Поиск уязвимостей
Количество 15
Количество 15
CVE-2025-6434
The exception page for the HTTPS-Only feature, displayed when a website is opened via HTTP, lacked an anti-clickjacking delay, potentially allowing an attacker to trick a user into granting an exception and loading a webpage over HTTP. This vulnerability was fixed in Firefox 140 and Thunderbird 140.
CVE-2025-6434
The exception page for the HTTPS-Only feature, displayed when a website is opened via HTTP, lacked an anti-clickjacking delay, potentially allowing an attacker to trick a user into granting an exception and loading a webpage over HTTP. This vulnerability was fixed in Firefox 140 and Thunderbird 140.
CVE-2025-6434
The exception page for the HTTPS-Only feature, displayed when a website is opened via HTTP, lacked an anti-clickjacking delay, potentially allowing an attacker to trick a user into granting an exception and loading a webpage over HTTP. This vulnerability was fixed in Firefox 140 and Thunderbird 140.
CVE-2025-6434
The exception page for the HTTPS-Only feature, displayed when a websit ...
GHSA-87mm-rg9r-h8wm
The exception page for the HTTPS-Only feature, displayed when a website is opened via HTTP, lacked an anti-clickjacking delay, potentially allowing an attacker to trick a user into granting an exception and loading a webpage over HTTP. This vulnerability affects Firefox < 140.
BDU:2025-07647
Уязвимость режима HTTPS-Only Mode браузера Mozilla Firefox, позволяющая нарушителю провести атаку типа clickjacking («захват клика»)
SUSE-SU-2025:02339-1
Security update for MozillaFirefox, MozillaFirefox-branding-SLE
SUSE-SU-2025:02546-1
Security update for MozillaThunderbird
SUSE-SU-2025:02529-1
Security update for MozillaFirefox, MozillaFirefox-branding-SLE
ALT-PU-2025-8725
ALT-PU-2025-8725: package `firefox` update to version 140.0.2-alt1
ALT-PU-2025-9988
ALT-PU-2025-9988: package `thunderbird` update to version 141.0-alt1
ALT-PU-2025-11497
ALT-PU-2025-11497: package `firefox` update to version 141.0.2-alt0.p10.1
ALT-PU-2025-11495
ALT-PU-2025-11495: package `thunderbird` update to version 141.0-alt0.p10.1
ALT-PU-2025-11100
ALT-PU-2025-11100: package `firefox-esr` update to version 140.2.0-alt2
ALT-PU-2025-14599
ALT-PU-2025-14599: package `firefox-esr` update to version 140.4.0-alt0.p10.1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2025-6434 The exception page for the HTTPS-Only feature, displayed when a website is opened via HTTP, lacked an anti-clickjacking delay, potentially allowing an attacker to trick a user into granting an exception and loading a webpage over HTTP. This vulnerability was fixed in Firefox 140 and Thunderbird 140. | CVSS3: 4.3 | 0% Низкий | больше 1 года назад |
 | CVE-2025-6434 The exception page for the HTTPS-Only feature, displayed when a website is opened via HTTP, lacked an anti-clickjacking delay, potentially allowing an attacker to trick a user into granting an exception and loading a webpage over HTTP. This vulnerability was fixed in Firefox 140 and Thunderbird 140. | CVSS3: 3.4 | 0% Низкий | больше 1 года назад |
 | CVE-2025-6434 The exception page for the HTTPS-Only feature, displayed when a website is opened via HTTP, lacked an anti-clickjacking delay, potentially allowing an attacker to trick a user into granting an exception and loading a webpage over HTTP. This vulnerability was fixed in Firefox 140 and Thunderbird 140. | CVSS3: 4.3 | 0% Низкий | больше 1 года назад |
| CVE-2025-6434 The exception page for the HTTPS-Only feature, displayed when a websit ... | CVSS3: 4.3 | 0% Низкий | больше 1 года назад |
| GHSA-87mm-rg9r-h8wm The exception page for the HTTPS-Only feature, displayed when a website is opened via HTTP, lacked an anti-clickjacking delay, potentially allowing an attacker to trick a user into granting an exception and loading a webpage over HTTP. This vulnerability affects Firefox < 140. | CVSS3: 4.3 | 0% Низкий | больше 1 года назад |
 | BDU:2025-07647 Уязвимость режима HTTPS-Only Mode браузера Mozilla Firefox, позволяющая нарушителю провести атаку типа clickjacking («захват клика») | CVSS3: 4.3 | 0% Низкий | больше 1 года назад |
 | SUSE-SU-2025:02339-1 Security update for MozillaFirefox, MozillaFirefox-branding-SLE | больше 1 года назад | ||
| SUSE-SU-2025:02546-1 Security update for MozillaThunderbird | больше 1 года назад | ||
| SUSE-SU-2025:02529-1 Security update for MozillaFirefox, MozillaFirefox-branding-SLE | больше 1 года назад | ||
| ALT-PU-2025-8725 ALT-PU-2025-8725: package `firefox` update to version 140.0.2-alt1 | CVSS3: 9.8 | больше 1 года назад | |
| ALT-PU-2025-9988 ALT-PU-2025-9988: package `thunderbird` update to version 141.0-alt1 | CVSS3: 9.8 | около 1 года назад | |
| ALT-PU-2025-11497 ALT-PU-2025-11497: package `firefox` update to version 141.0.2-alt0.p10.1 | CVSS3: 9.8 | около 1 года назад | |
| ALT-PU-2025-11495 ALT-PU-2025-11495: package `thunderbird` update to version 141.0-alt0.p10.1 | CVSS3: 9.8 | около 1 года назад | |
| ALT-PU-2025-11100 ALT-PU-2025-11100: package `firefox-esr` update to version 140.2.0-alt2 | CVSS3: 9.8 | около 1 года назад | |
| ALT-PU-2025-14599 ALT-PU-2025-14599: package `firefox-esr` update to version 140.4.0-alt0.p10.1 | CVSS3: 9.8 | 12 месяцев назад |
Уязвимостей на страницу