Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Поиск уязвимостей

Количество 18 439

Количество 18 439

ubuntu логотип

CVE-2018-5092

больше 8 лет назад

A use-after-free vulnerability can occur when the thread for a Web Worker is freed from memory prematurely instead of from memory in the main thread while cancelling fetch operations. This vulnerability affects Firefox < 58.

CVSS3: 9.8
EPSS: Низкий
nvd логотип

CVE-2018-5092

больше 8 лет назад

A use-after-free vulnerability can occur when the thread for a Web Worker is freed from memory prematurely instead of from memory in the main thread while cancelling fetch operations. This vulnerability affects Firefox < 58.

CVSS3: 9.8
EPSS: Низкий
debian логотип

CVE-2018-5092

больше 8 лет назад

A use-after-free vulnerability can occur when the thread for a Web Wor ...

CVSS3: 9.8
EPSS: Низкий
ubuntu логотип

CVE-2018-5091

больше 8 лет назад

A use-after-free vulnerability can occur during WebRTC connections when interacting with the DTMF timers. This results in a potentially exploitable crash. This vulnerability affects Firefox ESR < 52.6 and Firefox < 58.

CVSS3: 9.8
EPSS: Низкий
redhat логотип

CVE-2018-5091

почти 9 лет назад

A use-after-free vulnerability can occur during WebRTC connections when interacting with the DTMF timers. This results in a potentially exploitable crash. This vulnerability affects Firefox ESR < 52.6 and Firefox < 58.

CVSS3: 9.8
EPSS: Низкий
nvd логотип

CVE-2018-5091

больше 8 лет назад

A use-after-free vulnerability can occur during WebRTC connections when interacting with the DTMF timers. This results in a potentially exploitable crash. This vulnerability affects Firefox ESR < 52.6 and Firefox < 58.

CVSS3: 9.8
EPSS: Низкий
debian логотип

CVE-2018-5091

больше 8 лет назад

A use-after-free vulnerability can occur during WebRTC connections whe ...

CVSS3: 9.8
EPSS: Низкий
ubuntu логотип

CVE-2018-5090

больше 8 лет назад

Memory safety bugs were reported in Firefox 57. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 58.

CVSS3: 9.8
EPSS: Низкий
nvd логотип

CVE-2018-5090

больше 8 лет назад

Memory safety bugs were reported in Firefox 57. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 58.

CVSS3: 9.8
EPSS: Низкий
debian логотип

CVE-2018-5090

больше 8 лет назад

Memory safety bugs were reported in Firefox 57. Some of these bugs sho ...

CVSS3: 9.8
EPSS: Низкий
ubuntu логотип

CVE-2018-18511

больше 7 лет назад

Cross-origin images can be read from a canvas element in violation of the same-origin policy using the transferFromImageBitmap method. *Note: This only affects Firefox 65. Previous versions are unaffected.*. This vulnerability affects Firefox < 65.0.1.

CVSS3: 4.3
EPSS: Низкий
redhat логотип

CVE-2018-18511

почти 8 лет назад

Cross-origin images can be read from a canvas element in violation of the same-origin policy using the transferFromImageBitmap method. *Note: This only affects Firefox 65. Previous versions are unaffected.*. This vulnerability affects Firefox < 65.0.1.

CVSS3: 4.3
EPSS: Низкий
nvd логотип

CVE-2018-18511

больше 7 лет назад

Cross-origin images can be read from a canvas element in violation of the same-origin policy using the transferFromImageBitmap method. *Note: This only affects Firefox 65. Previous versions are unaffected.*. This vulnerability affects Firefox < 65.0.1.

CVSS3: 4.3
EPSS: Низкий
debian логотип

CVE-2018-18511

больше 7 лет назад

Cross-origin images can be read from a canvas element in violation of ...

CVSS3: 4.3
EPSS: Низкий
ubuntu логотип

CVE-2018-18510

больше 7 лет назад

The about:crashcontent and about:crashparent pages can be triggered by web content. These pages are used to crash the loaded page or the browser for test purposes. This issue allows for a non-persistent denial of service (DOS) attack by a malicious site which links to these pages. This vulnerability affects Firefox < 64.

CVSS3: 6.5
EPSS: Низкий
redhat логотип

CVE-2018-18510

почти 8 лет назад

The about:crashcontent and about:crashparent pages can be triggered by web content. These pages are used to crash the loaded page or the browser for test purposes. This issue allows for a non-persistent denial of service (DOS) attack by a malicious site which links to these pages. This vulnerability affects Firefox < 64.

CVSS3: 6.5
EPSS: Низкий
nvd логотип

CVE-2018-18510

больше 7 лет назад

The about:crashcontent and about:crashparent pages can be triggered by web content. These pages are used to crash the loaded page or the browser for test purposes. This issue allows for a non-persistent denial of service (DOS) attack by a malicious site which links to these pages. This vulnerability affects Firefox < 64.

CVSS3: 6.5
EPSS: Низкий
debian логотип

CVE-2018-18510

больше 7 лет назад

The about:crashcontent and about:crashparent pages can be triggered by ...

CVSS3: 6.5
EPSS: Низкий
ubuntu логотип

CVE-2018-18506

почти 8 лет назад

When proxy auto-detection is enabled, if a web server serves a Proxy Auto-Configuration (PAC) file or if a PAC file is loaded locally, this PAC file can specify that requests to the localhost are to be sent through the proxy to another server. This behavior is disallowed by default when a proxy is manually configured, but when enabled could allow for attacks on services and tools that bind to the localhost for networked behavior if they are accessed through browsing. This vulnerability affects Firefox < 65.

CVSS3: 5.9
EPSS: Низкий
redhat логотип

CVE-2018-18506

больше 7 лет назад

When proxy auto-detection is enabled, if a web server serves a Proxy Auto-Configuration (PAC) file or if a PAC file is loaded locally, this PAC file can specify that requests to the localhost are to be sent through the proxy to another server. This behavior is disallowed by default when a proxy is manually configured, but when enabled could allow for attacks on services and tools that bind to the localhost for networked behavior if they are accessed through browsing. This vulnerability affects Firefox < 65.

CVSS3: 6.1
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2018-5092

A use-after-free vulnerability can occur when the thread for a Web Worker is freed from memory prematurely instead of from memory in the main thread while cancelling fetch operations. This vulnerability affects Firefox < 58.

CVSS3: 9.8
2%
Низкий
больше 8 лет назад
nvd логотип
CVE-2018-5092

A use-after-free vulnerability can occur when the thread for a Web Worker is freed from memory prematurely instead of from memory in the main thread while cancelling fetch operations. This vulnerability affects Firefox < 58.

CVSS3: 9.8
2%
Низкий
больше 8 лет назад
debian логотип
CVE-2018-5092

A use-after-free vulnerability can occur when the thread for a Web Wor ...

CVSS3: 9.8
2%
Низкий
больше 8 лет назад
ubuntu логотип
CVE-2018-5091

A use-after-free vulnerability can occur during WebRTC connections when interacting with the DTMF timers. This results in a potentially exploitable crash. This vulnerability affects Firefox ESR < 52.6 and Firefox < 58.

CVSS3: 9.8
3%
Низкий
больше 8 лет назад
redhat логотип
CVE-2018-5091

A use-after-free vulnerability can occur during WebRTC connections when interacting with the DTMF timers. This results in a potentially exploitable crash. This vulnerability affects Firefox ESR < 52.6 and Firefox < 58.

CVSS3: 9.8
3%
Низкий
почти 9 лет назад
nvd логотип
CVE-2018-5091

A use-after-free vulnerability can occur during WebRTC connections when interacting with the DTMF timers. This results in a potentially exploitable crash. This vulnerability affects Firefox ESR < 52.6 and Firefox < 58.

CVSS3: 9.8
3%
Низкий
больше 8 лет назад
debian логотип
CVE-2018-5091

A use-after-free vulnerability can occur during WebRTC connections whe ...

CVSS3: 9.8
3%
Низкий
больше 8 лет назад
ubuntu логотип
CVE-2018-5090

Memory safety bugs were reported in Firefox 57. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 58.

CVSS3: 9.8
2%
Низкий
больше 8 лет назад
nvd логотип
CVE-2018-5090

Memory safety bugs were reported in Firefox 57. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 58.

CVSS3: 9.8
2%
Низкий
больше 8 лет назад
debian логотип
CVE-2018-5090

Memory safety bugs were reported in Firefox 57. Some of these bugs sho ...

CVSS3: 9.8
2%
Низкий
больше 8 лет назад
ubuntu логотип
CVE-2018-18511

Cross-origin images can be read from a canvas element in violation of the same-origin policy using the transferFromImageBitmap method. *Note: This only affects Firefox 65. Previous versions are unaffected.*. This vulnerability affects Firefox < 65.0.1.

CVSS3: 4.3
2%
Низкий
больше 7 лет назад
redhat логотип
CVE-2018-18511

Cross-origin images can be read from a canvas element in violation of the same-origin policy using the transferFromImageBitmap method. *Note: This only affects Firefox 65. Previous versions are unaffected.*. This vulnerability affects Firefox < 65.0.1.

CVSS3: 4.3
2%
Низкий
почти 8 лет назад
nvd логотип
CVE-2018-18511

Cross-origin images can be read from a canvas element in violation of the same-origin policy using the transferFromImageBitmap method. *Note: This only affects Firefox 65. Previous versions are unaffected.*. This vulnerability affects Firefox < 65.0.1.

CVSS3: 4.3
2%
Низкий
больше 7 лет назад
debian логотип
CVE-2018-18511

Cross-origin images can be read from a canvas element in violation of ...

CVSS3: 4.3
2%
Низкий
больше 7 лет назад
ubuntu логотип
CVE-2018-18510

The about:crashcontent and about:crashparent pages can be triggered by web content. These pages are used to crash the loaded page or the browser for test purposes. This issue allows for a non-persistent denial of service (DOS) attack by a malicious site which links to these pages. This vulnerability affects Firefox < 64.

CVSS3: 6.5
1%
Низкий
больше 7 лет назад
redhat логотип
CVE-2018-18510

The about:crashcontent and about:crashparent pages can be triggered by web content. These pages are used to crash the loaded page or the browser for test purposes. This issue allows for a non-persistent denial of service (DOS) attack by a malicious site which links to these pages. This vulnerability affects Firefox < 64.

CVSS3: 6.5
1%
Низкий
почти 8 лет назад
nvd логотип
CVE-2018-18510

The about:crashcontent and about:crashparent pages can be triggered by web content. These pages are used to crash the loaded page or the browser for test purposes. This issue allows for a non-persistent denial of service (DOS) attack by a malicious site which links to these pages. This vulnerability affects Firefox < 64.

CVSS3: 6.5
1%
Низкий
больше 7 лет назад
debian логотип
CVE-2018-18510

The about:crashcontent and about:crashparent pages can be triggered by ...

CVSS3: 6.5
1%
Низкий
больше 7 лет назад
ubuntu логотип
CVE-2018-18506

When proxy auto-detection is enabled, if a web server serves a Proxy Auto-Configuration (PAC) file or if a PAC file is loaded locally, this PAC file can specify that requests to the localhost are to be sent through the proxy to another server. This behavior is disallowed by default when a proxy is manually configured, but when enabled could allow for attacks on services and tools that bind to the localhost for networked behavior if they are accessed through browsing. This vulnerability affects Firefox < 65.

CVSS3: 5.9
2%
Низкий
почти 8 лет назад
redhat логотип
CVE-2018-18506

When proxy auto-detection is enabled, if a web server serves a Proxy Auto-Configuration (PAC) file or if a PAC file is loaded locally, this PAC file can specify that requests to the localhost are to be sent through the proxy to another server. This behavior is disallowed by default when a proxy is manually configured, but when enabled could allow for attacks on services and tools that bind to the localhost for networked behavior if they are accessed through browsing. This vulnerability affects Firefox < 65.

CVSS3: 6.1
2%
Низкий
больше 7 лет назад

Уязвимостей на страницу