Search for packages
| purl | pkg:rpm/redhat/firefox@78.2.0-2?arch=el8_2 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 4.5 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-28dd-azvp-pkeu
Aliases: CVE-2020-15648 |
Using object or embed tags, it was possible to frame other websites, even if they disallowed framing using the X-Frame-Options header. | There are no reported fixed by versions. |
|
VCID-3ux5-gp3e-2udq
Aliases: CVE-2020-15669 |
Multiple vulnerabilities have been found in Mozilla Firefox and Mozilla Thunderbird, the worst of which could result in the arbitrary execution of code. | There are no reported fixed by versions. |
|
VCID-6h7s-a74e-33c1
Aliases: CVE-2020-15653 |
Mozilla developer Anne van Kesteren discovered that <iframe sandbox> with the allow-popups flag could be bypassed when using noopener links. This could have led to security issues for websites relying on sandbox configurations that allowed popups and hosted arbitrary content. | There are no reported fixed by versions. |
|
VCID-9tc4-qr6d-6kfu
Aliases: CVE-2020-15654 |
When in an endless loop, a website specifying a custom cursor using CSS could make it look like the user is interacting with the user interface, when they are not. This could lead to a perceived broken state, especially when interactions with existing browser dialogs and warnings do not work. | There are no reported fixed by versions. |
|
VCID-g3mn-nhq4-zbhv
Aliases: CVE-2020-12424 |
Multiple vulnerabilities have been found in Mozilla Firefox, the worst of which could result in the arbitrary execution of code. | There are no reported fixed by versions. |
|
VCID-h4r6-jrxh-6kcf
Aliases: CVE-2020-15656 |
JIT optimizations involving the Javascript arguments object could confuse later optimizations. This risk was already mitigated by various precautions in the code, resulting in this bug rated at only moderate severity. | There are no reported fixed by versions. |
|
VCID-jtsz-m5jr-ebdc
Aliases: CVE-2020-15664 |
Multiple vulnerabilities have been found in Mozilla Firefox and Mozilla Thunderbird, the worst of which could result in the arbitrary execution of code. | There are no reported fixed by versions. |
|
VCID-p6nb-kyzu-bbdf
Aliases: CVE-2020-12425 |
Multiple vulnerabilities have been found in Mozilla Firefox, the worst of which could result in the arbitrary execution of code. | There are no reported fixed by versions. |
|
VCID-qhwf-9n5n-hbaa
Aliases: CVE-2020-15658 |
The code for downloading files did not properly take care of special characters, which led to an attacker being able to cut off the file ending at an earlier position, leading to a different file type being downloaded than shown in the dialog. | There are no reported fixed by versions. |
|
VCID-v891-36x1-nfcj
Aliases: CVE-2020-12390 |
Incorrect origin serialization of URLs with IPv6 addresses could lead to incorrect security checks | There are no reported fixed by versions. |
|
VCID-w9xm-y9fr-wyh7
Aliases: CVE-2020-12422 |
Multiple vulnerabilities have been found in Mozilla Firefox, the worst of which could result in the arbitrary execution of code. | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||