Поиск уязвимостей
Количество 9
Количество 9
GHSA-7xcg-pmvr-6h7r
The Add-on SDK in Mozilla Firefox before 42.0 misinterprets a "script: false" panel setting, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via inline JavaScript code that is executed within a third-party extension.
CVE-2015-7187
The Add-on SDK in Mozilla Firefox before 42.0 misinterprets a "script: false" panel setting, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via inline JavaScript code that is executed within a third-party extension.
CVE-2015-7187
The Add-on SDK in Mozilla Firefox before 42.0 misinterprets a "script: false" panel setting, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via inline JavaScript code that is executed within a third-party extension.
CVE-2015-7187
The Add-on SDK in Mozilla Firefox before 42.0 misinterprets a "script: false" panel setting, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via inline JavaScript code that is executed within a third-party extension.
CVE-2015-7187
The Add-on SDK in Mozilla Firefox before 42.0 misinterprets a "script: ...
BDU:2015-11991
Уязвимость браузера Firefox, позволяющая нарушителю провести межсайтовое выполнение сценариев
openSUSE-SU-2015:1942-1
Security update for MozillaFirefox, mozilla-nspr, mozilla-nss, xulrunner, seamonkey
ALT-PU-2015-1974
ALT-PU-2015-1974: package `firefox` update to version 42.0-alt1
ALT-PU-2016-1454
ALT-PU-2016-1454: package `firefox-esr` update to version 45.1.1-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-7xcg-pmvr-6h7r The Add-on SDK in Mozilla Firefox before 42.0 misinterprets a "script: false" panel setting, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via inline JavaScript code that is executed within a third-party extension. | 2% Низкий | больше 4 лет назад | |
 | CVE-2015-7187 The Add-on SDK in Mozilla Firefox before 42.0 misinterprets a "script: false" panel setting, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via inline JavaScript code that is executed within a third-party extension. | CVSS2: 4.3 | 2% Низкий | около 11 лет назад |
 | CVE-2015-7187 The Add-on SDK in Mozilla Firefox before 42.0 misinterprets a "script: false" panel setting, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via inline JavaScript code that is executed within a third-party extension. | CVSS2: 5.1 | 2% Низкий | около 11 лет назад |
 | CVE-2015-7187 The Add-on SDK in Mozilla Firefox before 42.0 misinterprets a "script: false" panel setting, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via inline JavaScript code that is executed within a third-party extension. | CVSS2: 4.3 | 2% Низкий | около 11 лет назад |
| CVE-2015-7187 The Add-on SDK in Mozilla Firefox before 42.0 misinterprets a "script: ... | CVSS2: 4.3 | 2% Низкий | около 11 лет назад |
 | BDU:2015-11991 Уязвимость браузера Firefox, позволяющая нарушителю провести межсайтовое выполнение сценариев | CVSS2: 4.3 | 2% Низкий | около 11 лет назад |
 | openSUSE-SU-2015:1942-1 Security update for MozillaFirefox, mozilla-nspr, mozilla-nss, xulrunner, seamonkey | около 11 лет назад | ||
| ALT-PU-2015-1974 ALT-PU-2015-1974: package `firefox` update to version 42.0-alt1 | CVSS3: 9.8 | почти 11 лет назад | |
| ALT-PU-2016-1454 ALT-PU-2016-1454: package `firefox-esr` update to version 45.1.1-alt1 | CVSS3: 10 | больше 10 лет назад |
Уязвимостей на страницу