Поиск уязвимостей
Количество 16
Количество 16
BDU:2025-06221
Уязвимость функции Copy as cURL браузеров Mozilla Firefox, Firefox ESR и почтового клиента Thunderbird операционных систем Windows, позволяющая нарушителю выполнить произвольный код
CVE-2025-5265
Due to insufficient escaping of the ampersand character in the “Copy as cURL” feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system. *This bug only affects Firefox for Windows. Other versions of Firefox are unaffected.*. This vulnerability was fixed in Firefox 139, Firefox ESR 115.24, Firefox ESR 128.11, Thunderbird 139, and Thunderbird 128.11.
CVE-2025-5265
Due to insufficient escaping of the ampersand character in the “Copy as cURL” feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system. *This bug only affects Firefox for Windows. Other versions of Firefox are unaffected.*. This vulnerability was fixed in Firefox 139, Firefox ESR 115.24, Firefox ESR 128.11, Thunderbird 139, and Thunderbird 128.11.
CVE-2025-5265
Due to insufficient escaping of the ampersand character in the “Copy as cURL” feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system. *This bug only affects Firefox for Windows. Other versions of Firefox are unaffected.*. This vulnerability was fixed in Firefox 139, Firefox ESR 115.24, Firefox ESR 128.11, Thunderbird 139, and Thunderbird 128.11.
CVE-2025-5265
Due to insufficient escaping of the ampersand character in the \u201cC ...
ALT-PU-2025-8611
ALT-PU-2025-8611: package `thunderbird` update to version 139.0.2-alt1
GHSA-fjj5-r59g-88g7
Due to insufficient escaping of the ampersand character in the “Copy as cURL” feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system. *This bug only affects Firefox for Windows. Other versions of Firefox are unaffected.* This vulnerability affects Firefox < 139, Firefox ESR < 115.24, and Firefox ESR < 128.11.
ALT-PU-2025-8725
ALT-PU-2025-8725: package `firefox` update to version 140.0.2-alt1
ALT-PU-2025-11497
ALT-PU-2025-11497: package `firefox` update to version 141.0.2-alt0.p10.1
ALT-PU-2025-11495
ALT-PU-2025-11495: package `thunderbird` update to version 141.0-alt0.p10.1
SUSE-SU-2025:01814-1
Security update for MozillaFirefox
SUSE-SU-2025:01769-1
Security update for MozillaFirefox
SUSE-SU-2025:01946-1
Security update for MozillaThunderbird
ALT-PU-2025-11100
ALT-PU-2025-11100: package `firefox-esr` update to version 140.2.0-alt2
ALT-PU-2025-14599
ALT-PU-2025-14599: package `firefox-esr` update to version 140.4.0-alt0.p10.1
openSUSE-SU-2025:20135-1
Security update for mozjs128
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2025-06221 Уязвимость функции Copy as cURL браузеров Mozilla Firefox, Firefox ESR и почтового клиента Thunderbird операционных систем Windows, позволяющая нарушителю выполнить произвольный код | CVSS3: 4.8 | 0% Низкий | больше 1 года назад |
 | CVE-2025-5265 Due to insufficient escaping of the ampersand character in the “Copy as cURL” feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system. *This bug only affects Firefox for Windows. Other versions of Firefox are unaffected.*. This vulnerability was fixed in Firefox 139, Firefox ESR 115.24, Firefox ESR 128.11, Thunderbird 139, and Thunderbird 128.11. | CVSS3: 4.8 | 0% Низкий | больше 1 года назад |
 | CVE-2025-5265 Due to insufficient escaping of the ampersand character in the “Copy as cURL” feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system. *This bug only affects Firefox for Windows. Other versions of Firefox are unaffected.*. This vulnerability was fixed in Firefox 139, Firefox ESR 115.24, Firefox ESR 128.11, Thunderbird 139, and Thunderbird 128.11. | CVSS3: 6.1 | 0% Низкий | больше 1 года назад |
 | CVE-2025-5265 Due to insufficient escaping of the ampersand character in the “Copy as cURL” feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system. *This bug only affects Firefox for Windows. Other versions of Firefox are unaffected.*. This vulnerability was fixed in Firefox 139, Firefox ESR 115.24, Firefox ESR 128.11, Thunderbird 139, and Thunderbird 128.11. | CVSS3: 4.8 | 0% Низкий | больше 1 года назад |
| CVE-2025-5265 Due to insufficient escaping of the ampersand character in the \u201cC ... | CVSS3: 4.8 | 0% Низкий | больше 1 года назад |
| ALT-PU-2025-8611 ALT-PU-2025-8611: package `thunderbird` update to version 139.0.2-alt1 | CVSS3: 9.8 | больше 1 года назад | |
| GHSA-fjj5-r59g-88g7 Due to insufficient escaping of the ampersand character in the “Copy as cURL” feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system. *This bug only affects Firefox for Windows. Other versions of Firefox are unaffected.* This vulnerability affects Firefox < 139, Firefox ESR < 115.24, and Firefox ESR < 128.11. | CVSS3: 4.8 | 0% Низкий | больше 1 года назад |
| ALT-PU-2025-8725 ALT-PU-2025-8725: package `firefox` update to version 140.0.2-alt1 | CVSS3: 9.8 | больше 1 года назад | |
| ALT-PU-2025-11497 ALT-PU-2025-11497: package `firefox` update to version 141.0.2-alt0.p10.1 | CVSS3: 9.8 | около 1 года назад | |
| ALT-PU-2025-11495 ALT-PU-2025-11495: package `thunderbird` update to version 141.0-alt0.p10.1 | CVSS3: 9.8 | около 1 года назад | |
 | SUSE-SU-2025:01814-1 Security update for MozillaFirefox | больше 1 года назад | ||
| SUSE-SU-2025:01769-1 Security update for MozillaFirefox | больше 1 года назад | ||
| SUSE-SU-2025:01946-1 Security update for MozillaThunderbird | больше 1 года назад | ||
| ALT-PU-2025-11100 ALT-PU-2025-11100: package `firefox-esr` update to version 140.2.0-alt2 | CVSS3: 9.8 | около 1 года назад | |
| ALT-PU-2025-14599 ALT-PU-2025-14599: package `firefox-esr` update to version 140.4.0-alt0.p10.1 | CVSS3: 9.8 | 12 месяцев назад | |
| openSUSE-SU-2025:20135-1 Security update for mozjs128 | 11 месяцев назад |
Уязвимостей на страницу