Поиск уязвимостей
Количество 7
Количество 7
GHSA-vhqr-98f2-rx6h
The Public Key Pinning (PKP) implementation in Mozilla Firefox before 33.0 skips pinning checks upon an unspecified issuer-verification error, which makes it easier for remote attackers to bypass an intended pinning configuration and spoof a web site via a crafted certificate that leads to presentation of the Untrusted Connection dialog to the user.
CVE-2014-1584
The Public Key Pinning (PKP) implementation in Mozilla Firefox before 33.0 skips pinning checks upon an unspecified issuer-verification error, which makes it easier for remote attackers to bypass an intended pinning configuration and spoof a web site via a crafted certificate that leads to presentation of the Untrusted Connection dialog to the user.
CVE-2014-1584
The Public Key Pinning (PKP) implementation in Mozilla Firefox before 33.0 skips pinning checks upon an unspecified issuer-verification error, which makes it easier for remote attackers to bypass an intended pinning configuration and spoof a web site via a crafted certificate that leads to presentation of the Untrusted Connection dialog to the user.
CVE-2014-1584
The Public Key Pinning (PKP) implementation in Mozilla Firefox before 33.0 skips pinning checks upon an unspecified issuer-verification error, which makes it easier for remote attackers to bypass an intended pinning configuration and spoof a web site via a crafted certificate that leads to presentation of the Untrusted Connection dialog to the user.
CVE-2014-1584
The Public Key Pinning (PKP) implementation in Mozilla Firefox before ...
ALT-PU-2014-2225
ALT-PU-2014-2225: package `firefox` update to version 32.0.3-alt1
ALT-PU-2015-1464
ALT-PU-2015-1464: package `firefox-esr` update to version 38.0.1-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-vhqr-98f2-rx6h The Public Key Pinning (PKP) implementation in Mozilla Firefox before 33.0 skips pinning checks upon an unspecified issuer-verification error, which makes it easier for remote attackers to bypass an intended pinning configuration and spoof a web site via a crafted certificate that leads to presentation of the Untrusted Connection dialog to the user. | 2% Низкий | больше 4 лет назад | |
 | CVE-2014-1584 The Public Key Pinning (PKP) implementation in Mozilla Firefox before 33.0 skips pinning checks upon an unspecified issuer-verification error, which makes it easier for remote attackers to bypass an intended pinning configuration and spoof a web site via a crafted certificate that leads to presentation of the Untrusted Connection dialog to the user. | CVSS2: 4.3 | 2% Низкий | около 12 лет назад |
 | CVE-2014-1584 The Public Key Pinning (PKP) implementation in Mozilla Firefox before 33.0 skips pinning checks upon an unspecified issuer-verification error, which makes it easier for remote attackers to bypass an intended pinning configuration and spoof a web site via a crafted certificate that leads to presentation of the Untrusted Connection dialog to the user. | CVSS2: 4.3 | 2% Низкий | около 12 лет назад |
 | CVE-2014-1584 The Public Key Pinning (PKP) implementation in Mozilla Firefox before 33.0 skips pinning checks upon an unspecified issuer-verification error, which makes it easier for remote attackers to bypass an intended pinning configuration and spoof a web site via a crafted certificate that leads to presentation of the Untrusted Connection dialog to the user. | CVSS2: 4.3 | 2% Низкий | около 12 лет назад |
| CVE-2014-1584 The Public Key Pinning (PKP) implementation in Mozilla Firefox before ... | CVSS2: 4.3 | 2% Низкий | около 12 лет назад |
| ALT-PU-2014-2225 ALT-PU-2014-2225: package `firefox` update to version 32.0.3-alt1 | CVSS2: 10 | около 12 лет назад | |
| ALT-PU-2015-1464 ALT-PU-2015-1464: package `firefox-esr` update to version 38.0.1-alt1 | CVSS3: 7.3 | больше 11 лет назад |
Уязвимостей на страницу