Логотип exploitDog
bind:"BDU:2020-01822" OR bind:"CVE-2019-11738"
Консоль
Логотип exploitDog

exploitDog

bind:"BDU:2020-01822" OR bind:"CVE-2019-11738"

Количество 12

Количество 12

fstec логотип

BDU:2020-01822

около 6 лет назад

Уязвимость браузера Firefox, связанная с неправильными стандартными правами доступа, позволяющая нарушителю выполнить произвольный код

CVSS3: 8.8
EPSS: Низкий
ubuntu логотип

CVE-2019-11738

около 6 лет назад

If a Content Security Policy (CSP) directive is defined that uses a hash-based source that takes the empty string as input, execution of any javascript: URIs will be allowed. This could allow for malicious JavaScript content to be run, bypassing CSP permissions. This vulnerability affects Firefox < 69 and Firefox ESR < 68.1.

CVSS3: 6.3
EPSS: Низкий
redhat логотип

CVE-2019-11738

около 6 лет назад

If a Content Security Policy (CSP) directive is defined that uses a hash-based source that takes the empty string as input, execution of any javascript: URIs will be allowed. This could allow for malicious JavaScript content to be run, bypassing CSP permissions. This vulnerability affects Firefox < 69 and Firefox ESR < 68.1.

CVSS3: 5.8
EPSS: Низкий
nvd логотип

CVE-2019-11738

около 6 лет назад

If a Content Security Policy (CSP) directive is defined that uses a hash-based source that takes the empty string as input, execution of any javascript: URIs will be allowed. This could allow for malicious JavaScript content to be run, bypassing CSP permissions. This vulnerability affects Firefox < 69 and Firefox ESR < 68.1.

CVSS3: 6.3
EPSS: Низкий
debian логотип

CVE-2019-11738

около 6 лет назад

If a Content Security Policy (CSP) directive is defined that uses a ha ...

CVSS3: 6.3
EPSS: Низкий
github логотип

GHSA-v2rv-c5w8-f538

больше 3 лет назад

If a Content Security Policy (CSP) directive is defined that uses a hash-based source that takes the empty string as input, execution of any javascript: URIs will be allowed. This could allow for malicious JavaScript content to be run, bypassing CSP permissions. This vulnerability affects Firefox < 69 and Firefox ESR < 68.1.

CVSS3: 6.3
EPSS: Низкий
oracle-oval логотип

ELSA-2019-2663

около 6 лет назад

ELSA-2019-2663: firefox security update (CRITICAL)

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2019:2260-1

около 6 лет назад

Security update for MozillaFirefox

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2019:2251-1

около 6 лет назад

Security update for MozillaFirefox

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2019:2545-1

около 6 лет назад

Security update for MozillaFirefox

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2019:2620-1

около 6 лет назад

Security update for MozillaFirefox

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2019:14246-1

почти 6 лет назад

Security update for Mozilla Firefox

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
fstec логотип
BDU:2020-01822

Уязвимость браузера Firefox, связанная с неправильными стандартными правами доступа, позволяющая нарушителю выполнить произвольный код

CVSS3: 8.8
1%
Низкий
около 6 лет назад
ubuntu логотип
CVE-2019-11738

If a Content Security Policy (CSP) directive is defined that uses a hash-based source that takes the empty string as input, execution of any javascript: URIs will be allowed. This could allow for malicious JavaScript content to be run, bypassing CSP permissions. This vulnerability affects Firefox < 69 and Firefox ESR < 68.1.

CVSS3: 6.3
1%
Низкий
около 6 лет назад
redhat логотип
CVE-2019-11738

If a Content Security Policy (CSP) directive is defined that uses a hash-based source that takes the empty string as input, execution of any javascript: URIs will be allowed. This could allow for malicious JavaScript content to be run, bypassing CSP permissions. This vulnerability affects Firefox < 69 and Firefox ESR < 68.1.

CVSS3: 5.8
1%
Низкий
около 6 лет назад
nvd логотип
CVE-2019-11738

If a Content Security Policy (CSP) directive is defined that uses a hash-based source that takes the empty string as input, execution of any javascript: URIs will be allowed. This could allow for malicious JavaScript content to be run, bypassing CSP permissions. This vulnerability affects Firefox < 69 and Firefox ESR < 68.1.

CVSS3: 6.3
1%
Низкий
около 6 лет назад
debian логотип
CVE-2019-11738

If a Content Security Policy (CSP) directive is defined that uses a ha ...

CVSS3: 6.3
1%
Низкий
около 6 лет назад
github логотип
GHSA-v2rv-c5w8-f538

If a Content Security Policy (CSP) directive is defined that uses a hash-based source that takes the empty string as input, execution of any javascript: URIs will be allowed. This could allow for malicious JavaScript content to be run, bypassing CSP permissions. This vulnerability affects Firefox < 69 and Firefox ESR < 68.1.

CVSS3: 6.3
1%
Низкий
больше 3 лет назад
oracle-oval логотип
ELSA-2019-2663

ELSA-2019-2663: firefox security update (CRITICAL)

около 6 лет назад
suse-cvrf логотип
openSUSE-SU-2019:2260-1

Security update for MozillaFirefox

около 6 лет назад
suse-cvrf логотип
openSUSE-SU-2019:2251-1

Security update for MozillaFirefox

около 6 лет назад
suse-cvrf логотип
SUSE-SU-2019:2545-1

Security update for MozillaFirefox

около 6 лет назад
suse-cvrf логотип
SUSE-SU-2019:2620-1

Security update for MozillaFirefox

около 6 лет назад
suse-cvrf логотип
SUSE-SU-2019:14246-1

Security update for Mozilla Firefox

почти 6 лет назад

Уязвимостей на страницу