Поиск уязвимостей
Количество 9
Количество 9
GHSA-v8rx-7xrc-grgm
WebExtensions with the appropriate permissions can attach content scripts to Mozilla sites such as accounts.firefox.com and listen to network traffic to the site through the "webRequest" API. For example, this allows for the interception of username and an encrypted password during login to Firefox Accounts. This issue does not expose synchronization traffic directly and is limited to the process of user login to the website and the data displayed to the user once logged in. This vulnerability affects Firefox < 60.
CVE-2018-5152
WebExtensions with the appropriate permissions can attach content scripts to Mozilla sites such as accounts.firefox.com and listen to network traffic to the site through the "webRequest" API. For example, this allows for the interception of username and an encrypted password during login to Firefox Accounts. This issue does not expose synchronization traffic directly and is limited to the process of user login to the website and the data displayed to the user once logged in. This vulnerability affects Firefox < 60.
CVE-2018-5152
WebExtensions with the appropriate permissions can attach content scripts to Mozilla sites such as accounts.firefox.com and listen to network traffic to the site through the "webRequest" API. For example, this allows for the interception of username and an encrypted password during login to Firefox Accounts. This issue does not expose synchronization traffic directly and is limited to the process of user login to the website and the data displayed to the user once logged in. This vulnerability affects Firefox < 60.
CVE-2018-5152
WebExtensions with the appropriate permissions can attach content scripts to Mozilla sites such as accounts.firefox.com and listen to network traffic to the site through the "webRequest" API. For example, this allows for the interception of username and an encrypted password during login to Firefox Accounts. This issue does not expose synchronization traffic directly and is limited to the process of user login to the website and the data displayed to the user once logged in. This vulnerability affects Firefox < 60.
CVE-2018-5152
WebExtensions with the appropriate permissions can attach content scri ...
BDU:2019-03418
Уязвимость кросс-браузерной системы для разработки дополнений WebExtensions веб-браузера Firefox, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
SUSE-SU-2019:2872-1
Security update for MozillaFirefox
ALT-PU-2018-1787
ALT-PU-2018-1787: package `firefox` update to version 60.0.1-alt1
ALT-PU-2018-1854
ALT-PU-2018-1854: package `firefox-esr` update to version 60.0.1-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-v8rx-7xrc-grgm WebExtensions with the appropriate permissions can attach content scripts to Mozilla sites such as accounts.firefox.com and listen to network traffic to the site through the "webRequest" API. For example, this allows for the interception of username and an encrypted password during login to Firefox Accounts. This issue does not expose synchronization traffic directly and is limited to the process of user login to the website and the data displayed to the user once logged in. This vulnerability affects Firefox < 60. | CVSS3: 6.5 | 2% Низкий | больше 4 лет назад |
 | CVE-2018-5152 WebExtensions with the appropriate permissions can attach content scripts to Mozilla sites such as accounts.firefox.com and listen to network traffic to the site through the "webRequest" API. For example, this allows for the interception of username and an encrypted password during login to Firefox Accounts. This issue does not expose synchronization traffic directly and is limited to the process of user login to the website and the data displayed to the user once logged in. This vulnerability affects Firefox < 60. | CVSS3: 6.5 | 2% Низкий | больше 8 лет назад |
 | CVE-2018-5152 WebExtensions with the appropriate permissions can attach content scripts to Mozilla sites such as accounts.firefox.com and listen to network traffic to the site through the "webRequest" API. For example, this allows for the interception of username and an encrypted password during login to Firefox Accounts. This issue does not expose synchronization traffic directly and is limited to the process of user login to the website and the data displayed to the user once logged in. This vulnerability affects Firefox < 60. | CVSS3: 6.1 | 2% Низкий | больше 8 лет назад |
 | CVE-2018-5152 WebExtensions with the appropriate permissions can attach content scripts to Mozilla sites such as accounts.firefox.com and listen to network traffic to the site through the "webRequest" API. For example, this allows for the interception of username and an encrypted password during login to Firefox Accounts. This issue does not expose synchronization traffic directly and is limited to the process of user login to the website and the data displayed to the user once logged in. This vulnerability affects Firefox < 60. | CVSS3: 6.5 | 2% Низкий | больше 8 лет назад |
| CVE-2018-5152 WebExtensions with the appropriate permissions can attach content scri ... | CVSS3: 6.5 | 2% Низкий | больше 8 лет назад |
 | BDU:2019-03418 Уязвимость кросс-браузерной системы для разработки дополнений WebExtensions веб-браузера Firefox, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации | CVSS3: 6.1 | 2% Низкий | больше 8 лет назад |
 | SUSE-SU-2019:2872-1 Security update for MozillaFirefox | около 7 лет назад | ||
| ALT-PU-2018-1787 ALT-PU-2018-1787: package `firefox` update to version 60.0.1-alt1 | CVSS3: 9.8 | больше 8 лет назад | |
| ALT-PU-2018-1854 ALT-PU-2018-1854: package `firefox-esr` update to version 60.0.1-alt1 | CVSS3: 9.8 | больше 8 лет назад |
Уязвимостей на страницу