- Home
- CVEs with nessus.description==Mozilla Foundation reports :
CVE-2017-7828: Use-after-free of PressShell while restyling layout
CVE-2017-7830: Cross-origin URL information leak through Resource
Timing API
CVE-2017-7831: Information disclosure of exposed properties on
JavaScript proxy objects
CVE-2017-7832: Domain spoofing through use of dotless 'i' character
followed by accent markers
CVE-2017-7833: Domain spoofing with Arabic and Indic vowel marker
characters
CVE-2017-7834: data: URLs opened in new tabs bypass CSP protections
CVE-2017-7835: Mixed content blocking incorrectly applies with
redirects
CVE-2017-7836: Pingsender dynamically loads libcurl on Linux and OS X
CVE-2017-7837: SVG loaded as <img> can use meta tags to set cookies
CVE-2017-7838: Failure of individual decoding of labels in
international domain names triggers punycode display of entire IDN
CVE-2017-7839: Control characters before javascript: URLs defeats
self-XSS prevention mechanism
CVE-2017-7840: Exported bookmarks do not strip script elements from
user-supplied tags
CVE-2017-7842: Referrer Policy is not always respected for <link>
elements
CVE-2017-7827: Memory safety bugs fixed in Firefox 57
CVE-2017-7826: Memory safety bugs fixed in Firefox 57 and Firefox ESR
52.5
Max CVSS | 0 |
Min CVSS | 0 |
Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published |
Back to Top
Mark selected
Back to Top