Количество 8
Количество 8
GHSA-mpv9-qhv2-p7fj
The Content Security Policy (CSP) implementation in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10 does not block inline event handlers, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted HTML document.

CVE-2012-1944
The Content Security Policy (CSP) implementation in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10 does not block inline event handlers, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted HTML document.

CVE-2012-1944
The Content Security Policy (CSP) implementation in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10 does not block inline event handlers, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted HTML document.

CVE-2012-1944
The Content Security Policy (CSP) implementation in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10 does not block inline event handlers, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted HTML document.
CVE-2012-1944
The Content Security Policy (CSP) implementation in Mozilla Firefox 4. ...

BDU:2014-00004
Уязвимость браузера Firefox, позволяющая злоумышленнику выполнить межсайтовый скриптинг
ELSA-2012-0715
ELSA-2012-0715: thunderbird security update (CRITICAL)
ELSA-2012-0710
ELSA-2012-0710: firefox security update (CRITICAL)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
---|---|---|---|---|
GHSA-mpv9-qhv2-p7fj The Content Security Policy (CSP) implementation in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10 does not block inline event handlers, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted HTML document. | 1% Низкий | около 3 лет назад | ||
![]() | CVE-2012-1944 The Content Security Policy (CSP) implementation in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10 does not block inline event handlers, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted HTML document. | CVSS2: 4.3 | 1% Низкий | около 13 лет назад |
![]() | CVE-2012-1944 The Content Security Policy (CSP) implementation in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10 does not block inline event handlers, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted HTML document. | CVSS2: 4.3 | 1% Низкий | около 13 лет назад |
![]() | CVE-2012-1944 The Content Security Policy (CSP) implementation in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10 does not block inline event handlers, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted HTML document. | CVSS2: 4.3 | 1% Низкий | около 13 лет назад |
CVE-2012-1944 The Content Security Policy (CSP) implementation in Mozilla Firefox 4. ... | CVSS2: 4.3 | 1% Низкий | около 13 лет назад | |
![]() | BDU:2014-00004 Уязвимость браузера Firefox, позволяющая злоумышленнику выполнить межсайтовый скриптинг | CVSS2: 4.3 | 1% Низкий | около 13 лет назад |
ELSA-2012-0715 ELSA-2012-0715: thunderbird security update (CRITICAL) | около 13 лет назад | |||
ELSA-2012-0710 ELSA-2012-0710: firefox security update (CRITICAL) | около 13 лет назад |
Уязвимостей на страницу