Поиск уязвимостей
Количество 18
Количество 18
GHSA-wpvr-v2cc-f6qx
After downloading a Windows <code>.url</code> shortcut from the local filesystem, an attacker could supply a remote path that would lead to unexpected network requests from the operating system. This also had the potential to leak NTLM credentials to the resource.<br>*This bug only affects Firefox on Windows. Other operating systems are unaffected.*. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8.
CVE-2023-25734
After downloading a Windows <code>.url</code> shortcut from the local filesystem, an attacker could supply a remote path that would lead to unexpected network requests from the operating system. This also had the potential to leak NTLM credentials to the resource.<br>*This bug only affects Firefox on Windows. Other operating systems are unaffected.*. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8.
CVE-2023-25734
After downloading a Windows <code>.url</code> shortcut from the local filesystem, an attacker could supply a remote path that would lead to unexpected network requests from the operating system. This also had the potential to leak NTLM credentials to the resource.<br>*This bug only affects Firefox on Windows. Other operating systems are unaffected.*. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8.
CVE-2023-25734
After downloading a Windows <code>.url</code> shortcut from the local filesystem, an attacker could supply a remote path that would lead to unexpected network requests from the operating system. This also had the potential to leak NTLM credentials to the resource.<br>*This bug only affects Firefox on Windows. Other operating systems are unaffected.*. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8.
CVE-2023-25734
After downloading a Windows <code>.url</code> shortcut from the local ...
BDU:2023-07863
Уязвимость браузеров Mozilla Firefox, Mozilla Firefox ESR, почтового клиента Mozilla Thunderbird, связанная с некорректным внешним управлением именем или путем файла, позволяющая нарушителю оказать воздействие на конфиденциальность и целостность защищаемой информации
SUSE-SU-2023:0599-1
Security update for MozillaThunderbird
SUSE-SU-2023:0469-1
Security update for MozillaFirefox
SUSE-SU-2023:0466-1
Security update for MozillaFirefox
SUSE-SU-2023:0461-1
Security update for MozillaFirefox
ALT-PU-2023-1435
ALT-PU-2023-1435: package `firefox-esr` update to version 102.8.0-alt1
ALT-PU-2023-1411
ALT-PU-2023-1411: package `thunderbird` update to version 102.8.0-alt1
ALT-PU-2023-1386
ALT-PU-2023-1386: package `firefox-esr` update to version 102.8.0-alt1
ALT-PU-2023-1374
ALT-PU-2023-1374: package `thunderbird` update to version 102.8.0-alt1
ALT-PU-2023-1387
ALT-PU-2023-1387: package `firefox` update to version 110.0.1-alt1
ALT-PU-2023-1478
ALT-PU-2023-1478: package `firefox` update to version 110.0.1-alt0.p10.1
ALT-PU-2022-2306
ALT-PU-2022-2306: package `firefox` update to version 103.0-alt1
ALT-PU-2022-2930
ALT-PU-2022-2930: package `firefox` update to version 105.0.1-alt0.p10.1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-wpvr-v2cc-f6qx After downloading a Windows <code>.url</code> shortcut from the local filesystem, an attacker could supply a remote path that would lead to unexpected network requests from the operating system. This also had the potential to leak NTLM credentials to the resource.<br>*This bug only affects Firefox on Windows. Other operating systems are unaffected.*. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8. | CVSS3: 8.1 | 1% Низкий | больше 3 лет назад |
 | CVE-2023-25734 After downloading a Windows <code>.url</code> shortcut from the local filesystem, an attacker could supply a remote path that would lead to unexpected network requests from the operating system. This also had the potential to leak NTLM credentials to the resource.<br>*This bug only affects Firefox on Windows. Other operating systems are unaffected.*. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8. | CVSS3: 8.1 | 1% Низкий | больше 3 лет назад |
 | CVE-2023-25734 After downloading a Windows <code>.url</code> shortcut from the local filesystem, an attacker could supply a remote path that would lead to unexpected network requests from the operating system. This also had the potential to leak NTLM credentials to the resource.<br>*This bug only affects Firefox on Windows. Other operating systems are unaffected.*. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8. | CVSS3: 6.1 | 1% Низкий | больше 3 лет назад |
 | CVE-2023-25734 After downloading a Windows <code>.url</code> shortcut from the local filesystem, an attacker could supply a remote path that would lead to unexpected network requests from the operating system. This also had the potential to leak NTLM credentials to the resource.<br>*This bug only affects Firefox on Windows. Other operating systems are unaffected.*. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8. | CVSS3: 8.1 | 1% Низкий | больше 3 лет назад |
| CVE-2023-25734 After downloading a Windows <code>.url</code> shortcut from the local ... | CVSS3: 8.1 | 1% Низкий | больше 3 лет назад |
 | BDU:2023-07863 Уязвимость браузеров Mozilla Firefox, Mozilla Firefox ESR, почтового клиента Mozilla Thunderbird, связанная с некорректным внешним управлением именем или путем файла, позволяющая нарушителю оказать воздействие на конфиденциальность и целостность защищаемой информации | CVSS3: 8.1 | 1% Низкий | больше 3 лет назад |
 | SUSE-SU-2023:0599-1 Security update for MozillaThunderbird | больше 3 лет назад | ||
| SUSE-SU-2023:0469-1 Security update for MozillaFirefox | больше 3 лет назад | ||
| SUSE-SU-2023:0466-1 Security update for MozillaFirefox | больше 3 лет назад | ||
| SUSE-SU-2023:0461-1 Security update for MozillaFirefox | больше 3 лет назад | ||
| ALT-PU-2023-1435 ALT-PU-2023-1435: package `firefox-esr` update to version 102.8.0-alt1 | CVSS3: 8.8 | больше 3 лет назад | |
| ALT-PU-2023-1411 ALT-PU-2023-1411: package `thunderbird` update to version 102.8.0-alt1 | CVSS3: 8.8 | больше 3 лет назад | |
| ALT-PU-2023-1386 ALT-PU-2023-1386: package `firefox-esr` update to version 102.8.0-alt1 | CVSS3: 8.8 | больше 3 лет назад | |
| ALT-PU-2023-1374 ALT-PU-2023-1374: package `thunderbird` update to version 102.8.0-alt1 | CVSS3: 8.8 | больше 3 лет назад | |
| ALT-PU-2023-1387 ALT-PU-2023-1387: package `firefox` update to version 110.0.1-alt1 | CVSS3: 9.8 | больше 3 лет назад | |
| ALT-PU-2023-1478 ALT-PU-2023-1478: package `firefox` update to version 110.0.1-alt0.p10.1 | CVSS3: 9.8 | больше 3 лет назад | |
| ALT-PU-2022-2306 ALT-PU-2022-2306: package `firefox` update to version 103.0-alt1 | CVSS3: 9.8 | больше 4 лет назад | |
| ALT-PU-2022-2930 ALT-PU-2022-2930: package `firefox` update to version 105.0.1-alt0.p10.1 | CVSS3: 10 | около 4 лет назад |
Уязвимостей на страницу