Поиск уязвимостей
Количество 26
Количество 26
BDU:2024-10431
Уязвимость браузеров Mozilla Firefox, Firefox ESR и почтового клиента Thunderbird, связанная с непринятием мер по защите структуры веб-страницы, позволяющая нарушителю выполнить DOM Based XSS-атаку
ALT-PU-2025-1049
ALT-PU-2025-1049: package `firefox-esr` update to version 128.5.2-alt1
ALT-PU-2024-16378
ALT-PU-2024-16378: package `firefox-esr` update to version 128.5.0-alt1
CVE-2024-11694
Enhanced Tracking Protection's Strict mode may have inadvertently allowed a CSP `frame-src` bypass and DOM-based XSS through the Google SafeFrame shim in the Web Compatibility extension. This issue could have exposed users to malicious frames masquerading as legitimate content. This vulnerability affects Firefox < 133, Firefox ESR < 128.5, Firefox ESR < 115.18, Thunderbird < 133, Thunderbird < 128.5, and Thunderbird < 115.18.
CVE-2024-11694
Enhanced Tracking Protection's Strict mode may have inadvertently allowed a CSP `frame-src` bypass and DOM-based XSS through the Google SafeFrame shim in the Web Compatibility extension. This issue could have exposed users to malicious frames masquerading as legitimate content. This vulnerability affects Firefox < 133, Firefox ESR < 128.5, Firefox ESR < 115.18, Thunderbird < 133, Thunderbird < 128.5, and Thunderbird < 115.18.
CVE-2024-11694
Enhanced Tracking Protection's Strict mode may have inadvertently allowed a CSP `frame-src` bypass and DOM-based XSS through the Google SafeFrame shim in the Web Compatibility extension. This issue could have exposed users to malicious frames masquerading as legitimate content. This vulnerability affects Firefox < 133, Firefox ESR < 128.5, Firefox ESR < 115.18, Thunderbird < 133, Thunderbird < 128.5, and Thunderbird < 115.18.
CVE-2024-11694
Enhanced Tracking Protection's Strict mode may have inadvertently allo ...
ALT-PU-2024-16377
ALT-PU-2024-16377: package `thunderbird` update to version 128.5.0-alt1
ALT-PU-2025-2027
ALT-PU-2025-2027: package `thunderbird` update to version 128.6.0-alt0.p10.1
ALT-PU-2024-16375
ALT-PU-2024-16375: package `firefox` update to version 133.0.0-alt1
GHSA-mjcw-r3mg-3848
Enhanced Tracking Protection's Strict mode may have inadvertently allowed a CSP `frame-src` bypass and DOM-based XSS through the Google SafeFrame shim in the Web Compatibility extension. This issue could have exposed users to malicious frames masquerading as legitimate content. This vulnerability affects Firefox < 133, Firefox ESR < 128.5, Firefox ESR < 115.18, Thunderbird < 133, and Thunderbird < 128.5.
ALT-PU-2025-2230
ALT-PU-2025-2230: package `firefox` update to version 134.0.2-alt0.p10.1
ROS-20250114-10
Множественные уязвимости thunderbird
ROS-20250114-09
Множественные уязвимости firefox
RLSA-2026:18479
Important: qemu-kvm security update
RLSA-2024:10752
Important: firefox security update
ELSA-2026-18479
ELSA-2026-18479: qemu-kvm security update (IMPORTANT)
ELSA-2024-10881
ELSA-2024-10881: firefox security update (IMPORTANT)
ELSA-2024-10752
ELSA-2024-10752: firefox security update (IMPORTANT)
ELSA-2024-10702
ELSA-2024-10702: firefox security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2024-10431 Уязвимость браузеров Mozilla Firefox, Firefox ESR и почтового клиента Thunderbird, связанная с непринятием мер по защите структуры веб-страницы, позволяющая нарушителю выполнить DOM Based XSS-атаку | CVSS3: 4.3 | 1% Низкий | почти 2 года назад |
| ALT-PU-2025-1049 ALT-PU-2025-1049: package `firefox-esr` update to version 128.5.2-alt1 | CVSS3: 9.8 | почти 2 года назад | |
| ALT-PU-2024-16378 ALT-PU-2024-16378: package `firefox-esr` update to version 128.5.0-alt1 | CVSS3: 9.8 | почти 2 года назад | |
 | CVE-2024-11694 Enhanced Tracking Protection's Strict mode may have inadvertently allowed a CSP `frame-src` bypass and DOM-based XSS through the Google SafeFrame shim in the Web Compatibility extension. This issue could have exposed users to malicious frames masquerading as legitimate content. This vulnerability affects Firefox < 133, Firefox ESR < 128.5, Firefox ESR < 115.18, Thunderbird < 133, Thunderbird < 128.5, and Thunderbird < 115.18. | CVSS3: 6.1 | 1% Низкий | почти 2 года назад |
 | CVE-2024-11694 Enhanced Tracking Protection's Strict mode may have inadvertently allowed a CSP `frame-src` bypass and DOM-based XSS through the Google SafeFrame shim in the Web Compatibility extension. This issue could have exposed users to malicious frames masquerading as legitimate content. This vulnerability affects Firefox < 133, Firefox ESR < 128.5, Firefox ESR < 115.18, Thunderbird < 133, Thunderbird < 128.5, and Thunderbird < 115.18. | CVSS3: 6.1 | 1% Низкий | почти 2 года назад |
 | CVE-2024-11694 Enhanced Tracking Protection's Strict mode may have inadvertently allowed a CSP `frame-src` bypass and DOM-based XSS through the Google SafeFrame shim in the Web Compatibility extension. This issue could have exposed users to malicious frames masquerading as legitimate content. This vulnerability affects Firefox < 133, Firefox ESR < 128.5, Firefox ESR < 115.18, Thunderbird < 133, Thunderbird < 128.5, and Thunderbird < 115.18. | CVSS3: 6.1 | 1% Низкий | почти 2 года назад |
| CVE-2024-11694 Enhanced Tracking Protection's Strict mode may have inadvertently allo ... | CVSS3: 6.1 | 1% Низкий | почти 2 года назад |
| ALT-PU-2024-16377 ALT-PU-2024-16377: package `thunderbird` update to version 128.5.0-alt1 | CVSS3: 9.8 | почти 2 года назад | |
| ALT-PU-2025-2027 ALT-PU-2025-2027: package `thunderbird` update to version 128.6.0-alt0.p10.1 | CVSS3: 9.8 | почти 2 года назад | |
| ALT-PU-2024-16375 ALT-PU-2024-16375: package `firefox` update to version 133.0.0-alt1 | CVSS3: 9.8 | почти 2 года назад | |
| GHSA-mjcw-r3mg-3848 Enhanced Tracking Protection's Strict mode may have inadvertently allowed a CSP `frame-src` bypass and DOM-based XSS through the Google SafeFrame shim in the Web Compatibility extension. This issue could have exposed users to malicious frames masquerading as legitimate content. This vulnerability affects Firefox < 133, Firefox ESR < 128.5, Firefox ESR < 115.18, Thunderbird < 133, and Thunderbird < 128.5. | CVSS3: 6.1 | 1% Низкий | почти 2 года назад |
| ALT-PU-2025-2230 ALT-PU-2025-2230: package `firefox` update to version 134.0.2-alt0.p10.1 | CVSS3: 9.8 | почти 2 года назад | |
 | ROS-20250114-10 Множественные уязвимости thunderbird | CVSS3: 9.8 | почти 2 года назад | |
| ROS-20250114-09 Множественные уязвимости firefox | CVSS3: 9.8 | почти 2 года назад | |
 | RLSA-2026:18479 Important: qemu-kvm security update | 5 месяцев назад | ||
| RLSA-2024:10752 Important: firefox security update | почти 2 года назад | ||
| ELSA-2026-18479 ELSA-2026-18479: qemu-kvm security update (IMPORTANT) | 4 месяца назад | ||
| ELSA-2024-10881 ELSA-2024-10881: firefox security update (IMPORTANT) | почти 2 года назад | ||
| ELSA-2024-10752 ELSA-2024-10752: firefox security update (IMPORTANT) | почти 2 года назад | ||
| ELSA-2024-10702 ELSA-2024-10702: firefox security update (IMPORTANT) | почти 2 года назад |
Уязвимостей на страницу