Поиск уязвимостей
Количество 30
Количество 30
BDU:2025-06222
Уязвимость функции Copy as cURL браузеров Mozilla Firefox, Firefox ESR и почтового клиента Thunderbird, позволяющая нарушителю выполнить произвольный код
CVE-2025-5264
Due to insufficient escaping of the newline character in the “Copy as cURL” feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system. This vulnerability was fixed in Firefox 139, Firefox ESR 115.24, Firefox ESR 128.11, Thunderbird 139, and Thunderbird 128.11.
CVE-2025-5264
Due to insufficient escaping of the newline character in the “Copy as cURL” feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system. This vulnerability was fixed in Firefox 139, Firefox ESR 115.24, Firefox ESR 128.11, Thunderbird 139, and Thunderbird 128.11.
CVE-2025-5264
Due to insufficient escaping of the newline character in the “Copy as cURL” feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system. This vulnerability was fixed in Firefox 139, Firefox ESR 115.24, Firefox ESR 128.11, Thunderbird 139, and Thunderbird 128.11.
CVE-2025-5264
Due to insufficient escaping of the newline character in the \u201cCop ...
ALT-PU-2025-8611
ALT-PU-2025-8611: package `thunderbird` update to version 139.0.2-alt1
GHSA-7rph-qq97-wqp5
Due to insufficient escaping of the newline character in the “Copy as cURL” feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system. This vulnerability affects Firefox < 139, Firefox ESR < 115.24, and Firefox ESR < 128.11.
ALT-PU-2025-8725
ALT-PU-2025-8725: package `firefox` update to version 140.0.2-alt1
ALT-PU-2025-11497
ALT-PU-2025-11497: package `firefox` update to version 141.0.2-alt0.p10.1
ROS-20250616-08
Множественные уязвимости firefox
ALT-PU-2025-11495
ALT-PU-2025-11495: package `thunderbird` update to version 141.0-alt0.p10.1
ELSA-2025-8308
ELSA-2025-8308: firefox security update (IMPORTANT)
ELSA-2025-8293
ELSA-2025-8293: firefox security update (IMPORTANT)
SUSE-SU-2025:01814-1
Security update for MozillaFirefox
SUSE-SU-2025:01769-1
Security update for MozillaFirefox
RLSA-2025:8341
Important: firefox security update
RLSA-2025:8308
Important: firefox security update
RLSA-2025:8293
Important: firefox security update
ELSA-2025-9074
ELSA-2025-9074: firefox security update (IMPORTANT)
ELSA-2025-8341
ELSA-2025-8341: firefox security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
BDU:2025-06222 Уязвимость функции Copy as cURL браузеров Mozilla Firefox, Firefox ESR и почтового клиента Thunderbird, позволяющая нарушителю выполнить произвольный код | CVSS3: 4.8 | 0% Низкий | больше 1 года назад | |
CVE-2025-5264 Due to insufficient escaping of the newline character in the “Copy as cURL” feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system. This vulnerability was fixed in Firefox 139, Firefox ESR 115.24, Firefox ESR 128.11, Thunderbird 139, and Thunderbird 128.11. | CVSS3: 4.8 | 0% Низкий | больше 1 года назад | |
CVE-2025-5264 Due to insufficient escaping of the newline character in the “Copy as cURL” feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system. This vulnerability was fixed in Firefox 139, Firefox ESR 115.24, Firefox ESR 128.11, Thunderbird 139, and Thunderbird 128.11. | CVSS3: 6.1 | 0% Низкий | больше 1 года назад | |
CVE-2025-5264 Due to insufficient escaping of the newline character in the “Copy as cURL” feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system. This vulnerability was fixed in Firefox 139, Firefox ESR 115.24, Firefox ESR 128.11, Thunderbird 139, and Thunderbird 128.11. | CVSS3: 4.8 | 0% Низкий | больше 1 года назад | |
CVE-2025-5264 Due to insufficient escaping of the newline character in the \u201cCop ... | CVSS3: 4.8 | 0% Низкий | больше 1 года назад | |
ALT-PU-2025-8611 ALT-PU-2025-8611: package `thunderbird` update to version 139.0.2-alt1 | CVSS3: 9.8 | больше 1 года назад | ||
GHSA-7rph-qq97-wqp5 Due to insufficient escaping of the newline character in the “Copy as cURL” feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system. This vulnerability affects Firefox < 139, Firefox ESR < 115.24, and Firefox ESR < 128.11. | CVSS3: 4.8 | 0% Низкий | больше 1 года назад | |
ALT-PU-2025-8725 ALT-PU-2025-8725: package `firefox` update to version 140.0.2-alt1 | CVSS3: 9.8 | больше 1 года назад | ||
ALT-PU-2025-11497 ALT-PU-2025-11497: package `firefox` update to version 141.0.2-alt0.p10.1 | CVSS3: 9.8 | около 1 года назад | ||
ROS-20250616-08 Множественные уязвимости firefox | CVSS3: 9.1 | больше 1 года назад | ||
ALT-PU-2025-11495 ALT-PU-2025-11495: package `thunderbird` update to version 141.0-alt0.p10.1 | CVSS3: 9.8 | около 1 года назад | ||
ELSA-2025-8308 ELSA-2025-8308: firefox security update (IMPORTANT) | больше 1 года назад | |||
ELSA-2025-8293 ELSA-2025-8293: firefox security update (IMPORTANT) | больше 1 года назад | |||
SUSE-SU-2025:01814-1 Security update for MozillaFirefox | больше 1 года назад | |||
SUSE-SU-2025:01769-1 Security update for MozillaFirefox | больше 1 года назад | |||
RLSA-2025:8341 Important: firefox security update | около 1 года назад | |||
RLSA-2025:8308 Important: firefox security update | больше 1 года назад | |||
RLSA-2025:8293 Important: firefox security update | около 1 года назад | |||
ELSA-2025-9074 ELSA-2025-9074: firefox security update (IMPORTANT) | больше 1 года назад | |||
ELSA-2025-8341 ELSA-2025-8341: firefox security update (IMPORTANT) | больше 1 года назад |
Уязвимостей на страницу