Количество 7
Количество 7
CVE-2015-7187
The Add-on SDK in Mozilla Firefox before 42.0 misinterprets a "script: false" panel setting, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via inline JavaScript code that is executed within a third-party extension.
CVE-2015-7187
The Add-on SDK in Mozilla Firefox before 42.0 misinterprets a "script: false" panel setting, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via inline JavaScript code that is executed within a third-party extension.
CVE-2015-7187
The Add-on SDK in Mozilla Firefox before 42.0 misinterprets a "script: false" panel setting, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via inline JavaScript code that is executed within a third-party extension.
CVE-2015-7187
The Add-on SDK in Mozilla Firefox before 42.0 misinterprets a "script: ...
GHSA-7xcg-pmvr-6h7r
The Add-on SDK in Mozilla Firefox before 42.0 misinterprets a "script: false" panel setting, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via inline JavaScript code that is executed within a third-party extension.
BDU:2015-11991
Уязвимость браузера Firefox, позволяющая нарушителю провести межсайтовое выполнение сценариев
openSUSE-SU-2015:1942-1
Security update for MozillaFirefox, mozilla-nspr, mozilla-nss, xulrunner, seamonkey
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2015-7187 The Add-on SDK in Mozilla Firefox before 42.0 misinterprets a "script: false" panel setting, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via inline JavaScript code that is executed within a third-party extension. | CVSS2: 4.3 | 0% Низкий | больше 10 лет назад |
 | CVE-2015-7187 The Add-on SDK in Mozilla Firefox before 42.0 misinterprets a "script: false" panel setting, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via inline JavaScript code that is executed within a third-party extension. | CVSS2: 5.1 | 0% Низкий | больше 10 лет назад |
 | CVE-2015-7187 The Add-on SDK in Mozilla Firefox before 42.0 misinterprets a "script: false" panel setting, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via inline JavaScript code that is executed within a third-party extension. | CVSS2: 4.3 | 0% Низкий | больше 10 лет назад |
| CVE-2015-7187 The Add-on SDK in Mozilla Firefox before 42.0 misinterprets a "script: ... | CVSS2: 4.3 | 0% Низкий | больше 10 лет назад |
| GHSA-7xcg-pmvr-6h7r The Add-on SDK in Mozilla Firefox before 42.0 misinterprets a "script: false" panel setting, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via inline JavaScript code that is executed within a third-party extension. | 0% Низкий | больше 3 лет назад | |
 | BDU:2015-11991 Уязвимость браузера Firefox, позволяющая нарушителю провести межсайтовое выполнение сценариев | CVSS2: 4.3 | 0% Низкий | больше 10 лет назад |
 | openSUSE-SU-2015:1942-1 Security update for MozillaFirefox, mozilla-nspr, mozilla-nss, xulrunner, seamonkey | около 10 лет назад |
Уязвимостей на страницу