Поиск уязвимостей
Количество 29
Количество 29
BDU:2024-00812
Уязвимость изолированной среды iframe браузеров Mozilla Firefox, Firefox ESR и почтового клиента Thunderbird, позволяющая нарушителю обойти ограничения безопасности и изменить CSP (Content Security Policy)
CVE-2024-0747
When a parent page loaded a child in an iframe with `unsafe-inline`, the parent Content Security Policy could have overridden the child Content Security Policy. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunderbird < 115.7.
CVE-2024-0747
When a parent page loaded a child in an iframe with `unsafe-inline`, the parent Content Security Policy could have overridden the child Content Security Policy. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunderbird < 115.7.
CVE-2024-0747
When a parent page loaded a child in an iframe with `unsafe-inline`, the parent Content Security Policy could have overridden the child Content Security Policy. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunderbird < 115.7.
CVE-2024-0747
When a parent page loaded a child in an iframe with `unsafe-inline`, t ...
ALT-PU-2024-1792
ALT-PU-2024-1792: package `firefox-esr` update to version 115.7.0-alt1
ALT-PU-2024-1788
ALT-PU-2024-1788: package `thunderbird` update to version 115.7.0-alt1
ALT-PU-2024-1783
ALT-PU-2024-1783: package `firefox-esr` update to version 115.7.0-alt1
ALT-PU-2024-1368
ALT-PU-2024-1368: package `firefox` update to version 122.0-alt1
ROS-20240923-02
Множественные уязвимости firefox
ROS-20240923-08
Множественные уязвимости thunderbird
GHSA-jx5w-px6r-88w4
When a parent page loaded a child in an iframe with `unsafe-inline`, the parent Content Security Policy could have overridden the child Content Security Policy. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunderbird < 115.7.
ALT-PU-2023-8717
ALT-PU-2023-8717: package `firefox` update to version 116.0-alt1
ALT-PU-2024-3860
ALT-PU-2024-3860: package `thunderbird` update to version 115.8.1-alt1
SUSE-SU-2024:0242-1
Security update for MozillaThunderbird
SUSE-SU-2024:0229-1
Security update for MozillaFirefox
SUSE-SU-2024:0228-1
Security update for MozillaFirefox
SUSE-SU-2024:0211-1
Security update for MozillaFirefox
RLSA-2024:0609
Important: thunderbird security update
RLSA-2024:0608
Important: firefox security update
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2024-00812 Уязвимость изолированной среды iframe браузеров Mozilla Firefox, Firefox ESR и почтового клиента Thunderbird, позволяющая нарушителю обойти ограничения безопасности и изменить CSP (Content Security Policy) | CVSS3: 4.2 | 1% Низкий | почти 3 года назад |
 | CVE-2024-0747 When a parent page loaded a child in an iframe with `unsafe-inline`, the parent Content Security Policy could have overridden the child Content Security Policy. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunderbird < 115.7. | CVSS3: 6.5 | 1% Низкий | почти 3 года назад |
 | CVE-2024-0747 When a parent page loaded a child in an iframe with `unsafe-inline`, the parent Content Security Policy could have overridden the child Content Security Policy. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunderbird < 115.7. | CVSS3: 6.1 | 1% Низкий | почти 3 года назад |
 | CVE-2024-0747 When a parent page loaded a child in an iframe with `unsafe-inline`, the parent Content Security Policy could have overridden the child Content Security Policy. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunderbird < 115.7. | CVSS3: 6.5 | 1% Низкий | почти 3 года назад |
| CVE-2024-0747 When a parent page loaded a child in an iframe with `unsafe-inline`, t ... | CVSS3: 6.5 | 1% Низкий | почти 3 года назад |
| ALT-PU-2024-1792 ALT-PU-2024-1792: package `firefox-esr` update to version 115.7.0-alt1 | CVSS3: 8.8 | почти 3 года назад | |
| ALT-PU-2024-1788 ALT-PU-2024-1788: package `thunderbird` update to version 115.7.0-alt1 | CVSS3: 8.8 | почти 3 года назад | |
| ALT-PU-2024-1783 ALT-PU-2024-1783: package `firefox-esr` update to version 115.7.0-alt1 | CVSS3: 8.8 | почти 3 года назад | |
| ALT-PU-2024-1368 ALT-PU-2024-1368: package `firefox` update to version 122.0-alt1 | CVSS3: 8.8 | почти 3 года назад | |
 | ROS-20240923-02 Множественные уязвимости firefox | CVSS3: 8.8 | около 2 лет назад | |
| ROS-20240923-08 Множественные уязвимости thunderbird | CVSS3: 8.8 | около 2 лет назад | |
| GHSA-jx5w-px6r-88w4 When a parent page loaded a child in an iframe with `unsafe-inline`, the parent Content Security Policy could have overridden the child Content Security Policy. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunderbird < 115.7. | CVSS3: 6.5 | 1% Низкий | почти 3 года назад |
| ALT-PU-2023-8717 ALT-PU-2023-8717: package `firefox` update to version 116.0-alt1 | CVSS3: 9.8 | больше 3 лет назад | |
| ALT-PU-2024-3860 ALT-PU-2024-3860: package `thunderbird` update to version 115.8.1-alt1 | CVSS3: 9.8 | больше 2 лет назад | |
 | SUSE-SU-2024:0242-1 Security update for MozillaThunderbird | почти 3 года назад | ||
| SUSE-SU-2024:0229-1 Security update for MozillaFirefox | почти 3 года назад | ||
| SUSE-SU-2024:0228-1 Security update for MozillaFirefox | почти 3 года назад | ||
| SUSE-SU-2024:0211-1 Security update for MozillaFirefox | почти 3 года назад | ||
 | RLSA-2024:0609 Important: thunderbird security update | больше 2 лет назад | ||
| RLSA-2024:0608 Important: firefox security update | больше 2 лет назад |
Уязвимостей на страницу