Поиск уязвимостей
Количество 15
Количество 15
BDU:2025-07652
Уязвимость механизма Content Security Policy (CSP) браузера Mozilla Firefox, позволяющая нарушителю обойти ограничения безопасности и получить несанкционированный доступ к защищаемой информации
CVE-2025-6427
An attacker was able to bypass the `connect-src` directive of a Content Security Policy by manipulating subdocuments. This would have also hidden the connections from the Network tab in Devtools. This vulnerability was fixed in Firefox 140 and Thunderbird 140.
CVE-2025-6427
An attacker was able to bypass the `connect-src` directive of a Content Security Policy by manipulating subdocuments. This would have also hidden the connections from the Network tab in Devtools. This vulnerability was fixed in Firefox 140 and Thunderbird 140.
CVE-2025-6427
An attacker was able to bypass the `connect-src` directive of a Content Security Policy by manipulating subdocuments. This would have also hidden the connections from the Network tab in Devtools. This vulnerability was fixed in Firefox 140 and Thunderbird 140.
CVE-2025-6427
An attacker was able to bypass the `connect-src` directive of a Conten ...
GHSA-823q-pcrj-c4xv
An attacker was able to bypass the `connect-src` directive of a Content Security Policy by manipulating subdocuments. This would have also hidden the connections from the Network tab in Devtools. This vulnerability affects Firefox < 140.
ALT-PU-2025-8725
ALT-PU-2025-8725: package `firefox` update to version 140.0.2-alt1
ALT-PU-2025-9988
ALT-PU-2025-9988: package `thunderbird` update to version 141.0-alt1
ALT-PU-2025-11497
ALT-PU-2025-11497: package `firefox` update to version 141.0.2-alt0.p10.1
ALT-PU-2025-11495
ALT-PU-2025-11495: package `thunderbird` update to version 141.0-alt0.p10.1
ALT-PU-2025-11100
ALT-PU-2025-11100: package `firefox-esr` update to version 140.2.0-alt2
ALT-PU-2025-14599
ALT-PU-2025-14599: package `firefox-esr` update to version 140.4.0-alt0.p10.1
SUSE-SU-2025:02339-1
Security update for MozillaFirefox, MozillaFirefox-branding-SLE
SUSE-SU-2025:02546-1
Security update for MozillaThunderbird
SUSE-SU-2025:02529-1
Security update for MozillaFirefox, MozillaFirefox-branding-SLE
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2025-07652 Уязвимость механизма Content Security Policy (CSP) браузера Mozilla Firefox, позволяющая нарушителю обойти ограничения безопасности и получить несанкционированный доступ к защищаемой информации | CVSS3: 9.1 | 0% Низкий | больше 1 года назад |
 | CVE-2025-6427 An attacker was able to bypass the `connect-src` directive of a Content Security Policy by manipulating subdocuments. This would have also hidden the connections from the Network tab in Devtools. This vulnerability was fixed in Firefox 140 and Thunderbird 140. | CVSS3: 9.1 | 0% Низкий | больше 1 года назад |
 | CVE-2025-6427 An attacker was able to bypass the `connect-src` directive of a Content Security Policy by manipulating subdocuments. This would have also hidden the connections from the Network tab in Devtools. This vulnerability was fixed in Firefox 140 and Thunderbird 140. | CVSS3: 6.1 | 0% Низкий | больше 1 года назад |
 | CVE-2025-6427 An attacker was able to bypass the `connect-src` directive of a Content Security Policy by manipulating subdocuments. This would have also hidden the connections from the Network tab in Devtools. This vulnerability was fixed in Firefox 140 and Thunderbird 140. | CVSS3: 9.1 | 0% Низкий | больше 1 года назад |
| CVE-2025-6427 An attacker was able to bypass the `connect-src` directive of a Conten ... | CVSS3: 9.1 | 0% Низкий | больше 1 года назад |
| GHSA-823q-pcrj-c4xv An attacker was able to bypass the `connect-src` directive of a Content Security Policy by manipulating subdocuments. This would have also hidden the connections from the Network tab in Devtools. This vulnerability affects Firefox < 140. | CVSS3: 9.1 | 0% Низкий | больше 1 года назад |
| ALT-PU-2025-8725 ALT-PU-2025-8725: package `firefox` update to version 140.0.2-alt1 | CVSS3: 9.8 | больше 1 года назад | |
| ALT-PU-2025-9988 ALT-PU-2025-9988: package `thunderbird` update to version 141.0-alt1 | CVSS3: 9.8 | около 1 года назад | |
| ALT-PU-2025-11497 ALT-PU-2025-11497: package `firefox` update to version 141.0.2-alt0.p10.1 | CVSS3: 9.8 | около 1 года назад | |
| ALT-PU-2025-11495 ALT-PU-2025-11495: package `thunderbird` update to version 141.0-alt0.p10.1 | CVSS3: 9.8 | около 1 года назад | |
| ALT-PU-2025-11100 ALT-PU-2025-11100: package `firefox-esr` update to version 140.2.0-alt2 | CVSS3: 9.8 | около 1 года назад | |
| ALT-PU-2025-14599 ALT-PU-2025-14599: package `firefox-esr` update to version 140.4.0-alt0.p10.1 | CVSS3: 9.8 | 12 месяцев назад | |
 | SUSE-SU-2025:02339-1 Security update for MozillaFirefox, MozillaFirefox-branding-SLE | больше 1 года назад | ||
| SUSE-SU-2025:02546-1 Security update for MozillaThunderbird | больше 1 года назад | ||
| SUSE-SU-2025:02529-1 Security update for MozillaFirefox, MozillaFirefox-branding-SLE | больше 1 года назад |
Уязвимостей на страницу