VUMETRIC
CYBER PORTAL
Dashboard
Security News
Latest Vulnerabilities
Browse Vulnerabilities
by Vendors
by Products
by Categories
Weekly Reports
Vulnerabilities
>
Mozilla
>
Thunderbird
> 68.11
Exclude new CVEs:
DATE
CVE
VULNERABILITY TITLE
RISK
2020-08-10
CVE-2020-15656
Type Confusion vulnerability in multiple products
JIT optimizations involving the Javascript arguments object could confuse later optimizations.
network
low complexity
mozilla
opensuse
canonical
CWE-843
8.8
8.8
2020-08-10
CVE-2020-15655
A redirected HTTP request which is observed or modified through a web extension could bypass existing CORS checks, leading to potential disclosure of cross-origin information.
network
low complexity
mozilla
opensuse
canonical
6.5
6.5
2020-08-10
CVE-2020-15654
Infinite Loop vulnerability in multiple products
When in an endless loop, a website specifying a custom cursor using CSS could make it look like the user is interacting with the user interface, when they are not.
network
low complexity
mozilla
canonical
CWE-835
6.5
6.5
2020-08-10
CVE-2020-15653
An iframe sandbox element with the allow-popups flag could be bypassed when using noopener links.
network
low complexity
mozilla
canonical
6.5
6.5
2020-08-10
CVE-2020-15648
Improper Restriction of Rendered UI Layers or Frames vulnerability in Mozilla Firefox
Using object or embed tags, it was possible to frame other websites, even if they disallowed framing using the X-Frame-Options header.
network
low complexity
mozilla
CWE-1021
6.5
6.5
«
Previous
1
2
...
34
35
36
37
38
(current)
»