Поиск уязвимостей
Количество 17
Количество 17
BDU:2022-04380
Уязвимость браузеров Firefox, Firefox ESR и почтового клиента Thunderbird, связанная с ошибками отображения символа % в директориях %HOMEPATH% и %APPDATA%, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код
ALT-PU-2022-2000
ALT-PU-2022-2000: package `firefox-esr` update to version 91.10.0-alt0.p10.1
ALT-PU-2022-1995
ALT-PU-2022-1995: package `firefox-esr` update to version 91.10.0-alt1
CVE-2022-31739
When downloading files on Windows, the % character was not escaped, which could have lead to a download incorrectly being saved to attacker-influenced paths that used variables such as %HOMEPATH% or %APPDATA%.<br>*This bug only affects Firefox for Windows. Other operating systems are unaffected.*. This vulnerability affects Thunderbird < 91.10, Firefox < 101, and Firefox ESR < 91.10.
CVE-2022-31739
When downloading files on Windows, the % character was not escaped, which could have lead to a download incorrectly being saved to attacker-influenced paths that used variables such as %HOMEPATH% or %APPDATA%.<br>*This bug only affects Firefox for Windows. Other operating systems are unaffected.*. This vulnerability affects Thunderbird < 91.10, Firefox < 101, and Firefox ESR < 91.10.
CVE-2022-31739
When downloading files on Windows, the % character was not escaped, which could have lead to a download incorrectly being saved to attacker-influenced paths that used variables such as %HOMEPATH% or %APPDATA%.<br>*This bug only affects Firefox for Windows. Other operating systems are unaffected.*. This vulnerability affects Thunderbird < 91.10, Firefox < 101, and Firefox ESR < 91.10.
CVE-2022-31739
When downloading files on Windows, the % character was not escaped, wh ...
ALT-PU-2022-2006
ALT-PU-2022-2006: package `thunderbird` update to version 91.10.0-alt0.p10.1
ALT-PU-2022-1996
ALT-PU-2022-1996: package `thunderbird` update to version 91.10.0-alt1
ALT-PU-2022-1988
ALT-PU-2022-1988: package `firefox` update to version 101.0-alt1
GHSA-w6x2-rcr6-2hh6
When downloading files on Windows, the % character was not escaped, which could have lead to a download incorrectly being saved to attacker-influenced paths that used variables such as %HOMEPATH% or %APPDATA%.<br>*This bug only affects Firefox for Windows. Other operating systems are unaffected.*. This vulnerability affects Thunderbird < 91.10, Firefox < 101, and Firefox ESR < 91.10.
SUSE-SU-2022:1927-1
Security update for MozillaFirefox
SUSE-SU-2022:1921-1
Security update for MozillaFirefox
SUSE-SU-2022:1920-1
Security update for MozillaFirefox
ALT-PU-2021-2739
ALT-PU-2021-2739: package `firefox` update to version 92.0-alt1
SUSE-SU-2022:2062-1
Security update for MozillaThunderbird
ALT-PU-2022-2930
ALT-PU-2022-2930: package `firefox` update to version 105.0.1-alt0.p10.1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2022-04380 Уязвимость браузеров Firefox, Firefox ESR и почтового клиента Thunderbird, связанная с ошибками отображения символа % в директориях %HOMEPATH% и %APPDATA%, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код | CVSS3: 7.5 | 1% Низкий | больше 4 лет назад |
| ALT-PU-2022-2000 ALT-PU-2022-2000: package `firefox-esr` update to version 91.10.0-alt0.p10.1 | CVSS3: 9.8 | больше 4 лет назад | |
| ALT-PU-2022-1995 ALT-PU-2022-1995: package `firefox-esr` update to version 91.10.0-alt1 | CVSS3: 9.8 | больше 4 лет назад | |
 | CVE-2022-31739 When downloading files on Windows, the % character was not escaped, which could have lead to a download incorrectly being saved to attacker-influenced paths that used variables such as %HOMEPATH% or %APPDATA%.<br>*This bug only affects Firefox for Windows. Other operating systems are unaffected.*. This vulnerability affects Thunderbird < 91.10, Firefox < 101, and Firefox ESR < 91.10. | CVSS3: 8.8 | 1% Низкий | почти 4 года назад |
 | CVE-2022-31739 When downloading files on Windows, the % character was not escaped, which could have lead to a download incorrectly being saved to attacker-influenced paths that used variables such as %HOMEPATH% or %APPDATA%.<br>*This bug only affects Firefox for Windows. Other operating systems are unaffected.*. This vulnerability affects Thunderbird < 91.10, Firefox < 101, and Firefox ESR < 91.10. | CVSS3: 7.5 | 1% Низкий | больше 4 лет назад |
 | CVE-2022-31739 When downloading files on Windows, the % character was not escaped, which could have lead to a download incorrectly being saved to attacker-influenced paths that used variables such as %HOMEPATH% or %APPDATA%.<br>*This bug only affects Firefox for Windows. Other operating systems are unaffected.*. This vulnerability affects Thunderbird < 91.10, Firefox < 101, and Firefox ESR < 91.10. | CVSS3: 8.8 | 1% Низкий | почти 4 года назад |
| CVE-2022-31739 When downloading files on Windows, the % character was not escaped, wh ... | CVSS3: 8.8 | 1% Низкий | почти 4 года назад |
| ALT-PU-2022-2006 ALT-PU-2022-2006: package `thunderbird` update to version 91.10.0-alt0.p10.1 | CVSS3: 9.8 | больше 4 лет назад | |
| ALT-PU-2022-1996 ALT-PU-2022-1996: package `thunderbird` update to version 91.10.0-alt1 | CVSS3: 9.8 | больше 4 лет назад | |
| ALT-PU-2022-1988 ALT-PU-2022-1988: package `firefox` update to version 101.0-alt1 | CVSS3: 9.8 | больше 4 лет назад | |
| GHSA-w6x2-rcr6-2hh6 When downloading files on Windows, the % character was not escaped, which could have lead to a download incorrectly being saved to attacker-influenced paths that used variables such as %HOMEPATH% or %APPDATA%.<br>*This bug only affects Firefox for Windows. Other operating systems are unaffected.*. This vulnerability affects Thunderbird < 91.10, Firefox < 101, and Firefox ESR < 91.10. | CVSS3: 8.8 | 1% Низкий | почти 4 года назад |
 | SUSE-SU-2022:1927-1 Security update for MozillaFirefox | больше 4 лет назад | ||
| SUSE-SU-2022:1921-1 Security update for MozillaFirefox | больше 4 лет назад | ||
| SUSE-SU-2022:1920-1 Security update for MozillaFirefox | больше 4 лет назад | ||
| ALT-PU-2021-2739 ALT-PU-2021-2739: package `firefox` update to version 92.0-alt1 | CVSS3: 10 | около 5 лет назад | |
| SUSE-SU-2022:2062-1 Security update for MozillaThunderbird | больше 4 лет назад | ||
| ALT-PU-2022-2930 ALT-PU-2022-2930: package `firefox` update to version 105.0.1-alt0.p10.1 | CVSS3: 10 | около 4 лет назад |
Уязвимостей на страницу