Поиск уязвимостей
Количество 24
Количество 24
BDU:2020-01409
Уязвимость веб-браузеров Firefox, Firefox ESR и почтового клиента Thunderbird, связанная с ошибкой получения доступа к привилегированному объекту JSONView, позволяющая нарушителю получить доступ к конфиденциальным данным и нарушить их целостность
ALT-PU-2019-3056
ALT-PU-2019-3056: package `firefox-esr` update to version 68.2.0-alt1
CVE-2019-11761
By using a form with a data URI it was possible to gain access to the privileged JSONView object that had been cloned into content. Impact from exposing this object appears to be minimal, however it was a bypass of existing defense in depth mechanisms. This vulnerability affects Firefox < 70, Thunderbird < 68.2, and Firefox ESR < 68.2.
CVE-2019-11761
By using a form with a data URI it was possible to gain access to the privileged JSONView object that had been cloned into content. Impact from exposing this object appears to be minimal, however it was a bypass of existing defense in depth mechanisms. This vulnerability affects Firefox < 70, Thunderbird < 68.2, and Firefox ESR < 68.2.
CVE-2019-11761
By using a form with a data URI it was possible to gain access to the privileged JSONView object that had been cloned into content. Impact from exposing this object appears to be minimal, however it was a bypass of existing defense in depth mechanisms. This vulnerability affects Firefox < 70, Thunderbird < 68.2, and Firefox ESR < 68.2.
CVE-2019-11761
By using a form with a data URI it was possible to gain access to the ...
ALT-PU-2019-3087
ALT-PU-2019-3087: package `firefox` update to version 70.0.1-alt1
GHSA-44qm-5fqq-5hw7
By using a form with a data URI it was possible to gain access to the privileged JSONView object that had been cloned into content. Impact from exposing this object appears to be minimal, however it was a bypass of existing defense in depth mechanisms. This vulnerability affects Firefox < 70, Thunderbird < 68.2, and Firefox ESR < 68.2.
ALT-PU-2020-1166
ALT-PU-2020-1166: package `thunderbird` update to version 68.4.2-alt1
ALT-PU-2019-2686
ALT-PU-2019-2686: package `firefox` update to version 69.0-alt1
ELSA-2019-3281
ELSA-2019-3281: firefox security update (CRITICAL)
ELSA-2019-3196
ELSA-2019-3196: firefox security update (CRITICAL)
ELSA-2019-3193
ELSA-2019-3193: firefox security update (CRITICAL)
openSUSE-SU-2019:2464-1
Recommended update for MozillaThunderbird
openSUSE-SU-2019:2459-1
Security update for MozillaFirefox, MozillaFirefox-branding-SLE
openSUSE-SU-2019:2452-1
Recommended update for MozillaThunderbird
openSUSE-SU-2019:2451-1
Security update for MozillaFirefox, MozillaFirefox-branding-SLE
SUSE-SU-2019:2912-1
Recommended update for MozillaThunderbird
SUSE-SU-2019:2871-1
Security update for MozillaFirefox, MozillaFirefox-branding-SLE
ELSA-2019-3756
ELSA-2019-3756: thunderbird security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2020-01409 Уязвимость веб-браузеров Firefox, Firefox ESR и почтового клиента Thunderbird, связанная с ошибкой получения доступа к привилегированному объекту JSONView, позволяющая нарушителю получить доступ к конфиденциальным данным и нарушить их целостность | CVSS3: 5.4 | 1% Низкий | почти 7 лет назад |
| ALT-PU-2019-3056 ALT-PU-2019-3056: package `firefox-esr` update to version 68.2.0-alt1 | CVSS3: 8.8 | около 7 лет назад | |
 | CVE-2019-11761 By using a form with a data URI it was possible to gain access to the privileged JSONView object that had been cloned into content. Impact from exposing this object appears to be minimal, however it was a bypass of existing defense in depth mechanisms. This vulnerability affects Firefox < 70, Thunderbird < 68.2, and Firefox ESR < 68.2. | CVSS3: 5.4 | 1% Низкий | почти 7 лет назад |
 | CVE-2019-11761 By using a form with a data URI it was possible to gain access to the privileged JSONView object that had been cloned into content. Impact from exposing this object appears to be minimal, however it was a bypass of existing defense in depth mechanisms. This vulnerability affects Firefox < 70, Thunderbird < 68.2, and Firefox ESR < 68.2. | CVSS3: 5.4 | 1% Низкий | около 7 лет назад |
 | CVE-2019-11761 By using a form with a data URI it was possible to gain access to the privileged JSONView object that had been cloned into content. Impact from exposing this object appears to be minimal, however it was a bypass of existing defense in depth mechanisms. This vulnerability affects Firefox < 70, Thunderbird < 68.2, and Firefox ESR < 68.2. | CVSS3: 5.4 | 1% Низкий | почти 7 лет назад |
| CVE-2019-11761 By using a form with a data URI it was possible to gain access to the ... | CVSS3: 5.4 | 1% Низкий | почти 7 лет назад |
| ALT-PU-2019-3087 ALT-PU-2019-3087: package `firefox` update to version 70.0.1-alt1 | CVSS3: 10 | около 7 лет назад | |
| GHSA-44qm-5fqq-5hw7 By using a form with a data URI it was possible to gain access to the privileged JSONView object that had been cloned into content. Impact from exposing this object appears to be minimal, however it was a bypass of existing defense in depth mechanisms. This vulnerability affects Firefox < 70, Thunderbird < 68.2, and Firefox ESR < 68.2. | CVSS3: 5.4 | 1% Низкий | больше 4 лет назад |
| ALT-PU-2020-1166 ALT-PU-2020-1166: package `thunderbird` update to version 68.4.2-alt1 | CVSS3: 9.8 | почти 7 лет назад | |
| ALT-PU-2019-2686 ALT-PU-2019-2686: package `firefox` update to version 69.0-alt1 | CVSS3: 10 | около 7 лет назад | |
| ELSA-2019-3281 ELSA-2019-3281: firefox security update (CRITICAL) | больше 6 лет назад | ||
| ELSA-2019-3196 ELSA-2019-3196: firefox security update (CRITICAL) | около 7 лет назад | ||
| ELSA-2019-3193 ELSA-2019-3193: firefox security update (CRITICAL) | около 7 лет назад | ||
 | openSUSE-SU-2019:2464-1 Recommended update for MozillaThunderbird | почти 7 лет назад | ||
| openSUSE-SU-2019:2459-1 Security update for MozillaFirefox, MozillaFirefox-branding-SLE | почти 7 лет назад | ||
| openSUSE-SU-2019:2452-1 Recommended update for MozillaThunderbird | почти 7 лет назад | ||
| openSUSE-SU-2019:2451-1 Security update for MozillaFirefox, MozillaFirefox-branding-SLE | почти 7 лет назад | ||
| SUSE-SU-2019:2912-1 Recommended update for MozillaThunderbird | около 7 лет назад | ||
| SUSE-SU-2019:2871-1 Security update for MozillaFirefox, MozillaFirefox-branding-SLE | около 7 лет назад | ||
| ELSA-2019-3756 ELSA-2019-3756: thunderbird security update (IMPORTANT) | больше 6 лет назад |
Уязвимостей на страницу