
CVE-2006-0292
The Javascript interpreter (jsinterp.c) in Mozilla and Firefox before ...
CVE-2006-0297
Multiple integer overflows in Mozilla Firefox 1.5, Thunderbird 1.5 if ...
CVE-2006-0294
Mozilla Firefox before 1.5.0.1, Thunderbird 1.5 if running Javascript ...
CVE-2006-0298
The XML parser in Mozilla Firefox before 1.5.0.1 and SeaMonkey before ...
CVE-2006-0293
The function allocation code (js_NewFunction in jsfun.c) in Firefox 1. ...
CVE-2006-0496
Cross-site scripting (XSS) vulnerability in Mozilla 1.7.12 and possibly earlier, Mozilla Firefox 1.0.7 and possibly earlier, and Netscape 8.1 and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the -moz-binding (Cascading Style Sheets) CSS property, which does not require that the style sheet have the same origin as the web page, as demonstrated by the compromise of a large number of LiveJournal accounts.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
 | CVE-2006-0292 The Javascript interpreter (jsinterp.c) in Mozilla and Firefox before 1.5.1 does not properly dereference objects, which allows remote attackers to cause a denial of service (crash) or execute arbitrary code via unknown attack vectors related to garbage collection. | 5% Низкий | почти 21 год назад | |
| CVE-2006-0296 The XULDocument.persist function in Mozilla, Firefox before 1.5.0.1, a ... | CVSS2: 5 | 4% Низкий | почти 21 год назад |
| CVE-2006-0295 Mozilla Firefox 1.5, Thunderbird 1.5 if Javascript is enabled in mail, ... | CVSS2: 5.1 | 71% Высокий | почти 21 год назад |
| CVE-2006-0299 The E4X implementation in Mozilla Firefox before 1.5.0.1, Thunderbird ... | CVSS2: 6.4 | 2% Низкий | почти 21 год назад |
| CVE-2006-0292 The Javascript interpreter (jsinterp.c) in Mozilla and Firefox before ... | CVSS2: 7.5 | 5% Низкий | почти 21 год назад |
| CVE-2006-0297 Multiple integer overflows in Mozilla Firefox 1.5, Thunderbird 1.5 if ... | CVSS2: 5.1 | 4% Низкий | почти 21 год назад |
| CVE-2006-0294 Mozilla Firefox before 1.5.0.1, Thunderbird 1.5 if running Javascript ... | CVSS2: 7.5 | 5% Низкий | почти 21 год назад |
| CVE-2006-0298 The XML parser in Mozilla Firefox before 1.5.0.1 and SeaMonkey before ... | CVSS2: 5.8 | 3% Низкий | почти 21 год назад |
| CVE-2006-0293 The function allocation code (js_NewFunction in jsfun.c) in Firefox 1. ... | CVSS2: 7.5 | 4% Низкий | почти 21 год назад |
 | CVE-2006-0496 Cross-site scripting (XSS) vulnerability in Mozilla 1.7.12 and possibly earlier, Mozilla Firefox 1.0.7 and possibly earlier, and Netscape 8.1 and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the -moz-binding (Cascading Style Sheets) CSS property, which does not require that the style sheet have the same origin as the web page, as demonstrated by the compromise of a large number of LiveJournal accounts. | CVSS2: 4.3 | 3% Низкий | почти 21 год назад |
Уязвимостей на страницу