{"id":"CVE-2018-5178","aliases":["DEBIAN-CVE-2018-5178","DLA-1376-1","DLA-1382-1","DSA-4199-1","DSA-4209-1","EUVD-2018-16963","GHSA-2fp8-wvjf-2gv9","MGASA-2018-0248","MGASA-2018-0261","MGASA-2018-0338","RHSA-2018:1414","RHSA-2018:1415","RHSA-2018:1725","RHSA-2018:1726","SUSE-SU-2018:1319-1","SUSE-SU-2018:1334-1","SUSE-SU-2018:1334-2","SUSE-SU-2018:2298-1","SUSE-SU-2019:2872-1","UBUNTU-CVE-2018-5178","USN-3660-1","openSUSE-SU-2024:10601-1"],"status":"published","title":"A buffer overflow was found during UTF8 to Unicode string conversion within JavaScript with...","description":"A buffer overflow was found during UTF8 to Unicode string conversion within JavaScript with extremely large amounts of data. This vulnerability requires the use of a malicious or vulnerable legacy extension in order to occur. This vulnerability affects Thunderbird ESR \u003c 52.8, Thunderbird \u003c 52.8, and Firefox ESR \u003c 52.8.","severity":{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.04893,"percentile":0.92141,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119"],"published":"2018-05-10T00:00:00Z","modified":"2026-10-23T18:03:21Z","fixes":[{"ecosystem":"Debian:12","package":"firefox-esr","fixed_in":["52.8.0esr-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"firefox-esr","fixed_in":["52.8.0esr-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"firefox-esr","fixed_in":["52.8.0esr-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"thunderbird","fixed_in":["1:52.8.0-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"thunderbird","fixed_in":["1:52.8.0-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"thunderbird","fixed_in":["1:52.8.0-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"thunderbird","fixed_in":["1:52.8.0+build1-0ubuntu0.14.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"thunderbird","fixed_in":["1:52.8.0+build1-0ubuntu0.16.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"thunderbird","fixed_in":["1:52.8.0+build1-0ubuntu0.18.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.8.0esr-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.8.0esr-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.8.0esr-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:52.8.0-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:52.8.0-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:52.8.0-1"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.8.0esr-1~deb7u1"}]}],"versions":["45.0.1esr-1","45.0.2esr-1","45.0esr-1","45.0esr-2","45.1.0esr-1","45.1.1esr-1","45.2.0esr-1","45.2.0esr-1~deb7u1","45.2.0esr-1~deb8u1","45.3.0esr-1","45.3.0esr-1~deb7u1","45.3.0esr-1~deb8u1","45.3.0esr-2","45.4.0esr-1","45.4.0esr-1~deb7u1","45.4.0esr-1~deb7u2","45.4.0esr-1~deb8u1","45.4.0esr-1~deb8u2","45.4.0esr-2","45.5.0esr-1","45.5.0esr-1~deb8u1","45.5.1esr-1","45.5.1esr-1~deb7u1","45.5.1esr-1~deb8u1","45.6.0esr-1","45.6.0esr-1~deb7u1","45.6.0esr-1~deb8u1","45.7.0esr-1","45.7.0esr-1~deb7u1","45.7.0esr-1~deb8u1","45.7.0esr-2","45.7.0esr-3","45.7.0esr-4","45.8.0esr-1","45.8.0esr-1~deb7u1","45.8.0esr-1~deb8u1","45.9.0esr-1","45.9.0esr-1~deb7u1","45.9.0esr-1~deb8u1","52.0.1esr-1","52.0.2esr-1","52.0esr-1","52.1.0esr-1","52.2.0esr-1","52.2.0esr-1~deb7u1","52.2.0esr-1~deb8u1","52.2.0esr-1~deb9u1","52.2.0esr-2","52.3.0esr-1","52.3.0esr-1~deb7u1","52.3.0esr-1~deb8u1","52.3.0esr-1~deb8u2","52.3.0esr-1~deb9u1","52.3.0esr-2","52.4.0esr-1~deb8u1","52.4.0esr-1~deb9u1","52.4.0esr-2","52.4.0esr-2~deb7u1","52.5.0esr-1","52.5.0esr-1~deb7u1","52.5.0esr-1~deb8u1","52.5.0esr-1~deb9u1","52.5.2esr-1","52.5.2esr-1~deb7u1","52.5.2esr-1~deb8u1","52.5.2esr-1~deb9u1","52.5.3esr-1","52.6.0esr-1","52.6.0esr-1~deb7u1","52.6.0esr-1~deb8u1","52.6.0esr-1~deb9u1","52.6.0esr-2","52.6.0esr-2+alpha.1","52.6.0esr-2+alpha.2","52.7.0esr-1","52.7.0esr-1~deb8u1","52.7.0esr-1~deb9u1","52.7.1esr-1","52.7.1esr-1~deb7u1","52.7.1esr-1~deb8u1","52.7.1esr-1~deb9u1","52.7.2esr-1","52.7.2esr-1~deb7u1","52.7.2esr-1~deb8u1","52.7.2esr-1~deb9u1","52.7.3esr-1","52.7.3esr-1~deb7u1","52.7.3esr-1~deb8u1","52.7.3esr-1~deb9u1"],"bundled":9},{"source":"osv","ecosystem":"Debian:7","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:52.8.0-1~deb7u1"}]}],"versions":["1.5-4","1.5.0.2-1","1.5.0.2-2","1.5.0.2-3","1.5.0.4-1","1.5.0.4-2","1.5.0.4-3","1.5.0.5-1","1.5.0.7-1","1.5.0.7-2","1:52.4.0-1","1:52.4.0-1~deb7u1","1:52.4.0-1~deb8u1","1:52.4.0-1~deb9u1","1:52.4.0-2~exp1","1:52.5.0-1","1:52.5.0-1~deb7u1","1:52.5.0-1~deb8u1","1:52.5.0-1~deb9u1","1:52.5.2-1","1:52.5.2-1~deb7u1","1:52.5.2-2","1:52.5.2-2~deb8u1","1:52.5.2-2~deb9u1","1:52.6.0-1","1:52.6.0-1+alpha.1","1:52.6.0-1+alpha.2","1:52.6.0-1~deb7u1","1:52.6.0-1~deb8u1","1:52.6.0-1~deb9u1","1:52.7.0-1","1:52.7.0-1~deb7u1","1:52.7.0-1~deb8u1","1:52.7.0-1~deb9u1"],"bundled":12},{"source":"osv","ecosystem":"Debian:8","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.8.0esr-1~deb8u1"}]}],"versions":["45.0.1esr-1","45.0.2esr-1","45.0esr-1","45.0esr-2","45.1.0esr-1","45.1.1esr-1","45.2.0esr-1","45.2.0esr-1~deb7u1","45.2.0esr-1~deb8u1","45.3.0esr-1","45.3.0esr-1~deb7u1","45.3.0esr-1~deb8u1","45.3.0esr-2","45.4.0esr-1","45.4.0esr-1~deb7u1","45.4.0esr-1~deb7u2","45.4.0esr-1~deb8u1","45.4.0esr-1~deb8u2","45.4.0esr-2","45.5.0esr-1","45.5.0esr-1~deb8u1","45.5.1esr-1","45.5.1esr-1~deb7u1","45.5.1esr-1~deb8u1","45.6.0esr-1","45.6.0esr-1~deb7u1","45.6.0esr-1~deb8u1","45.7.0esr-1","45.7.0esr-1~deb7u1","45.7.0esr-1~deb8u1","45.7.0esr-2","45.7.0esr-3","45.7.0esr-4","45.8.0esr-1","45.8.0esr-1~deb7u1","45.8.0esr-1~deb8u1","45.9.0esr-1","45.9.0esr-1~deb7u1","45.9.0esr-1~deb8u1","52.0.1esr-1","52.0.2esr-1","52.0esr-1","52.1.0esr-1","52.2.0esr-1","52.2.0esr-1~deb7u1","52.2.0esr-1~deb8u1","52.2.0esr-1~deb9u1","52.2.0esr-2","52.3.0esr-1","52.3.0esr-1~deb7u1","52.3.0esr-1~deb8u1","52.3.0esr-1~deb8u2","52.3.0esr-1~deb9u1","52.3.0esr-2","52.4.0esr-1~deb8u1","52.4.0esr-1~deb9u1","52.4.0esr-2","52.4.0esr-2~deb7u1","52.5.0esr-1","52.5.0esr-1~deb7u1","52.5.0esr-1~deb8u1","52.5.0esr-1~deb9u1","52.5.2esr-1","52.5.2esr-1~deb7u1","52.5.2esr-1~deb8u1","52.5.2esr-1~deb9u1","52.5.3esr-1","52.6.0esr-1","52.6.0esr-1~deb7u1","52.6.0esr-1~deb8u1","52.6.0esr-1~deb9u1","52.6.0esr-2","52.6.0esr-2+alpha.1","52.6.0esr-2+alpha.2","52.7.0esr-1","52.7.0esr-1~deb8u1","52.7.0esr-1~deb9u1","52.7.1esr-1","52.7.1esr-1~deb7u1","52.7.1esr-1~deb8u1","52.7.1esr-1~deb9u1","52.7.2esr-1","52.7.2esr-1~deb7u1","52.7.2esr-1~deb8u1","52.7.2esr-1~deb9u1","52.7.3esr-1","52.7.3esr-1~deb7u1","52.7.3esr-1~deb8u1","52.7.3esr-1~deb9u1","52.8.0esr-1~deb7u1"],"bundled":9},{"source":"osv","ecosystem":"Debian:9","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.8.0esr-1~deb9u1"}]}],"versions":["45.9.0esr-1","52.0.1esr-1","52.0.2esr-1","52.0esr-1","52.1.0esr-1","52.2.0esr-1","52.2.0esr-1~deb7u1","52.2.0esr-1~deb8u1","52.2.0esr-1~deb9u1","52.2.0esr-2","52.3.0esr-1","52.3.0esr-1~deb7u1","52.3.0esr-1~deb8u1","52.3.0esr-1~deb8u2","52.3.0esr-1~deb9u1","52.3.0esr-2","52.4.0esr-1~deb8u1","52.4.0esr-1~deb9u1","52.4.0esr-2","52.4.0esr-2~deb7u1","52.5.0esr-1","52.5.0esr-1~deb7u1","52.5.0esr-1~deb8u1","52.5.0esr-1~deb9u1","52.5.2esr-1","52.5.2esr-1~deb7u1","52.5.2esr-1~deb8u1","52.5.2esr-1~deb9u1","52.5.3esr-1","52.6.0esr-1","52.6.0esr-1~deb7u1","52.6.0esr-1~deb8u1","52.6.0esr-1~deb9u1","52.6.0esr-2","52.6.0esr-2+alpha.1","52.6.0esr-2+alpha.2","52.7.0esr-1","52.7.0esr-1~deb8u1","52.7.0esr-1~deb9u1","52.7.1esr-1","52.7.1esr-1~deb7u1","52.7.1esr-1~deb8u1","52.7.1esr-1~deb9u1","52.7.2esr-1","52.7.2esr-1~deb7u1","52.7.2esr-1~deb8u1","52.7.2esr-1~deb9u1","52.7.3esr-1","52.7.3esr-1~deb7u1","52.7.3esr-1~deb8u1","52.7.3esr-1~deb9u1","52.8.0esr-1~deb7u1","52.8.0esr-1~deb8u1"],"bundled":9},{"source":"osv","ecosystem":"Debian:8","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:52.8.0-1~deb8u1"}]}],"versions":["1.5-4","1.5.0.2-1","1.5.0.2-2","1.5.0.2-3","1.5.0.4-1","1.5.0.4-2","1.5.0.4-3","1.5.0.5-1","1.5.0.7-1","1.5.0.7-2","1:52.4.0-1","1:52.4.0-1~deb7u1","1:52.4.0-1~deb8u1","1:52.4.0-1~deb9u1","1:52.4.0-2~exp1","1:52.5.0-1","1:52.5.0-1~deb7u1","1:52.5.0-1~deb8u1","1:52.5.0-1~deb9u1","1:52.5.2-1","1:52.5.2-1~deb7u1","1:52.5.2-2","1:52.5.2-2~deb8u1","1:52.5.2-2~deb9u1","1:52.6.0-1","1:52.6.0-1+alpha.1","1:52.6.0-1+alpha.2","1:52.6.0-1~deb7u1","1:52.6.0-1~deb8u1","1:52.6.0-1~deb9u1","1:52.7.0-1","1:52.7.0-1~deb7u1","1:52.7.0-1~deb8u1","1:52.7.0-1~deb9u1","1:52.8.0-1~deb7u1"],"bundled":12},{"source":"osv","ecosystem":"Debian:9","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:52.8.0-1~deb9u1"}]}],"versions":["1.5-4","1.5.0.2-1","1.5.0.2-2","1.5.0.2-3","1.5.0.4-1","1.5.0.4-2","1.5.0.4-3","1.5.0.5-1","1.5.0.7-1","1.5.0.7-2","1:52.4.0-1","1:52.4.0-1~deb7u1","1:52.4.0-1~deb8u1","1:52.4.0-1~deb9u1","1:52.4.0-2~exp1","1:52.5.0-1","1:52.5.0-1~deb7u1","1:52.5.0-1~deb8u1","1:52.5.0-1~deb9u1","1:52.5.2-1","1:52.5.2-1~deb7u1","1:52.5.2-2","1:52.5.2-2~deb8u1","1:52.5.2-2~deb9u1","1:52.6.0-1","1:52.6.0-1+alpha.1","1:52.6.0-1+alpha.2","1:52.6.0-1~deb7u1","1:52.6.0-1~deb8u1","1:52.6.0-1~deb9u1","1:52.7.0-1","1:52.7.0-1~deb7u1","1:52.7.0-1~deb8u1","1:52.7.0-1~deb9u1","1:52.8.0-1~deb7u1","1:52.8.0-1~deb8u1"],"bundled":12},{"source":"osv","ecosystem":"Mageia:6","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.8.0-1.mga6"}]}],"bundled":9},{"source":"osv","ecosystem":"Mageia:6","package":"firefox-l10n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.8.0-1.mga6"}]}],"bundled":9},{"source":"osv","ecosystem":"Mageia:6","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.28.6-1.4.mga6"}]}],"bundled":9},{"source":"osv","ecosystem":"Mageia:6","package":"rootcerts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20180411.00-1.mga6"}]}],"bundled":9},{"source":"osv","ecosystem":"Mageia:6","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.8.0-4.mga6"}]}],"bundled":12},{"source":"osv","ecosystem":"Mageia:6","package":"thunderbird-l10n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.8.0-1.mga6"}]}],"bundled":12},{"source":"osv","ecosystem":"Mageia:6","package":"iceape","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.49.3-1.mga6"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.8.0-1.el6_9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.8.0-1.el6_9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.8.0-1.el6_9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.8.0-1.el6_9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.8.0-1.el6_9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.8.0-1.el6_9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.8.0-1.el6_9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.8.0-1.el6_9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.8.0-1.el7_5"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.8.0-1.el7_5"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.8.0-1.el7_5"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.8.0-1.el7_5"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.8.0-1.el7_5"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.8.0-1.el7_5"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.8.0-1.el7_5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.8.0-1.el7_5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.8.0-1.el7_5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.8.0-1.el7_5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.8.0-1.el7_5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.8.0-1.el7_5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.8.0-2.el6_9"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.8.0-2.el6_9"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.8.0-2.el6_9"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.8.0-2.el6_9"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.8.0-2.el6_9"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.8.0-2.el6_9"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.8.0esr-72.32.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.8.0esr-72.32.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.8.0esr-72.32.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.8.0esr-72.32.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.8.0esr-72.32.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.8.0esr-72.32.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.8.0esr-109.31.2"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.8.0esr-109.31.2"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.8.0esr-109.31.2"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.8.0esr-109.31.2"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.8.0esr-109.31.2"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.8.0esr-109.31.2"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.8.0esr-109.31.2"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.8.0esr-109.31.2"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.8.0esr-109.31.2"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.8.0esr-109.31.2"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 4","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.8.0esr-109.31.2"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.8.0esr-109.31.2"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.9.0esr-3.7.12"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.2.0-109.95.2"}]}],"bundled":51},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.2.0-109.95.2"}]}],"bundled":51},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.2.0-109.95.2"}]}],"bundled":51},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.2.0-109.95.2"}]}],"bundled":51},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.2.0-109.95.2"}]}],"bundled":51},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.2.0-109.95.2"}]}],"bundled":51},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.2.0-109.95.2"}]}],"bundled":51},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.2.0-109.95.2"}]}],"bundled":51},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.2.0-109.95.2"}]}],"bundled":51},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.2.0-109.95.2"}]}],"bundled":51},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.2.0-109.95.2"}]}],"bundled":51},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.2.0-109.95.2"}]}],"bundled":51},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.2.0-109.95.2"}]}],"bundled":51},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.2.0-109.95.2"}]}],"bundled":51},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.2.0-109.95.2"}]}],"bundled":51},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.2.0-109.95.2"}]}],"bundled":51},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.2.0-109.95.2"}]}],"bundled":51},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.2.0-109.95.2"}]}],"bundled":51},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.2.0-109.95.2"}]}],"bundled":51},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 5","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.2.0-109.95.2"}]}],"bundled":51},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:52.8.0+build1-0ubuntu0.14.04.1"}]}],"versions":["1:24.0+build1-0ubuntu1","1:24.0+build1-0ubuntu2","1:24.1.1+build1-0ubuntu0.13.10.1","1:24.1.1+build1-0ubuntu1","1:24.2.0+build1-0ubuntu1","1:24.4.0+build1-0ubuntu1","1:24.5.0+build1-0ubuntu0.14.04.1","1:24.6.0+build1-0ubuntu0.14.04.1","1:31.0+build1-0ubuntu0.14.04.1","1:31.1.1+build1-0ubuntu0.14.04.1","1:31.1.2+build1-0ubuntu0.14.04.1","1:31.2.0+build2-0ubuntu0.14.04.1","1:31.3.0+build1-0ubuntu0.14.04.1","1:31.4.0+build1-0ubuntu0.14.04.1","1:31.5.0+build1-0ubuntu0.14.04.1","1:31.6.0+build1-0ubuntu0.14.04.1","1:31.7.0+build1-0ubuntu0.14.04.1","1:31.8.0+build1-0ubuntu0.14.04.1","1:38.2.0+build1-0ubuntu0.14.04.1","1:38.3.0+build1-0ubuntu0.14.04.1","1:38.4.0+build3-0ubuntu0.14.04.1","1:38.5.1+build2-0ubuntu0.14.04.1","1:38.6.0+build1-0ubuntu0.14.04.1","1:38.7.2+build1-0ubuntu0.14.04.1","1:38.8.0+build1-0ubuntu0.14.04.1","1:45.2.0+build1-0ubuntu0.14.04.3","1:45.3.0+build1-0ubuntu0.14.04.4","1:45.4.0+build1-0ubuntu0.14.04.1","1:45.5.1+build1-0ubuntu0.14.04.1","1:45.7.0+build1-0ubuntu0.14.04.1","1:45.8.0+build1-0ubuntu0.14.04.1","1:52.1.1+build1-0ubuntu0.14.04.1","1:52.2.1+build1-0ubuntu0.14.04.1","1:52.3.0+build1-0ubuntu0.14.04.1","1:52.4.0+build1-0ubuntu0.14.04.2","1:52.5.0+build1-0ubuntu0.14.04.1","1:52.6.0+build1-0ubuntu0.14.04.1","1:52.7.0+build1-0ubuntu0.14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:52.8.0+build1-0ubuntu0.16.04.1"}]}],"versions":["1:38.3.0+build1-0ubuntu2","1:38.5.1+build2-0ubuntu1","1:38.6.0+build1-0ubuntu1","1:38.7.2+build1-0ubuntu0.16.04.1","1:38.8.0+build1-0ubuntu0.16.04.1","1:45.2.0+build1-0ubuntu0.16.04.1","1:45.3.0+build1-0ubuntu0.16.04.2","1:45.4.0+build1-0ubuntu0.16.04.1","1:45.5.1+build1-0ubuntu0.16.04.1","1:45.7.0+build1-0ubuntu0.16.04.1","1:45.8.0+build1-0ubuntu0.16.04.1","1:52.1.1+build1-0ubuntu0.16.04.1","1:52.2.1+build1-0ubuntu0.16.04.1","1:52.3.0+build1-0ubuntu0.16.04.1","1:52.4.0+build1-0ubuntu0.16.04.2","1:52.5.0+build1-0ubuntu0.16.04.1","1:52.6.0+build1-0ubuntu0.16.04.1","1:52.7.0+build1-0ubuntu0.16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:52.8.0+build1-0ubuntu0.18.04.1"}]}],"versions":["1:52.4.0+build1-0ubuntu2","1:52.6.0+build1-0ubuntu1","1:52.7.0+build1-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:52.8.0+build1-0ubuntu0.14.04.1"}]}],"versions":["1:24.0+build1-0ubuntu1","1:24.0+build1-0ubuntu2","1:24.1.1+build1-0ubuntu0.13.10.1","1:24.1.1+build1-0ubuntu1","1:24.2.0+build1-0ubuntu1","1:24.4.0+build1-0ubuntu1","1:24.5.0+build1-0ubuntu0.14.04.1","1:24.6.0+build1-0ubuntu0.14.04.1","1:31.0+build1-0ubuntu0.14.04.1","1:31.1.1+build1-0ubuntu0.14.04.1","1:31.1.2+build1-0ubuntu0.14.04.1","1:31.2.0+build2-0ubuntu0.14.04.1","1:31.3.0+build1-0ubuntu0.14.04.1","1:31.4.0+build1-0ubuntu0.14.04.1","1:31.5.0+build1-0ubuntu0.14.04.1","1:31.6.0+build1-0ubuntu0.14.04.1","1:31.7.0+build1-0ubuntu0.14.04.1","1:31.8.0+build1-0ubuntu0.14.04.1","1:38.2.0+build1-0ubuntu0.14.04.1","1:38.3.0+build1-0ubuntu0.14.04.1","1:38.4.0+build3-0ubuntu0.14.04.1","1:38.5.1+build2-0ubuntu0.14.04.1","1:38.6.0+build1-0ubuntu0.14.04.1","1:38.7.2+build1-0ubuntu0.14.04.1","1:38.8.0+build1-0ubuntu0.14.04.1","1:45.2.0+build1-0ubuntu0.14.04.3","1:45.3.0+build1-0ubuntu0.14.04.4","1:45.4.0+build1-0ubuntu0.14.04.1","1:45.5.1+build1-0ubuntu0.14.04.1","1:45.7.0+build1-0ubuntu0.14.04.1","1:45.8.0+build1-0ubuntu0.14.04.1","1:52.1.1+build1-0ubuntu0.14.04.1","1:52.2.1+build1-0ubuntu0.14.04.1","1:52.3.0+build1-0ubuntu0.14.04.1","1:52.4.0+build1-0ubuntu0.14.04.2","1:52.5.0+build1-0ubuntu0.14.04.1","1:52.6.0+build1-0ubuntu0.14.04.1","1:52.7.0+build1-0ubuntu0.14.04.1"],"bundled":12},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:52.8.0+build1-0ubuntu0.16.04.1"}]}],"versions":["1:38.3.0+build1-0ubuntu2","1:38.5.1+build2-0ubuntu1","1:38.6.0+build1-0ubuntu1","1:38.7.2+build1-0ubuntu0.16.04.1","1:38.8.0+build1-0ubuntu0.16.04.1","1:45.2.0+build1-0ubuntu0.16.04.1","1:45.3.0+build1-0ubuntu0.16.04.2","1:45.4.0+build1-0ubuntu0.16.04.1","1:45.5.1+build1-0ubuntu0.16.04.1","1:45.7.0+build1-0ubuntu0.16.04.1","1:45.8.0+build1-0ubuntu0.16.04.1","1:52.1.1+build1-0ubuntu0.16.04.1","1:52.2.1+build1-0ubuntu0.16.04.1","1:52.3.0+build1-0ubuntu0.16.04.1","1:52.4.0+build1-0ubuntu0.16.04.2","1:52.5.0+build1-0ubuntu0.16.04.1","1:52.6.0+build1-0ubuntu0.16.04.1","1:52.7.0+build1-0ubuntu0.16.04.1"],"bundled":12},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:52.8.0+build1-0ubuntu0.18.04.1"}]}],"versions":["1:52.4.0+build1-0ubuntu2","1:52.6.0+build1-0ubuntu1","1:52.7.0+build1-0ubuntu1"],"bundled":12},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"91.1.1-1.1"}]}],"bundled":394}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"mozilla","product":"firefox"},{"vendor":"mozilla","product":"firefox esr"},{"vendor":"mozilla","product":"thunderbird"},{"vendor":"mozilla","product":"thunderbird esr"},{"vendor":"mozilla","product":"thunderbird_esr"},{"vendor":"redhat","product":"enterprise_linux_desktop"},{"vendor":"redhat","product":"enterprise_linux_server"},{"vendor":"redhat","product":"enterprise_linux_server_aus"},{"vendor":"redhat","product":"enterprise_linux_server_eus"},{"vendor":"redhat","product":"enterprise_linux_server_tus"},{"vendor":"redhat","product":"enterprise_linux_workstation"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2018:1415","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://security.gentoo.org/glsa/201810-01","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1726","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1414","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.gentoo.org/glsa/201811-13","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2018-13/","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory"]},{"url":"https://usn.ubuntu.com/3660-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.securitytracker.com/id/1040898","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://www.debian.org/security/2018/dsa-4199","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/05/msg00013.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/05/msg00007.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1725","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory","web"]},{"url":"http://www.securityfocus.com/bid/104138","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://www.debian.org/security/2018/dsa-4209","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2018-12/","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1443891","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Permissions Required","Vendor Advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-5178","tags":["advisory"]},{"url":"https://usn.ubuntu.com/3660-1"},{"url":"https://www.mozilla.org/security/advisories/mfsa2018-12"},{"url":"https://www.mozilla.org/security/advisories/mfsa2018-13"},{"url":"https://github.com/advisories/GHSA-2fp8-wvjf-2gv9"},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-5178","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2018-0248.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=23031","tags":["report"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2018-12/","tags":["advisory","article"]},{"url":"https://www.mozilla.org/security/known-vulnerabilities/firefox-esr/","tags":["web"]},{"url":"https://advisories.mageia.org/MGASA-2018-0261.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=23057","tags":["report"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2018-13/","tags":["advisory"]},{"url":"https://www.thunderbird.net/en-US/thunderbird/52.8.0/releasenotes/","tags":["web"]},{"url":"https://advisories.mageia.org/MGASA-2018-0338.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=23100","tags":["report"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2018-01/","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2018-03/","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2018-07/","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2018-10/","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2018-14/","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2018-11/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1576250","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1576255","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1576257","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1576258","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1576259","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1576260","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1576269","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1576278","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1576283","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1414.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-5150","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-5150","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-5150","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2018-12/#CVE-2018-5150","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-5154","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-5154","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-5154","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2018-12/#CVE-2018-5154","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-5155","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-5155","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-5155","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2018-12/#CVE-2018-5155","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-5157","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-5157","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-5157","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2018-12/#CVE-2018-5157","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-5158","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-5158","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-5158","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2018-12/#CVE-2018-5158","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-5159","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-5159","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-5159","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2018-12/#CVE-2018-5159","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-5168","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-5168","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-5168","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2018-12/#CVE-2018-5168","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-5178","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-5178","tags":["advisory","report"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2018-12/#CVE-2018-5178","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-5183","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-5183","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-5183","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2018-12/#CVE-2018-5183","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1415.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1580236","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1580237","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1580239","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1580240","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1580241","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1725.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-5161","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-5161","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-5161","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2018-13/#CVE-2018-5161","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-5162","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-5162","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-5162","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2018-13/#CVE-2018-5162","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-5170","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-5170","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-5170","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2018-13/#CVE-2018-5170","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-5184","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-5184","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-5184","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2018-13/#CVE-2018-5184","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-5185","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-5185","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-5185","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2018-13/#CVE-2018-5185","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1726.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20181319-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1092548","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5150","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5154","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5155","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5157","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5158","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5159","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5168","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5174","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5178","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5183","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20181334-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20181334-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20182298-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1096449","tags":["report"]},{"url":"https://bugzilla.suse.com/1098998","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12359","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12360","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12362","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12363","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12364","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12365","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12366","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12368","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5156","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5188","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-6126","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20192872-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1010399","tags":["report"]},{"url":"https://bugzilla.suse.com/1010405","tags":["report"]},{"url":"https://bugzilla.suse.com/1010406","tags":["report"]},{"url":"https://bugzilla.suse.com/1010408","tags":["report"]},{"url":"https://bugzilla.suse.com/1010409","tags":["report"]},{"url":"https://bugzilla.suse.com/1010421","tags":["report"]},{"url":"https://bugzilla.suse.com/1010423","tags":["report"]},{"url":"https://bugzilla.suse.com/1010424","tags":["report"]},{"url":"https://bugzilla.suse.com/1010425","tags":["report"]},{"url":"https://bugzilla.suse.com/1010426","tags":["report"]},{"url":"https://bugzilla.suse.com/1025108","tags":["report"]},{"url":"https://bugzilla.suse.com/1043008","tags":["report"]},{"url":"https://bugzilla.suse.com/1047281","tags":["report"]},{"url":"https://bugzilla.suse.com/1074235","tags":["report"]},{"url":"https://bugzilla.suse.com/1092611","tags":["report"]},{"url":"https://bugzilla.suse.com/1120374","tags":["report"]},{"url":"https://bugzilla.suse.com/1137990","tags":["report"]},{"url":"https://bugzilla.suse.com/1149429","tags":["report"]},{"url":"https://bugzilla.suse.com/1154738","tags":["report"]},{"url":"https://bugzilla.suse.com/959933","tags":["report"]},{"url":"https://bugzilla.suse.com/983922","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2830","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5289","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5292","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9063","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9067","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9068","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9069","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9071","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9073","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9075","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9076","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9077","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7789","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5151","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5152","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5153","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5160","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5163","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5164","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5165","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5166","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5167","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5169","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5172","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5173","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5175","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5176","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5177","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5179","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5180","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5181","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5182","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11757","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11758","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11759","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11760","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11761","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11762","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11763","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11764","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-15903","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2018-5178","tags":["report"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2018-13/#CVE-2018-5178","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3660-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-5150","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-5154","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-5155","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-5159","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-5161","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-5162","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-5168","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-5170","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-5183","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-5184","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-5185","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3089","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3285","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3656","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3670","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3734","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3735","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3736","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3737","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3738","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-0016","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-1233","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-1236","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-3835","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-4058","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-4061","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-4064","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-4065","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-4067","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-4070","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-5012","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-5014","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-5016","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-5021","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-5022","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-5024","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-5500","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-5503","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-5506","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-5507","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-5508","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-5510","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-5511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5824","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9893","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9895","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9897","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9898","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9899","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9900","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9904","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9905","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-16541","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5373","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5375","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5376","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5378","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5380","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5383","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5390","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5396","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5398","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5399","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5400","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5401","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5402","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5403","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5404","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5405","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5406","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5407","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5408","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5410","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5412","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5413","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5414","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5416","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5418","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5419","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5421","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5422","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5426","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5429","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5430","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5432","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5433","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5434","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5435","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5436","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5437","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5438","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5439","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5440","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5441","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5442","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5443","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5444","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5445","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5446","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5447","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5449","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5451","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5454","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5459","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5460","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5461","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5462","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5464","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5465","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5466","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5467","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5469","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5470","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5472","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7749","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7750","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7751","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7752","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7753","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7754","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7756","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7757","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7758","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7763","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7764","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7765","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7773","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7777","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7778","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7779","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7782","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7784","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7785","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7786","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7787","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7791","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7792","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7793","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7801","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7802","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7803","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7804","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7805","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7807","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7810","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7814","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7818","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7819","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7823","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7824","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7825","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7826","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7828","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7829","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7830","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7845","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7846","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7847","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7848","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12361","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12367","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12371","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12372","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12373","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12374","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12376","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12377","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12378","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12383","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12385","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12389","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12390","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12391","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12392","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12393","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12405","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-17466","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18335","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18356","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18492","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18493","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18494","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18498","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18500","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18501","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18505","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18509","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5089","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5095","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5096","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5097","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5098","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5099","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5102","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5103","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5104","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5117","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5125","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5127","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5129","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5144","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5145","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5146","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5161","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5162","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5170","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5184","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5185","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5187","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11691","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11692","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11693","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11694","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11698","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11703","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11704","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11705","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11706","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11707","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11708","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11709","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11711","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11712","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11713","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11715","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11717","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11719","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11729","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11730","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11739","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11740","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11742","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11743","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11744","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11746","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11752","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11755","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13722","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17005","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17008","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17010","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17011","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17012","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17015","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17016","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17017","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17021","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17022","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17024","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17026","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-20503","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-5785","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-5798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-7317","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9797","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9810","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9811","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9813","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9815","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9816","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9817","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9818","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9819","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9820","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12387","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12392","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12393","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12395","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12397","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12398","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12405","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12406","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12410","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12417","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12418","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12419","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12420","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12421","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15652","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15659","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15663","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15664","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15669","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15673","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15676","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15677","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15678","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15683","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15685","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15969","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15999","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-16012","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-16042","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-16044","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26950","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26951","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26953","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26956","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26958","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26959","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26960","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26961","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26965","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26966","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26968","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26970","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26971","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26973","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26974","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26976","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26978","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-35111","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-35112","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-35113","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6463","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6514","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6792","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6793","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6794","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6795","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6797","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6805","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6806","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6807","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6811","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6812","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6814","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6819","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6820","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6821","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6822","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6825","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6831","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23953","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23954","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23960","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23961","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23964","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23968","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23969","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23973","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23978","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23981","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23982","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23984","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23987","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23991","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23993","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23994","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23995","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23998","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23999","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-24002","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29945","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29946","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29948","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29956","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29957","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29964","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29967","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29969","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29970","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29976","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29980","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29984","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29985","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29986","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29988","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29989","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29991","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-30547","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-38492","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-38495","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2018-5178","description":"A buffer overflow was found during UTF8 to Unicode string conversion within JavaScript with extremely large amounts of data. This vulnerability requires the use of a malicious or vulnerable legacy extension in order to occur. This vulnerability affects Thunderbird ESR \u003c 52.8, Thunderbird \u003c 52.8, and Firefox ESR \u003c 52.8.","status":"published","published":"2018-06-11T21:00:00Z","modified":"2024-08-05T05:26:46.98Z","updated_at":"2026-11-02T14:35:00.948726Z"}],"euvd":[{"id":"EUVD-2018-16963","description":"A buffer overflow was found during UTF8 to Unicode string conversion within JavaScript with extremely large amounts of data. This vulnerability requires the use of a malicious or vulnerable legacy extension in order to occur. This vulnerability affects Thunderbird ESR \u003c 52.8, Thunderbird \u003c 52.8, and Firefox ESR \u003c 52.8.","status":"published","published":"2018-06-11T21:00:00Z","modified":"2024-08-05T05:26:46Z","updated_at":"2026-11-03T02:40:11.729267Z"}],"ghsa":[{"id":"GHSA-2fp8-wvjf-2gv9","title":"A buffer overflow was found during UTF8 to Unicode string conversion within JavaScript with...","description":"A buffer overflow was found during UTF8 to Unicode string conversion within JavaScript with extremely large amounts of data. This vulnerability requires the use of a malicious or vulnerable legacy extension in order to occur. This vulnerability affects Thunderbird ESR \u003c 52.8, Thunderbird \u003c 52.8, and Firefox ESR \u003c 52.8.","status":"published","published":"2022-05-14T01:22:54Z","modified":"2025-11-25T18:33:21Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T15:04:56.973775Z"}],"nvd":[{"id":"CVE-2018-5178","description":"A buffer overflow was found during UTF8 to Unicode string conversion within JavaScript with extremely large amounts of data. This vulnerability requires the use of a malicious or vulnerable legacy extension in order to occur. This vulnerability affects Thunderbird ESR \u003c 52.8, Thunderbird \u003c 52.8, and Firefox ESR \u003c 52.8.","status":"published","published":"2018-06-11T21:29:16.203Z","modified":"2026-06-17T01:59:46.57Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:04:29.837913Z"}],"osv":[{"id":"CVE-2018-5178","description":"A buffer overflow was found during UTF8 to Unicode string conversion within JavaScript with extremely large amounts of data. This vulnerability requires the use of a malicious or vulnerable legacy extension in order to occur. This vulnerability affects Thunderbird ESR \u003c 52.8, Thunderbird \u003c 52.8, and Firefox ESR \u003c 52.8.","status":"published","published":"2018-06-11T21:29:16.203Z","modified":"2026-04-16T06:15:37.176621635Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:09.442568Z"},{"id":"DEBIAN-CVE-2018-5178","description":"A buffer overflow was found during UTF8 to Unicode string conversion within JavaScript with extremely large amounts of data. This vulnerability requires the use of a malicious or vulnerable legacy extension in order to occur. This vulnerability affects Thunderbird ESR \u003c 52.8, Thunderbird \u003c 52.8, and Firefox ESR \u003c 52.8.","status":"published","published":"2018-06-11T21:29:16.203Z","modified":"2026-10-23T18:03:21.649649336Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:30.867575Z"},{"id":"RHSA-2018:1414","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2024-09-16T01:20:35Z","modified":"2026-06-27T10:05:37Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"RHSA-2018:1415","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2024-09-16T01:20:30Z","modified":"2026-06-27T10:05:38Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"RHSA-2018:1725","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2024-09-16T01:22:21Z","modified":"2026-06-27T10:05:42Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"RHSA-2018:1726","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2024-09-16T01:22:26Z","modified":"2026-06-27T10:05:43Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"UBUNTU-CVE-2018-5178","description":"A buffer overflow was found during UTF8 to Unicode string conversion within JavaScript with extremely large amounts of data. This vulnerability requires the use of a malicious or vulnerable legacy extension in order to occur. This vulnerability affects Thunderbird ESR \u003c 52.8, Thunderbird \u003c 52.8, and Firefox ESR \u003c 52.8.","status":"published","published":"2018-05-10T00:00:00Z","modified":"2026-04-22T11:58:46.994938Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:18.33562Z"},{"id":"DLA-1376-1","title":"firefox-esr - security update","status":"published","published":"2018-05-11T00:00:00Z","modified":"2026-03-09T01:01:59.549373Z","updated_at":"2026-11-02T15:46:09.336894Z"},{"id":"DLA-1382-1","title":"thunderbird - security update","status":"published","published":"2018-05-25T00:00:00Z","modified":"2026-03-09T01:01:26.376065Z","updated_at":"2026-11-02T15:46:09.336894Z"},{"id":"DSA-4199-1","title":"firefox-esr - security update","status":"published","published":"2018-05-10T00:00:00Z","modified":"2026-03-09T02:10:26.354341Z","updated_at":"2026-11-02T15:46:16.862196Z"},{"id":"DSA-4209-1","title":"thunderbird - security update","status":"published","published":"2018-05-25T00:00:00Z","modified":"2026-03-09T01:20:23.763871Z","updated_at":"2026-11-02T15:46:16.862196Z"},{"id":"MGASA-2018-0248","title":"Updated firefox packages fix security vulnerabilities","description":"Updated firefox packages fix security vulnerabilities:\n\nMozilla: Memory safety bugs fixed in Firefox ESR 52.8 (CVE-2018-5150).\n\nMozilla: Backport critical security fixes in Skia (CVE-2018-5183).\n\nMozilla: Use-after-free with SVG animations and clip paths (CVE-2018-5154).\n\nMozilla: Use-after-free with SVG animations and text paths (CVE-2018-5155).\n\nMozilla: Same-origin bypass of PDF Viewer to view protected PDF files\n(CVE-2018-5157).\n\nMozilla: Malicious PDF can inject JavaScript into PDF Viewer\n(CVE-2018-5158).\n\nMozilla: Integer overflow and out-of-bounds write in Skia (CVE-2018-5159).\n\nMozilla: Lightweight themes can be installed without user interaction\n(CVE-2018-5168).\n\nMozilla: Buffer overflow during UTF-8 to Unicode string conversion through\nlegacy extension (CVE-2018-5178).\n\nRootcerts has been updated to 20180411.\n","status":"published","published":"2018-05-17T10:54:59Z","modified":"2026-04-16T06:24:10.666497424Z","updated_at":"2026-11-02T15:49:40.442238Z"},{"id":"MGASA-2018-0261","title":"Updated thunderbird packages fix security vulnerabilities","description":"Updated thunderbird packages fix security vulnerabilities:\n\nMozilla: Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8\n(CVE-2018-5150).\n\nMozilla: Use-after-free with SVG animations and clip paths (CVE-2018-5154).\n\nMozilla: Use-after-free with SVG animations and text paths (CVE-2018-5155).\n\nMozilla: Integer overflow and out-of-bounds write in Skia (CVE-2018-5159).\n\nMozilla: Hang via malformed headers (CVE-2018-5161).\n\nMozilla: Encrypted mail leaks plaintext through src attribute\n(CVE-2018-5162).\n\nMozilla: Lightweight themes can be installed without user interaction\n(CVE-2018-5168).\n\nMozilla: Filename spoofing for external attachments (CVE-2018-5170).\n\nMozilla: Buffer overflow during UTF-8 to Unicode string conversion through\nlegacy extension (CVE-2018-5178).\n\nMozilla: Backport critical security fixes in Skia (CVE-2018-5183).\n\nMozilla: Full plaintext recovery in S/MIME via chosen-ciphertext attack\n(CVE-2018-5184).\n\nMozilla: Leaking plaintext through HTML forms (CVE-2018-5185).\n","status":"published","published":"2018-05-30T19:55:44Z","modified":"2026-04-16T06:25:31.21150558Z","updated_at":"2026-11-02T15:49:40.442238Z"},{"id":"MGASA-2018-0338","title":"Updated iceaepe packages fix security vulnerability","description":"Updated iceape packages include security fixes from upstream Seamonkey\nand Firefox:\n\nMultiple flaws were found in the way Iceape 2.49.1 processes various types\nof web content, where loading a web page containing malicious content could\ncause Iceape to crash, execute arbitrary code, or disclose sensitive\ninformation (CVE-2018-5089, CVE-2018-5091, CVE-2018-5095, CVE-2018-5096,\nCVE-2018-5097, CVE-2018-5098, CVE-2018-5099, CVE-2018-5102, CVE-2018-5103,\nCVE-2018-5104, CVE-2018-5117, CVE-2018-5125, CVE-2018-5127, CVE-2018-5129,\nCVE-2018-5130, CVE-2018-5131, CVE-2018-5144, CVE-2018-5145, CVE-2018-5148,\nCVE-2018-5150, CVE-2018-5154, CVE-2018-5155, CVE-2018-5157, CVE-2018-5158,\nCVE-2018-5159, CVE-2018-5168, CVE-2018-5178, CVE-2018-5183, CVE-2018-6126)\n","status":"published","published":"2018-08-15T15:45:26Z","modified":"2026-04-16T06:23:51.688419512Z","updated_at":"2026-11-02T15:49:40.793816Z"},{"id":"openSUSE-SU-2024:10601-1","title":"MozillaThunderbird-91.1.1-1.1 on GA media","description":"These are all security issues fixed in the MozillaThunderbird-91.1.1-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2025-05-07T18:08:23.188336Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"SUSE-SU-2018:1319-1","title":"Security update for MozillaFirefox","description":"\nThis update for MozillaFirefox to ESR 52.8 release fixes the following issues:\n\nUpdate to Firefox ESR 52.8 (bsc#1092548)\n\nSecurity issues fixed:\n\n- MFSA 2018-12/CVE-2018-5159: Integer overflow and out-of-bounds write in Skia\n- MFSA 2018-12/CVE-2018-5158: Malicious PDF can inject JavaScript into PDF Viewer\n- MFSA 2018-12/CVE-2018-5168: Lightweight themes can be installed without user interaction\n- MFSA 2018-12/CVE-2018-5150: Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8\n- MFSA 2018-12/CVE-2018-5155: Use-after-free with SVG animations and text paths\n- MFSA 2018-12/CVE-2018-5183: Backport critical security fixes in Skia\n- MFSA 2018-12/CVE-2018-5157: Same-origin bypass of PDF Viewer to view protected PDF files\n- MFSA 2018-12/CVE-2018-5154: Use-after-free with SVG animations and clip paths\n- MFSA 2018-12/CVE-2018-5178: Buffer overflow during UTF-8 to Unicode string conversion through legacy extension\n","status":"published","published":"2018-05-16T19:36:01Z","modified":"2026-02-04T03:02:21.406138Z","updated_at":"2026-11-02T15:53:44.972817Z"},{"id":"SUSE-SU-2018:1334-1","title":"Security update for MozillaFirefox","description":"This update for MozillaFirefox to the ESR 52.8 release fixes the following issues:\n\nMozil to Firefox ESR 52.8 (bsc#1092548)\n\nSecurity issues fixed:\n\n- MFSA 2018-12/CVE-2018-5159: Integer overflow and out-of-bounds write in Skia\n- MFSA 2018-12/CVE-2018-5158: Malicious PDF can inject JavaScript into PDF Viewer\n- MFSA 2018-12/CVE-2018-5168: Lightweight themes can be installed without user interaction\n- MFSA 2018-12/CVE-2018-5150: Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8\n- MFSA 2018-12/CVE-2018-5155: Use-after-free with SVG animations and text paths\n- MFSA 2018-12/CVE-2018-5183: Backport critical security fixes in Skia\n- MFSA 2018-12/CVE-2018-5157: Same-origin bypass of PDF Viewer to view protected PDF files\n- MFSA 2018-12/CVE-2018-5154: Use-after-free with SVG animations and clip paths\n- MFSA 2018-12/CVE-2018-5178: Buffer overflow during UTF-8 to Unicode string conversion through legacy extension\n","status":"published","published":"2018-05-18T06:05:06Z","modified":"2026-02-04T02:45:23.272012Z","updated_at":"2026-11-02T15:53:44.972817Z"},{"id":"SUSE-SU-2018:1334-2","title":"Security update for MozillaFirefox","description":"This update for MozillaFirefox to the ESR 52.8 release fixes the following issues:\n\nMozil to Firefox ESR 52.8 (bsc#1092548)\n\nSecurity issues fixed:\n\n- MFSA 2018-12/CVE-2018-5159: Integer overflow and out-of-bounds write in Skia\n- MFSA 2018-12/CVE-2018-5158: Malicious PDF can inject JavaScript into PDF Viewer\n- MFSA 2018-12/CVE-2018-5168: Lightweight themes can be installed without user interaction\n- MFSA 2018-12/CVE-2018-5150: Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8\n- MFSA 2018-12/CVE-2018-5155: Use-after-free with SVG animations and text paths\n- MFSA 2018-12/CVE-2018-5183: Backport critical security fixes in Skia\n- MFSA 2018-12/CVE-2018-5157: Same-origin bypass of PDF Viewer to view protected PDF files\n- MFSA 2018-12/CVE-2018-5154: Use-after-free with SVG animations and clip paths\n- MFSA 2018-12/CVE-2018-5178: Buffer overflow during UTF-8 to Unicode string conversion through legacy extension\n","status":"published","published":"2018-10-18T12:44:56Z","modified":"2026-02-04T02:40:13.565419Z","updated_at":"2026-11-02T15:53:44.972817Z"},{"id":"SUSE-SU-2018:2298-1","title":"Security update for MozillaFirefox","description":"This update for MozillaFirefox to the 52.9 ESR release fixes the following issues:\n\nThese security issues were fixed:\n\n- Firefox ESR 52.9:\n- CVE-2018-5188 Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9 (bsc#1098998). \n- CVE-2018-12368 No warning when opening executable SettingContent-ms files (bsc#1098998).\n- CVE-2018-12366 Invalid data handling during QCMS transformations (bsc#1098998).\n- CVE-2018-12365 Compromised IPC child process can list local filenames (bsc#1098998).\n- CVE-2018-12364 CSRF attacks through 307 redirects and NPAPI plugins (bsc#1098998).\n- CVE-2018-12363 Use-after-free when appending DOM nodes (bsc#1098998).\n- CVE-2018-12362 Integer overflow in SSSE3 scaler (bsc#1098998).\n- CVE-2018-12360 Use-after-free when using focus() (bsc#1098998).\n- CVE-2018-5156 Media recorder segmentation fault when track type is changed during capture (bsc#1098998).\n- CVE-2018-12359 Buffer overflow using computed size of canvas element (bsc#1098998).\n\n- Firefox ESR 52.8:\n- CVE-2018-6126: Prevent heap buffer overflow in rasterizing paths in SVG with Skia (bsc#1096449).\n- CVE-2018-5183: Backport critical security fixes in Skia (bsc#1092548).\n- CVE-2018-5154: Use-after-free with SVG animations and clip paths (bsc#1092548).\n- CVE-2018-5155: Use-after-free with SVG animations and text paths (bsc#1092548).\n- CVE-2018-5157: Same-origin bypass of PDF Viewer to view protected PDF files (bsc#1092548).\n- CVE-2018-5158: Malicious PDF can inject JavaScript into PDF Viewer (bsc#1092548).\n- CVE-2018-5159: Integer overflow and out-of-bounds write in Skia (bsc#1092548).\n- CVE-2018-5168: Lightweight themes can be installed without user interaction (bsc#1092548).\n- CVE-2018-5178: Buffer overflow during UTF-8 to Unicode string conversion through legacy extension (bsc#1092548).\n- CVE-2018-5150: Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8 (bsc#1092548).\n\nThese non-security issues were fixed:\n\n- Various stability and regression fixes\n- Performance improvements to the Safe Browsing service to avoid slowdowns\n  while updating site classification data\n","status":"published","published":"2018-08-10T09:36:01Z","modified":"2026-02-04T03:28:27.464993Z","updated_at":"2026-11-02T15:53:44.972817Z"},{"id":"SUSE-SU-2019:2872-1","title":"Security update for MozillaFirefox","description":"This update for MozillaFirefox to 68.2.0 ESR fixes the following issues:\n\nMozilla Firefox was updated to version 68.2.0 ESR (bsc#1154738).\n\nSecurity issues fixed:\n\n-  CVE-2019-15903: Fixed a heap overflow in the expat library (bsc#1149429).\n-  CVE-2019-11757: Fixed a use-after-free when creating index updates in IndexedDB (bsc#1154738).\n-  CVE-2019-11758: Fixed a potentially exploitable crash due to 360 Total Security (bsc#1154738).\n-  CVE-2019-11759: Fixed a stack buffer overflow in HKDF output (bsc#1154738).\n-  CVE-2019-11760: Fixed a stack buffer overflow in WebRTC networking (bsc#1154738).\n-  CVE-2019-11761: Fixed an unintended access to a privileged JSONView object (bsc#1154738).\n-  CVE-2019-11762: Fixed a same-origin-property violation (bsc#1154738).\n-  CVE-2019-11763: Fixed an XSS bypass (bsc#1154738).\n-  CVE-2019-11764: Fixed several memory safety bugs (bsc#1154738).\n\nNon-security issues fixed:\n\n- Firefox 60.7 ESR changed the user interface language (bsc#1137990).\n- Wrong Firefox GUI Language (bsc#1120374).\n- Fixed an inadvertent crash report transmission without user opt-in (bsc#1074235).\n- Firefox hangs randomly when browsing and scrolling (bsc#1043008).\n- Firefox stops loading page until mouse is moved (bsc#1025108).\n","status":"published","published":"2019-10-31T07:53:30Z","modified":"2026-02-04T03:40:02.546093Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"USN-3660-1","title":"thunderbird vulnerabilities","description":"Multiple security issues were discovered in Thunderbird. If a user were\ntricked in to opening a specially crafted website in a browsing context,\nan attacker could potentially exploit these to cause a denial of service\nvia application crash, install lightweight themes without user\ninteraction, or execute arbitrary code. (CVE-2018-5150, CVE-2018-5154,\nCVE-2018-5155, CVE-2018-5159, CVE-2018-5168, CVE-2018-5178)\n\nAn issue was discovered when processing message headers in Thunderbird. If\na user were tricked in to opening a specially crafted message, an attacker\ncould potentially exploit this to cause a denial of service via\napplication hang. (CVE-2018-5161)\n\nIt was discovered encrypted messages could leak plaintext via the src\nattribute of remote images or links. An attacker could potentially exploit\nthis to obtain sensitive information. (CVE-2018-5162)\n\nIt was discovered that the filename of an attachment could be spoofed. An\nattacker could potentially exploit this by tricking the user in to opening\nan attachment of a different type to the one expected. (CVE-2018-5170)\n\nMultiple security issues were discovered in Skia. If a user were tricked\nin to opening a specially crafted message, an attacker could potentially\nexploit these to cause a denial of service via application crash, or\nexecute arbitrary code. (CVE-2018-5183)\n\nIt was discovered that S/MIME encrypted messages with remote content could\nleak plaintext via a chosen-ciphertext attack. An attacker could\npotentially exploit this to obtain sensitive information. (CVE-2018-5184)\n\nIt was discovered that plaintext of decrypted emails could leak by\nsubmitting an embedded form. An attacker could potentially exploit this to\nobtain sensitive information. (CVE-2018-5185)\n","status":"published","published":"2018-05-25T20:41:34Z","modified":"2026-04-22T09:46:12.060406Z","updated_at":"2026-11-02T16:58:13.496563Z"}]}}