Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Mozilla Firefox ESR 68.8 Clear all filters
TI-2020-09906 CVE-2020-12388 · GHSA-fx7p-g7cp-xx65

Improper input validation in Mozilla Firefox ESR

Priority MEDIUM 49

The Firefox content processes did not sufficiently lockdown access control which could result in a sandbox escape.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.03524 Published 2020-05-26 Partial fix · 68.8, 76 CWE-20
TI-2020-09907 CVE-2020-12389 · GHSA-hgp4-9j3m-3phf

Improper input validation in Mozilla Firefox ESR

Priority MEDIUM 46

The Firefox content processes did not sufficiently lockdown access control which could result in a sandbox escape.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01723 Published 2020-05-26 Partial fix · 68.8, 76 CWE-20
TI-2020-09911 CVE-2020-12393 · GHSA-x932-mvm6-79m8

OS command injection in Mozilla Firefox ESR

Priority LOW 36

The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a request, which can be controlled by the website.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01011 Published 2020-05-26 Partial fix · 68.8, 76 +1 CWE-78