The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2025:8642 advisory.

    Mozilla Thunderbird is a standalone mail and newsgroup client.

    Security Fix(es):

    * firefox: thunderbird: Out-of-bounds access when resolving Promise objects (CVE-2025-4918)

    * firefox: thunderbird: Out-of-bounds access when optimizing linear sums (CVE-2025-4919)

    * firefox: thunderbird: Clickjacking vulnerability could have led to leaking saved payment card details     (CVE-2025-5267)

    * firefox: thunderbird: Potential local code execution in ?Copy as cURL? command (CVE-2025-5264)

    * firefox: thunderbird: Memory safety bugs (CVE-2025-5268)

    * firefox: thunderbird: Script element events leaked cross-origin resource status (CVE-2025-5266)

    * firefox: thunderbird: Error handling for script execution was incorrectly isolated from web content     (CVE-2025-5263)

    * firefox: thunderbird: Memory safety bug (CVE-2025-5269)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2025:8629 advisory.

    Mozilla Thunderbird is a standalone mail and newsgroup client.

    Security Fix(es):

    * firefox: thunderbird: Out-of-bounds access when resolving Promise objects (CVE-2025-4918)

    * firefox: thunderbird: Out-of-bounds access when optimizing linear sums (CVE-2025-4919)

    * firefox: thunderbird: Clickjacking vulnerability could have led to leaking saved payment card details     (CVE-2025-5267)

    * firefox: thunderbird: Potential local code execution in ?Copy as cURL? command (CVE-2025-5264)

    * firefox: thunderbird: Memory safety bugs (CVE-2025-5268)

    * firefox: thunderbird: Script element events leaked cross-origin resource status (CVE-2025-5266)

    * firefox: thunderbird: Error handling for script execution was incorrectly isolated from web content     (CVE-2025-5263)

    * firefox: thunderbird: Memory safety bug (CVE-2025-5269)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:8341 advisory.

    * firefox: thunderbird: Clickjacking vulnerability could have led to leaking saved payment card details     (CVE-2025-5267)

    * firefox: thunderbird: Potential local code execution in ?Copy as cURL? command (CVE-2025-5264)

    * firefox: thunderbird: Memory safety bugs (CVE-2025-5268)

    * firefox: thunderbird: Script element events leaked cross-origin resource status (CVE-2025-5266)

    * firefox: thunderbird: Error handling for script execution was incorrectly isolated from web content     (CVE-2025-5263)

    * firefox: thunderbird: Memory safety bug (CVE-2025-5269)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2025:8341 advisory.

    * firefox: thunderbird: Clickjacking vulnerability could have led to leaking saved payment card details     (CVE-2025-5267)
      * firefox: thunderbird: Potential local code execution in ?Copy as cURL? command (CVE-2025-5264)
      * firefox: thunderbird: Memory safety bugs (CVE-2025-5268)
      * firefox: thunderbird: Script element events leaked cross-origin resource status (CVE-2025-5266)
      * firefox: thunderbird: Error handling for script execution was incorrectly isolated from web content     (CVE-2025-5263)
      * firefox: thunderbird: Memory safety bug (CVE-2025-5269)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0474 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2025-5268:
    Memory safety bugs present in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.10.
    Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of     these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 139 and     Firefox ESR < 128.11.

    CVE-2025-5267:
    A clickjacking vulnerability could have been used to trick a user into leaking saved payment card details     to a malicious page. This vulnerability affects Firefox < 139 and Firefox ESR < 128.11.

    CVE-2025-5266:
    Script elements loading cross-origin resources generated load and error events which leaked information     enabling XS-Leaks attacks. This vulnerability affects Firefox < 139 and Firefox ESR < 128.11.

    CVE-2025-5264:
    Due to insufficient escaping of the newline character in the Copy as cURL feature, an attacker could     trick a user into using this command, potentially leading to local code execution on the user's system.
    This vulnerability affects Firefox < 139, Firefox ESR < 115.24, and Firefox ESR < 128.11.

    CVE-2025-5263:
    Error handling for script execution was incorrectly isolated from web content, which could have allowed     cross-origin leak attacks. This vulnerability affects Firefox < 139, Firefox ESR < 115.24, and Firefox ESR     < 128.11.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2025-20135-1 advisory.

    - Update to version 128.14.0 (bsc#1248162):
      - CVE-2025-9179: Sandbox escape due to invalid pointer in the         Audio/Video: GMP component
      - CVE-2025-9180: Same-origin policy bypass in the Graphics:
        Canvas2D component
      - CVE-2025-9181: Uninitialized memory in the JavaScript Engine         component
      - CVE-2025-9185: Memory safety bugs fixed in Firefox ESR 115.27,         Firefox ESR 128.14, Thunderbird ESR 128.14, Firefox ESR 140.2,         Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142

    - Update to version 128.13.0:
      - CVE-2025-8027: JavaScript engine only wrote partial return         value to stack
      - CVE-2025-8028: Large branch table could lead to truncated         instruction
      - CVE-2025-8029: javascript: URLs executed on object and embed         tags
      - CVE-2025-8030: Potential user-assisted code execution in Copy         as cURL command
      - CVE-2025-8031: Incorrect URL stripping in CSP reports
      - CVE-2025-8032: XSLT documents could bypass CSP
      - CVE-2025-8033: Incorrect JavaScript state machine for         generators
      - CVE-2025-8034: Memory safety bugs fixed in Firefox ESR 115.26,         Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1,         Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141
      - CVE-2025-8035: Memory safety bugs fixed in Firefox ESR 128.13,         Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR         140.1, Firefox 141 and Thunderbird 141

    - Update to version 128.12.0:
      - CVE-2025-6424: Use-after-free in FontFaceSet
      - CVE-2025-6425: The WebCompat WebExtension shipped with Firefox         exposed a persistent UUID
      - CVE-2025-6426: No warning when opening executable terminal         files on macOS
      - CVE-2025-6429: Incorrect parsing of URLs could have allowed         embedding of youtube.com
      - CVE-2025-6430: Content-Disposition header ignored when a file         is included in an embed or object tag

    - Update to version 128.11.0:
      - CVE-2025-5283: Double-free in libvpx encoder
      - CVE-2025-5263: Error handling for script execution was         incorrectly isolated from web content
      - CVE-2025-5264: Potential local code execution in Copy as cURL         command
      - CVE-2025-5265: Potential local code execution in Copy as cURL         command
      - CVE-2025-5266: Script element events leaked cross-origin         resource status
      - CVE-2025-5267: Clickjacking vulnerability could have led to         leaking saved payment card details       + CVE-2025-5268: Memory safety bugs fixed in Firefox 139,         Thunderbird 139, Firefox ESR 128.11, and Thunderbird 128.11       + CVE-2025-5269: Memory safety bug fixed in Firefox ESR 128.11         and Thunderbird 128.11

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0417 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2025-5268:
    Memory safety bugs present in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.10.
    Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of     these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 139 and     Firefox ESR < 128.11.

    CVE-2025-5267:
    A clickjacking vulnerability could have been used to trick a user into leaking saved payment card details     to a malicious page. This vulnerability affects Firefox < 139 and Firefox ESR < 128.11.

    CVE-2025-5266:
    Script elements loading cross-origin resources generated load and error events which leaked information     enabling XS-Leaks attacks. This vulnerability affects Firefox < 139 and Firefox ESR < 128.11.

    CVE-2025-5264:
    Due to insufficient escaping of the newline character in the Copy as cURL feature, an attacker could     trick a user into using this command, potentially leading to local code execution on the user's system.
    This vulnerability affects Firefox < 139, Firefox ESR < 115.24, and Firefox ESR < 128.11.

    CVE-2025-5263:
    Error handling for script execution was incorrectly isolated from web content, which could have allowed     cross-origin leak attacks. This vulnerability affects Firefox < 139, Firefox ESR < 115.24, and Firefox ESR     < 128.11.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Thunderbird installed on the remote Windows host is prior to 139.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-45 advisory.

  - Memory safety bugs present in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.10.
    Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of     these could have been exploited to run arbitrary code. (CVE-2025-5268)

  - A double-free could have occurred in `vpxcodecencinitmulti` after a failed allocation when initializing     the encoder for WebRTC. This could have caused memory corruption and a potentially exploitable crash.
    (CVE-2025-5283)

  - Error handling for script execution was incorrectly isolated from web content, which could have allowed     cross-origin leak attacks. (CVE-2025-5263)

  - Due to insufficient escaping of the newline character in the Copy as cURL feature, an attacker could     trick a user into using this command, potentially leading to local code execution on the user's system.
    (CVE-2025-5264)

  - Due to insufficient escaping of the ampersand character in the Copy as cURL feature, an attacker     could trick a user into using this command, potentially leading to local code execution on the user's     system. This bug only affects Firefox for Windows. Other versions of Firefox are unaffected.
    (CVE-2025-5265)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2025-8308 advisory.

    [128.11.0-1.0.1]
    - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079789]

    [128.11.0]
    - Add debranding patches (Mustafa Gezen)
    - Add OpenELA default preferences (Louis Abel)

    [128.11.0-1]
    - Update to 128.11.0

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2025-8607 advisory.

    [128.11.0-1.0.1]
    - Fix prefs for new nss [Orabug: 37079813]
    - Add Oracle prefs

    [128.11.0]
    - Add OpenELA debranding

    [128.11.0-1]
    - Update to 128.11.0

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2025:8628 advisory.

    Mozilla Thunderbird is a standalone mail and newsgroup client.

    Security Fix(es):

    * firefox: thunderbird: Out-of-bounds access when resolving Promise objects (CVE-2025-4918)

    * firefox: thunderbird: Out-of-bounds access when optimizing linear sums (CVE-2025-4919)

    * firefox: thunderbird: Clickjacking vulnerability could have led to leaking saved payment card details     (CVE-2025-5267)

    * firefox: thunderbird: Potential local code execution in ?Copy as cURL? command (CVE-2025-5264)

    * firefox: thunderbird: Memory safety bugs (CVE-2025-5268)

    * firefox: thunderbird: Script element events leaked cross-origin resource status (CVE-2025-5266)

    * firefox: thunderbird: Error handling for script execution was incorrectly isolated from web content     (CVE-2025-5263)

    * firefox: thunderbird: Memory safety bug (CVE-2025-5269)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2025:8630 advisory.

    Mozilla Thunderbird is a standalone mail and newsgroup client.

    Security Fix(es):

    * firefox: thunderbird: Out-of-bounds access when resolving Promise objects (CVE-2025-4918)

    * firefox: thunderbird: Out-of-bounds access when optimizing linear sums (CVE-2025-4919)

    * firefox: thunderbird: Clickjacking vulnerability could have led to leaking saved payment card details     (CVE-2025-5267)

    * firefox: thunderbird: Potential local code execution in ?Copy as cURL? command (CVE-2025-5264)

    * firefox: thunderbird: Memory safety bugs (CVE-2025-5268)

    * firefox: thunderbird: Script element events leaked cross-origin resource status (CVE-2025-5266)

    * firefox: thunderbird: Error handling for script execution was incorrectly isolated from web content     (CVE-2025-5263)

    * firefox: thunderbird: Memory safety bug (CVE-2025-5269)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2025-8608 advisory.

    [128.11.0-1.0.1]
    - Add Oracle prefs

    [128.11.0-1]
    - Update to 128.11.0

    [128.10.1-1]
    - Update to 128.10.1

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:01946-1 advisory.

    Update to Mozilla Thunderbird 128.11 (MFSA 2025-46, bsc#1243353):

    - CVE-2025-5262: Double-free in libvpx encoder (bmo#1962421)
    - CVE-2025-5263: Error handling for script execution was incorrectly isolated from web content     (bmo#1960745)
    - CVE-2025-5264: Potential local code execution in 'Copy as cURL' command (bmo#1950001)
    - CVE-2025-5265: Potential local code execution in 'Copy as cURL' command (bmo#1962301)
    - CVE-2025-5266: Script element events leaked cross-origin resource status (bmo#1965628)
    - CVE-2025-5267: Clickjacking vulnerability could have led to leaking saved payment card details     (bmo#1954137)
    - CVE-2025-5268: Memory safety bugs fixed in Firefox 139, Thunderbird 139, Firefox ESR 128.11, and     Thunderbird 128.11 (bmo#1950136, bmo#1958121, bmo#1960499, bmo#1962634)
    - CVE-2025-5269: Memory safety bug fixed in Firefox ESR 128.11 and Thunderbird 128.11 (bmo#1924108)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2025:8308 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and     portability.

    Security Fix(es):

    * firefox: thunderbird: Clickjacking vulnerability could have led to leaking saved payment card details     (CVE-2025-5267)

    * firefox: thunderbird: Potential local code execution in ?Copy as cURL? command (CVE-2025-5264)

    * firefox: thunderbird: Memory safety bugs (CVE-2025-5268)

    * firefox: thunderbird: Script element events leaked cross-origin resource status (CVE-2025-5266)

    * firefox: thunderbird: Error handling for script execution was incorrectly isolated from web content     (CVE-2025-5263)

    * firefox: thunderbird: Memory safety bug (CVE-2025-5269)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4191 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-4191-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/               Emilio Pozuelo Monfort     May 29, 2025                                  https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : firefox-esr     Version        : 128.11.0esr-1~deb11u1     CVE ID         : CVE-2025-5263 CVE-2025-5264 CVE-2025-5266 CVE-2025-5267                      CVE-2025-5268 CVE-2025-5269 CVE-2025-5283

    Multiple security issues have been found in the Mozilla Firefox web     browser, which could potentially result in the execution of arbitrary     code or cross-origin leaks.

    For Debian 11 bullseye, these problems have been fixed in version     128.11.0esr-1~deb11u1.

    We recommend that you upgrade your firefox-esr packages.

    For the detailed security status of firefox-esr please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/firefox-esr

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5932 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-5932-1                   security@debian.org     https://www.debian.org/security/                       Moritz Muehlenhoff     May 30, 2025                          https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : thunderbird     CVE ID         : CVE-2025-4918 CVE-2025-4919 CVE-2025-5263 CVE-2025-5264                      CVE-2025-5266 CVE-2025-5267 CVE-2025-5268 CVE-2025-5269                      CVE-2025-5283

    Multiple security issues were discovered in Thunderbird, which could     result in the execution of arbitrary code.

    For the stable distribution (bookworm), these problems have been fixed in     version 1:128.11.0esr-1~deb12u1.

    We recommend that you upgrade your thunderbird packages.

    For the detailed security status of thunderbird please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/thunderbird

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2025:9074 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and     portability.

    Security Fix(es):

    * firefox: thunderbird: Clickjacking vulnerability could have led to leaking saved payment card details     (CVE-2025-5267)

    * firefox: thunderbird: Potential local code execution in ?Copy as cURL? command (CVE-2025-5264)

    * firefox: thunderbird: Memory safety bugs (CVE-2025-5268)

    * firefox: thunderbird: Script element events leaked cross-origin resource status (CVE-2025-5266)

    * firefox: thunderbird: Error handling for script execution was incorrectly isolated from web content     (CVE-2025-5263)

    * firefox: thunderbird: Memory safety bug (CVE-2025-5269)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2025-8341 advisory.

    [128.11.0-1.0.1]
    - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079789]

    [128.11.0-1]
    - Update to 128.11.0

    [128.10.1-1]
    - Update to 128.10.1

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
237961	RHEL 9 : thunderbird (RHSA-2025:8642)	Nessus	Red Hat Local Security Checks	2025/6/9	2025/6/16	high
237963	RHEL 8 : thunderbird (RHSA-2025:8629)	Nessus	Red Hat Local Security Checks	2025/6/9	2025/10/9	critical
266488	RockyLinux 10 : firefox (RLSA-2025:8341)	Nessus	Rocky Linux Local Security Checks	2025/10/4	2025/10/4	high
269873	AlmaLinux 10 : firefox (ALSA-2025:8341)	Nessus	Alma Linux Local Security Checks	2025/10/9	2025/10/9	high
275920	TencentOS Server 4: mozjs (TSSA-2025:0474)	Nessus	Tencent Local Security Checks	2025/11/20	2025/11/20	high
277554	openSUSE 16 Security Update : mozjs128 (openSUSE-SU-2025-20135-1)	Nessus	SuSE Local Security Checks	2025/12/5	2025/12/5	high
275961	TencentOS Server 4: firefox (TSSA-2025:0417)	Nessus	Tencent Local Security Checks	2025/11/20	2025/11/20	high
237385	Mozilla Thunderbird < 139.0	Nessus	Windows	2025/5/27	2025/11/18	high
237522	Oracle Linux 8 : firefox (ELSA-2025-8308)	Nessus	Oracle Linux Local Security Checks	2025/5/30	2025/8/12	medium
237914	Oracle Linux 9 : thunderbird (ELSA-2025-8607)	Nessus	Oracle Linux Local Security Checks	2025/6/6	2025/9/11	high
237958	RHEL 8 : thunderbird (RHSA-2025:8628)	Nessus	Red Hat Local Security Checks	2025/6/9	2025/10/9	critical
237966	RHEL 8 : thunderbird (RHSA-2025:8630)	Nessus	Red Hat Local Security Checks	2025/6/9	2025/6/16	high
240880	Oracle Linux 10 : thunderbird (ELSA-2025-8608)	Nessus	Oracle Linux Local Security Checks	2025/6/27	2025/6/27	high
240846	SUSE SLED15: MozillaThunderbird / MozillaThunderbird-translations-common / etc (SUSE-SU-2025:01946-1)	Nessus	SuSE Local Security Checks	2025/6/27	2026/6/26	high
237454	RHEL 8 : firefox (RHSA-2025:8308)	Nessus	Red Hat Local Security Checks	2025/5/29	2025/8/15	medium
237493	Debian dla-4191 : firefox-esr - security update	Nessus	Debian Local Security Checks	2025/5/29	2025/5/29	medium
237589	Debian dsa-5932 : thunderbird - security update	Nessus	Debian Local Security Checks	2025/5/30	2025/6/12	high
238483	RHEL 7 : firefox (RHSA-2025:9074)	Nessus	Red Hat Local Security Checks	2025/6/16	2025/6/16	medium
240877	Oracle Linux 10 : firefox (ELSA-2025-8341)	Nessus	Oracle Linux Local Security Checks	2025/6/27	2025/8/12	medium

检测

插件搜索

high

critical

high

high

high

high

high

high

medium

high

critical

high

high

high

medium

medium

high

medium

medium