Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2018-18494HistoryFeb 28, 2019 - 6:29 p.m.
CVE-2018-18494
2019-02-2818:29:00
Debian Security Bug Tracker
security-tracker.debian.org
10
0.002 Low
EPSS
Percentile
64.3%
A same-origin policy violation allowing the theft of cross-origin URL entries when using the Javascript location property to cause a redirection to another site using performance.getEntries(). This is a same-origin policy violation and could allow for data theft. This vulnerability affects Thunderbird < 60.4, Firefox ESR < 60.4, and Firefox < 64.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 999 | all | firefox | < 64.0-1 | firefox_64.0-1_all.deb |
| Debian | 12 | all | firefox-esr | < 60.4.0esr-1 | firefox-esr_60.4.0esr-1_all.deb |
| Debian | 11 | all | firefox-esr | < 60.4.0esr-1 | firefox-esr_60.4.0esr-1_all.deb |
| Debian | 10 | all | firefox-esr | < 60.4.0esr-1 | firefox-esr_60.4.0esr-1_all.deb |
| Debian | 999 | all | firefox-esr | < 60.4.0esr-1 | firefox-esr_60.4.0esr-1_all.deb |
| Debian | 13 | all | firefox-esr | < 60.4.0esr-1 | firefox-esr_60.4.0esr-1_all.deb |
| Debian | 12 | all | thunderbird | < 1:60.4.0-1 | thunderbird_1:60.4.0-1_all.deb |
| Debian | 11 | all | thunderbird | < 1:60.4.0-1 | thunderbird_1:60.4.0-1_all.deb |
| Debian | 10 | all | thunderbird | < 1:60.4.0-1 | thunderbird_1:60.4.0-1_all.deb |
| Debian | 999 | all | thunderbird | < 1:60.4.0-1 | thunderbird_1:60.4.0-1_all.deb |
Related
redhatcve
redhatcve
CVE-2018-18494
2020-04-08 21:02:32
veracode
veracode
Insecure Same-Origin Policy
2019-05-16 03:23:45
cve
cve
CVE-2018-18494
2019-02-28 18:29:00
ubuntucve
ubuntucve
CVE-2018-18494
2018-12-11 00:00:00
prion
prion
Cross site scripting
2019-02-28 18:29:00
cvelist
cvelist
CVE-2018-18494
2019-02-28 18:00:00
nessus
nessus
Scientific Linux Security Update : firefox on SL6.x i386/x86_64 (20181217)
2018-12-27 00:00:00
Oracle Linux 7 : thunderbird (ELSA-2019-0160)
2019-01-25 00:00:00
openSUSE Security Update : Mozilla Firefox (openSUSE-2018-1544)
2018-12-14 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package thunderbird version 60.4.0-alt1
2018-12-24 00:00:00
Security fix for the ALT Linux 10 package firefox-esr version 60.4.0-alt1
2018-12-11 00:00:00
osv
osv
firefox-esr - security update
2018-12-13 00:00:00
thunderbird - security update
2019-01-02 00:00:00
firefox-esr - security update
2018-12-12 00:00:00
oraclelinux
oraclelinux
firefox security update
2018-12-18 00:00:00
thunderbird security update
2019-01-25 00:00:00
thunderbird security update
2019-01-25 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-4362-1)
2018-12-31 00:00:00
CentOS Update for firefox CESA-2018:3831 centos6
2018-12-25 00:00:00
openSUSE: Security Advisory for Mozilla (openSUSE-SU-2018:4112-1)
2018-12-13 00:00:00
mozilla
mozilla
Security vulnerabilities fixed in Thunderbird 60.4 — Mozilla
2018-12-21 00:00:00
Security vulnerabilities fixed in Firefox ESR 60.4 — Mozilla
2018-12-11 00:00:00
Security vulnerabilities fixed in Firefox 64 — Mozilla
2018-12-11 00:00:00
debian
debian
[SECURITY] [DLA 1605-1] firefox-esr security update
2018-12-13 09:12:18
[SECURITY] [DSA 4354-1] firefox-esr security update
2018-12-12 21:09:09
centos
centos
thunderbird security update
2019-02-01 23:12:43
firefox security update
2018-12-21 19:07:59
thunderbird security update
2019-02-01 23:14:30
redhat
redhat
(RHSA-2018:3831) Critical: firefox security update
2018-12-17 13:56:10
(RHSA-2019:0159) Important: thunderbird security update
2019-01-24 21:47:18
(RHSA-2018:3833) Critical: firefox security update
2018-12-17 14:10:13
amazon
amazon
Critical: thunderbird
2019-03-07 05:55:00
kaspersky
kaspersky
KLA11406 Multiple vulnerabilities in Mozilla Thunderbird
2018-12-21 00:00:00
KLA11389 Multiple vulnerabilities in Mozilla Firefox and Mozilla Firefox ESR
2018-12-11 00:00:00
suse
suse
Security update for Mozilla Firefox (important)
2018-12-13 12:09:13
Security update for MozillaThunderbird (important)
2019-02-14 00:00:00
Security update for MozillaThunderbird (important)
2019-02-27 00:00:00
slackware
slackware
[slackware-security] mozilla-firefox
2018-12-12 04:59:01
ibm
ibm
Security Bulletin: Multiple Mozilla Firefox vulnerabilities in IBM SONAS
2019-05-02 08:10:01
mageia
mageia
Updated firefox packages fix security vulnerabilities
2018-12-16 00:29:48
archlinux
archlinux
[ASA-201812-9] firefox: multiple issues
2018-12-12 00:00:00
gentoo
gentoo
Mozilla Firefox: Multiple vulnerabilities
2019-03-10 00:00:00
ubuntu
ubuntu
Thunderbird vulnerabilities
2019-01-24 00:00:00
Firefox vulnerabilities
2018-12-11 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2018-12-11 00:00:00