Поиск уязвимостей
Количество 15
Количество 15
GHSA-7f3m-mqm5-5x2c
If a user visited a webpage with an invalid TLS certificate, and granted an exception, the webpage was able to provide a WebAuthn challenge that the user would be prompted to complete. This is in violation of the WebAuthN spec which requires "a secure transport established without errors". This vulnerability affects Firefox < 140.
CVE-2025-6433
If a user visited a webpage with an invalid TLS certificate, and granted an exception, the webpage was able to provide a WebAuthn challenge that the user would be prompted to complete. This is in violation of the WebAuthN spec which requires "a secure transport established without errors". This vulnerability was fixed in Firefox 140 and Thunderbird 140.
CVE-2025-6433
If a user visited a webpage with an invalid TLS certificate, and granted an exception, the webpage was able to provide a WebAuthn challenge that the user would be prompted to complete. This is in violation of the WebAuthN spec which requires "a secure transport established without errors". This vulnerability was fixed in Firefox 140 and Thunderbird 140.
CVE-2025-6433
If a user visited a webpage with an invalid TLS certificate, and granted an exception, the webpage was able to provide a WebAuthn challenge that the user would be prompted to complete. This is in violation of the WebAuthN spec which requires "a secure transport established without errors". This vulnerability was fixed in Firefox 140 and Thunderbird 140.
CVE-2025-6433
If a user visited a webpage with an invalid TLS certificate, and grant ...
BDU:2025-07649
Уязвимость реализации протокола TLS браузера Mozilla Firefox, позволяющая нарушителю обойти существующие ограничения безопасности и получить несанкционированный доступ к защищаемой информации
SUSE-SU-2025:02339-1
Security update for MozillaFirefox, MozillaFirefox-branding-SLE
SUSE-SU-2025:02546-1
Security update for MozillaThunderbird
SUSE-SU-2025:02529-1
Security update for MozillaFirefox, MozillaFirefox-branding-SLE
ALT-PU-2025-8725
ALT-PU-2025-8725: package `firefox` update to version 140.0.2-alt1
ALT-PU-2025-9988
ALT-PU-2025-9988: package `thunderbird` update to version 141.0-alt1
ALT-PU-2025-11497
ALT-PU-2025-11497: package `firefox` update to version 141.0.2-alt0.p10.1
ALT-PU-2025-11495
ALT-PU-2025-11495: package `thunderbird` update to version 141.0-alt0.p10.1
ALT-PU-2025-11100
ALT-PU-2025-11100: package `firefox-esr` update to version 140.2.0-alt2
ALT-PU-2025-14599
ALT-PU-2025-14599: package `firefox-esr` update to version 140.4.0-alt0.p10.1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-7f3m-mqm5-5x2c If a user visited a webpage with an invalid TLS certificate, and granted an exception, the webpage was able to provide a WebAuthn challenge that the user would be prompted to complete. This is in violation of the WebAuthN spec which requires "a secure transport established without errors". This vulnerability affects Firefox < 140. | CVSS3: 9.8 | 0% Низкий | больше 1 года назад |
 | CVE-2025-6433 If a user visited a webpage with an invalid TLS certificate, and granted an exception, the webpage was able to provide a WebAuthn challenge that the user would be prompted to complete. This is in violation of the WebAuthN spec which requires "a secure transport established without errors". This vulnerability was fixed in Firefox 140 and Thunderbird 140. | CVSS3: 9.8 | 0% Низкий | больше 1 года назад |
 | CVE-2025-6433 If a user visited a webpage with an invalid TLS certificate, and granted an exception, the webpage was able to provide a WebAuthn challenge that the user would be prompted to complete. This is in violation of the WebAuthN spec which requires "a secure transport established without errors". This vulnerability was fixed in Firefox 140 and Thunderbird 140. | CVSS3: 3.4 | 0% Низкий | больше 1 года назад |
 | CVE-2025-6433 If a user visited a webpage with an invalid TLS certificate, and granted an exception, the webpage was able to provide a WebAuthn challenge that the user would be prompted to complete. This is in violation of the WebAuthN spec which requires "a secure transport established without errors". This vulnerability was fixed in Firefox 140 and Thunderbird 140. | CVSS3: 9.8 | 0% Низкий | больше 1 года назад |
| CVE-2025-6433 If a user visited a webpage with an invalid TLS certificate, and grant ... | CVSS3: 9.8 | 0% Низкий | больше 1 года назад |
 | BDU:2025-07649 Уязвимость реализации протокола TLS браузера Mozilla Firefox, позволяющая нарушителю обойти существующие ограничения безопасности и получить несанкционированный доступ к защищаемой информации | CVSS3: 4.3 | 0% Низкий | больше 1 года назад |
 | SUSE-SU-2025:02339-1 Security update for MozillaFirefox, MozillaFirefox-branding-SLE | больше 1 года назад | ||
| SUSE-SU-2025:02546-1 Security update for MozillaThunderbird | больше 1 года назад | ||
| SUSE-SU-2025:02529-1 Security update for MozillaFirefox, MozillaFirefox-branding-SLE | больше 1 года назад | ||
| ALT-PU-2025-8725 ALT-PU-2025-8725: package `firefox` update to version 140.0.2-alt1 | CVSS3: 9.8 | больше 1 года назад | |
| ALT-PU-2025-9988 ALT-PU-2025-9988: package `thunderbird` update to version 141.0-alt1 | CVSS3: 9.8 | около 1 года назад | |
| ALT-PU-2025-11497 ALT-PU-2025-11497: package `firefox` update to version 141.0.2-alt0.p10.1 | CVSS3: 9.8 | около 1 года назад | |
| ALT-PU-2025-11495 ALT-PU-2025-11495: package `thunderbird` update to version 141.0-alt0.p10.1 | CVSS3: 9.8 | около 1 года назад | |
| ALT-PU-2025-11100 ALT-PU-2025-11100: package `firefox-esr` update to version 140.2.0-alt2 | CVSS3: 9.8 | около 1 года назад | |
| ALT-PU-2025-14599 ALT-PU-2025-14599: package `firefox-esr` update to version 140.4.0-alt0.p10.1 | CVSS3: 9.8 | 12 месяцев назад |
Уязвимостей на страницу