Поиск уязвимостей
Количество 26
Количество 26
BDU:2025-00966
Уязвимость веб-браузеров Firefox и Firefox ESR, почтового клиента Thunderbird, связанная с непринятием мер по защите структуры веб-страницы, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
CVE-2024-10461
In multipart/x-mixed-replace responses, `Content-Disposition: attachment` in the response header was not respected and did not force a download, which could allow XSS attacks. This vulnerability affects Firefox < 132, Firefox ESR < 128.4, Thunderbird < 128.4, and Thunderbird < 132.
CVE-2024-10461
In multipart/x-mixed-replace responses, `Content-Disposition: attachment` in the response header was not respected and did not force a download, which could allow XSS attacks. This vulnerability affects Firefox < 132, Firefox ESR < 128.4, Thunderbird < 128.4, and Thunderbird < 132.
CVE-2024-10461
In multipart/x-mixed-replace responses, `Content-Disposition: attachment` in the response header was not respected and did not force a download, which could allow XSS attacks. This vulnerability affects Firefox < 132, Firefox ESR < 128.4, Thunderbird < 128.4, and Thunderbird < 132.
CVE-2024-10461
In multipart/x-mixed-replace responses, `Content-Disposition: attachme ...
ALT-PU-2024-15092
ALT-PU-2024-15092: package `firefox-esr` update to version 128.4.0-alt1
ALT-PU-2024-15091
ALT-PU-2024-15091: package `thunderbird` update to version 128.4.0-alt1
ALT-PU-2024-15089
ALT-PU-2024-15089: package `firefox` update to version 132.0.0-alt1
GHSA-679j-4q32-w85w
In multipart/x-mixed-replace responses, `Content-Disposition: attachment` in the response header was not respected and did not force a download, which could allow XSS attacks. This vulnerability affects Firefox < 132, Firefox ESR < 128.4, Thunderbird < 128.4, and Thunderbird < 132.
ALT-PU-2024-15841
ALT-PU-2024-15841: package `thunderbird` update to version 128.4.2-alt0.p10.1
SUSE-SU-2024:3899-1
Security update for MozillaFirefox
SUSE-SU-2024:3898-1
Security update for MozillaFirefox
RLSA-2024:8793
Moderate: thunderbird security update
RLSA-2024:8790
Moderate: thunderbird security update
RLSA-2024:8729
Moderate: firefox security update
RLSA-2024:8726
Moderate: firefox security update
ELSA-2024-8793
ELSA-2024-8793: thunderbird security update (MODERATE)
ELSA-2024-8790
ELSA-2024-8790: thunderbird security update (MODERATE)
ELSA-2024-8729
ELSA-2024-8729: firefox security update (MODERATE)
ELSA-2024-8727
ELSA-2024-8727: firefox security update (MODERATE)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2025-00966 Уязвимость веб-браузеров Firefox и Firefox ESR, почтового клиента Thunderbird, связанная с непринятием мер по защите структуры веб-страницы, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации | CVSS3: 6.1 | 1% Низкий | около 2 лет назад |
 | CVE-2024-10461 In multipart/x-mixed-replace responses, `Content-Disposition: attachment` in the response header was not respected and did not force a download, which could allow XSS attacks. This vulnerability affects Firefox < 132, Firefox ESR < 128.4, Thunderbird < 128.4, and Thunderbird < 132. | CVSS3: 6.1 | 1% Низкий | около 2 лет назад |
 | CVE-2024-10461 In multipart/x-mixed-replace responses, `Content-Disposition: attachment` in the response header was not respected and did not force a download, which could allow XSS attacks. This vulnerability affects Firefox < 132, Firefox ESR < 128.4, Thunderbird < 128.4, and Thunderbird < 132. | CVSS3: 6.1 | 1% Низкий | около 2 лет назад |
 | CVE-2024-10461 In multipart/x-mixed-replace responses, `Content-Disposition: attachment` in the response header was not respected and did not force a download, which could allow XSS attacks. This vulnerability affects Firefox < 132, Firefox ESR < 128.4, Thunderbird < 128.4, and Thunderbird < 132. | CVSS3: 6.1 | 1% Низкий | около 2 лет назад |
| CVE-2024-10461 In multipart/x-mixed-replace responses, `Content-Disposition: attachme ... | CVSS3: 6.1 | 1% Низкий | около 2 лет назад |
| ALT-PU-2024-15092 ALT-PU-2024-15092: package `firefox-esr` update to version 128.4.0-alt1 | CVSS3: 9.8 | около 2 лет назад | |
| ALT-PU-2024-15091 ALT-PU-2024-15091: package `thunderbird` update to version 128.4.0-alt1 | CVSS3: 9.8 | около 2 лет назад | |
| ALT-PU-2024-15089 ALT-PU-2024-15089: package `firefox` update to version 132.0.0-alt1 | CVSS3: 9.8 | около 2 лет назад | |
| GHSA-679j-4q32-w85w In multipart/x-mixed-replace responses, `Content-Disposition: attachment` in the response header was not respected and did not force a download, which could allow XSS attacks. This vulnerability affects Firefox < 132, Firefox ESR < 128.4, Thunderbird < 128.4, and Thunderbird < 132. | CVSS3: 6.1 | 1% Низкий | около 2 лет назад |
| ALT-PU-2024-15841 ALT-PU-2024-15841: package `thunderbird` update to version 128.4.2-alt0.p10.1 | CVSS3: 9.8 | почти 2 года назад | |
 | SUSE-SU-2024:3899-1 Security update for MozillaFirefox | около 2 лет назад | ||
| SUSE-SU-2024:3898-1 Security update for MozillaFirefox | около 2 лет назад | ||
 | RLSA-2024:8793 Moderate: thunderbird security update | около 2 лет назад | ||
| RLSA-2024:8790 Moderate: thunderbird security update | около 2 лет назад | ||
| RLSA-2024:8729 Moderate: firefox security update | около 2 лет назад | ||
| RLSA-2024:8726 Moderate: firefox security update | около 2 лет назад | ||
| ELSA-2024-8793 ELSA-2024-8793: thunderbird security update (MODERATE) | около 2 лет назад | ||
| ELSA-2024-8790 ELSA-2024-8790: thunderbird security update (MODERATE) | около 2 лет назад | ||
| ELSA-2024-8729 ELSA-2024-8729: firefox security update (MODERATE) | около 2 лет назад | ||
| ELSA-2024-8727 ELSA-2024-8727: firefox security update (MODERATE) | около 2 лет назад |
Уязвимостей на страницу