Логотип exploitDog
bind:CVE-2012-1956
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2012-1956

Количество 7

Количество 7

ubuntu логотип

CVE-2012-1956

почти 13 лет назад

Mozilla Firefox before 15.0, Thunderbird before 15.0, and SeaMonkey before 2.12 do not prevent use of the Object.defineProperty method to shadow the location object (aka window.location), which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via vectors involving a plugin.

CVSS2: 4.3
EPSS: Низкий
redhat логотип

CVE-2012-1956

почти 13 лет назад

Mozilla Firefox before 15.0, Thunderbird before 15.0, and SeaMonkey before 2.12 do not prevent use of the Object.defineProperty method to shadow the location object (aka window.location), which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via vectors involving a plugin.

CVSS2: 4.3
EPSS: Низкий
nvd логотип

CVE-2012-1956

почти 13 лет назад

Mozilla Firefox before 15.0, Thunderbird before 15.0, and SeaMonkey before 2.12 do not prevent use of the Object.defineProperty method to shadow the location object (aka window.location), which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via vectors involving a plugin.

CVSS2: 4.3
EPSS: Низкий
debian логотип

CVE-2012-1956

почти 13 лет назад

Mozilla Firefox before 15.0, Thunderbird before 15.0, and SeaMonkey be ...

CVSS2: 4.3
EPSS: Низкий
github логотип

GHSA-8449-cw6v-fqcw

больше 3 лет назад

Mozilla Firefox before 15.0, Thunderbird before 15.0, and SeaMonkey before 2.12 do not prevent use of the Object.defineProperty method to shadow the location object (aka window.location), which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via vectors involving a plugin.

EPSS: Низкий
oracle-oval логотип

ELSA-2012-1351

почти 13 лет назад

ELSA-2012-1351: thunderbird security update (CRITICAL)

EPSS: Низкий
oracle-oval логотип

ELSA-2012-1350

почти 13 лет назад

ELSA-2012-1350: firefox security and bug fix update (CRITICAL)

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2012-1956

Mozilla Firefox before 15.0, Thunderbird before 15.0, and SeaMonkey before 2.12 do not prevent use of the Object.defineProperty method to shadow the location object (aka window.location), which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via vectors involving a plugin.

CVSS2: 4.3
1%
Низкий
почти 13 лет назад
redhat логотип
CVE-2012-1956

Mozilla Firefox before 15.0, Thunderbird before 15.0, and SeaMonkey before 2.12 do not prevent use of the Object.defineProperty method to shadow the location object (aka window.location), which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via vectors involving a plugin.

CVSS2: 4.3
1%
Низкий
почти 13 лет назад
nvd логотип
CVE-2012-1956

Mozilla Firefox before 15.0, Thunderbird before 15.0, and SeaMonkey before 2.12 do not prevent use of the Object.defineProperty method to shadow the location object (aka window.location), which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via vectors involving a plugin.

CVSS2: 4.3
1%
Низкий
почти 13 лет назад
debian логотип
CVE-2012-1956

Mozilla Firefox before 15.0, Thunderbird before 15.0, and SeaMonkey be ...

CVSS2: 4.3
1%
Низкий
почти 13 лет назад
github логотип
GHSA-8449-cw6v-fqcw

Mozilla Firefox before 15.0, Thunderbird before 15.0, and SeaMonkey before 2.12 do not prevent use of the Object.defineProperty method to shadow the location object (aka window.location), which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via vectors involving a plugin.

1%
Низкий
больше 3 лет назад
oracle-oval логотип
ELSA-2012-1351

ELSA-2012-1351: thunderbird security update (CRITICAL)

почти 13 лет назад
oracle-oval логотип
ELSA-2012-1350

ELSA-2012-1350: firefox security and bug fix update (CRITICAL)

почти 13 лет назад

Уязвимостей на страницу