Поиск уязвимостей
Количество 13
Количество 13
CVE-2016-5284
Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird < 45.4 rely on unintended expiration dates for Preloaded Public Key Pinning, which allows man-in-the-middle attackers to spoof add-on updates by leveraging possession of an X.509 server certificate for addons.mozilla.org signed by an arbitrary built-in Certification Authority.
CVE-2016-5284
Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird < 45.4 rely on unintended expiration dates for Preloaded Public Key Pinning, which allows man-in-the-middle attackers to spoof add-on updates by leveraging possession of an X.509 server certificate for addons.mozilla.org signed by an arbitrary built-in Certification Authority.
CVE-2016-5284
Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird < 45.4 rely on unintended expiration dates for Preloaded Public Key Pinning, which allows man-in-the-middle attackers to spoof add-on updates by leveraging possession of an X.509 server certificate for addons.mozilla.org signed by an arbitrary built-in Certification Authority.
CVE-2016-5284
Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunder ...
GHSA-2fqh-hxv3-hqmx
Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird < 45.4 rely on unintended expiration dates for Preloaded Public Key Pinning, which allows man-in-the-middle attackers to spoof add-on updates by leveraging possession of an X.509 server certificate for addons.mozilla.org signed by an arbitrary built-in Certification Authority.
BDU:2021-04197
Уязвимость браузеров Mozilla Firefox, Firefox ESR и почтового клиента Thunderbird, существующая из-за недостаточной проверки входных данных, позволяющая нарушителю подделывать обновления надстроек
SUSE-SU-2016:2513-1
Security update for MozillaFirefox
SUSE-SU-2016:2434-1
Security update for MozillaFirefox
SUSE-SU-2016:2431-1
Security update for MozillaFirefox
ELSA-2016-1912
ELSA-2016-1912: firefox security update (CRITICAL)
openSUSE-SU-2016:2368-1
Security update for MozillaFirefox, mozilla-nss
ALT-PU-2016-2049
ALT-PU-2016-2049: package `firefox` update to version 49.0.1-alt1
ALT-PU-2017-1578
ALT-PU-2017-1578: package `firefox-esr` update to version 52.1.1-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2016-5284 Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird < 45.4 rely on unintended expiration dates for Preloaded Public Key Pinning, which allows man-in-the-middle attackers to spoof add-on updates by leveraging possession of an X.509 server certificate for addons.mozilla.org signed by an arbitrary built-in Certification Authority. | CVSS3: 7.4 | 2% Низкий | около 10 лет назад |
 | CVE-2016-5284 Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird < 45.4 rely on unintended expiration dates for Preloaded Public Key Pinning, which allows man-in-the-middle attackers to spoof add-on updates by leveraging possession of an X.509 server certificate for addons.mozilla.org signed by an arbitrary built-in Certification Authority. | CVSS3: 7.4 | 2% Низкий | около 10 лет назад |
 | CVE-2016-5284 Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird < 45.4 rely on unintended expiration dates for Preloaded Public Key Pinning, which allows man-in-the-middle attackers to spoof add-on updates by leveraging possession of an X.509 server certificate for addons.mozilla.org signed by an arbitrary built-in Certification Authority. | CVSS3: 7.4 | 2% Низкий | около 10 лет назад |
| CVE-2016-5284 Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunder ... | CVSS3: 7.4 | 2% Низкий | около 10 лет назад |
| GHSA-2fqh-hxv3-hqmx Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird < 45.4 rely on unintended expiration dates for Preloaded Public Key Pinning, which allows man-in-the-middle attackers to spoof add-on updates by leveraging possession of an X.509 server certificate for addons.mozilla.org signed by an arbitrary built-in Certification Authority. | CVSS3: 7.4 | 2% Низкий | больше 4 лет назад |
 | BDU:2021-04197 Уязвимость браузеров Mozilla Firefox, Firefox ESR и почтового клиента Thunderbird, существующая из-за недостаточной проверки входных данных, позволяющая нарушителю подделывать обновления надстроек | CVSS3: 7.4 | 2% Низкий | около 10 лет назад |
 | SUSE-SU-2016:2513-1 Security update for MozillaFirefox | около 10 лет назад | ||
| SUSE-SU-2016:2434-1 Security update for MozillaFirefox | около 10 лет назад | ||
| SUSE-SU-2016:2431-1 Security update for MozillaFirefox | около 10 лет назад | ||
| ELSA-2016-1912 ELSA-2016-1912: firefox security update (CRITICAL) | около 10 лет назад | ||
| openSUSE-SU-2016:2368-1 Security update for MozillaFirefox, mozilla-nss | около 10 лет назад | ||
| ALT-PU-2016-2049 ALT-PU-2016-2049: package `firefox` update to version 49.0.1-alt1 | CVSS3: 9.8 | около 10 лет назад | |
| ALT-PU-2017-1578 ALT-PU-2017-1578: package `firefox-esr` update to version 52.1.1-alt1 | CVSS3: 9.8 | больше 9 лет назад |
Уязвимостей на страницу