Поиск уязвимостей
Количество 20
Количество 20
SUSE-SU-2015:1504-1
Security update for MozillaFirefox
ELSA-2015-1693
ELSA-2015-1693: firefox security update (CRITICAL)
CVE-2015-4498
The add-on installation feature in Mozilla Firefox before 40.0.3 and Firefox ESR 38.x before 38.2.1 allows remote attackers to bypass an intended user-confirmation requirement by constructing a crafted data: URL and triggering navigation to an arbitrary http: or https: URL at a certain early point in the installation process.
CVE-2015-4498
The add-on installation feature in Mozilla Firefox before 40.0.3 and Firefox ESR 38.x before 38.2.1 allows remote attackers to bypass an intended user-confirmation requirement by constructing a crafted data: URL and triggering navigation to an arbitrary http: or https: URL at a certain early point in the installation process.
CVE-2015-4498
The add-on installation feature in Mozilla Firefox before 40.0.3 and Firefox ESR 38.x before 38.2.1 allows remote attackers to bypass an intended user-confirmation requirement by constructing a crafted data: URL and triggering navigation to an arbitrary http: or https: URL at a certain early point in the installation process.
CVE-2015-4498
The add-on installation feature in Mozilla Firefox before 40.0.3 and F ...
CVE-2015-4497
Use-after-free vulnerability in the CanvasRenderingContext2D implementation in Mozilla Firefox before 40.0.3 and Firefox ESR 38.x before 38.2.1 allows remote attackers to execute arbitrary code by leveraging improper interaction between resize events and changes to Cascading Style Sheets (CSS) token sequences for a CANVAS element.
CVE-2015-4497
Use-after-free vulnerability in the CanvasRenderingContext2D implementation in Mozilla Firefox before 40.0.3 and Firefox ESR 38.x before 38.2.1 allows remote attackers to execute arbitrary code by leveraging improper interaction between resize events and changes to Cascading Style Sheets (CSS) token sequences for a CANVAS element.
CVE-2015-4497
Use-after-free vulnerability in the CanvasRenderingContext2D implementation in Mozilla Firefox before 40.0.3 and Firefox ESR 38.x before 38.2.1 allows remote attackers to execute arbitrary code by leveraging improper interaction between resize events and changes to Cascading Style Sheets (CSS) token sequences for a CANVAS element.
CVE-2015-4497
Use-after-free vulnerability in the CanvasRenderingContext2D implement ...
SUSE-SU-2015:1476-1
Security update for MozillaFirefox, mozilla-nss
GHSA-9xmm-8mw4-qgc6
The add-on installation feature in Mozilla Firefox before 40.0.3 and Firefox ESR 38.x before 38.2.1 allows remote attackers to bypass an intended user-confirmation requirement by constructing a crafted data: URL and triggering navigation to an arbitrary http: or https: URL at a certain early point in the installation process.
BDU:2015-11312
Уязвимость браузеров Firefox и Firefox ESR, позволяющая нарушителю обойти процедуру подтверждения действий пользователем при установке обновления
GHSA-v9wp-mjxj-3vqc
Use-after-free vulnerability in the CanvasRenderingContext2D implementation in Mozilla Firefox before 40.0.3 and Firefox ESR 38.x before 38.2.1 allows remote attackers to execute arbitrary code by leveraging improper interaction between resize events and changes to Cascading Style Sheets (CSS) token sequences for a CANVAS element.
BDU:2015-11311
Уязвимость браузеров Firefox и Firefox ESR, позволяющая нарушителю выполнить произвольный код
ALT-PU-2015-1730
ALT-PU-2015-1730: package `firefox-esr` update to version 38.2.1-alt1
ALT-PU-2015-1816
ALT-PU-2015-1816: package `firefox` update to version 41.0-alt1
ALT-PU-2015-1539
ALT-PU-2015-1539: package `firefox` update to version 38.0.6-alt1
ALT-PU-2015-1669
ALT-PU-2015-1669: package `firefox-esr` update to version 38.1.1-alt1
ALT-PU-2016-1454
ALT-PU-2016-1454: package `firefox-esr` update to version 45.1.1-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | SUSE-SU-2015:1504-1 Security update for MozillaFirefox | около 11 лет назад | ||
| ELSA-2015-1693 ELSA-2015-1693: firefox security update (CRITICAL) | около 11 лет назад | ||
 | CVE-2015-4498 The add-on installation feature in Mozilla Firefox before 40.0.3 and Firefox ESR 38.x before 38.2.1 allows remote attackers to bypass an intended user-confirmation requirement by constructing a crafted data: URL and triggering navigation to an arbitrary http: or https: URL at a certain early point in the installation process. | CVSS2: 7.5 | 3% Низкий | около 11 лет назад |
 | CVE-2015-4498 The add-on installation feature in Mozilla Firefox before 40.0.3 and Firefox ESR 38.x before 38.2.1 allows remote attackers to bypass an intended user-confirmation requirement by constructing a crafted data: URL and triggering navigation to an arbitrary http: or https: URL at a certain early point in the installation process. | CVSS2: 5.1 | 3% Низкий | около 11 лет назад |
 | CVE-2015-4498 The add-on installation feature in Mozilla Firefox before 40.0.3 and Firefox ESR 38.x before 38.2.1 allows remote attackers to bypass an intended user-confirmation requirement by constructing a crafted data: URL and triggering navigation to an arbitrary http: or https: URL at a certain early point in the installation process. | CVSS2: 7.5 | 3% Низкий | около 11 лет назад |
| CVE-2015-4498 The add-on installation feature in Mozilla Firefox before 40.0.3 and F ... | CVSS2: 7.5 | 3% Низкий | около 11 лет назад |
| CVE-2015-4497 Use-after-free vulnerability in the CanvasRenderingContext2D implementation in Mozilla Firefox before 40.0.3 and Firefox ESR 38.x before 38.2.1 allows remote attackers to execute arbitrary code by leveraging improper interaction between resize events and changes to Cascading Style Sheets (CSS) token sequences for a CANVAS element. | CVSS2: 10 | 8% Низкий | около 11 лет назад |
| CVE-2015-4497 Use-after-free vulnerability in the CanvasRenderingContext2D implementation in Mozilla Firefox before 40.0.3 and Firefox ESR 38.x before 38.2.1 allows remote attackers to execute arbitrary code by leveraging improper interaction between resize events and changes to Cascading Style Sheets (CSS) token sequences for a CANVAS element. | CVSS2: 6.8 | 8% Низкий | около 11 лет назад |
| CVE-2015-4497 Use-after-free vulnerability in the CanvasRenderingContext2D implementation in Mozilla Firefox before 40.0.3 and Firefox ESR 38.x before 38.2.1 allows remote attackers to execute arbitrary code by leveraging improper interaction between resize events and changes to Cascading Style Sheets (CSS) token sequences for a CANVAS element. | CVSS2: 10 | 8% Низкий | около 11 лет назад |
| CVE-2015-4497 Use-after-free vulnerability in the CanvasRenderingContext2D implement ... | CVSS2: 10 | 8% Низкий | около 11 лет назад |
| SUSE-SU-2015:1476-1 Security update for MozillaFirefox, mozilla-nss | около 11 лет назад | ||
| GHSA-9xmm-8mw4-qgc6 The add-on installation feature in Mozilla Firefox before 40.0.3 and Firefox ESR 38.x before 38.2.1 allows remote attackers to bypass an intended user-confirmation requirement by constructing a crafted data: URL and triggering navigation to an arbitrary http: or https: URL at a certain early point in the installation process. | 3% Низкий | больше 4 лет назад | |
 | BDU:2015-11312 Уязвимость браузеров Firefox и Firefox ESR, позволяющая нарушителю обойти процедуру подтверждения действий пользователем при установке обновления | CVSS2: 7.5 | 3% Низкий | около 11 лет назад |
| GHSA-v9wp-mjxj-3vqc Use-after-free vulnerability in the CanvasRenderingContext2D implementation in Mozilla Firefox before 40.0.3 and Firefox ESR 38.x before 38.2.1 allows remote attackers to execute arbitrary code by leveraging improper interaction between resize events and changes to Cascading Style Sheets (CSS) token sequences for a CANVAS element. | 8% Низкий | больше 4 лет назад | |
| BDU:2015-11311 Уязвимость браузеров Firefox и Firefox ESR, позволяющая нарушителю выполнить произвольный код | CVSS2: 10 | 8% Низкий | около 11 лет назад |
| ALT-PU-2015-1730 ALT-PU-2015-1730: package `firefox-esr` update to version 38.2.1-alt1 | CVSS2: 10 | 8% Низкий | около 11 лет назад |
| ALT-PU-2015-1816 ALT-PU-2015-1816: package `firefox` update to version 41.0-alt1 | CVSS2: 10 | около 11 лет назад | |
| ALT-PU-2015-1539 ALT-PU-2015-1539: package `firefox` update to version 38.0.6-alt1 | CVSS3: 8.8 | больше 11 лет назад | |
| ALT-PU-2015-1669 ALT-PU-2015-1669: package `firefox-esr` update to version 38.1.1-alt1 | CVSS2: 10 | около 11 лет назад | |
| ALT-PU-2016-1454 ALT-PU-2016-1454: package `firefox-esr` update to version 45.1.1-alt1 | CVSS3: 10 | больше 10 лет назад |
Уязвимостей на страницу