Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Поиск уязвимостей

Количество 18 439

Количество 18 439

redhat логотип

CVE-2020-12424

больше 6 лет назад

When constructing a permission prompt for WebRTC, a URI was supplied from the content process. This URI was untrusted, and could have been the URI of an origin that was previously granted permission; bypassing the prompt. This vulnerability affects Firefox < 78.

CVSS3: 6.5
EPSS: Низкий
nvd логотип

CVE-2020-12424

больше 6 лет назад

When constructing a permission prompt for WebRTC, a URI was supplied from the content process. This URI was untrusted, and could have been the URI of an origin that was previously granted permission; bypassing the prompt. This vulnerability affects Firefox < 78.

CVSS3: 6.5
EPSS: Низкий
debian логотип

CVE-2020-12424

больше 6 лет назад

When constructing a permission prompt for WebRTC, a URI was supplied f ...

CVSS3: 6.5
EPSS: Низкий
ubuntu логотип

CVE-2020-12423

больше 6 лет назад

When the Windows DLL "webauthn.dll" was missing from the Operating System, and a malicious one was placed in a folder in the user's %PATH%, Firefox may have loaded the DLL, leading to arbitrary code execution. *Note: This issue only affects the Windows operating system; other operating systems are unaffected.* This vulnerability affects Firefox < 78.

CVSS3: 7.8
EPSS: Низкий
redhat логотип

CVE-2020-12423

больше 6 лет назад

When the Windows DLL "webauthn.dll" was missing from the Operating System, and a malicious one was placed in a folder in the user's %PATH%, Firefox may have loaded the DLL, leading to arbitrary code execution. *Note: This issue only affects the Windows operating system; other operating systems are unaffected.* This vulnerability affects Firefox < 78.

CVSS3: 7.8
EPSS: Низкий
nvd логотип

CVE-2020-12423

больше 6 лет назад

When the Windows DLL "webauthn.dll" was missing from the Operating System, and a malicious one was placed in a folder in the user's %PATH%, Firefox may have loaded the DLL, leading to arbitrary code execution. *Note: This issue only affects the Windows operating system; other operating systems are unaffected.* This vulnerability affects Firefox < 78.

CVSS3: 7.8
EPSS: Низкий
debian логотип

CVE-2020-12423

больше 6 лет назад

When the Windows DLL "webauthn.dll" was missing from the Operating Sys ...

CVSS3: 7.8
EPSS: Низкий
ubuntu логотип

CVE-2020-12422

больше 6 лет назад

In non-standard configurations, a JPEG image created by JavaScript could have caused an internal variable to overflow, resulting in an out of bounds write, memory corruption, and a potentially exploitable crash. This vulnerability affects Firefox < 78.

CVSS3: 8.8
EPSS: Низкий
redhat логотип

CVE-2020-12422

больше 6 лет назад

In non-standard configurations, a JPEG image created by JavaScript could have caused an internal variable to overflow, resulting in an out of bounds write, memory corruption, and a potentially exploitable crash. This vulnerability affects Firefox < 78.

CVSS3: 8.8
EPSS: Низкий
nvd логотип

CVE-2020-12422

больше 6 лет назад

In non-standard configurations, a JPEG image created by JavaScript could have caused an internal variable to overflow, resulting in an out of bounds write, memory corruption, and a potentially exploitable crash. This vulnerability affects Firefox < 78.

CVSS3: 8.8
EPSS: Низкий
debian логотип

CVE-2020-12422

больше 6 лет назад

In non-standard configurations, a JPEG image created by JavaScript cou ...

CVSS3: 8.8
EPSS: Низкий
ubuntu логотип

CVE-2020-12416

больше 6 лет назад

A VideoStreamEncoder may have been freed in a race condition with VideoBroadcaster::AddOrUpdateSink, resulting in a use-after-free, memory corruption, and a potentially exploitable crash. This vulnerability affects Firefox < 78.

CVSS3: 8.8
EPSS: Низкий
redhat логотип

CVE-2020-12416

больше 6 лет назад

A VideoStreamEncoder may have been freed in a race condition with VideoBroadcaster::AddOrUpdateSink, resulting in a use-after-free, memory corruption, and a potentially exploitable crash. This vulnerability affects Firefox < 78.

CVSS3: 8.8
EPSS: Низкий
nvd логотип

CVE-2020-12416

больше 6 лет назад

A VideoStreamEncoder may have been freed in a race condition with VideoBroadcaster::AddOrUpdateSink, resulting in a use-after-free, memory corruption, and a potentially exploitable crash. This vulnerability affects Firefox < 78.

CVSS3: 8.8
EPSS: Низкий
debian логотип

CVE-2020-12416

больше 6 лет назад

A VideoStreamEncoder may have been freed in a race condition with Vide ...

CVSS3: 8.8
EPSS: Низкий
ubuntu логотип

CVE-2020-12415

больше 6 лет назад

When "%2F" was present in a manifest URL, Firefox's AppCache behavior may have become confused and allowed a manifest to be served from a subdirectory. This could cause the appcache to be used to service requests for the top level directory. This vulnerability affects Firefox < 78.

CVSS3: 6.5
EPSS: Низкий
redhat логотип

CVE-2020-12415

больше 6 лет назад

When "%2F" was present in a manifest URL, Firefox's AppCache behavior may have become confused and allowed a manifest to be served from a subdirectory. This could cause the appcache to be used to service requests for the top level directory. This vulnerability affects Firefox < 78.

CVSS3: 6.5
EPSS: Низкий
nvd логотип

CVE-2020-12415

больше 6 лет назад

When "%2F" was present in a manifest URL, Firefox's AppCache behavior may have become confused and allowed a manifest to be served from a subdirectory. This could cause the appcache to be used to service requests for the top level directory. This vulnerability affects Firefox < 78.

CVSS3: 6.5
EPSS: Низкий
debian логотип

CVE-2020-12415

больше 6 лет назад

When "%2F" was present in a manifest URL, Firefox's AppCache behavior ...

CVSS3: 6.5
EPSS: Низкий
ubuntu логотип

CVE-2020-12412

больше 6 лет назад

By navigating a tab using the history API, an attacker could cause the address bar to display the incorrect domain (with the https:// scheme, a blocked port number such as '1', and without a lock icon) while controlling the page contents. This vulnerability affects Firefox < 70.

CVSS3: 4.3
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
redhat логотип
CVE-2020-12424

When constructing a permission prompt for WebRTC, a URI was supplied from the content process. This URI was untrusted, and could have been the URI of an origin that was previously granted permission; bypassing the prompt. This vulnerability affects Firefox < 78.

CVSS3: 6.5
2%
Низкий
больше 6 лет назад
nvd логотип
CVE-2020-12424

When constructing a permission prompt for WebRTC, a URI was supplied from the content process. This URI was untrusted, and could have been the URI of an origin that was previously granted permission; bypassing the prompt. This vulnerability affects Firefox < 78.

CVSS3: 6.5
2%
Низкий
больше 6 лет назад
debian логотип
CVE-2020-12424

When constructing a permission prompt for WebRTC, a URI was supplied f ...

CVSS3: 6.5
2%
Низкий
больше 6 лет назад
ubuntu логотип
CVE-2020-12423

When the Windows DLL "webauthn.dll" was missing from the Operating System, and a malicious one was placed in a folder in the user's %PATH%, Firefox may have loaded the DLL, leading to arbitrary code execution. *Note: This issue only affects the Windows operating system; other operating systems are unaffected.* This vulnerability affects Firefox < 78.

CVSS3: 7.8
0%
Низкий
больше 6 лет назад
redhat логотип
CVE-2020-12423

When the Windows DLL "webauthn.dll" was missing from the Operating System, and a malicious one was placed in a folder in the user's %PATH%, Firefox may have loaded the DLL, leading to arbitrary code execution. *Note: This issue only affects the Windows operating system; other operating systems are unaffected.* This vulnerability affects Firefox < 78.

CVSS3: 7.8
0%
Низкий
больше 6 лет назад
nvd логотип
CVE-2020-12423

When the Windows DLL "webauthn.dll" was missing from the Operating System, and a malicious one was placed in a folder in the user's %PATH%, Firefox may have loaded the DLL, leading to arbitrary code execution. *Note: This issue only affects the Windows operating system; other operating systems are unaffected.* This vulnerability affects Firefox < 78.

CVSS3: 7.8
0%
Низкий
больше 6 лет назад
debian логотип
CVE-2020-12423

When the Windows DLL "webauthn.dll" was missing from the Operating Sys ...

CVSS3: 7.8
0%
Низкий
больше 6 лет назад
ubuntu логотип
CVE-2020-12422

In non-standard configurations, a JPEG image created by JavaScript could have caused an internal variable to overflow, resulting in an out of bounds write, memory corruption, and a potentially exploitable crash. This vulnerability affects Firefox < 78.

CVSS3: 8.8
2%
Низкий
больше 6 лет назад
redhat логотип
CVE-2020-12422

In non-standard configurations, a JPEG image created by JavaScript could have caused an internal variable to overflow, resulting in an out of bounds write, memory corruption, and a potentially exploitable crash. This vulnerability affects Firefox < 78.

CVSS3: 8.8
2%
Низкий
больше 6 лет назад
nvd логотип
CVE-2020-12422

In non-standard configurations, a JPEG image created by JavaScript could have caused an internal variable to overflow, resulting in an out of bounds write, memory corruption, and a potentially exploitable crash. This vulnerability affects Firefox < 78.

CVSS3: 8.8
2%
Низкий
больше 6 лет назад
debian логотип
CVE-2020-12422

In non-standard configurations, a JPEG image created by JavaScript cou ...

CVSS3: 8.8
2%
Низкий
больше 6 лет назад
ubuntu логотип
CVE-2020-12416

A VideoStreamEncoder may have been freed in a race condition with VideoBroadcaster::AddOrUpdateSink, resulting in a use-after-free, memory corruption, and a potentially exploitable crash. This vulnerability affects Firefox < 78.

CVSS3: 8.8
1%
Низкий
больше 6 лет назад
redhat логотип
CVE-2020-12416

A VideoStreamEncoder may have been freed in a race condition with VideoBroadcaster::AddOrUpdateSink, resulting in a use-after-free, memory corruption, and a potentially exploitable crash. This vulnerability affects Firefox < 78.

CVSS3: 8.8
1%
Низкий
больше 6 лет назад
nvd логотип
CVE-2020-12416

A VideoStreamEncoder may have been freed in a race condition with VideoBroadcaster::AddOrUpdateSink, resulting in a use-after-free, memory corruption, and a potentially exploitable crash. This vulnerability affects Firefox < 78.

CVSS3: 8.8
1%
Низкий
больше 6 лет назад
debian логотип
CVE-2020-12416

A VideoStreamEncoder may have been freed in a race condition with Vide ...

CVSS3: 8.8
1%
Низкий
больше 6 лет назад
ubuntu логотип
CVE-2020-12415

When "%2F" was present in a manifest URL, Firefox's AppCache behavior may have become confused and allowed a manifest to be served from a subdirectory. This could cause the appcache to be used to service requests for the top level directory. This vulnerability affects Firefox < 78.

CVSS3: 6.5
1%
Низкий
больше 6 лет назад
redhat логотип
CVE-2020-12415

When "%2F" was present in a manifest URL, Firefox's AppCache behavior may have become confused and allowed a manifest to be served from a subdirectory. This could cause the appcache to be used to service requests for the top level directory. This vulnerability affects Firefox < 78.

CVSS3: 6.5
1%
Низкий
больше 6 лет назад
nvd логотип
CVE-2020-12415

When "%2F" was present in a manifest URL, Firefox's AppCache behavior may have become confused and allowed a manifest to be served from a subdirectory. This could cause the appcache to be used to service requests for the top level directory. This vulnerability affects Firefox < 78.

CVSS3: 6.5
1%
Низкий
больше 6 лет назад
debian логотип
CVE-2020-12415

When "%2F" was present in a manifest URL, Firefox's AppCache behavior ...

CVSS3: 6.5
1%
Низкий
больше 6 лет назад
ubuntu логотип
CVE-2020-12412

By navigating a tab using the history API, an attacker could cause the address bar to display the incorrect domain (with the https:// scheme, a blocked port number such as '1', and without a lock icon) while controlling the page contents. This vulnerability affects Firefox < 70.

CVSS3: 4.3
1%
Низкий
больше 6 лет назад

Уязвимостей на страницу