Поиск уязвимостей
Количество 15
Количество 15
GHSA-2cx8-vq8f-mwm5
A vulnerability was discovered where specific command line arguments are not properly discarded during Firefox invocation as a shell handler for URLs. This could be used to retrieve and execute files whose location is supplied through these command line arguments if Firefox is configured as the default URI handler for a given URI scheme in third party applications and these applications insufficiently sanitize URL data. *Note: This issue only affects Windows operating systems. Other operating systems are unaffected.*. This vulnerability affects Thunderbird < 60.6, Firefox ESR < 60.6, and Firefox < 66.
CVE-2019-9794
A vulnerability was discovered where specific command line arguments are not properly discarded during Firefox invocation as a shell handler for URLs. This could be used to retrieve and execute files whose location is supplied through these command line arguments if Firefox is configured as the default URI handler for a given URI scheme in third party applications and these applications insufficiently sanitize URL data. *Note: This issue only affects Windows operating systems. Other operating systems are unaffected.*. This vulnerability affects Thunderbird < 60.6, Firefox ESR < 60.6, and Firefox < 66.
CVE-2019-9794
A vulnerability was discovered where specific command line arguments are not properly discarded during Firefox invocation as a shell handler for URLs. This could be used to retrieve and execute files whose location is supplied through these command line arguments if Firefox is configured as the default URI handler for a given URI scheme in third party applications and these applications insufficiently sanitize URL data. *Note: This issue only affects Windows operating systems. Other operating systems are unaffected.*. This vulnerability affects Thunderbird < 60.6, Firefox ESR < 60.6, and Firefox < 66.
CVE-2019-9794
A vulnerability was discovered where specific command line arguments are not properly discarded during Firefox invocation as a shell handler for URLs. This could be used to retrieve and execute files whose location is supplied through these command line arguments if Firefox is configured as the default URI handler for a given URI scheme in third party applications and these applications insufficiently sanitize URL data. *Note: This issue only affects Windows operating systems. Other operating systems are unaffected.*. This vulnerability affects Thunderbird < 60.6, Firefox ESR < 60.6, and Firefox < 66.
CVE-2019-9794
A vulnerability was discovered where specific command line arguments a ...
BDU:2020-00727
Уязвимость веб-браузеров Firefox, Firefox ESR и почтового клиента Thunderbird, связанная с недостаточной проверкой вводимых данных, позволяющая нарушителю получить несанкционированный доступ к информации и нарушить ее целостность и доступность
openSUSE-SU-2019:1077-1
Security update for MozillaFirefox
openSUSE-SU-2019:1056-1
Security update for MozillaFirefox
SUSE-SU-2019:0871-1
Security update for MozillaFirefox
SUSE-SU-2019:0852-1
Security update for MozillaFirefox
openSUSE-SU-2019:1162-1
Security update for MozillaThunderbird
SUSE-SU-2019:0853-1
Security update for MozillaThunderbird
ALT-PU-2019-1497
ALT-PU-2019-1497: package `thunderbird` update to version 60.6.0-alt1
ALT-PU-2019-1486
ALT-PU-2019-1486: package `firefox-esr` update to version 60.6.0-alt1
ALT-PU-2019-1561
ALT-PU-2019-1561: package `firefox` update to version 66.0.1-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-2cx8-vq8f-mwm5 A vulnerability was discovered where specific command line arguments are not properly discarded during Firefox invocation as a shell handler for URLs. This could be used to retrieve and execute files whose location is supplied through these command line arguments if Firefox is configured as the default URI handler for a given URI scheme in third party applications and these applications insufficiently sanitize URL data. *Note: This issue only affects Windows operating systems. Other operating systems are unaffected.*. This vulnerability affects Thunderbird < 60.6, Firefox ESR < 60.6, and Firefox < 66. | CVSS3: 9.8 | 2% Низкий | больше 4 лет назад |
 | CVE-2019-9794 A vulnerability was discovered where specific command line arguments are not properly discarded during Firefox invocation as a shell handler for URLs. This could be used to retrieve and execute files whose location is supplied through these command line arguments if Firefox is configured as the default URI handler for a given URI scheme in third party applications and these applications insufficiently sanitize URL data. *Note: This issue only affects Windows operating systems. Other operating systems are unaffected.*. This vulnerability affects Thunderbird < 60.6, Firefox ESR < 60.6, and Firefox < 66. | CVSS3: 9.8 | 2% Низкий | больше 7 лет назад |
 | CVE-2019-9794 A vulnerability was discovered where specific command line arguments are not properly discarded during Firefox invocation as a shell handler for URLs. This could be used to retrieve and execute files whose location is supplied through these command line arguments if Firefox is configured as the default URI handler for a given URI scheme in third party applications and these applications insufficiently sanitize URL data. *Note: This issue only affects Windows operating systems. Other operating systems are unaffected.*. This vulnerability affects Thunderbird < 60.6, Firefox ESR < 60.6, and Firefox < 66. | CVSS3: 9.8 | 2% Низкий | больше 7 лет назад |
 | CVE-2019-9794 A vulnerability was discovered where specific command line arguments are not properly discarded during Firefox invocation as a shell handler for URLs. This could be used to retrieve and execute files whose location is supplied through these command line arguments if Firefox is configured as the default URI handler for a given URI scheme in third party applications and these applications insufficiently sanitize URL data. *Note: This issue only affects Windows operating systems. Other operating systems are unaffected.*. This vulnerability affects Thunderbird < 60.6, Firefox ESR < 60.6, and Firefox < 66. | CVSS3: 9.8 | 2% Низкий | больше 7 лет назад |
| CVE-2019-9794 A vulnerability was discovered where specific command line arguments a ... | CVSS3: 9.8 | 2% Низкий | больше 7 лет назад |
 | BDU:2020-00727 Уязвимость веб-браузеров Firefox, Firefox ESR и почтового клиента Thunderbird, связанная с недостаточной проверкой вводимых данных, позволяющая нарушителю получить несанкционированный доступ к информации и нарушить ее целостность и доступность | CVSS3: 9.8 | 2% Низкий | больше 7 лет назад |
 | openSUSE-SU-2019:1077-1 Security update for MozillaFirefox | больше 7 лет назад | ||
| openSUSE-SU-2019:1056-1 Security update for MozillaFirefox | больше 7 лет назад | ||
| SUSE-SU-2019:0871-1 Security update for MozillaFirefox | больше 7 лет назад | ||
| SUSE-SU-2019:0852-1 Security update for MozillaFirefox | больше 7 лет назад | ||
| openSUSE-SU-2019:1162-1 Security update for MozillaThunderbird | больше 7 лет назад | ||
| SUSE-SU-2019:0853-1 Security update for MozillaThunderbird | больше 7 лет назад | ||
| ALT-PU-2019-1497 ALT-PU-2019-1497: package `thunderbird` update to version 60.6.0-alt1 | CVSS3: 9.8 | больше 7 лет назад | |
| ALT-PU-2019-1486 ALT-PU-2019-1486: package `firefox-esr` update to version 60.6.0-alt1 | CVSS3: 9.8 | больше 7 лет назад | |
| ALT-PU-2019-1561 ALT-PU-2019-1561: package `firefox` update to version 66.0.1-alt1 | CVSS3: 9.8 | больше 7 лет назад |
Уязвимостей на страницу