Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Поиск уязвимостей

Количество 20

Количество 20

github логотип

GHSA-4gc3-hqxg-hgp9

больше 4 лет назад

When proxy auto-detection is enabled, if a web server serves a Proxy Auto-Configuration (PAC) file or if a PAC file is loaded locally, this PAC file can specify that requests to the localhost are to be sent through the proxy to another server. This behavior is disallowed by default when a proxy is manually configured, but when enabled could allow for attacks on services and tools that bind to the localhost for networked behavior if they are accessed through browsing. This vulnerability affects Firefox < 65.

CVSS3: 5.9
EPSS: Низкий
ubuntu логотип

CVE-2018-18506

почти 8 лет назад

When proxy auto-detection is enabled, if a web server serves a Proxy Auto-Configuration (PAC) file or if a PAC file is loaded locally, this PAC file can specify that requests to the localhost are to be sent through the proxy to another server. This behavior is disallowed by default when a proxy is manually configured, but when enabled could allow for attacks on services and tools that bind to the localhost for networked behavior if they are accessed through browsing. This vulnerability affects Firefox < 65.

CVSS3: 5.9
EPSS: Низкий
redhat логотип

CVE-2018-18506

больше 7 лет назад

When proxy auto-detection is enabled, if a web server serves a Proxy Auto-Configuration (PAC) file or if a PAC file is loaded locally, this PAC file can specify that requests to the localhost are to be sent through the proxy to another server. This behavior is disallowed by default when a proxy is manually configured, but when enabled could allow for attacks on services and tools that bind to the localhost for networked behavior if they are accessed through browsing. This vulnerability affects Firefox < 65.

CVSS3: 6.1
EPSS: Низкий
nvd логотип

CVE-2018-18506

почти 8 лет назад

When proxy auto-detection is enabled, if a web server serves a Proxy Auto-Configuration (PAC) file or if a PAC file is loaded locally, this PAC file can specify that requests to the localhost are to be sent through the proxy to another server. This behavior is disallowed by default when a proxy is manually configured, but when enabled could allow for attacks on services and tools that bind to the localhost for networked behavior if they are accessed through browsing. This vulnerability affects Firefox < 65.

CVSS3: 5.9
EPSS: Низкий
debian логотип

CVE-2018-18506

почти 8 лет назад

When proxy auto-detection is enabled, if a web server serves a Proxy A ...

CVSS3: 5.9
EPSS: Низкий
fstec логотип

BDU:2019-00681

почти 8 лет назад

Уязвимость компонента Proxy Auto-Config браузера Firefox, позволяющая нарушителю обойти существующие ограничения безопасности и произвести атаки на службы и инструменты, привязанные к локальному хосту

CVSS3: 8.8
EPSS: Низкий
oracle-oval логотип

ELSA-2019-0623

больше 7 лет назад

ELSA-2019-0623: firefox security update (CRITICAL)

EPSS: Низкий
oracle-oval логотип

ELSA-2019-0622

больше 7 лет назад

ELSA-2019-0622: firefox security update (CRITICAL)

EPSS: Низкий
oracle-oval логотип

ELSA-2019-1144

больше 7 лет назад

ELSA-2019-1144: thunderbird security update (IMPORTANT)

EPSS: Низкий
oracle-oval логотип

ELSA-2019-0966

больше 7 лет назад

ELSA-2019-0966: firefox security update (CRITICAL)

EPSS: Низкий
oracle-oval логотип

ELSA-2019-0681

больше 7 лет назад

ELSA-2019-0681: thunderbird security update (IMPORTANT)

EPSS: Низкий
oracle-oval логотип

ELSA-2019-0680

больше 7 лет назад

ELSA-2019-0680: thunderbird security update (IMPORTANT)

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2019:1077-1

больше 7 лет назад

Security update for MozillaFirefox

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2019:1056-1

больше 7 лет назад

Security update for MozillaFirefox

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2019:0871-1

больше 7 лет назад

Security update for MozillaFirefox

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2019:0852-1

больше 7 лет назад

Security update for MozillaFirefox

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2019:1162-1

больше 7 лет назад

Security update for MozillaThunderbird

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2019:0853-1

больше 7 лет назад

Security update for MozillaThunderbird

EPSS: Низкий
altlinux логотип

ALT-PU-2019-1173

почти 8 лет назад

ALT-PU-2019-1173: package `firefox` update to version 65.0-alt1

CVSS3: 10
EPSS: Низкий
altlinux логотип

ALT-PU-2019-1486

больше 7 лет назад

ALT-PU-2019-1486: package `firefox-esr` update to version 60.6.0-alt1

CVSS3: 9.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
github логотип
GHSA-4gc3-hqxg-hgp9

When proxy auto-detection is enabled, if a web server serves a Proxy Auto-Configuration (PAC) file or if a PAC file is loaded locally, this PAC file can specify that requests to the localhost are to be sent through the proxy to another server. This behavior is disallowed by default when a proxy is manually configured, but when enabled could allow for attacks on services and tools that bind to the localhost for networked behavior if they are accessed through browsing. This vulnerability affects Firefox < 65.

CVSS3: 5.9
2%
Низкий
больше 4 лет назад
ubuntu логотип
CVE-2018-18506

When proxy auto-detection is enabled, if a web server serves a Proxy Auto-Configuration (PAC) file or if a PAC file is loaded locally, this PAC file can specify that requests to the localhost are to be sent through the proxy to another server. This behavior is disallowed by default when a proxy is manually configured, but when enabled could allow for attacks on services and tools that bind to the localhost for networked behavior if they are accessed through browsing. This vulnerability affects Firefox < 65.

CVSS3: 5.9
2%
Низкий
почти 8 лет назад
redhat логотип
CVE-2018-18506

When proxy auto-detection is enabled, if a web server serves a Proxy Auto-Configuration (PAC) file or if a PAC file is loaded locally, this PAC file can specify that requests to the localhost are to be sent through the proxy to another server. This behavior is disallowed by default when a proxy is manually configured, but when enabled could allow for attacks on services and tools that bind to the localhost for networked behavior if they are accessed through browsing. This vulnerability affects Firefox < 65.

CVSS3: 6.1
2%
Низкий
больше 7 лет назад
nvd логотип
CVE-2018-18506

When proxy auto-detection is enabled, if a web server serves a Proxy Auto-Configuration (PAC) file or if a PAC file is loaded locally, this PAC file can specify that requests to the localhost are to be sent through the proxy to another server. This behavior is disallowed by default when a proxy is manually configured, but when enabled could allow for attacks on services and tools that bind to the localhost for networked behavior if they are accessed through browsing. This vulnerability affects Firefox < 65.

CVSS3: 5.9
2%
Низкий
почти 8 лет назад
debian логотип
CVE-2018-18506

When proxy auto-detection is enabled, if a web server serves a Proxy A ...

CVSS3: 5.9
2%
Низкий
почти 8 лет назад
fstec логотип
BDU:2019-00681

Уязвимость компонента Proxy Auto-Config браузера Firefox, позволяющая нарушителю обойти существующие ограничения безопасности и произвести атаки на службы и инструменты, привязанные к локальному хосту

CVSS3: 8.8
2%
Низкий
почти 8 лет назад
oracle-oval логотип
ELSA-2019-0623

ELSA-2019-0623: firefox security update (CRITICAL)

больше 7 лет назад
oracle-oval логотип
ELSA-2019-0622

ELSA-2019-0622: firefox security update (CRITICAL)

больше 7 лет назад
oracle-oval логотип
ELSA-2019-1144

ELSA-2019-1144: thunderbird security update (IMPORTANT)

больше 7 лет назад
oracle-oval логотип
ELSA-2019-0966

ELSA-2019-0966: firefox security update (CRITICAL)

больше 7 лет назад
oracle-oval логотип
ELSA-2019-0681

ELSA-2019-0681: thunderbird security update (IMPORTANT)

больше 7 лет назад
oracle-oval логотип
ELSA-2019-0680

ELSA-2019-0680: thunderbird security update (IMPORTANT)

больше 7 лет назад
suse-cvrf логотип
openSUSE-SU-2019:1077-1

Security update for MozillaFirefox

больше 7 лет назад
suse-cvrf логотип
openSUSE-SU-2019:1056-1

Security update for MozillaFirefox

больше 7 лет назад
suse-cvrf логотип
SUSE-SU-2019:0871-1

Security update for MozillaFirefox

больше 7 лет назад
suse-cvrf логотип
SUSE-SU-2019:0852-1

Security update for MozillaFirefox

больше 7 лет назад
suse-cvrf логотип
openSUSE-SU-2019:1162-1

Security update for MozillaThunderbird

больше 7 лет назад
suse-cvrf логотип
SUSE-SU-2019:0853-1

Security update for MozillaThunderbird

больше 7 лет назад
altlinux логотип
ALT-PU-2019-1173

ALT-PU-2019-1173: package `firefox` update to version 65.0-alt1

CVSS3: 10
почти 8 лет назад
altlinux логотип
ALT-PU-2019-1486

ALT-PU-2019-1486: package `firefox-esr` update to version 60.6.0-alt1

CVSS3: 9.8
больше 7 лет назад

Уязвимостей на страницу