Логотип exploitDog
bind:CVE-2009-1309
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2009-1309

Количество 6

Количество 6

ubuntu логотип

CVE-2009-1309

около 16 лет назад

Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey do not properly implement the Same Origin Policy for (1) XMLHttpRequest, involving a mismatch for a document's principal, and (2) XPCNativeWrapper.toString, involving an incorrect __proto__ scope, which allows remote attackers to conduct cross-site scripting (XSS) attacks and possibly other attacks via a crafted document.

CVSS2: 4.3
EPSS: Низкий
redhat логотип

CVE-2009-1309

около 16 лет назад

Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey do not properly implement the Same Origin Policy for (1) XMLHttpRequest, involving a mismatch for a document's principal, and (2) XPCNativeWrapper.toString, involving an incorrect __proto__ scope, which allows remote attackers to conduct cross-site scripting (XSS) attacks and possibly other attacks via a crafted document.

CVSS2: 4.3
EPSS: Низкий
nvd логотип

CVE-2009-1309

около 16 лет назад

Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey do not properly implement the Same Origin Policy for (1) XMLHttpRequest, involving a mismatch for a document's principal, and (2) XPCNativeWrapper.toString, involving an incorrect __proto__ scope, which allows remote attackers to conduct cross-site scripting (XSS) attacks and possibly other attacks via a crafted document.

CVSS2: 4.3
EPSS: Низкий
debian логотип

CVE-2009-1309

около 16 лет назад

Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey do not proper ...

CVSS2: 4.3
EPSS: Низкий
github логотип

GHSA-g3r3-3vcq-q6hc

около 3 лет назад

Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey do not properly implement the Same Origin Policy for (1) XMLHttpRequest, involving a mismatch for a document's principal, and (2) XPCNativeWrapper.toString, involving an incorrect __proto__ scope, which allows remote attackers to conduct cross-site scripting (XSS) attacks and possibly other attacks via a crafted document.

EPSS: Низкий
oracle-oval логотип

ELSA-2009-0436

около 16 лет назад

ELSA-2009-0436: firefox security update (CRITICAL)

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2009-1309

Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey do not properly implement the Same Origin Policy for (1) XMLHttpRequest, involving a mismatch for a document's principal, and (2) XPCNativeWrapper.toString, involving an incorrect __proto__ scope, which allows remote attackers to conduct cross-site scripting (XSS) attacks and possibly other attacks via a crafted document.

CVSS2: 4.3
1%
Низкий
около 16 лет назад
redhat логотип
CVE-2009-1309

Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey do not properly implement the Same Origin Policy for (1) XMLHttpRequest, involving a mismatch for a document's principal, and (2) XPCNativeWrapper.toString, involving an incorrect __proto__ scope, which allows remote attackers to conduct cross-site scripting (XSS) attacks and possibly other attacks via a crafted document.

CVSS2: 4.3
1%
Низкий
около 16 лет назад
nvd логотип
CVE-2009-1309

Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey do not properly implement the Same Origin Policy for (1) XMLHttpRequest, involving a mismatch for a document's principal, and (2) XPCNativeWrapper.toString, involving an incorrect __proto__ scope, which allows remote attackers to conduct cross-site scripting (XSS) attacks and possibly other attacks via a crafted document.

CVSS2: 4.3
1%
Низкий
около 16 лет назад
debian логотип
CVE-2009-1309

Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey do not proper ...

CVSS2: 4.3
1%
Низкий
около 16 лет назад
github логотип
GHSA-g3r3-3vcq-q6hc

Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey do not properly implement the Same Origin Policy for (1) XMLHttpRequest, involving a mismatch for a document's principal, and (2) XPCNativeWrapper.toString, involving an incorrect __proto__ scope, which allows remote attackers to conduct cross-site scripting (XSS) attacks and possibly other attacks via a crafted document.

1%
Низкий
около 3 лет назад
oracle-oval логотип
ELSA-2009-0436

ELSA-2009-0436: firefox security update (CRITICAL)

около 16 лет назад

Уязвимостей на страницу