Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2006-2785
HistoryJun 02, 2006 - 7:02 p.m.

CVE-2006-2785

2006-06-0219:02:00
[email protected]
web.nvd.nist.gov
5

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.2

Confidence

High

EPSS

0.376

Percentile

97.2%

JSON

Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 1.5.0.4 allows user-assisted remote attackers to inject arbitrary web script or HTML by tricking a user into (1) performing a “View Image” on a broken image in which the SRC attribute contains a Javascript URL, or (2) selecting “Show only this frame” on a frame whose SRC attribute contains a Javascript URL.

Affected configurations

Nvd
Node
mozillafirefoxRange≤1.5.0.3
VendorProductVersionCPE
mozillafirefox*cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*

References

Related

debiancve 1
cvelist 1
cve 1
ubuntucve 1
prion 1
mozilla 1
openvas 13
redhat 5
gentoo 1
nessus 21
securityvulns 1
suse 1
osv 3
ubuntu 3
debian 3
centos 4
oraclelinux 2
debiancve
debiancve
CVE-2006-2785
2006-06-02 19:02:00
cvelist
cvelist
CVE-2006-2785
2006-06-02 19:00:00
cve
cve
CVE-2006-2785
2006-06-02 19:02:00
ubuntucve
ubuntucve
CVE-2006-2785
2006-06-02 00:00:00
prion
prion
Cross site scripting
2006-06-02 19:02:00
mozilla
mozilla
XSS viewing javascript: frames or images from context menu — Mozilla
2006-06-01 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200606-12 (mozilla-firefox)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200606-12 (mozilla-firefox)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200703-05 (mozilla)
2008-09-24 00:00:00
redhat
redhat
(RHSA-2006:0578) seamonkey security update (was mozilla)
2006-07-20 00:00:00
(RHSA-2006:0610) firefox security update
2006-07-28 00:00:00
(RHSA-2006:0611) thunderbird security update
2006-07-28 00:00:00
gentoo
gentoo
Mozilla Firefox: Multiple vulnerabilities
2006-06-11 00:00:00
nessus
nessus
GLSA-200606-12 : Mozilla Firefox: Multiple vulnerabilities
2006-06-16 00:00:00
RHEL 3 : seamonkey (RHSA-2006:0578)
2006-07-21 00:00:00
Firefox < 1.5.0.4 Multiple Vulnerabilities
2006-06-03 00:00:00
securityvulns
securityvulns
[USN-323-1] mozilla vulnerabilities
2006-07-27 00:00:00
suse
suse
remote code execution in MozillaFirefox,MozillaThunderbird,Seamonkey
2006-06-23 08:11:46
osv
osv
mozilla-firefox - several vulnerabilities
2006-07-23 00:00:00
mozilla - several
2006-07-22 00:00:00
mozilla-thunderbird - several vulnerabilities
2006-08-02 00:00:00
ubuntu
ubuntu
mozilla vulnerabilities
2006-07-26 00:00:00
Firefox vulnerabilities
2006-07-25 00:00:00
firefox vulnerabilities
2006-06-09 00:00:00
debian
debian
[SECURITY] [DSA 1120-1] New Mozilla Firefox packages fix several vulnerabilities
2006-07-23 06:47:55
[SECURITY] [DSA 1118-1] New Mozilla packages fix several vulnerabilities
2006-07-22 13:23:33
[SECURITY] [DSA 1134-1] New Mozilla Thunderbird packages fix several vulnerabilities
2006-08-02 05:47:19
centos
centos
thunderbird security update
2006-07-29 11:51:27
firefox security update
2006-07-29 11:51:13
devhelp, seamonkey security update
2006-08-05 15:16:05
oraclelinux
oraclelinux
Critical firefox security update
2006-12-07 00:00:00
Critical thunderbird security update
2006-12-07 00:00:00

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.2

Confidence

High

EPSS

0.376

Percentile

97.2%

JSON
Related for NVD:CVE-2006-2785
debiancve1cvelist1cve1ubuntucve1prion1mozilla1openvas13redhat5gentoo1nessus21securityvulns1suse1osv3ubuntu3debian3centos4oraclelinux2