Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Поиск уязвимостей

Количество 13

Количество 13

ubuntu логотип

CVE-2016-9902

больше 8 лет назад

The Pocket toolbar button, once activated, listens for events fired from it's own pages but does not verify the origin of incoming events. This allows content from other origins to fire events and inject content and commands into the Pocket context. Note: this issue does not affect users with e10s enabled. This vulnerability affects Firefox ESR < 45.6 and Firefox < 50.1.

CVSS3: 7.5
EPSS: Низкий
redhat логотип

CVE-2016-9902

почти 10 лет назад

The Pocket toolbar button, once activated, listens for events fired from it's own pages but does not verify the origin of incoming events. This allows content from other origins to fire events and inject content and commands into the Pocket context. Note: this issue does not affect users with e10s enabled. This vulnerability affects Firefox ESR < 45.6 and Firefox < 50.1.

CVSS3: 7.5
EPSS: Низкий
nvd логотип

CVE-2016-9902

больше 8 лет назад

The Pocket toolbar button, once activated, listens for events fired from it's own pages but does not verify the origin of incoming events. This allows content from other origins to fire events and inject content and commands into the Pocket context. Note: this issue does not affect users with e10s enabled. This vulnerability affects Firefox ESR < 45.6 and Firefox < 50.1.

CVSS3: 7.5
EPSS: Низкий
debian логотип

CVE-2016-9902

больше 8 лет назад

The Pocket toolbar button, once activated, listens for events fired fr ...

CVSS3: 7.5
EPSS: Низкий
github логотип

GHSA-jhx9-2v44-3f39

больше 4 лет назад

The Pocket toolbar button, once activated, listens for events fired from it's own pages but does not verify the origin of incoming events. This allows content from other origins to fire events and inject content and commands into the Pocket context. Note: this issue does not affect users with e10s enabled. This vulnerability affects Firefox ESR < 45.6 and Firefox < 50.1.

CVSS3: 7.5
EPSS: Низкий
oracle-oval логотип

ELSA-2016-2973

почти 10 лет назад

ELSA-2016-2973: thunderbird security update (IMPORTANT)

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2016:3223-1

почти 10 лет назад

Security update for MozillaFirefox

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2016:3222-1

почти 10 лет назад

Security update for MozillaFirefox

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2016:3210-1

почти 10 лет назад

Security update for MozillaFirefox

EPSS: Низкий
oracle-oval логотип

ELSA-2016-2946

почти 10 лет назад

ELSA-2016-2946: firefox security update (CRITICAL)

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2016:3184-1

почти 10 лет назад

Security update for MozillaFirefox

EPSS: Низкий
altlinux логотип

ALT-PU-2016-2446

почти 10 лет назад

ALT-PU-2016-2446: package `firefox` update to version 50.1.0-alt1

CVSS3: 9.8
EPSS: Низкий
altlinux логотип

ALT-PU-2017-1578

больше 9 лет назад

ALT-PU-2017-1578: package `firefox-esr` update to version 52.1.1-alt1

CVSS3: 9.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2016-9902

The Pocket toolbar button, once activated, listens for events fired from it's own pages but does not verify the origin of incoming events. This allows content from other origins to fire events and inject content and commands into the Pocket context. Note: this issue does not affect users with e10s enabled. This vulnerability affects Firefox ESR < 45.6 and Firefox < 50.1.

CVSS3: 7.5
1%
Низкий
больше 8 лет назад
redhat логотип
CVE-2016-9902

The Pocket toolbar button, once activated, listens for events fired from it's own pages but does not verify the origin of incoming events. This allows content from other origins to fire events and inject content and commands into the Pocket context. Note: this issue does not affect users with e10s enabled. This vulnerability affects Firefox ESR < 45.6 and Firefox < 50.1.

CVSS3: 7.5
1%
Низкий
почти 10 лет назад
nvd логотип
CVE-2016-9902

The Pocket toolbar button, once activated, listens for events fired from it's own pages but does not verify the origin of incoming events. This allows content from other origins to fire events and inject content and commands into the Pocket context. Note: this issue does not affect users with e10s enabled. This vulnerability affects Firefox ESR < 45.6 and Firefox < 50.1.

CVSS3: 7.5
1%
Низкий
больше 8 лет назад
debian логотип
CVE-2016-9902

The Pocket toolbar button, once activated, listens for events fired fr ...

CVSS3: 7.5
1%
Низкий
больше 8 лет назад
github логотип
GHSA-jhx9-2v44-3f39

The Pocket toolbar button, once activated, listens for events fired from it's own pages but does not verify the origin of incoming events. This allows content from other origins to fire events and inject content and commands into the Pocket context. Note: this issue does not affect users with e10s enabled. This vulnerability affects Firefox ESR < 45.6 and Firefox < 50.1.

CVSS3: 7.5
1%
Низкий
больше 4 лет назад
oracle-oval логотип
ELSA-2016-2973

ELSA-2016-2973: thunderbird security update (IMPORTANT)

почти 10 лет назад
suse-cvrf логотип
SUSE-SU-2016:3223-1

Security update for MozillaFirefox

почти 10 лет назад
suse-cvrf логотип
SUSE-SU-2016:3222-1

Security update for MozillaFirefox

почти 10 лет назад
suse-cvrf логотип
SUSE-SU-2016:3210-1

Security update for MozillaFirefox

почти 10 лет назад
oracle-oval логотип
ELSA-2016-2946

ELSA-2016-2946: firefox security update (CRITICAL)

почти 10 лет назад
suse-cvrf логотип
openSUSE-SU-2016:3184-1

Security update for MozillaFirefox

почти 10 лет назад
altlinux логотип
ALT-PU-2016-2446

ALT-PU-2016-2446: package `firefox` update to version 50.1.0-alt1

CVSS3: 9.8
почти 10 лет назад
altlinux логотип
ALT-PU-2017-1578

ALT-PU-2017-1578: package `firefox-esr` update to version 52.1.1-alt1

CVSS3: 9.8
больше 9 лет назад

Уязвимостей на страницу