Поиск уязвимостей
Количество 29
Количество 29
BDU:2025-07582
Уязвимость компонента HTTP Header Handler браузеров Mozilla Firefox, Firefox ESR, позволяющая нарушителю проводить межсайтовые сценарные атаки (XSS)
CVE-2025-6430
When a file download is specified via the `Content-Disposition` header, that directive would be ignored if the file was included via a `<embed>` or `<object>` tag, potentially making a website vulnerable to a cross-site scripting attack. This vulnerability was fixed in Firefox 140, Firefox ESR 128.12, Thunderbird 140, and Thunderbird 128.12.
CVE-2025-6430
When a file download is specified via the `Content-Disposition` header, that directive would be ignored if the file was included via a `<embed>` or `<object>` tag, potentially making a website vulnerable to a cross-site scripting attack. This vulnerability was fixed in Firefox 140, Firefox ESR 128.12, Thunderbird 140, and Thunderbird 128.12.
CVE-2025-6430
When a file download is specified via the `Content-Disposition` header, that directive would be ignored if the file was included via a `<embed>` or `<object>` tag, potentially making a website vulnerable to a cross-site scripting attack. This vulnerability was fixed in Firefox 140, Firefox ESR 128.12, Thunderbird 140, and Thunderbird 128.12.
CVE-2025-6430
When a file download is specified via the `Content-Disposition` header ...
GHSA-fvqv-c5hj-jcrp
When a file download is specified via the `Content-Disposition` header, that directive would be ignored if the file was included via a `<embed>` or `<object>` tag, potentially making a website vulnerable to a cross-site scripting attack. This vulnerability affects Firefox < 140 and Firefox ESR < 128.12.
ALT-PU-2025-8725
ALT-PU-2025-8725: package `firefox` update to version 140.0.2-alt1
ALT-PU-2025-9988
ALT-PU-2025-9988: package `thunderbird` update to version 141.0-alt1
ALT-PU-2025-11497
ALT-PU-2025-11497: package `firefox` update to version 141.0.2-alt0.p10.1
RLSA-2025:10074
Important: firefox security update
RLSA-2025:10073
Important: firefox security update
RLSA-2025:10072
Important: firefox security update
ELSA-2025-10181
ELSA-2025-10181: firefox security update (IMPORTANT)
ELSA-2025-10074
ELSA-2025-10074: firefox security update (IMPORTANT)
ELSA-2025-10073
ELSA-2025-10073: firefox security update (IMPORTANT)
ELSA-2025-10072
ELSA-2025-10072: firefox security update (IMPORTANT)
SUSE-SU-2025:02368-1
Security update for MozillaThunderbird
SUSE-SU-2025:02123-1
Security update for MozillaFirefox
SUSE-SU-2025:02122-1
Security update for MozillaFirefox
RLSA-2025:10246
Important: thunderbird security update
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2025-07582 Уязвимость компонента HTTP Header Handler браузеров Mozilla Firefox, Firefox ESR, позволяющая нарушителю проводить межсайтовые сценарные атаки (XSS) | CVSS3: 6.1 | 0% Низкий | больше 1 года назад |
 | CVE-2025-6430 When a file download is specified via the `Content-Disposition` header, that directive would be ignored if the file was included via a `<embed>` or `<object>` tag, potentially making a website vulnerable to a cross-site scripting attack. This vulnerability was fixed in Firefox 140, Firefox ESR 128.12, Thunderbird 140, and Thunderbird 128.12. | CVSS3: 6.1 | 0% Низкий | больше 1 года назад |
 | CVE-2025-6430 When a file download is specified via the `Content-Disposition` header, that directive would be ignored if the file was included via a `<embed>` or `<object>` tag, potentially making a website vulnerable to a cross-site scripting attack. This vulnerability was fixed in Firefox 140, Firefox ESR 128.12, Thunderbird 140, and Thunderbird 128.12. | CVSS3: 6.1 | 0% Низкий | больше 1 года назад |
 | CVE-2025-6430 When a file download is specified via the `Content-Disposition` header, that directive would be ignored if the file was included via a `<embed>` or `<object>` tag, potentially making a website vulnerable to a cross-site scripting attack. This vulnerability was fixed in Firefox 140, Firefox ESR 128.12, Thunderbird 140, and Thunderbird 128.12. | CVSS3: 6.1 | 0% Низкий | больше 1 года назад |
| CVE-2025-6430 When a file download is specified via the `Content-Disposition` header ... | CVSS3: 6.1 | 0% Низкий | больше 1 года назад |
| GHSA-fvqv-c5hj-jcrp When a file download is specified via the `Content-Disposition` header, that directive would be ignored if the file was included via a `<embed>` or `<object>` tag, potentially making a website vulnerable to a cross-site scripting attack. This vulnerability affects Firefox < 140 and Firefox ESR < 128.12. | CVSS3: 6.1 | 0% Низкий | больше 1 года назад |
| ALT-PU-2025-8725 ALT-PU-2025-8725: package `firefox` update to version 140.0.2-alt1 | CVSS3: 9.8 | больше 1 года назад | |
| ALT-PU-2025-9988 ALT-PU-2025-9988: package `thunderbird` update to version 141.0-alt1 | CVSS3: 9.8 | около 1 года назад | |
| ALT-PU-2025-11497 ALT-PU-2025-11497: package `firefox` update to version 141.0.2-alt0.p10.1 | CVSS3: 9.8 | около 1 года назад | |
 | RLSA-2025:10074 Important: firefox security update | больше 1 года назад | ||
| RLSA-2025:10073 Important: firefox security update | около 1 года назад | ||
| RLSA-2025:10072 Important: firefox security update | около 1 года назад | ||
| ELSA-2025-10181 ELSA-2025-10181: firefox security update (IMPORTANT) | больше 1 года назад | ||
| ELSA-2025-10074 ELSA-2025-10074: firefox security update (IMPORTANT) | больше 1 года назад | ||
| ELSA-2025-10073 ELSA-2025-10073: firefox security update (IMPORTANT) | больше 1 года назад | ||
| ELSA-2025-10072 ELSA-2025-10072: firefox security update (IMPORTANT) | больше 1 года назад | ||
 | SUSE-SU-2025:02368-1 Security update for MozillaThunderbird | больше 1 года назад | ||
| SUSE-SU-2025:02123-1 Security update for MozillaFirefox | больше 1 года назад | ||
| SUSE-SU-2025:02122-1 Security update for MozillaFirefox | больше 1 года назад | ||
| RLSA-2025:10246 Important: thunderbird security update | больше 1 года назад |
Уязвимостей на страницу