Логотип exploitDog
bind:"GHSA-8r38-4g4q-hgvw" OR bind:"CVE-2025-6429"
Консоль
Логотип exploitDog

exploitDog

bind:"GHSA-8r38-4g4q-hgvw" OR bind:"CVE-2025-6429"

Количество 14

Количество 14

github логотип

GHSA-8r38-4g4q-hgvw

29 дней назад

Firefox could have incorrectly parsed a URL and rewritten it to the youtube.com domain when parsing the URL specified in an `embed` tag. This could have bypassed website security checks that restricted which domains users were allowed to embed. This vulnerability affects Firefox < 140 and Firefox ESR < 128.12.

CVSS3: 6.5
EPSS: Низкий
ubuntu логотип

CVE-2025-6429

около 1 месяца назад

Firefox could have incorrectly parsed a URL and rewritten it to the youtube.com domain when parsing the URL specified in an `embed` tag. This could have bypassed website security checks that restricted which domains users were allowed to embed. This vulnerability affects Firefox < 140, Firefox ESR < 128.12, Thunderbird < 140, and Thunderbird < 128.12.

CVSS3: 6.5
EPSS: Низкий
redhat логотип

CVE-2025-6429

около 1 месяца назад

Firefox could have incorrectly parsed a URL and rewritten it to the youtube.com domain when parsing the URL specified in an `embed` tag. This could have bypassed website security checks that restricted which domains users were allowed to embed. This vulnerability affects Firefox < 140, Firefox ESR < 128.12, Thunderbird < 140, and Thunderbird < 128.12.

CVSS3: 6.1
EPSS: Низкий
nvd логотип

CVE-2025-6429

около 1 месяца назад

Firefox could have incorrectly parsed a URL and rewritten it to the youtube.com domain when parsing the URL specified in an `embed` tag. This could have bypassed website security checks that restricted which domains users were allowed to embed. This vulnerability affects Firefox < 140, Firefox ESR < 128.12, Thunderbird < 140, and Thunderbird < 128.12.

CVSS3: 6.5
EPSS: Низкий
debian логотип

CVE-2025-6429

около 1 месяца назад

Firefox could have incorrectly parsed a URL and rewritten it to the yo ...

CVSS3: 6.5
EPSS: Низкий
fstec логотип

BDU:2025-07728

около 1 месяца назад

Уязвимость браузеров Mozilla Firefox, Firefox ESR, связанная с неправильным кодированием или экранированием выходных данных, позволяющая нарушителю обойти существующие ограничения безопасности и перенаправить пользователя на другой веб-сайт

CVSS3: 6.5
EPSS: Низкий
oracle-oval логотип

ELSA-2025-10181

12 дней назад

ELSA-2025-10181: firefox security update (IMPORTANT)

EPSS: Низкий
oracle-oval логотип

ELSA-2025-10074

25 дней назад

ELSA-2025-10074: firefox security update (IMPORTANT)

EPSS: Низкий
oracle-oval логотип

ELSA-2025-10073

25 дней назад

ELSA-2025-10073: firefox security update (IMPORTANT)

EPSS: Низкий
oracle-oval логотип

ELSA-2025-10072

25 дней назад

ELSA-2025-10072: firefox security update (IMPORTANT)

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:02368-1

7 дней назад

Security update for MozillaThunderbird

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:02123-1

29 дней назад

Security update for MozillaFirefox

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:02122-1

29 дней назад

Security update for MozillaFirefox

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:02339-1

8 дней назад

Security update for MozillaFirefox, MozillaFirefox-branding-SLE

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
github логотип
GHSA-8r38-4g4q-hgvw

Firefox could have incorrectly parsed a URL and rewritten it to the youtube.com domain when parsing the URL specified in an `embed` tag. This could have bypassed website security checks that restricted which domains users were allowed to embed. This vulnerability affects Firefox < 140 and Firefox ESR < 128.12.

CVSS3: 6.5
0%
Низкий
29 дней назад
ubuntu логотип
CVE-2025-6429

Firefox could have incorrectly parsed a URL and rewritten it to the youtube.com domain when parsing the URL specified in an `embed` tag. This could have bypassed website security checks that restricted which domains users were allowed to embed. This vulnerability affects Firefox < 140, Firefox ESR < 128.12, Thunderbird < 140, and Thunderbird < 128.12.

CVSS3: 6.5
0%
Низкий
около 1 месяца назад
redhat логотип
CVE-2025-6429

Firefox could have incorrectly parsed a URL and rewritten it to the youtube.com domain when parsing the URL specified in an `embed` tag. This could have bypassed website security checks that restricted which domains users were allowed to embed. This vulnerability affects Firefox < 140, Firefox ESR < 128.12, Thunderbird < 140, and Thunderbird < 128.12.

CVSS3: 6.1
0%
Низкий
около 1 месяца назад
nvd логотип
CVE-2025-6429

Firefox could have incorrectly parsed a URL and rewritten it to the youtube.com domain when parsing the URL specified in an `embed` tag. This could have bypassed website security checks that restricted which domains users were allowed to embed. This vulnerability affects Firefox < 140, Firefox ESR < 128.12, Thunderbird < 140, and Thunderbird < 128.12.

CVSS3: 6.5
0%
Низкий
около 1 месяца назад
debian логотип
CVE-2025-6429

Firefox could have incorrectly parsed a URL and rewritten it to the yo ...

CVSS3: 6.5
0%
Низкий
около 1 месяца назад
fstec логотип
BDU:2025-07728

Уязвимость браузеров Mozilla Firefox, Firefox ESR, связанная с неправильным кодированием или экранированием выходных данных, позволяющая нарушителю обойти существующие ограничения безопасности и перенаправить пользователя на другой веб-сайт

CVSS3: 6.5
0%
Низкий
около 1 месяца назад
oracle-oval логотип
ELSA-2025-10181

ELSA-2025-10181: firefox security update (IMPORTANT)

12 дней назад
oracle-oval логотип
ELSA-2025-10074

ELSA-2025-10074: firefox security update (IMPORTANT)

25 дней назад
oracle-oval логотип
ELSA-2025-10073

ELSA-2025-10073: firefox security update (IMPORTANT)

25 дней назад
oracle-oval логотип
ELSA-2025-10072

ELSA-2025-10072: firefox security update (IMPORTANT)

25 дней назад
suse-cvrf логотип
SUSE-SU-2025:02368-1

Security update for MozillaThunderbird

7 дней назад
suse-cvrf логотип
SUSE-SU-2025:02123-1

Security update for MozillaFirefox

29 дней назад
suse-cvrf логотип
SUSE-SU-2025:02122-1

Security update for MozillaFirefox

29 дней назад
suse-cvrf логотип
SUSE-SU-2025:02339-1

Security update for MozillaFirefox, MozillaFirefox-branding-SLE

8 дней назад

Уязвимостей на страницу