Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Поиск уязвимостей

Количество 7

Количество 7

fstec логотип

BDU:2020-00593

больше 7 лет назад

Уязвимость браузера Firefox, связанная с отсутствием защиты служебных данных, позволяющая нарушителю получить доступ к конфиденциальным данным

CVSS3: 7.5
EPSS: Низкий
ubuntu логотип

CVE-2019-9802

больше 7 лет назад

If a Sandbox content process is compromised, it can initiate an FTP download which will then use a child process to render the downloaded data. The downloaded data can then be passed to the Chrome process with an arbitrary file length supplied by an attacker, bypassing sandbox protections and allow for a potential memory read of adjacent data from the privileged Chrome process, which may include sensitive data. This vulnerability affects Firefox < 66.

CVSS3: 7.5
EPSS: Низкий
nvd логотип

CVE-2019-9802

больше 7 лет назад

If a Sandbox content process is compromised, it can initiate an FTP download which will then use a child process to render the downloaded data. The downloaded data can then be passed to the Chrome process with an arbitrary file length supplied by an attacker, bypassing sandbox protections and allow for a potential memory read of adjacent data from the privileged Chrome process, which may include sensitive data. This vulnerability affects Firefox < 66.

CVSS3: 7.5
EPSS: Низкий
debian логотип

CVE-2019-9802

больше 7 лет назад

If a Sandbox content process is compromised, it can initiate an FTP do ...

CVSS3: 7.5
EPSS: Низкий
github логотип

GHSA-r3xx-53c7-m93v

больше 4 лет назад

If a Sandbox content process is compromised, it can initiate an FTP download which will then use a child process to render the downloaded data. The downloaded data can then be passed to the Chrome process with an arbitrary file length supplied by an attacker, bypassing sandbox protections and allow for a potential memory read of adjacent data from the privileged Chrome process, which may include sensitive data. This vulnerability affects Firefox < 66.

EPSS: Низкий
altlinux логотип

ALT-PU-2019-1561

больше 7 лет назад

ALT-PU-2019-1561: package `firefox` update to version 66.0.1-alt1

CVSS3: 9.8
EPSS: Низкий
altlinux логотип

ALT-PU-2019-2324

больше 7 лет назад

ALT-PU-2019-2324: package `firefox-esr` update to version 68.0.1-alt1

CVSS3: 9.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
fstec логотип
BDU:2020-00593

Уязвимость браузера Firefox, связанная с отсутствием защиты служебных данных, позволяющая нарушителю получить доступ к конфиденциальным данным

CVSS3: 7.5
1%
Низкий
больше 7 лет назад
ubuntu логотип
CVE-2019-9802

If a Sandbox content process is compromised, it can initiate an FTP download which will then use a child process to render the downloaded data. The downloaded data can then be passed to the Chrome process with an arbitrary file length supplied by an attacker, bypassing sandbox protections and allow for a potential memory read of adjacent data from the privileged Chrome process, which may include sensitive data. This vulnerability affects Firefox < 66.

CVSS3: 7.5
1%
Низкий
больше 7 лет назад
nvd логотип
CVE-2019-9802

If a Sandbox content process is compromised, it can initiate an FTP download which will then use a child process to render the downloaded data. The downloaded data can then be passed to the Chrome process with an arbitrary file length supplied by an attacker, bypassing sandbox protections and allow for a potential memory read of adjacent data from the privileged Chrome process, which may include sensitive data. This vulnerability affects Firefox < 66.

CVSS3: 7.5
1%
Низкий
больше 7 лет назад
debian логотип
CVE-2019-9802

If a Sandbox content process is compromised, it can initiate an FTP do ...

CVSS3: 7.5
1%
Низкий
больше 7 лет назад
github логотип
GHSA-r3xx-53c7-m93v

If a Sandbox content process is compromised, it can initiate an FTP download which will then use a child process to render the downloaded data. The downloaded data can then be passed to the Chrome process with an arbitrary file length supplied by an attacker, bypassing sandbox protections and allow for a potential memory read of adjacent data from the privileged Chrome process, which may include sensitive data. This vulnerability affects Firefox < 66.

1%
Низкий
больше 4 лет назад
altlinux логотип
ALT-PU-2019-1561

ALT-PU-2019-1561: package `firefox` update to version 66.0.1-alt1

CVSS3: 9.8
больше 7 лет назад
altlinux логотип
ALT-PU-2019-2324

ALT-PU-2019-2324: package `firefox-esr` update to version 68.0.1-alt1

CVSS3: 9.8
больше 7 лет назад

Уязвимостей на страницу