Поиск уязвимостей
Количество 11
Количество 11
CVE-2014-8639
Mozilla Firefox before 35.0, Firefox ESR 31.x before 31.4, Thunderbird before 31.4, and SeaMonkey before 2.32 do not properly interpret Set-Cookie headers within responses that have a 407 (aka Proxy Authentication Required) status code, which allows remote HTTP proxy servers to conduct session fixation attacks by providing a cookie name that corresponds to the session cookie of the origin server.
CVE-2014-8639
Mozilla Firefox before 35.0, Firefox ESR 31.x before 31.4, Thunderbird before 31.4, and SeaMonkey before 2.32 do not properly interpret Set-Cookie headers within responses that have a 407 (aka Proxy Authentication Required) status code, which allows remote HTTP proxy servers to conduct session fixation attacks by providing a cookie name that corresponds to the session cookie of the origin server.
CVE-2014-8639
Mozilla Firefox before 35.0, Firefox ESR 31.x before 31.4, Thunderbird before 31.4, and SeaMonkey before 2.32 do not properly interpret Set-Cookie headers within responses that have a 407 (aka Proxy Authentication Required) status code, which allows remote HTTP proxy servers to conduct session fixation attacks by providing a cookie name that corresponds to the session cookie of the origin server.
CVE-2014-8639
Mozilla Firefox before 35.0, Firefox ESR 31.x before 31.4, Thunderbird ...
GHSA-cfgr-xpqw-rcxf
Mozilla Firefox before 35.0, Firefox ESR 31.x before 31.4, Thunderbird before 31.4, and SeaMonkey before 2.32 do not properly interpret Set-Cookie headers within responses that have a 407 (aka Proxy Authentication Required) status code, which allows remote HTTP proxy servers to conduct session fixation attacks by providing a cookie name that corresponds to the session cookie of the origin server.
ELSA-2015-0047
ELSA-2015-0047: thunderbird security update (IMPORTANT)
ELSA-2015-0046
ELSA-2015-0046: firefox security and bug fix update (CRITICAL)
ALT-PU-2015-1112
ALT-PU-2015-1112: package `firefox` update to version 35.0.1-alt1
ALT-PU-2015-1082
ALT-PU-2015-1082: package `seamonkey` update to version 2.32-alt1
ALT-PU-2015-1584
ALT-PU-2015-1584: package `thunderbird` update to version 38.0.1-alt1
ALT-PU-2015-1464
ALT-PU-2015-1464: package `firefox-esr` update to version 38.0.1-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2014-8639 Mozilla Firefox before 35.0, Firefox ESR 31.x before 31.4, Thunderbird before 31.4, and SeaMonkey before 2.32 do not properly interpret Set-Cookie headers within responses that have a 407 (aka Proxy Authentication Required) status code, which allows remote HTTP proxy servers to conduct session fixation attacks by providing a cookie name that corresponds to the session cookie of the origin server. | CVSS2: 6.8 | 2% Низкий | почти 12 лет назад |
 | CVE-2014-8639 Mozilla Firefox before 35.0, Firefox ESR 31.x before 31.4, Thunderbird before 31.4, and SeaMonkey before 2.32 do not properly interpret Set-Cookie headers within responses that have a 407 (aka Proxy Authentication Required) status code, which allows remote HTTP proxy servers to conduct session fixation attacks by providing a cookie name that corresponds to the session cookie of the origin server. | CVSS2: 4.3 | 2% Низкий | почти 12 лет назад |
 | CVE-2014-8639 Mozilla Firefox before 35.0, Firefox ESR 31.x before 31.4, Thunderbird before 31.4, and SeaMonkey before 2.32 do not properly interpret Set-Cookie headers within responses that have a 407 (aka Proxy Authentication Required) status code, which allows remote HTTP proxy servers to conduct session fixation attacks by providing a cookie name that corresponds to the session cookie of the origin server. | CVSS2: 6.8 | 2% Низкий | почти 12 лет назад |
| CVE-2014-8639 Mozilla Firefox before 35.0, Firefox ESR 31.x before 31.4, Thunderbird ... | CVSS2: 6.8 | 2% Низкий | почти 12 лет назад |
| GHSA-cfgr-xpqw-rcxf Mozilla Firefox before 35.0, Firefox ESR 31.x before 31.4, Thunderbird before 31.4, and SeaMonkey before 2.32 do not properly interpret Set-Cookie headers within responses that have a 407 (aka Proxy Authentication Required) status code, which allows remote HTTP proxy servers to conduct session fixation attacks by providing a cookie name that corresponds to the session cookie of the origin server. | 2% Низкий | больше 4 лет назад | |
| ELSA-2015-0047 ELSA-2015-0047: thunderbird security update (IMPORTANT) | почти 12 лет назад | ||
| ELSA-2015-0046 ELSA-2015-0046: firefox security and bug fix update (CRITICAL) | почти 12 лет назад | ||
| ALT-PU-2015-1112 ALT-PU-2015-1112: package `firefox` update to version 35.0.1-alt1 | CVSS2: 7.5 | почти 12 лет назад | |
| ALT-PU-2015-1082 ALT-PU-2015-1082: package `seamonkey` update to version 2.32-alt1 | CVSS2: 7.5 | почти 12 лет назад | |
| ALT-PU-2015-1584 ALT-PU-2015-1584: package `thunderbird` update to version 38.0.1-alt1 | CVSS3: 7.3 | больше 11 лет назад | |
| ALT-PU-2015-1464 ALT-PU-2015-1464: package `firefox-esr` update to version 38.0.1-alt1 | CVSS3: 7.3 | больше 11 лет назад |
Уязвимостей на страницу