Логотип exploitDog
bind:CVE-2025-6434
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2025-6434

Количество 6

Количество 6

ubuntu логотип

CVE-2025-6434

26 дней назад

The exception page for the HTTPS-Only feature, displayed when a website is opened via HTTP, lacked an anti-clickjacking delay, potentially allowing an attacker to trick a user into granting an exception and loading a webpage over HTTP. This vulnerability affects Firefox < 140.

CVSS3: 4.3
EPSS: Низкий
redhat логотип

CVE-2025-6434

27 дней назад

The exception page for the HTTPS-Only feature, displayed when a website is opened via HTTP, lacked an anti-clickjacking delay, potentially allowing an attacker to trick a user into granting an exception and loading a webpage over HTTP. This vulnerability affects Firefox < 140.

CVSS3: 3.4
EPSS: Низкий
nvd логотип

CVE-2025-6434

26 дней назад

The exception page for the HTTPS-Only feature, displayed when a website is opened via HTTP, lacked an anti-clickjacking delay, potentially allowing an attacker to trick a user into granting an exception and loading a webpage over HTTP. This vulnerability affects Firefox < 140.

CVSS3: 4.3
EPSS: Низкий
debian логотип

CVE-2025-6434

26 дней назад

The exception page for the HTTPS-Only feature, displayed when a websit ...

CVSS3: 4.3
EPSS: Низкий
github логотип

GHSA-87mm-rg9r-h8wm

24 дня назад

The exception page for the HTTPS-Only feature, displayed when a website is opened via HTTP, lacked an anti-clickjacking delay, potentially allowing an attacker to trick a user into granting an exception and loading a webpage over HTTP. This vulnerability affects Firefox < 140.

CVSS3: 4.3
EPSS: Низкий
fstec логотип

BDU:2025-07647

27 дней назад

Уязвимость режима HTTPS-Only Mode браузера Mozilla Firefox, позволяющая нарушителю провести атаку типа clickjacking («захват клика»)

CVSS3: 4.3
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2025-6434

The exception page for the HTTPS-Only feature, displayed when a website is opened via HTTP, lacked an anti-clickjacking delay, potentially allowing an attacker to trick a user into granting an exception and loading a webpage over HTTP. This vulnerability affects Firefox < 140.

CVSS3: 4.3
0%
Низкий
26 дней назад
redhat логотип
CVE-2025-6434

The exception page for the HTTPS-Only feature, displayed when a website is opened via HTTP, lacked an anti-clickjacking delay, potentially allowing an attacker to trick a user into granting an exception and loading a webpage over HTTP. This vulnerability affects Firefox < 140.

CVSS3: 3.4
0%
Низкий
27 дней назад
nvd логотип
CVE-2025-6434

The exception page for the HTTPS-Only feature, displayed when a website is opened via HTTP, lacked an anti-clickjacking delay, potentially allowing an attacker to trick a user into granting an exception and loading a webpage over HTTP. This vulnerability affects Firefox < 140.

CVSS3: 4.3
0%
Низкий
26 дней назад
debian логотип
CVE-2025-6434

The exception page for the HTTPS-Only feature, displayed when a websit ...

CVSS3: 4.3
0%
Низкий
26 дней назад
github логотип
GHSA-87mm-rg9r-h8wm

The exception page for the HTTPS-Only feature, displayed when a website is opened via HTTP, lacked an anti-clickjacking delay, potentially allowing an attacker to trick a user into granting an exception and loading a webpage over HTTP. This vulnerability affects Firefox < 140.

CVSS3: 4.3
0%
Низкий
24 дня назад
fstec логотип
BDU:2025-07647

Уязвимость режима HTTPS-Only Mode браузера Mozilla Firefox, позволяющая нарушителю провести атаку типа clickjacking («захват клика»)

CVSS3: 4.3
0%
Низкий
27 дней назад

Уязвимостей на страницу