Поиск уязвимостей
Количество 26
Количество 26
BDU:2020-05537
Уязвимость синтаксического анализа и загрузки событий в коде SVG веб-браузера Firefox и почтового клиента Thunderbird, позволяющая нарушителю проводить межсайтовые сценарные атаки (XSS)
ALT-PU-2020-3386
ALT-PU-2020-3386: package `thunderbird` update to version 78.5.0-alt1
ALT-PU-2020-3340
ALT-PU-2020-3340: package `firefox-esr` update to version 78.5.0-alt1
CVE-2020-26951
A parsing and event loading mismatch in Firefox's SVG code could have allowed load events to fire, even after sanitization. An attacker already capable of exploiting an XSS vulnerability in privileged internal pages could have used this attack to bypass our built-in sanitizer. This vulnerability affects Firefox < 83, Firefox ESR < 78.5, and Thunderbird < 78.5.
CVE-2020-26951
A parsing and event loading mismatch in Firefox's SVG code could have allowed load events to fire, even after sanitization. An attacker already capable of exploiting an XSS vulnerability in privileged internal pages could have used this attack to bypass our built-in sanitizer. This vulnerability affects Firefox < 83, Firefox ESR < 78.5, and Thunderbird < 78.5.
CVE-2020-26951
A parsing and event loading mismatch in Firefox's SVG code could have allowed load events to fire, even after sanitization. An attacker already capable of exploiting an XSS vulnerability in privileged internal pages could have used this attack to bypass our built-in sanitizer. This vulnerability affects Firefox < 83, Firefox ESR < 78.5, and Thunderbird < 78.5.
CVE-2020-26951
A parsing and event loading mismatch in Firefox's SVG code could have ...
ALT-PU-2020-3384
ALT-PU-2020-3384: package `firefox` update to version 83.0-alt1
GHSA-w7p8-wf2r-rw5h
A parsing and event loading mismatch in Firefox's SVG code could have allowed load events to fire, even after sanitization. An attacker already capable of exploiting an XSS vulnerability in privileged internal pages could have used this attack to bypass our built-in sanitizer. This vulnerability affects Firefox < 83, Firefox ESR < 78.5, and Thunderbird < 78.5.
ALT-PU-2020-2598
ALT-PU-2020-2598: package `firefox` update to version 79.0-alt1
ELSA-2020-5257
ELSA-2020-5257: firefox security update (IMPORTANT)
ELSA-2020-5239
ELSA-2020-5239: firefox security update (IMPORTANT)
ELSA-2020-5238
ELSA-2020-5238: thunderbird security update (IMPORTANT)
ELSA-2020-5237
ELSA-2020-5237: firefox security update (IMPORTANT)
ELSA-2020-5236
ELSA-2020-5236: thunderbird security update (IMPORTANT)
ELSA-2020-5235
ELSA-2020-5235: thunderbird security update (IMPORTANT)
openSUSE-SU-2020:2315-1
Security update for MozillaFirefox
openSUSE-SU-2020:2187-1
Security update for MozillaThunderbird
openSUSE-SU-2020:2096-1
Security update for MozillaThunderbird
openSUSE-SU-2020:2031-1
Security update for MozillaFirefox
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2020-05537 Уязвимость синтаксического анализа и загрузки событий в коде SVG веб-браузера Firefox и почтового клиента Thunderbird, позволяющая нарушителю проводить межсайтовые сценарные атаки (XSS) | CVSS3: 7.5 | 1% Низкий | почти 6 лет назад |
| ALT-PU-2020-3386 ALT-PU-2020-3386: package `thunderbird` update to version 78.5.0-alt1 | CVSS3: 9.6 | почти 6 лет назад | |
| ALT-PU-2020-3340 ALT-PU-2020-3340: package `firefox-esr` update to version 78.5.0-alt1 | CVSS3: 9.6 | почти 6 лет назад | |
 | CVE-2020-26951 A parsing and event loading mismatch in Firefox's SVG code could have allowed load events to fire, even after sanitization. An attacker already capable of exploiting an XSS vulnerability in privileged internal pages could have used this attack to bypass our built-in sanitizer. This vulnerability affects Firefox < 83, Firefox ESR < 78.5, and Thunderbird < 78.5. | CVSS3: 6.1 | 1% Низкий | почти 6 лет назад |
 | CVE-2020-26951 A parsing and event loading mismatch in Firefox's SVG code could have allowed load events to fire, even after sanitization. An attacker already capable of exploiting an XSS vulnerability in privileged internal pages could have used this attack to bypass our built-in sanitizer. This vulnerability affects Firefox < 83, Firefox ESR < 78.5, and Thunderbird < 78.5. | CVSS3: 6.1 | 1% Низкий | почти 6 лет назад |
 | CVE-2020-26951 A parsing and event loading mismatch in Firefox's SVG code could have allowed load events to fire, even after sanitization. An attacker already capable of exploiting an XSS vulnerability in privileged internal pages could have used this attack to bypass our built-in sanitizer. This vulnerability affects Firefox < 83, Firefox ESR < 78.5, and Thunderbird < 78.5. | CVSS3: 6.1 | 1% Низкий | почти 6 лет назад |
| CVE-2020-26951 A parsing and event loading mismatch in Firefox's SVG code could have ... | CVSS3: 6.1 | 1% Низкий | почти 6 лет назад |
| ALT-PU-2020-3384 ALT-PU-2020-3384: package `firefox` update to version 83.0-alt1 | CVSS3: 9.6 | почти 6 лет назад | |
| GHSA-w7p8-wf2r-rw5h A parsing and event loading mismatch in Firefox's SVG code could have allowed load events to fire, even after sanitization. An attacker already capable of exploiting an XSS vulnerability in privileged internal pages could have used this attack to bypass our built-in sanitizer. This vulnerability affects Firefox < 83, Firefox ESR < 78.5, and Thunderbird < 78.5. | 1% Низкий | больше 4 лет назад | |
| ALT-PU-2020-2598 ALT-PU-2020-2598: package `firefox` update to version 79.0-alt1 | CVSS3: 9.8 | около 6 лет назад | |
| ELSA-2020-5257 ELSA-2020-5257: firefox security update (IMPORTANT) | почти 6 лет назад | ||
| ELSA-2020-5239 ELSA-2020-5239: firefox security update (IMPORTANT) | почти 6 лет назад | ||
| ELSA-2020-5238 ELSA-2020-5238: thunderbird security update (IMPORTANT) | почти 6 лет назад | ||
| ELSA-2020-5237 ELSA-2020-5237: firefox security update (IMPORTANT) | почти 6 лет назад | ||
| ELSA-2020-5236 ELSA-2020-5236: thunderbird security update (IMPORTANT) | почти 6 лет назад | ||
| ELSA-2020-5235 ELSA-2020-5235: thunderbird security update (IMPORTANT) | почти 6 лет назад | ||
 | openSUSE-SU-2020:2315-1 Security update for MozillaFirefox | почти 6 лет назад | ||
| openSUSE-SU-2020:2187-1 Security update for MozillaThunderbird | почти 6 лет назад | ||
| openSUSE-SU-2020:2096-1 Security update for MozillaThunderbird | почти 6 лет назад | ||
| openSUSE-SU-2020:2031-1 Security update for MozillaFirefox | почти 6 лет назад |
Уязвимостей на страницу