Поиск уязвимостей
Количество 7
Количество 7
CVE-2014-1582
The Public Key Pinning (PKP) implementation in Mozilla Firefox before 33.0 does not properly consider the connection-coalescing behavior of SPDY and HTTP/2 in the case of a shared IP address, which allows man-in-the-middle attackers to bypass an intended pinning configuration and spoof a web site by providing a valid certificate from an arbitrary recognized Certification Authority.
CVE-2014-1582
The Public Key Pinning (PKP) implementation in Mozilla Firefox before 33.0 does not properly consider the connection-coalescing behavior of SPDY and HTTP/2 in the case of a shared IP address, which allows man-in-the-middle attackers to bypass an intended pinning configuration and spoof a web site by providing a valid certificate from an arbitrary recognized Certification Authority.
CVE-2014-1582
The Public Key Pinning (PKP) implementation in Mozilla Firefox before 33.0 does not properly consider the connection-coalescing behavior of SPDY and HTTP/2 in the case of a shared IP address, which allows man-in-the-middle attackers to bypass an intended pinning configuration and spoof a web site by providing a valid certificate from an arbitrary recognized Certification Authority.
CVE-2014-1582
The Public Key Pinning (PKP) implementation in Mozilla Firefox before ...
GHSA-5853-hwrg-hf3r
The Public Key Pinning (PKP) implementation in Mozilla Firefox before 33.0 does not properly consider the connection-coalescing behavior of SPDY and HTTP/2 in the case of a shared IP address, which allows man-in-the-middle attackers to bypass an intended pinning configuration and spoof a web site by providing a valid certificate from an arbitrary recognized Certification Authority.
ALT-PU-2014-2225
ALT-PU-2014-2225: package `firefox` update to version 32.0.3-alt1
ALT-PU-2015-1464
ALT-PU-2015-1464: package `firefox-esr` update to version 38.0.1-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2014-1582 The Public Key Pinning (PKP) implementation in Mozilla Firefox before 33.0 does not properly consider the connection-coalescing behavior of SPDY and HTTP/2 in the case of a shared IP address, which allows man-in-the-middle attackers to bypass an intended pinning configuration and spoof a web site by providing a valid certificate from an arbitrary recognized Certification Authority. | CVSS2: 4.3 | 1% Низкий | около 12 лет назад | |
CVE-2014-1582 The Public Key Pinning (PKP) implementation in Mozilla Firefox before 33.0 does not properly consider the connection-coalescing behavior of SPDY and HTTP/2 in the case of a shared IP address, which allows man-in-the-middle attackers to bypass an intended pinning configuration and spoof a web site by providing a valid certificate from an arbitrary recognized Certification Authority. | CVSS2: 4.3 | 1% Низкий | около 12 лет назад | |
CVE-2014-1582 The Public Key Pinning (PKP) implementation in Mozilla Firefox before 33.0 does not properly consider the connection-coalescing behavior of SPDY and HTTP/2 in the case of a shared IP address, which allows man-in-the-middle attackers to bypass an intended pinning configuration and spoof a web site by providing a valid certificate from an arbitrary recognized Certification Authority. | CVSS2: 4.3 | 1% Низкий | около 12 лет назад | |
CVE-2014-1582 The Public Key Pinning (PKP) implementation in Mozilla Firefox before ... | CVSS2: 4.3 | 1% Низкий | около 12 лет назад | |
GHSA-5853-hwrg-hf3r The Public Key Pinning (PKP) implementation in Mozilla Firefox before 33.0 does not properly consider the connection-coalescing behavior of SPDY and HTTP/2 in the case of a shared IP address, which allows man-in-the-middle attackers to bypass an intended pinning configuration and spoof a web site by providing a valid certificate from an arbitrary recognized Certification Authority. | 1% Низкий | больше 4 лет назад | ||
ALT-PU-2014-2225 ALT-PU-2014-2225: package `firefox` update to version 32.0.3-alt1 | CVSS2: 10 | около 12 лет назад | ||
ALT-PU-2015-1464 ALT-PU-2015-1464: package `firefox-esr` update to version 38.0.1-alt1 | CVSS3: 7.3 | больше 11 лет назад |
Уязвимостей на страницу