Поиск уязвимостей
Количество 31
Количество 31
BDU:2025-13292
Уязвимость браузеров Mozilla Firefox, Firefox ESR и почтового клиента Thunderbird, связанная с некорректным кодированием или сокрытием выходных данных, позволяющая нарушителю проводить межсайтовые сценарные атаки (XSS)
CVE-2025-11712
A malicious page could have used the type attribute of an OBJECT tag to override the default browser behavior when encountering a web resource served without a content-type. This could have contributed to an XSS on a site that unsafely serves files without a content-type header. This vulnerability was fixed in Firefox 144, Firefox ESR 140.4, Thunderbird 144, and Thunderbird 140.4.
CVE-2025-11712
A malicious page could have used the type attribute of an OBJECT tag to override the default browser behavior when encountering a web resource served without a content-type. This could have contributed to an XSS on a site that unsafely serves files without a content-type header. This vulnerability was fixed in Firefox 144, Firefox ESR 140.4, Thunderbird 144, and Thunderbird 140.4.
CVE-2025-11712
A malicious page could have used the type attribute of an OBJECT tag to override the default browser behavior when encountering a web resource served without a content-type. This could have contributed to an XSS on a site that unsafely serves files without a content-type header. This vulnerability was fixed in Firefox 144, Firefox ESR 140.4, Thunderbird 144, and Thunderbird 140.4.
CVE-2025-11712
A malicious page could have used the type attribute of an OBJECT tag t ...
ALT-PU-2025-13478
ALT-PU-2025-13478: package `thunderbird` update to version 144.0.1-alt1
ALT-PU-2025-13476
ALT-PU-2025-13476: package `firefox` update to version 144.0-alt1
ALT-PU-2025-13161
ALT-PU-2025-13161: package `firefox-esr` update to version 140.4.0-alt1
GHSA-rf6g-cf9f-g4v7
A malicious page could have used the type attribute of an OBJECT tag to override the default browser behavior when encountering a web resource served without a content-type. This could have contributed to an XSS on a site that unsafely serves files without a content-type header. This vulnerability affects Firefox < 144, Firefox ESR < 140.4, Thunderbird < 144, and Thunderbird < 140.4.
ALT-PU-2025-16200
ALT-PU-2025-16200: package `thunderbird` update to version 145.0-alt0.p10.1
RLSA-2025:18983
Important: thunderbird security update
RLSA-2025:18321
Important: thunderbird security update
RLSA-2025:18320
Important: thunderbird security update
RLSA-2025:18285
Important: firefox security update
RLSA-2025:18155
Important: firefox security update
RLSA-2025:18154
Important: firefox security update
ELSA-2025-19278
ELSA-2025-19278: firefox security update (IMPORTANT)
ELSA-2025-18983
ELSA-2025-18983: thunderbird security update (IMPORTANT)
ELSA-2025-18321
ELSA-2025-18321: thunderbird security update (IMPORTANT)
ELSA-2025-18320
ELSA-2025-18320: thunderbird security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2025-13292 Уязвимость браузеров Mozilla Firefox, Firefox ESR и почтового клиента Thunderbird, связанная с некорректным кодированием или сокрытием выходных данных, позволяющая нарушителю проводить межсайтовые сценарные атаки (XSS) | CVSS3: 6.1 | 0% Низкий | около 1 года назад |
 | CVE-2025-11712 A malicious page could have used the type attribute of an OBJECT tag to override the default browser behavior when encountering a web resource served without a content-type. This could have contributed to an XSS on a site that unsafely serves files without a content-type header. This vulnerability was fixed in Firefox 144, Firefox ESR 140.4, Thunderbird 144, and Thunderbird 140.4. | CVSS3: 6.1 | 0% Низкий | около 1 года назад |
 | CVE-2025-11712 A malicious page could have used the type attribute of an OBJECT tag to override the default browser behavior when encountering a web resource served without a content-type. This could have contributed to an XSS on a site that unsafely serves files without a content-type header. This vulnerability was fixed in Firefox 144, Firefox ESR 140.4, Thunderbird 144, and Thunderbird 140.4. | CVSS3: 6.1 | 0% Низкий | около 1 года назад |
 | CVE-2025-11712 A malicious page could have used the type attribute of an OBJECT tag to override the default browser behavior when encountering a web resource served without a content-type. This could have contributed to an XSS on a site that unsafely serves files without a content-type header. This vulnerability was fixed in Firefox 144, Firefox ESR 140.4, Thunderbird 144, and Thunderbird 140.4. | CVSS3: 6.1 | 0% Низкий | около 1 года назад |
| CVE-2025-11712 A malicious page could have used the type attribute of an OBJECT tag t ... | CVSS3: 6.1 | 0% Низкий | около 1 года назад |
| ALT-PU-2025-13478 ALT-PU-2025-13478: package `thunderbird` update to version 144.0.1-alt1 | CVSS3: 9.8 | 12 месяцев назад | |
| ALT-PU-2025-13476 ALT-PU-2025-13476: package `firefox` update to version 144.0-alt1 | CVSS3: 9.8 | около 1 года назад | |
| ALT-PU-2025-13161 ALT-PU-2025-13161: package `firefox-esr` update to version 140.4.0-alt1 | CVSS3: 9.8 | около 1 года назад | |
| GHSA-rf6g-cf9f-g4v7 A malicious page could have used the type attribute of an OBJECT tag to override the default browser behavior when encountering a web resource served without a content-type. This could have contributed to an XSS on a site that unsafely serves files without a content-type header. This vulnerability affects Firefox < 144, Firefox ESR < 140.4, Thunderbird < 144, and Thunderbird < 140.4. | CVSS3: 6.1 | 0% Низкий | около 1 года назад |
| ALT-PU-2025-16200 ALT-PU-2025-16200: package `thunderbird` update to version 145.0-alt0.p10.1 | CVSS3: 9.8 | 10 месяцев назад | |
 | RLSA-2025:18983 Important: thunderbird security update | около 1 года назад | ||
| RLSA-2025:18321 Important: thunderbird security update | около 1 года назад | ||
| RLSA-2025:18320 Important: thunderbird security update | около 1 года назад | ||
| RLSA-2025:18285 Important: firefox security update | 9 месяцев назад | ||
| RLSA-2025:18155 Important: firefox security update | около 1 года назад | ||
| RLSA-2025:18154 Important: firefox security update | около 1 года назад | ||
| ELSA-2025-19278 ELSA-2025-19278: firefox security update (IMPORTANT) | 11 месяцев назад | ||
| ELSA-2025-18983 ELSA-2025-18983: thunderbird security update (IMPORTANT) | около 1 года назад | ||
| ELSA-2025-18321 ELSA-2025-18321: thunderbird security update (IMPORTANT) | около 1 года назад | ||
| ELSA-2025-18320 ELSA-2025-18320: thunderbird security update (IMPORTANT) | около 1 года назад |
Уязвимостей на страницу