Логотип exploitDog
product: "firefox"
Консоль
Логотип exploitDog

exploitDog

product: "firefox"
Mozilla Firefox

Mozilla Firefoxсвободный браузер на движке Gecko

Релизный цикл, информация об уязвимостях

Продукт: Mozilla Firefox
Вендор: mozilla

График релизов

11511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414514614720232024202520262027

Недавние уязвимости Mozilla Firefox

Количество 15 501

debian логотип

CVE-2023-6204

около 2 лет назад

On some systems\u2014depending on the graphics settings and drivers\u2 ...

CVSS3: 6.5
EPSS: Низкий
nvd логотип

CVE-2023-49061

около 2 лет назад

An attacker could have performed HTML template injection via Reader Mode and exfiltrated user information. This vulnerability affects Firefox for iOS < 120.

CVSS3: 6.1
EPSS: Низкий
debian логотип

CVE-2023-49061

около 2 лет назад

An attacker could have performed HTML template injection via Reader Mo ...

CVSS3: 6.1
EPSS: Низкий
nvd логотип

CVE-2023-49060

около 2 лет назад

An attacker could have accessed internal pages or data by ex-filtrating a security key from ReaderMode via the `referrerpolicy` attribute. This vulnerability affects Firefox for iOS < 120.

CVSS3: 9.8
EPSS: Низкий
debian логотип

CVE-2023-49060

около 2 лет назад

An attacker could have accessed internal pages or data by ex-filtratin ...

CVSS3: 9.8
EPSS: Низкий
ubuntu логотип

CVE-2023-49061

около 2 лет назад

An attacker could have performed HTML template injection via Reader Mode and exfiltrated user information. This vulnerability affects Firefox for iOS < 120.

CVSS3: 6.1
EPSS: Низкий
ubuntu логотип

CVE-2023-49060

около 2 лет назад

An attacker could have accessed internal pages or data by ex-filtrating a security key from ReaderMode via the `referrerpolicy` attribute. This vulnerability affects Firefox for iOS < 120.

CVSS3: 9.8
EPSS: Низкий
ubuntu логотип

CVE-2023-6208

около 2 лет назад

When using X11, text selected by the page using the Selection API was erroneously copied into the primary selection, a temporary storage not unlike the clipboard. *This bug only affects Firefox on X11. Other systems are unaffected.* This vulnerability affects Firefox < 120, Firefox ESR < 115.5.0, and Thunderbird < 115.5.

CVSS3: 8.8
EPSS: Низкий
ubuntu логотип

CVE-2023-6210

около 2 лет назад

When an https: web page created a pop-up from a "javascript:" URL, that pop-up was incorrectly allowed to load blockable content such as iframes from insecure http: URLs This vulnerability affects Firefox < 120.

CVSS3: 6.5
EPSS: Низкий
ubuntu логотип

CVE-2023-6207

около 2 лет назад

Ownership mismanagement led to a use-after-free in ReadableByteStreams This vulnerability affects Firefox < 120, Firefox ESR < 115.5.0, and Thunderbird < 115.5.

CVSS3: 8.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
1
debian логотип
CVE-2023-6204

On some systems\u2014depending on the graphics settings and drivers\u2 ...

CVSS3: 6.5
0%
Низкий
около 2 лет назад
nvd логотип
CVE-2023-49061

An attacker could have performed HTML template injection via Reader Mode and exfiltrated user information. This vulnerability affects Firefox for iOS < 120.

CVSS3: 6.1
0%
Низкий
около 2 лет назад
debian логотип
CVE-2023-49061

An attacker could have performed HTML template injection via Reader Mo ...

CVSS3: 6.1
0%
Низкий
около 2 лет назад
nvd логотип
CVE-2023-49060

An attacker could have accessed internal pages or data by ex-filtrating a security key from ReaderMode via the `referrerpolicy` attribute. This vulnerability affects Firefox for iOS < 120.

CVSS3: 9.8
0%
Низкий
около 2 лет назад
debian логотип
CVE-2023-49060

An attacker could have accessed internal pages or data by ex-filtratin ...

CVSS3: 9.8
0%
Низкий
около 2 лет назад
ubuntu логотип
CVE-2023-49061

An attacker could have performed HTML template injection via Reader Mode and exfiltrated user information. This vulnerability affects Firefox for iOS < 120.

CVSS3: 6.1
0%
Низкий
около 2 лет назад
ubuntu логотип
CVE-2023-49060

An attacker could have accessed internal pages or data by ex-filtrating a security key from ReaderMode via the `referrerpolicy` attribute. This vulnerability affects Firefox for iOS < 120.

CVSS3: 9.8
0%
Низкий
около 2 лет назад
ubuntu логотип
CVE-2023-6208

When using X11, text selected by the page using the Selection API was erroneously copied into the primary selection, a temporary storage not unlike the clipboard. *This bug only affects Firefox on X11. Other systems are unaffected.* This vulnerability affects Firefox < 120, Firefox ESR < 115.5.0, and Thunderbird < 115.5.

CVSS3: 8.8
0%
Низкий
около 2 лет назад
ubuntu логотип
CVE-2023-6210

When an https: web page created a pop-up from a "javascript:" URL, that pop-up was incorrectly allowed to load blockable content such as iframes from insecure http: URLs This vulnerability affects Firefox < 120.

CVSS3: 6.5
0%
Низкий
около 2 лет назад
ubuntu логотип
CVE-2023-6207

Ownership mismanagement led to a use-after-free in ReadableByteStreams This vulnerability affects Firefox < 120, Firefox ESR < 115.5.0, and Thunderbird < 115.5.

CVSS3: 8.8
0%
Низкий
около 2 лет назад

Уязвимостей на страницу


Поделиться