Логотип exploitDog
bind:"CVE-2012-3992"
Консоль
Логотип exploitDog

exploitDog

bind:"CVE-2012-3992"

Количество 7

Количество 7

ubuntu логотип

CVE-2012-3992

больше 13 лет назад

Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly manage history data, which allows remote attackers to conduct cross-site scripting (XSS) attacks or obtain sensitive POST content via vectors involving a location.hash write operation and history navigation that triggers the loading of a URL into the history object.

CVSS2: 4.3
EPSS: Низкий
redhat логотип

CVE-2012-3992

больше 13 лет назад

Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly manage history data, which allows remote attackers to conduct cross-site scripting (XSS) attacks or obtain sensitive POST content via vectors involving a location.hash write operation and history navigation that triggers the loading of a URL into the history object.

CVSS2: 4.3
EPSS: Низкий
nvd логотип

CVE-2012-3992

больше 13 лет назад

Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly manage history data, which allows remote attackers to conduct cross-site scripting (XSS) attacks or obtain sensitive POST content via vectors involving a location.hash write operation and history navigation that triggers the loading of a URL into the history object.

CVSS2: 4.3
EPSS: Низкий
debian логотип

CVE-2012-3992

больше 13 лет назад

Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbi ...

CVSS2: 4.3
EPSS: Низкий
github логотип

GHSA-6x5v-cwgm-x5w9

больше 3 лет назад

Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly manage history data, which allows remote attackers to conduct cross-site scripting (XSS) attacks or obtain sensitive POST content via vectors involving a location.hash write operation and history navigation that triggers the loading of a URL into the history object.

EPSS: Низкий
oracle-oval логотип

ELSA-2012-1351

больше 13 лет назад

ELSA-2012-1351: thunderbird security update (CRITICAL)

EPSS: Низкий
oracle-oval логотип

ELSA-2012-1350

больше 13 лет назад

ELSA-2012-1350: firefox security and bug fix update (CRITICAL)

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2012-3992

Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly manage history data, which allows remote attackers to conduct cross-site scripting (XSS) attacks or obtain sensitive POST content via vectors involving a location.hash write operation and history navigation that triggers the loading of a URL into the history object.

CVSS2: 4.3
1%
Низкий
больше 13 лет назад
redhat логотип
CVE-2012-3992

Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly manage history data, which allows remote attackers to conduct cross-site scripting (XSS) attacks or obtain sensitive POST content via vectors involving a location.hash write operation and history navigation that triggers the loading of a URL into the history object.

CVSS2: 4.3
1%
Низкий
больше 13 лет назад
nvd логотип
CVE-2012-3992

Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly manage history data, which allows remote attackers to conduct cross-site scripting (XSS) attacks or obtain sensitive POST content via vectors involving a location.hash write operation and history navigation that triggers the loading of a URL into the history object.

CVSS2: 4.3
1%
Низкий
больше 13 лет назад
debian логотип
CVE-2012-3992

Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbi ...

CVSS2: 4.3
1%
Низкий
больше 13 лет назад
github логотип
GHSA-6x5v-cwgm-x5w9

Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly manage history data, which allows remote attackers to conduct cross-site scripting (XSS) attacks or obtain sensitive POST content via vectors involving a location.hash write operation and history navigation that triggers the loading of a URL into the history object.

1%
Низкий
больше 3 лет назад
oracle-oval логотип
ELSA-2012-1351

ELSA-2012-1351: thunderbird security update (CRITICAL)

больше 13 лет назад
oracle-oval логотип
ELSA-2012-1350

ELSA-2012-1350: firefox security and bug fix update (CRITICAL)

больше 13 лет назад

Уязвимостей на страницу