Поиск уязвимостей
Количество 31
Количество 31
CVE-2025-11712
A malicious page could have used the type attribute of an OBJECT tag to override the default browser behavior when encountering a web resource served without a content-type. This could have contributed to an XSS on a site that unsafely serves files without a content-type header. This vulnerability was fixed in Firefox 144, Firefox ESR 140.4, Thunderbird 144, and Thunderbird 140.4.
CVE-2025-11712
A malicious page could have used the type attribute of an OBJECT tag to override the default browser behavior when encountering a web resource served without a content-type. This could have contributed to an XSS on a site that unsafely serves files without a content-type header. This vulnerability was fixed in Firefox 144, Firefox ESR 140.4, Thunderbird 144, and Thunderbird 140.4.
CVE-2025-11712
A malicious page could have used the type attribute of an OBJECT tag to override the default browser behavior when encountering a web resource served without a content-type. This could have contributed to an XSS on a site that unsafely serves files without a content-type header. This vulnerability was fixed in Firefox 144, Firefox ESR 140.4, Thunderbird 144, and Thunderbird 140.4.
CVE-2025-11712
A malicious page could have used the type attribute of an OBJECT tag t ...
GHSA-rf6g-cf9f-g4v7
A malicious page could have used the type attribute of an OBJECT tag to override the default browser behavior when encountering a web resource served without a content-type. This could have contributed to an XSS on a site that unsafely serves files without a content-type header. This vulnerability affects Firefox < 144, Firefox ESR < 140.4, Thunderbird < 144, and Thunderbird < 140.4.
BDU:2025-13292
Уязвимость браузеров Mozilla Firefox, Firefox ESR и почтового клиента Thunderbird, связанная с некорректным кодированием или сокрытием выходных данных, позволяющая нарушителю проводить межсайтовые сценарные атаки (XSS)
RLSA-2025:18983
Important: thunderbird security update
RLSA-2025:18321
Important: thunderbird security update
RLSA-2025:18320
Important: thunderbird security update
RLSA-2025:18285
Important: firefox security update
RLSA-2025:18155
Important: firefox security update
RLSA-2025:18154
Important: firefox security update
ELSA-2025-19278
ELSA-2025-19278: firefox security update (IMPORTANT)
ELSA-2025-18983
ELSA-2025-18983: thunderbird security update (IMPORTANT)
ELSA-2025-18321
ELSA-2025-18321: thunderbird security update (IMPORTANT)
ELSA-2025-18320
ELSA-2025-18320: thunderbird security update (IMPORTANT)
ELSA-2025-18285
ELSA-2025-18285: firefox security update (IMPORTANT)
ELSA-2025-18155
ELSA-2025-18155: firefox security update (IMPORTANT)
ELSA-2025-18154
ELSA-2025-18154: firefox security update (IMPORTANT)
openSUSE-SU-2025:20026-1
Security update for MozillaThunderbird
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2025-11712 A malicious page could have used the type attribute of an OBJECT tag to override the default browser behavior when encountering a web resource served without a content-type. This could have contributed to an XSS on a site that unsafely serves files without a content-type header. This vulnerability was fixed in Firefox 144, Firefox ESR 140.4, Thunderbird 144, and Thunderbird 140.4. | CVSS3: 6.1 | 0% Низкий | около 1 года назад |
 | CVE-2025-11712 A malicious page could have used the type attribute of an OBJECT tag to override the default browser behavior when encountering a web resource served without a content-type. This could have contributed to an XSS on a site that unsafely serves files without a content-type header. This vulnerability was fixed in Firefox 144, Firefox ESR 140.4, Thunderbird 144, and Thunderbird 140.4. | CVSS3: 6.1 | 0% Низкий | около 1 года назад |
 | CVE-2025-11712 A malicious page could have used the type attribute of an OBJECT tag to override the default browser behavior when encountering a web resource served without a content-type. This could have contributed to an XSS on a site that unsafely serves files without a content-type header. This vulnerability was fixed in Firefox 144, Firefox ESR 140.4, Thunderbird 144, and Thunderbird 140.4. | CVSS3: 6.1 | 0% Низкий | около 1 года назад |
| CVE-2025-11712 A malicious page could have used the type attribute of an OBJECT tag t ... | CVSS3: 6.1 | 0% Низкий | около 1 года назад |
| GHSA-rf6g-cf9f-g4v7 A malicious page could have used the type attribute of an OBJECT tag to override the default browser behavior when encountering a web resource served without a content-type. This could have contributed to an XSS on a site that unsafely serves files without a content-type header. This vulnerability affects Firefox < 144, Firefox ESR < 140.4, Thunderbird < 144, and Thunderbird < 140.4. | CVSS3: 6.1 | 0% Низкий | около 1 года назад |
 | BDU:2025-13292 Уязвимость браузеров Mozilla Firefox, Firefox ESR и почтового клиента Thunderbird, связанная с некорректным кодированием или сокрытием выходных данных, позволяющая нарушителю проводить межсайтовые сценарные атаки (XSS) | CVSS3: 6.1 | 0% Низкий | около 1 года назад |
 | RLSA-2025:18983 Important: thunderbird security update | около 1 года назад | ||
| RLSA-2025:18321 Important: thunderbird security update | около 1 года назад | ||
| RLSA-2025:18320 Important: thunderbird security update | около 1 года назад | ||
| RLSA-2025:18285 Important: firefox security update | 9 месяцев назад | ||
| RLSA-2025:18155 Important: firefox security update | около 1 года назад | ||
| RLSA-2025:18154 Important: firefox security update | около 1 года назад | ||
| ELSA-2025-19278 ELSA-2025-19278: firefox security update (IMPORTANT) | 11 месяцев назад | ||
| ELSA-2025-18983 ELSA-2025-18983: thunderbird security update (IMPORTANT) | около 1 года назад | ||
| ELSA-2025-18321 ELSA-2025-18321: thunderbird security update (IMPORTANT) | около 1 года назад | ||
| ELSA-2025-18320 ELSA-2025-18320: thunderbird security update (IMPORTANT) | около 1 года назад | ||
| ELSA-2025-18285 ELSA-2025-18285: firefox security update (IMPORTANT) | около 1 года назад | ||
| ELSA-2025-18155 ELSA-2025-18155: firefox security update (IMPORTANT) | около 1 года назад | ||
| ELSA-2025-18154 ELSA-2025-18154: firefox security update (IMPORTANT) | около 1 года назад | ||
 | openSUSE-SU-2025:20026-1 Security update for MozillaThunderbird | около 1 года назад |
Уязвимостей на страницу