Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Поиск уязвимостей

Количество 18 439

Количество 18 439

ubuntu логотип

CVE-2019-11724

больше 7 лет назад

Application permissions give additional remote troubleshooting permission to the site input.mozilla.org, which has been retired and now redirects to another site. This additional permission is unnecessary and is a potential vector for malicious attacks. This vulnerability affects Firefox < 68.

CVSS3: 6.1
EPSS: Низкий
redhat логотип

CVE-2019-11724

больше 7 лет назад

Application permissions give additional remote troubleshooting permission to the site input.mozilla.org, which has been retired and now redirects to another site. This additional permission is unnecessary and is a potential vector for malicious attacks. This vulnerability affects Firefox < 68.

CVSS3: 5.8
EPSS: Низкий
nvd логотип

CVE-2019-11724

больше 7 лет назад

Application permissions give additional remote troubleshooting permission to the site input.mozilla.org, which has been retired and now redirects to another site. This additional permission is unnecessary and is a potential vector for malicious attacks. This vulnerability affects Firefox < 68.

CVSS3: 6.1
EPSS: Низкий
debian логотип

CVE-2019-11724

больше 7 лет назад

Application permissions give additional remote troubleshooting permiss ...

CVSS3: 6.1
EPSS: Низкий
ubuntu логотип

CVE-2019-11723

больше 7 лет назад

A vulnerability exists during the installation of add-ons where the initial fetch ignored the origin attributes of the browsing context. This could leak cookies in private browsing mode or across different "containers" for people who use the Firefox Multi-Account Containers Web Extension. This vulnerability affects Firefox < 68.

CVSS3: 7.5
EPSS: Низкий
redhat логотип

CVE-2019-11723

больше 7 лет назад

A vulnerability exists during the installation of add-ons where the initial fetch ignored the origin attributes of the browsing context. This could leak cookies in private browsing mode or across different "containers" for people who use the Firefox Multi-Account Containers Web Extension. This vulnerability affects Firefox < 68.

CVSS3: 7.5
EPSS: Низкий
nvd логотип

CVE-2019-11723

больше 7 лет назад

A vulnerability exists during the installation of add-ons where the initial fetch ignored the origin attributes of the browsing context. This could leak cookies in private browsing mode or across different "containers" for people who use the Firefox Multi-Account Containers Web Extension. This vulnerability affects Firefox < 68.

CVSS3: 7.5
EPSS: Низкий
debian логотип

CVE-2019-11723

больше 7 лет назад

A vulnerability exists during the installation of add-ons where the in ...

CVSS3: 7.5
EPSS: Низкий
ubuntu логотип

CVE-2019-11721

больше 7 лет назад

The unicode latin 'kra' character can be used to spoof a standard 'k' character in the addressbar. This allows for domain spoofing attacks as do not display as punycode text, allowing for user confusion. This vulnerability affects Firefox < 68.

CVSS3: 6.5
EPSS: Низкий
redhat логотип

CVE-2019-11721

больше 7 лет назад

The unicode latin 'kra' character can be used to spoof a standard 'k' character in the addressbar. This allows for domain spoofing attacks as do not display as punycode text, allowing for user confusion. This vulnerability affects Firefox < 68.

CVSS3: 5.8
EPSS: Низкий
nvd логотип

CVE-2019-11721

больше 7 лет назад

The unicode latin 'kra' character can be used to spoof a standard 'k' character in the addressbar. This allows for domain spoofing attacks as do not display as punycode text, allowing for user confusion. This vulnerability affects Firefox < 68.

CVSS3: 6.5
EPSS: Низкий
debian логотип

CVE-2019-11721

больше 7 лет назад

The unicode latin 'kra' character can be used to spoof a standard 'k' ...

CVSS3: 6.5
EPSS: Низкий
ubuntu логотип

CVE-2019-11720

больше 7 лет назад

Some unicode characters are incorrectly treated as whitespace during the parsing of web content instead of triggering parsing errors. This allows malicious code to then be processed, evading cross-site scripting (XSS) filtering. This vulnerability affects Firefox < 68.

CVSS3: 6.1
EPSS: Низкий
redhat логотип

CVE-2019-11720

больше 7 лет назад

Some unicode characters are incorrectly treated as whitespace during the parsing of web content instead of triggering parsing errors. This allows malicious code to then be processed, evading cross-site scripting (XSS) filtering. This vulnerability affects Firefox < 68.

CVSS3: 5.8
EPSS: Низкий
nvd логотип

CVE-2019-11720

больше 7 лет назад

Some unicode characters are incorrectly treated as whitespace during the parsing of web content instead of triggering parsing errors. This allows malicious code to then be processed, evading cross-site scripting (XSS) filtering. This vulnerability affects Firefox < 68.

CVSS3: 6.1
EPSS: Низкий
debian логотип

CVE-2019-11720

больше 7 лет назад

Some unicode characters are incorrectly treated as whitespace during t ...

CVSS3: 6.1
EPSS: Низкий
ubuntu логотип

CVE-2019-11718

больше 7 лет назад

Activity Stream can display content from sent from the Snippet Service website. This content is written to innerHTML on the Activity Stream page without sanitization, allowing for a potential access to other information available to the Activity Stream, such as browsing history, if the Snipper Service were compromised. This vulnerability affects Firefox < 68.

CVSS3: 5.3
EPSS: Низкий
redhat логотип

CVE-2019-11718

больше 7 лет назад

Activity Stream can display content from sent from the Snippet Service website. This content is written to innerHTML on the Activity Stream page without sanitization, allowing for a potential access to other information available to the Activity Stream, such as browsing history, if the Snipper Service were compromised. This vulnerability affects Firefox < 68.

CVSS3: 5.8
EPSS: Низкий
nvd логотип

CVE-2019-11718

больше 7 лет назад

Activity Stream can display content from sent from the Snippet Service website. This content is written to innerHTML on the Activity Stream page without sanitization, allowing for a potential access to other information available to the Activity Stream, such as browsing history, if the Snipper Service were compromised. This vulnerability affects Firefox < 68.

CVSS3: 5.3
EPSS: Низкий
debian логотип

CVE-2019-11718

больше 7 лет назад

Activity Stream can display content from sent from the Snippet Service ...

CVSS3: 5.3
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2019-11724

Application permissions give additional remote troubleshooting permission to the site input.mozilla.org, which has been retired and now redirects to another site. This additional permission is unnecessary and is a potential vector for malicious attacks. This vulnerability affects Firefox < 68.

CVSS3: 6.1
1%
Низкий
больше 7 лет назад
redhat логотип
CVE-2019-11724

Application permissions give additional remote troubleshooting permission to the site input.mozilla.org, which has been retired and now redirects to another site. This additional permission is unnecessary and is a potential vector for malicious attacks. This vulnerability affects Firefox < 68.

CVSS3: 5.8
1%
Низкий
больше 7 лет назад
nvd логотип
CVE-2019-11724

Application permissions give additional remote troubleshooting permission to the site input.mozilla.org, which has been retired and now redirects to another site. This additional permission is unnecessary and is a potential vector for malicious attacks. This vulnerability affects Firefox < 68.

CVSS3: 6.1
1%
Низкий
больше 7 лет назад
debian логотип
CVE-2019-11724

Application permissions give additional remote troubleshooting permiss ...

CVSS3: 6.1
1%
Низкий
больше 7 лет назад
ubuntu логотип
CVE-2019-11723

A vulnerability exists during the installation of add-ons where the initial fetch ignored the origin attributes of the browsing context. This could leak cookies in private browsing mode or across different "containers" for people who use the Firefox Multi-Account Containers Web Extension. This vulnerability affects Firefox < 68.

CVSS3: 7.5
1%
Низкий
больше 7 лет назад
redhat логотип
CVE-2019-11723

A vulnerability exists during the installation of add-ons where the initial fetch ignored the origin attributes of the browsing context. This could leak cookies in private browsing mode or across different "containers" for people who use the Firefox Multi-Account Containers Web Extension. This vulnerability affects Firefox < 68.

CVSS3: 7.5
1%
Низкий
больше 7 лет назад
nvd логотип
CVE-2019-11723

A vulnerability exists during the installation of add-ons where the initial fetch ignored the origin attributes of the browsing context. This could leak cookies in private browsing mode or across different "containers" for people who use the Firefox Multi-Account Containers Web Extension. This vulnerability affects Firefox < 68.

CVSS3: 7.5
1%
Низкий
больше 7 лет назад
debian логотип
CVE-2019-11723

A vulnerability exists during the installation of add-ons where the in ...

CVSS3: 7.5
1%
Низкий
больше 7 лет назад
ubuntu логотип
CVE-2019-11721

The unicode latin 'kra' character can be used to spoof a standard 'k' character in the addressbar. This allows for domain spoofing attacks as do not display as punycode text, allowing for user confusion. This vulnerability affects Firefox < 68.

CVSS3: 6.5
1%
Низкий
больше 7 лет назад
redhat логотип
CVE-2019-11721

The unicode latin 'kra' character can be used to spoof a standard 'k' character in the addressbar. This allows for domain spoofing attacks as do not display as punycode text, allowing for user confusion. This vulnerability affects Firefox < 68.

CVSS3: 5.8
1%
Низкий
больше 7 лет назад
nvd логотип
CVE-2019-11721

The unicode latin 'kra' character can be used to spoof a standard 'k' character in the addressbar. This allows for domain spoofing attacks as do not display as punycode text, allowing for user confusion. This vulnerability affects Firefox < 68.

CVSS3: 6.5
1%
Низкий
больше 7 лет назад
debian логотип
CVE-2019-11721

The unicode latin 'kra' character can be used to spoof a standard 'k' ...

CVSS3: 6.5
1%
Низкий
больше 7 лет назад
ubuntu логотип
CVE-2019-11720

Some unicode characters are incorrectly treated as whitespace during the parsing of web content instead of triggering parsing errors. This allows malicious code to then be processed, evading cross-site scripting (XSS) filtering. This vulnerability affects Firefox < 68.

CVSS3: 6.1
1%
Низкий
больше 7 лет назад
redhat логотип
CVE-2019-11720

Some unicode characters are incorrectly treated as whitespace during the parsing of web content instead of triggering parsing errors. This allows malicious code to then be processed, evading cross-site scripting (XSS) filtering. This vulnerability affects Firefox < 68.

CVSS3: 5.8
1%
Низкий
больше 7 лет назад
nvd логотип
CVE-2019-11720

Some unicode characters are incorrectly treated as whitespace during the parsing of web content instead of triggering parsing errors. This allows malicious code to then be processed, evading cross-site scripting (XSS) filtering. This vulnerability affects Firefox < 68.

CVSS3: 6.1
1%
Низкий
больше 7 лет назад
debian логотип
CVE-2019-11720

Some unicode characters are incorrectly treated as whitespace during t ...

CVSS3: 6.1
1%
Низкий
больше 7 лет назад
ubuntu логотип
CVE-2019-11718

Activity Stream can display content from sent from the Snippet Service website. This content is written to innerHTML on the Activity Stream page without sanitization, allowing for a potential access to other information available to the Activity Stream, such as browsing history, if the Snipper Service were compromised. This vulnerability affects Firefox < 68.

CVSS3: 5.3
1%
Низкий
больше 7 лет назад
redhat логотип
CVE-2019-11718

Activity Stream can display content from sent from the Snippet Service website. This content is written to innerHTML on the Activity Stream page without sanitization, allowing for a potential access to other information available to the Activity Stream, such as browsing history, if the Snipper Service were compromised. This vulnerability affects Firefox < 68.

CVSS3: 5.8
1%
Низкий
больше 7 лет назад
nvd логотип
CVE-2019-11718

Activity Stream can display content from sent from the Snippet Service website. This content is written to innerHTML on the Activity Stream page without sanitization, allowing for a potential access to other information available to the Activity Stream, such as browsing history, if the Snipper Service were compromised. This vulnerability affects Firefox < 68.

CVSS3: 5.3
1%
Низкий
больше 7 лет назад
debian логотип
CVE-2019-11718

Activity Stream can display content from sent from the Snippet Service ...

CVSS3: 5.3
1%
Низкий
больше 7 лет назад

Уязвимостей на страницу