Поиск уязвимостей
Количество 9
Количество 9
CVE-2018-5172
The Live Bookmarks page and the PDF viewer can run injected script content if a user pastes script from the clipboard into them while viewing RSS feeds or PDF files. This could allow a malicious site to socially engineer a user to copy and paste malicious script content that could then run with the context of either page but does not allow for privilege escalation. This vulnerability affects Firefox < 60.
CVE-2018-5172
The Live Bookmarks page and the PDF viewer can run injected script content if a user pastes script from the clipboard into them while viewing RSS feeds or PDF files. This could allow a malicious site to socially engineer a user to copy and paste malicious script content that could then run with the context of either page but does not allow for privilege escalation. This vulnerability affects Firefox < 60.
CVE-2018-5172
The Live Bookmarks page and the PDF viewer can run injected script content if a user pastes script from the clipboard into them while viewing RSS feeds or PDF files. This could allow a malicious site to socially engineer a user to copy and paste malicious script content that could then run with the context of either page but does not allow for privilege escalation. This vulnerability affects Firefox < 60.
CVE-2018-5172
The Live Bookmarks page and the PDF viewer can run injected script con ...
GHSA-w752-w9m4-4289
The Live Bookmarks page and the PDF viewer can run injected script content if a user pastes script from the clipboard into them while viewing RSS feeds or PDF files. This could allow a malicious site to socially engineer a user to copy and paste malicious script content that could then run with the context of either page but does not allow for privilege escalation. This vulnerability affects Firefox < 60.
BDU:2019-03512
Уязвимость браузера Firefox, вызванная возможностью запуска скрипта из буфера обмена на странице Live Bookmarks или в средствах просмотра PDF-файлов, позволяющая нарушителю выполнить произвольный код
SUSE-SU-2019:2872-1
Security update for MozillaFirefox
ALT-PU-2018-1787
ALT-PU-2018-1787: package `firefox` update to version 60.0.1-alt1
ALT-PU-2018-1854
ALT-PU-2018-1854: package `firefox-esr` update to version 60.0.1-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2018-5172 The Live Bookmarks page and the PDF viewer can run injected script content if a user pastes script from the clipboard into them while viewing RSS feeds or PDF files. This could allow a malicious site to socially engineer a user to copy and paste malicious script content that could then run with the context of either page but does not allow for privilege escalation. This vulnerability affects Firefox < 60. | CVSS3: 4.3 | 2% Низкий | больше 8 лет назад | |
CVE-2018-5172 The Live Bookmarks page and the PDF viewer can run injected script content if a user pastes script from the clipboard into them while viewing RSS feeds or PDF files. This could allow a malicious site to socially engineer a user to copy and paste malicious script content that could then run with the context of either page but does not allow for privilege escalation. This vulnerability affects Firefox < 60. | CVSS3: 4.3 | 2% Низкий | больше 8 лет назад | |
CVE-2018-5172 The Live Bookmarks page and the PDF viewer can run injected script content if a user pastes script from the clipboard into them while viewing RSS feeds or PDF files. This could allow a malicious site to socially engineer a user to copy and paste malicious script content that could then run with the context of either page but does not allow for privilege escalation. This vulnerability affects Firefox < 60. | CVSS3: 4.3 | 2% Низкий | больше 8 лет назад | |
CVE-2018-5172 The Live Bookmarks page and the PDF viewer can run injected script con ... | CVSS3: 4.3 | 2% Низкий | больше 8 лет назад | |
GHSA-w752-w9m4-4289 The Live Bookmarks page and the PDF viewer can run injected script content if a user pastes script from the clipboard into them while viewing RSS feeds or PDF files. This could allow a malicious site to socially engineer a user to copy and paste malicious script content that could then run with the context of either page but does not allow for privilege escalation. This vulnerability affects Firefox < 60. | CVSS3: 4.3 | 2% Низкий | больше 4 лет назад | |
BDU:2019-03512 Уязвимость браузера Firefox, вызванная возможностью запуска скрипта из буфера обмена на странице Live Bookmarks или в средствах просмотра PDF-файлов, позволяющая нарушителю выполнить произвольный код | CVSS3: 4.3 | 2% Низкий | около 8 лет назад | |
SUSE-SU-2019:2872-1 Security update for MozillaFirefox | около 7 лет назад | |||
ALT-PU-2018-1787 ALT-PU-2018-1787: package `firefox` update to version 60.0.1-alt1 | CVSS3: 9.8 | больше 8 лет назад | ||
ALT-PU-2018-1854 ALT-PU-2018-1854: package `firefox-esr` update to version 60.0.1-alt1 | CVSS3: 9.8 | больше 8 лет назад |
Уязвимостей на страницу