Lucene search
Veracode Vulnerability DatabaseVERACODE:24773HistoryApr 10, 2020 - 1:04 a.m.
Cross-Site Scripting (XSS)
2020-04-1001:04:12
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
17
EPSS
0.002
Percentile
61.1%
thunderbird is vulnerable to cross-site scripting (XSS). A cross-site scripting (XSS) flaw was found in the way Thunderbird handled certain multibyte character sets. Malicious, remote content could cause Thunderbird to run JavaScript code with the permissions of different remote content.
References
lists.opensuse.org/opensuse-security-announce/2011-11/msg00020.html
www.mozilla.org/security/announce/2011/mfsa2011-47.html
www.redhat.com/support/errata/RHSA-2011-1439.html
access.redhat.com/errata/RHSA-2011:1438
access.redhat.com/security/updates/classification/#moderate
bugzilla.mozilla.org/show_bug.cgi?id=690225
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14212
Related
openvas
openvas
CentOS Update for seamonkey CESA-2011:1440 centos4 i386
2011-11-11 00:00:00
CentOS Update for thunderbird CESA-2011:1438 centos4 x86_64
2012-07-30 00:00:00
CentOS Update for seamonkey CESA-2011:1440 centos4 x86_64
2012-07-30 00:00:00
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2011-47
2011-11-25 00:00:00
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2011-11-25 00:00:00
nessus
nessus
RHEL 4 / 5 : thunderbird (RHSA-2011:1438)
2011-11-09 00:00:00
CentOS 4 / 5 : thunderbird (CESA-2011:1438)
2011-11-14 00:00:00
Oracle Linux 4 : thunderbird (ELSA-2011-1438)
2013-07-12 00:00:00
cve
cve
CVE-2011-3648
2011-11-09 11:55:03
oraclelinux
oraclelinux
seamonkey security update
2011-11-09 00:00:00
thunderbird security update
2011-11-09 00:00:00
firefox security update
2011-11-09 00:00:00
mozilla
mozilla
Potential XSS against sites using Shift-JIS — Mozilla
2011-11-08 00:00:00
centos
centos
seamonkey security update
2011-11-09 20:48:43
thunderbird security update
2011-11-09 20:49:13
firefox, xulrunner security update
2011-11-09 20:48:22
cvelist
cvelist
CVE-2011-3648
2011-11-09 11:00:00
ubuntucve
ubuntucve
CVE-2011-3648
2011-11-09 00:00:00
redhat
redhat
(RHSA-2011:1438) Moderate: thunderbird security update
2011-11-08 00:00:00
(RHSA-2011:1440) Moderate: seamonkey security update
2011-11-08 00:00:00
(RHSA-2011:1437) Critical: firefox security update
2011-11-08 00:00:00
prion
prion
Cross site scripting
2011-11-09 11:55:00
nvd
nvd
CVE-2011-3648
2011-11-09 11:55:03
osv
osv
iceape - several
2011-11-09 00:00:00
iceweasel - several
2011-11-09 00:00:00
icedove - several
2011-11-11 00:00:00
debian
debian
[SECURITY] [DSA 2341-1] iceweasel security update
2011-11-09 16:45:01
[SECURITY] [DSA 2345-1] icedove security update
2011-11-11 21:26:06
[BSA-056] Security update for Iceweasel
2011-11-11 14:05:42
suse
suse
Security update for MozillaFirefox (critical)
2011-11-18 22:08:45
MozillaFirefox (critical)
2011-11-15 15:08:31
MozillaFirefox secuirty update (critical)
2011-11-15 15:08:39
ubuntu
ubuntu
Firefox and Xulrunner vulnerabilities
2011-11-10 00:00:00
Thunderbird vulnerabilities
2011-12-22 00:00:00
Thunderbird vulnerabilities
2011-11-28 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2011-11-08 00:00:00
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00