Поиск уязвимостей
Количество 16
Количество 16
BDU:2020-00603
Уязвимость компонента window.globalThis браузера Firefox, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
CVE-2019-11716
Until explicitly accessed by script, window.globalThis is not enumerable and, as a result, is not visible to code such as Object.getOwnPropertyNames(window). Sites that deploy a sandboxing that depends on enumerating and freezing access to the window object may miss this, allowing their sandboxes to be bypassed. This vulnerability affects Firefox < 68.
CVE-2019-11716
Until explicitly accessed by script, window.globalThis is not enumerable and, as a result, is not visible to code such as Object.getOwnPropertyNames(window). Sites that deploy a sandboxing that depends on enumerating and freezing access to the window object may miss this, allowing their sandboxes to be bypassed. This vulnerability affects Firefox < 68.
CVE-2019-11716
Until explicitly accessed by script, window.globalThis is not enumerable and, as a result, is not visible to code such as Object.getOwnPropertyNames(window). Sites that deploy a sandboxing that depends on enumerating and freezing access to the window object may miss this, allowing their sandboxes to be bypassed. This vulnerability affects Firefox < 68.
CVE-2019-11716
Until explicitly accessed by script, window.globalThis is not enumerab ...
GHSA-3mrp-wph9-cw58
Until explicitly accessed by script, window.globalThis is not enumerable and, as a result, is not visible to code such as Object.getOwnPropertyNames(window). Sites that deploy a sandboxing that depends on enumerating and freezing access to the window object may miss this, allowing their sandboxes to be bypassed. This vulnerability affects Firefox < 68.
ALT-PU-2019-2301
ALT-PU-2019-2301: package `firefox` update to version 68.0-alt1
ALT-PU-2019-2324
ALT-PU-2019-2324: package `firefox-esr` update to version 68.0.1-alt1
openSUSE-SU-2019:2249-1
Security update for MozillaThunderbird
openSUSE-SU-2019:2248-1
Security update for MozillaThunderbird
SUSE-SU-2019:2515-1
Security update for MozillaThunderbird
openSUSE-SU-2019:2260-1
Security update for MozillaFirefox
openSUSE-SU-2019:2251-1
Security update for MozillaFirefox
SUSE-SU-2019:2545-1
Security update for MozillaFirefox
SUSE-SU-2019:2620-1
Security update for MozillaFirefox
SUSE-SU-2019:14246-1
Security update for Mozilla Firefox
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2020-00603 Уязвимость компонента window.globalThis браузера Firefox, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании | CVSS3: 8.3 | 1% Низкий | больше 7 лет назад |
 | CVE-2019-11716 Until explicitly accessed by script, window.globalThis is not enumerable and, as a result, is not visible to code such as Object.getOwnPropertyNames(window). Sites that deploy a sandboxing that depends on enumerating and freezing access to the window object may miss this, allowing their sandboxes to be bypassed. This vulnerability affects Firefox < 68. | CVSS3: 8.3 | 1% Низкий | больше 7 лет назад |
 | CVE-2019-11716 Until explicitly accessed by script, window.globalThis is not enumerable and, as a result, is not visible to code such as Object.getOwnPropertyNames(window). Sites that deploy a sandboxing that depends on enumerating and freezing access to the window object may miss this, allowing their sandboxes to be bypassed. This vulnerability affects Firefox < 68. | CVSS3: 8.3 | 1% Низкий | больше 7 лет назад |
 | CVE-2019-11716 Until explicitly accessed by script, window.globalThis is not enumerable and, as a result, is not visible to code such as Object.getOwnPropertyNames(window). Sites that deploy a sandboxing that depends on enumerating and freezing access to the window object may miss this, allowing their sandboxes to be bypassed. This vulnerability affects Firefox < 68. | CVSS3: 8.3 | 1% Низкий | больше 7 лет назад |
| CVE-2019-11716 Until explicitly accessed by script, window.globalThis is not enumerab ... | CVSS3: 8.3 | 1% Низкий | больше 7 лет назад |
| GHSA-3mrp-wph9-cw58 Until explicitly accessed by script, window.globalThis is not enumerable and, as a result, is not visible to code such as Object.getOwnPropertyNames(window). Sites that deploy a sandboxing that depends on enumerating and freezing access to the window object may miss this, allowing their sandboxes to be bypassed. This vulnerability affects Firefox < 68. | CVSS3: 8.3 | 1% Низкий | больше 4 лет назад |
| ALT-PU-2019-2301 ALT-PU-2019-2301: package `firefox` update to version 68.0-alt1 | CVSS3: 9.8 | больше 7 лет назад | |
| ALT-PU-2019-2324 ALT-PU-2019-2324: package `firefox-esr` update to version 68.0.1-alt1 | CVSS3: 9.8 | больше 7 лет назад | |
 | openSUSE-SU-2019:2249-1 Security update for MozillaThunderbird | около 7 лет назад | ||
| openSUSE-SU-2019:2248-1 Security update for MozillaThunderbird | около 7 лет назад | ||
| SUSE-SU-2019:2515-1 Security update for MozillaThunderbird | около 7 лет назад | ||
| openSUSE-SU-2019:2260-1 Security update for MozillaFirefox | около 7 лет назад | ||
| openSUSE-SU-2019:2251-1 Security update for MozillaFirefox | около 7 лет назад | ||
| SUSE-SU-2019:2545-1 Security update for MozillaFirefox | около 7 лет назад | ||
| SUSE-SU-2019:2620-1 Security update for MozillaFirefox | около 7 лет назад | ||
| SUSE-SU-2019:14246-1 Security update for Mozilla Firefox | почти 7 лет назад |
Уязвимостей на страницу