Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Advisory: Mozilla Firefox, Firefox ESR, Thunderbird — openSUSE-SU-2020:1785 Clear all filters
TI-2020-12347 CVE-2020-15673 · GHSA-662r-59mf-5fxr

Use after free in Mozilla Firefox

Priority MEDIUM 42

Mozilla developers reported memory safety bugs present in Firefox 80 and Firefox ESR 78.2.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01961 Published 2020-10-01 Partial fix · 81, 78.3 CWE-416
TI-2020-12350 CVE-2020-15676 · GHSA-m5jf-7x3g-f295

Cross-site scripting in Mozilla Firefox

Priority LOW 30

Firefox sometimes ran the onload handler for SVG elements that the DOM sanitizer decided to remove, resulting in JavaScript being executed after pasting attacker-controlled data into a contenteditable element.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01594 Published 2020-10-01 Partial fix · 81, 78.3 CWE-79
TI-2020-12351 CVE-2020-15677 · GHSA-c2xm-2fm6-9338

Open redirect in Mozilla Firefox

Priority LOW 31

By exploiting an Open Redirect vulnerability on a website, an attacker could have spoofed the site displayed in the download file dialog to show the original site (the one suffering from the open redirect) rather than th…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01657 Published 2020-10-01 Partial fix · 81, 78.3 CWE-601
TI-2020-12352 CVE-2020-15678 · GHSA-4rfx-gjvx-jp3h

Use after free in Mozilla Firefox

Priority MEDIUM 42

When recursing through graphical layers while scrolling, an iterator may have become invalid, resulting in a potential use-after-free.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01882 Published 2020-10-01 Partial fix · 81, 78.3 CWE-416