Логотип exploitDog
bind:"GHSA-5cpw-36f2-hgw7" OR bind:"CVE-2021-23984"
Консоль
Логотип exploitDog

exploitDog

bind:"GHSA-5cpw-36f2-hgw7" OR bind:"CVE-2021-23984"

Количество 17

Количество 17

github логотип

GHSA-5cpw-36f2-hgw7

больше 3 лет назад

A malicious extension could have opened a popup window lacking an address bar. The title of the popup lacking an address bar should not be fully controllable, but in this situation was. This could have been used to spoof a website and attempt to trick the user into providing credentials. This vulnerability affects Firefox ESR < 78.9, Thunderbird < 78.9, and Firefox < 87.

EPSS: Низкий
ubuntu логотип

CVE-2021-23984

почти 5 лет назад

A malicious extension could have opened a popup window lacking an address bar. The title of the popup lacking an address bar should not be fully controllable, but in this situation was. This could have been used to spoof a website and attempt to trick the user into providing credentials. This vulnerability affects Firefox ESR < 78.9, Firefox < 87, and Thunderbird < 78.9.

CVSS3: 6.5
EPSS: Низкий
redhat логотип

CVE-2021-23984

почти 5 лет назад

A malicious extension could have opened a popup window lacking an address bar. The title of the popup lacking an address bar should not be fully controllable, but in this situation was. This could have been used to spoof a website and attempt to trick the user into providing credentials. This vulnerability affects Firefox ESR < 78.9, Firefox < 87, and Thunderbird < 78.9.

CVSS3: 6.1
EPSS: Низкий
nvd логотип

CVE-2021-23984

почти 5 лет назад

A malicious extension could have opened a popup window lacking an address bar. The title of the popup lacking an address bar should not be fully controllable, but in this situation was. This could have been used to spoof a website and attempt to trick the user into providing credentials. This vulnerability affects Firefox ESR < 78.9, Firefox < 87, and Thunderbird < 78.9.

CVSS3: 6.5
EPSS: Низкий
debian логотип

CVE-2021-23984

почти 5 лет назад

A malicious extension could have opened a popup window lacking an addr ...

CVSS3: 6.5
EPSS: Низкий
fstec логотип

BDU:2022-05941

почти 5 лет назад

Уязвимость браузеров Mozilla Firefox, Mozilla Firefox ESR и почтового клиента Thunderbird, связанная с неверным ограничением визуализируемых слоев или фреймов пользовательского интерфейса, позволяющая нарушителю проводить спуфинг-атаки

CVSS3: 6.5
EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2021:0487-1

почти 5 лет назад

Security update for MozillaFirefox

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2021:14684-1

почти 5 лет назад

Security update for MozillaFirefox

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2021:1007-1

почти 5 лет назад

Security update for MozillaFirefox

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2021:0999-1

почти 5 лет назад

Security update for MozillaFirefox

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2021:0966-1

почти 5 лет назад

Security update for MozillaFirefox

EPSS: Низкий
oracle-oval логотип

ELSA-2021-0996

почти 5 лет назад

ELSA-2021-0996: thunderbird security update (IMPORTANT)

EPSS: Низкий
oracle-oval логотип

ELSA-2021-0993

почти 5 лет назад

ELSA-2021-0993: thunderbird security update (IMPORTANT)

EPSS: Низкий
oracle-oval логотип

ELSA-2021-0992

почти 5 лет назад

ELSA-2021-0992: firefox security update (IMPORTANT)

EPSS: Низкий
oracle-oval логотип

ELSA-2021-0990

почти 5 лет назад

ELSA-2021-0990: firefox security update (IMPORTANT)

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2021:1167-1

почти 5 лет назад

Security update for MozillaThunderbird

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2021:0580-1

почти 5 лет назад

Security update for MozillaThunderbird

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
github логотип
GHSA-5cpw-36f2-hgw7

A malicious extension could have opened a popup window lacking an address bar. The title of the popup lacking an address bar should not be fully controllable, but in this situation was. This could have been used to spoof a website and attempt to trick the user into providing credentials. This vulnerability affects Firefox ESR < 78.9, Thunderbird < 78.9, and Firefox < 87.

0%
Низкий
больше 3 лет назад
ubuntu логотип
CVE-2021-23984

A malicious extension could have opened a popup window lacking an address bar. The title of the popup lacking an address bar should not be fully controllable, but in this situation was. This could have been used to spoof a website and attempt to trick the user into providing credentials. This vulnerability affects Firefox ESR < 78.9, Firefox < 87, and Thunderbird < 78.9.

CVSS3: 6.5
0%
Низкий
почти 5 лет назад
redhat логотип
CVE-2021-23984

A malicious extension could have opened a popup window lacking an address bar. The title of the popup lacking an address bar should not be fully controllable, but in this situation was. This could have been used to spoof a website and attempt to trick the user into providing credentials. This vulnerability affects Firefox ESR < 78.9, Firefox < 87, and Thunderbird < 78.9.

CVSS3: 6.1
0%
Низкий
почти 5 лет назад
nvd логотип
CVE-2021-23984

A malicious extension could have opened a popup window lacking an address bar. The title of the popup lacking an address bar should not be fully controllable, but in this situation was. This could have been used to spoof a website and attempt to trick the user into providing credentials. This vulnerability affects Firefox ESR < 78.9, Firefox < 87, and Thunderbird < 78.9.

CVSS3: 6.5
0%
Низкий
почти 5 лет назад
debian логотип
CVE-2021-23984

A malicious extension could have opened a popup window lacking an addr ...

CVSS3: 6.5
0%
Низкий
почти 5 лет назад
fstec логотип
BDU:2022-05941

Уязвимость браузеров Mozilla Firefox, Mozilla Firefox ESR и почтового клиента Thunderbird, связанная с неверным ограничением визуализируемых слоев или фреймов пользовательского интерфейса, позволяющая нарушителю проводить спуфинг-атаки

CVSS3: 6.5
0%
Низкий
почти 5 лет назад
suse-cvrf логотип
openSUSE-SU-2021:0487-1

Security update for MozillaFirefox

почти 5 лет назад
suse-cvrf логотип
SUSE-SU-2021:14684-1

Security update for MozillaFirefox

почти 5 лет назад
suse-cvrf логотип
SUSE-SU-2021:1007-1

Security update for MozillaFirefox

почти 5 лет назад
suse-cvrf логотип
SUSE-SU-2021:0999-1

Security update for MozillaFirefox

почти 5 лет назад
suse-cvrf логотип
SUSE-SU-2021:0966-1

Security update for MozillaFirefox

почти 5 лет назад
oracle-oval логотип
ELSA-2021-0996

ELSA-2021-0996: thunderbird security update (IMPORTANT)

почти 5 лет назад
oracle-oval логотип
ELSA-2021-0993

ELSA-2021-0993: thunderbird security update (IMPORTANT)

почти 5 лет назад
oracle-oval логотип
ELSA-2021-0992

ELSA-2021-0992: firefox security update (IMPORTANT)

почти 5 лет назад
oracle-oval логотип
ELSA-2021-0990

ELSA-2021-0990: firefox security update (IMPORTANT)

почти 5 лет назад
suse-cvrf логотип
SUSE-SU-2021:1167-1

Security update for MozillaThunderbird

почти 5 лет назад
suse-cvrf логотип
openSUSE-SU-2021:0580-1

Security update for MozillaThunderbird

почти 5 лет назад

Уязвимостей на страницу