The version of Mozilla Firefox installed on the remote macOS or Mac OS X host is prior to 59. It is, therefore, affected by multiple vulnerabilities, some of which allow code execution and potentially exploitable crashes.

Mozilla Foundation reports :

CVE-2018-5127: Buffer overflow manipulating SVG animatedPathSegList

CVE-2018-5128: Use-after-free manipulating editor selection ranges

CVE-2018-5129: Out-of-bounds write with malformed IPC messages

CVE-2018-5130: Mismatched RTP payload type can trigger memory corruption

CVE-2018-5131: Fetch API improperly returns cached copies of no-store/no-cache resources

CVE-2018-5132: WebExtension Find API can search privileged pages

CVE-2018-5133: Value of the app.support.baseURL preference is not properly sanitized

CVE-2018-5134: WebExtensions may use view-source: URLs to bypass content restrictions

CVE-2018-5135: WebExtension browserAction can inject scripts into unintended contexts

CVE-2018-5136: Same-origin policy violation with data: URL shared workers

CVE-2018-5137: Script content can access legacy extension non-contentaccessible resources

CVE-2018-5138: Android Custom Tab address spoofing through long domain names

CVE-2018-5140: Moz-icon images accessible to web content through moz-icon: protocol

CVE-2018-5141: DOS attack through notifications Push API

CVE-2018-5142: Media Capture and Streams API permissions display incorrect origin with data: and blob: URLs

CVE-2018-5143: Self-XSS pasting javascript: URL with embedded tab into addressbar

CVE-2018-5126: Memory safety bugs fixed in Firefox 59

CVE-2018-5125: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7

Mozilla Foundation による報告：

CVE-2018-5127:バッファオーバーフロー操作SVG animatedPathSegList

CVE-2018-5128:エディター選択範囲操作時のメモリ解放後使用（use-after-free）

CVE-2018-5129:不正な形式のIPCメッセージによる境界外書き込み

CVE-2018-5130:対応しないRTPペイロードタイプによりメモリ破損の可能性

CVE-2018-5131:Fetch APIがストアなし/キャッシュなしのリソースのキャッシュされたコピーを正しく返さない

CVE-2018-5132:WebExtension Find APIにより権限により制限されたページを検索することがある

CVE-2018-5133:app.support.baseURL設定の値が適切にサニタイズされていない

CVE-2018-5134:WebExtensionsがview-sourceを使用する場合があります：コンテンツ制限をバイパスするURL

CVE-2018-5135:WebExtension browserActionが、意図しないコンテキストにスクリプトを注入する可能性があります

CVE-2018-5136:データによる同一生成元ポリシー違反:URL共有ワーカー

CVE-2018-5137:スクリプトコンテンツから、レガシー拡張のコンテンツアクセス不能リソースにアクセス可能

CVE-2018-5138:長いドメイン名によるAndroidカスタムタブアドレススプーフィング

CVE-2018-5140:Moz-icon画像からmoz-icon:プロトコルを通じてWebコンテンツにアクセス可能

CVE-2018-5141:通知プッシュAPIによるDOS攻撃

CVE-2018-5142:Media CaptureおよびStreams API権限がdata:およびblob:で不適切な生成元を表示URL

CVE-2018-5143:自己XSS貼り付けjavascript:アドレスバーにタブが埋め込まれたURL

CVE-2018-5126:Firefox 59で修正されたメモリ安全性に関するバグ

CVE-2018-5125:Firefox 59およびFirefox ESR 52.7で修正されたメモリ安全性に関するバグ

リモートのmacOSまたはMac OS XホストにインストールされているMozilla Firefoxのバージョンは59より前です。したがって、コードの実行を許す脆弱性や悪用可能なクラッシュを引き起こす脆弱性など、複数の脆弱性の影響を受けます。

遠端 macOS 或 Mac OS X 主機上安裝的 Mozilla Firefox 版本比 59 版舊。因此受到多個弱點影響，其中有些允許程式碼執行並可能遭惡意利用而當機。

远程 macOS 或 Mac OS X 主机上安装的 Mozilla Firefox 版本低于 59。因而会受到多个漏洞的影响，其中一些漏洞允许代码执行，并可能导致可遭利用的崩溃。

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3596-1 advisory.

    Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially     crafted website, an attacker could potentially exploit these to cause a denial of service via application     crash or opening new tabs, escape the sandbox, bypass same-origin restrictions, obtain sensitive     information, confuse the user with misleading permission requests, or execute arbitrary code.
    (CVE-2018-5125, CVE-2018-5126, CVE-2018-5127, CVE-2018-5128, CVE-2018-5129, CVE-2018-5130, CVE-2018-5136,     CVE-2018-5137, CVE-2018-5140, CVE-2018-5141, CVE-2018-5142)

    It was discovered that the fetch() API could incorrectly return cached copies of no-store/no-cache     resources in some circumstances. A local attacker could potentially exploit this to obtain sensitive     information in environments where multiple users share a common profile. (CVE-2018-5131)

    Multiple security issues were discovered with WebExtensions. If a user were tricked in to installing a     specially crafted extension, an attacker could potentially exploit these to obtain sensitive information     or bypass security restrictions. (CVE-2018-5132, CVE-2018-5134, CVE-2018-5135)

    It was discovered that the value of app.support.baseURL is not sanitized properly. If a malicious local     application were to set this to a specially crafted value, an attacker could potentially exploit this to     execute arbitrary code. (CVE-2018-5133)

    It was discovered that javascript: URLs with embedded tab characters could be pasted in to the addressbar.
    If a user were tricked in to copying a specially crafted URL in to the addressbar, an attacker could     exploit this to conduct cross-site scripting (XSS) attacks. (CVE-2018-5143)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Mozilla Firefox installed on the remote Windows host is prior to 59. It is, therefore, affected by multiple vulnerabilities, some of which allow code execution and potentially exploitable crashes.

Firefoxで複数のセキュリティの問題が発見されました。ユーザーが誘導され、特別に細工されたWebサイトを開くと、攻撃者がこれらを悪用して、アプリケーションのクラッシュや新しいタブを介したサービス拒否を引き起こしたり、サンドボックスを回避したり、同一オリジンの制限をバイパスしたり、秘密情報を取得したり、ユーザーを不正なアクセス許可リクエストで誘導したり、任意のコードを実行したりする可能性があります。
(CVE-2018-5125、CVE-2018-5126、CVE-2018-5127、CVE-2018-5128、CVE-2018-5129、CVE-2018-5130、CVE-2018-5136、CVE-2018-5137、CVE-2018-5140、CVE-2018-5141、CVE-2018-5142) 

fetch()APIが、特定の状況で、no-storeやno-cacheリソースのキャッシュされたコピーを不適切に返すことがわかりました。ローカルの攻撃者がこれを悪用して、複数のユーザーが共通プロファイルを共有する環境で秘密情報を取得する可能性があります。(CVE-2018-5131) 

WebExtensionsで複数のセキュリティの問題が発見されました。ユーザーが誘導されて特別に細工された拡張機能をインストールすると、攻撃者がこれらを悪用して、秘密情報を入手したり、セキュリティ制限をバイパスしたりする可能性があります。(CVE-2018-5132、CVE-2018-5134、CVE-2018-5135) 

app.support.baseURLの値が適切にサニタイズされていないことがわかりました。悪意のあるローカルアプリケーションがこれを特別に細工された値に設定した場合、攻撃者がこれを悪用して任意のコードを実行する可能性があります。(CVE-2018-5133) 

タブ文字が埋め込まれた javascript:  URL がアドレスバーに貼り付けられる可能性があることがわかりました。ユーザーが誘導されて特別に細工されたURLをアドレスバーにコピーした場合、攻撃者がこれを悪用して、クロスサイトスクリプティング (XSS) 攻撃を行う可能性があります。
(CVE-2018-5143)。

注意: Tenable Network Security は、前述の説明ブロックを Ubuntu セキュリティアドバイザリからすでに直接抽出しています。Tenable では、新たな問題を持ち込まずに、できる限り自動的に整理して書式設定するようにしています。

リモートのWindowsホストにインストールされているMozilla Firefoxのバージョンは59より前です。したがって、コードの実行を許す脆弱性や悪用可能なクラッシュを引き起こす脆弱性など、複数の脆弱性の影響を受けます。

在 Firefox 中發現多個安全性問題。如果使用者遭誘騙而開啟特製網站，攻擊者可能會利用這些弱點透過應用程式損毀造成拒絕服務或開啟新索引標籤、繞過沙箱、繞過相同來源的限制、取得敏感資訊、以誤導的權限要求混淆使用者或執行任意程式碼。
(CVE-2018-5125、CVE-2018-5126、CVE-2018-5127、CVE-2018-5128、CVE-2018-5129、CVE-2018-5130、CVE-2018-5136、CVE-2018-5137、CVE-2018-5140、CVE-2018-5141、CVE-2018-5142)

據發現，在某些情況下，fetch() API 未正確傳回快取的 no-store/no-cache 資源副本。本機攻擊者可能會利用此弱點，在多位使用者共用一般設定檔的環境中取得敏感資訊。(CVE-2018-5131)

在 WebExtensions 中發現多個安全性問題。如果使用者遭誘騙而安裝特製的延伸模組，攻擊者可能會利用這些弱點取得敏感資訊或繞過安全性限制。(CVE-2018-5132、CVE-2018-5134、CVE-2018-5135)

據發現，app.support.baseURL 的值未得到正確清理。如果惡意的本機應用程式將此值設定為特製的值，攻擊者可能會利用此弱點執行任意程式碼。(CVE-2018-5133)

據發現，可將內嵌 Tab 字元的 javascript: URL 貼到網址列。如果使用者遭到誘騙而將特製的 URL 複製到網址列，攻擊者可利用此弱點發動跨網站指令碼 (XSS) 攻擊。
(CVE-2018-5143)。

請注意，Tenable Network Security 已直接從 Ubuntu 安全性公告擷取前置描述區塊。Tenable 已盡量在不造成其他問題的前提下，嘗試自動清理並將其格式化。

遠端 Windows 主機上安裝的 Mozilla Firefox 版本比 59 舊。因此受到多個弱點影響，其中有些允許程式碼執行並可能遭惡意利用而當機。

在 Firefox 中发现多个安全问题。如果用户受到诱骗打开特制的网站，攻击者可能利用这些问题通过应用程序崩溃造成拒绝服务或打开新选项卡、避开沙盒、绕过同源限制、获取敏感信息、利用误导性的权限请求迷惑用户，或执行任意代码。
(CVE-2018-5125, CVE-2018-5126, CVE-2018-5127, CVE-2018-5128, CVE-2018-5129, CVE-2018-5130, CVE-2018-5136, CVE-2018-5137, CVE-2018-5140, CVE-2018-5141, CVE-2018-5142)

发现 fetch() API 在一些情况下，会错误返回 no-store/no-cache 资源的缓存副本。本地攻击者可能利用此问题在多用户共享一份配置文件的环境中获取敏感信息。(CVE-2018-5131)

使用 WebExtension 时发现多个安全问题。如果用户受到诱骗安装特别构建的扩展，攻击者可能利用这些问题获取敏感信息或绕过安全限制。(CVE-2018-5132, CVE-2018-5134, CVE-2018-5135)

发现未能正确审查 app.support.baseURL 值。如果恶意本地应用程序将其设为特别构建的值，攻击者可能利用此问题执行任意代码。(CVE-2018-5133)

发现带有嵌入式选项卡字符的 javascript: 发现带有嵌入式选项卡字符的 URL 会被粘贴到地址栏。如果用户受到诱骗复制特制 URL 到地址栏，攻击者可利用此问题进行跨站脚本 (XSS) 攻击。
(CVE-2018-5143)

请注意，Tenable Network Security 已直接从 Ubuntu 安全公告中提取上述描述块。Tenable 已尝试在不引入其他问题的情况下，尽可能进行自动清理和排版。

远程 Windows 主机上安装的 Mozilla Firefox 版本低于 59。因而会受到多个漏洞的影响，其中一些漏洞允许代码执行，并可能导致可利用的崩溃。

Versions of Mozilla Firefox earlier than 59 are unpatched for the following vulnerabilities :

 - An overflow condition exists that is triggered when handling SVG animatedPathSegList attributes. This may allow a context-dependent attacker to cause a buffer overflow, potentially allowing the execution of arbitrary code.
 - A use-after-free error exists in 'dom/html/nsTextEditorState.cpp' that is triggered when handling elements, events, and selection ranges during editor operations. This may allow a context-dependent attacker to dereference already freed memory and potentially execute arbitrary code.
 - A flaw exists in 'netwerk/protocol/http/HttpBaseChannel.cpp' that is triggered as local copies of resources that were sent with a no-store or no-cache header may be returned by the 'fetch()' API. This allows a local attacker to gain access to potentially sensitive information.
 - An out-of-bounds write flaw exists that is triggered when handling plane widths and stride constraints in IPC messages. This may allow a context-dependent attacker to bypass sandbox restrictions.
 - A flaw exists in the 'JsepTrack::NegotiateCodecs()' function in 'media/webrtc/signaling/src/jsep/JsepTrack.cpp' that is triggered when handling RTP payload types in WebRTC connections. With specially crafted packets, a context-dependent attacker can corrupt memory and potentially execute arbitrary code.
 - A flaw exists in the 'runFindOperation()' function in 'browser/components/extensions/ext-find.js' that that is triggered as it permits using the Find API for WebExtensions to access privileged pages in open tabs. By tricking a user into installing a malicious web extension, a context-dependent attacker can gain access to potentially sensitive information.
 - A flaw exists that is triggered as input to the ''app.support'.baseURL' preference is not properly sanitized. This may allow a local attacker to create specially crafted script code that is executed in user's browser session within the context of the preferences tab.
 - A flaw exists in 'netwerk/protocol/viewsource/nsViewSourceHandler.cpp' that is triggered when handling view-source: URLs. By tricking a user into installing a malicious web extension, a context-dependent attacker can bypass content restrictions and view local 'file:' URL content or content stored in 'about:cache'.
 - A flaw exists that is triggered when handling access restrictions for web extensions. By tricking a user into installing a malicious web extension, a context-dependent attacker can inject script code into pages from other web extensions or unprivileged 'about:' pages.
 - A flaw exists in 'dom/workers/RuntimeService.cpp' that is triggered as a shared worker created from a data: URL can be shared by another tab with a different origin. This may allow a context-dependent attacker to bypass the same-origin policy.
 - A flaw exists in the 'nsChromeRegistry::Canonify()' function in 'chrome/nsChromeRegistry.cpp' that is triggered as access to a legacy extension's 'non-contentaccessible' resource is not properly restricted. With a specially crafted web page, a context-dependent attacker to gain unauthorized access.
 - A flaw exists in the 'ActionBarPresenter::updateCustomView()' function in 'customtabs/ActionBarPresenter.java' that is triggered when handling overly long domain names in an Android Custom Tab. This allows a context-dependent attacker to spoof the address bar.
 - A flaw exists in the 'nsMozIconURI::SetSpec()' function in 'image/decoders/icon/nsIconURI.cpp' that is triggered as access to moz-images is not properly restricted when using the 'moz-icon:' protocol. With a specially crafted web page, a context-dependent attacker can gain information about application associations for certain MIME types.
 - A flaw exists in the 'SendNotificationEventRunnable::WorkerRun()' function in 'dom/workers/ServiceWorkerPrivate.cpp' related to the Notifications Push API. This may allow a context-dependent attacker to open new tabs and display unwanted content from arbitrary URLs.
 - A flaw exists that is due to the in the Media Capture and Streams API not properly displaying the originating domain when requested via 'data:' or 'blob:' URLs. This may result in user confusion about which site is asking for this permission.
 - A flaw exists in the 'stripUnsafeProtocolOnPaste()' function in 'content/browser.js' that allows a cross-site scripting (Self-XSS) attack. This flaw exists exists because the application does not properly sanitize input to the address bar. This may allow a context-dependent attacker to create a specially crafted 'javascript:' URL containing an embedded tab character that executes arbitrary script code in their own browser.
 - An unspecified flaw exists that is triggered as certain input is not properly validated when handling typed arrays. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code.
 - A flaw exists in the AccessiblCaret (Copy & Paste) feature that is triggered when handling flushing of pending notifications. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code.
 - A flaw exists in 'jit/CacheIR.cpp' that is triggered when attaching argument stubs. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code.
 - A flaw exists in the 'JSCompartment::getOrCreateIterResultTemplateObject()' function in 'jsiter.cpp' that is triggered when updating type information of iter result object templates. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code.
 - A signednes flaw exists in the StoreBuffer class that may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code.
 - A flaw exists in the 'MediaPipelineTransmit::SetDescription()' function in 'mediapipeline/MediaPipeline.cpp' that is triggered when handling media descriptions. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code.
 - A flaw exists in the 'nsHTMLDocument::Open()' function in 'dom/html/nsHTMLDocument.cpp' that is triggered when handling unload events. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code.
 - An unspecified flaw exists that is triggered as certain input is not properly validated. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code.
 - A flaw exists in the 'nsCSSFrameConstructor::ContentRemoved()' function in 'layout/base/nsCSSFrameConstructor.cpp' that is triggered when handling frames for content nodes. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code.
 - A flaw exists in the 'internal_ClearHistogramById()' function in 'toolkit/components/telemetry/TelemetryHistogram.cpp' that is triggered when handling expired histograms. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code.
 - An unspecified flaw exists that is triggered as certain input is not properly validated. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code.
 - An unspecified flaw exists that is triggered as certain input is not properly validated. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code.
 - An unspecified flaw exists that is triggered as certain input is not properly validated. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code.
 - An unspecified flaw exists that is triggered as certain input is not properly validated. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code.
 - An unspecified flaw exists that is triggered as certain input is not properly validated. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code.
 - An unspecified flaw exists that is triggered as certain input is not properly validated. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code.
 - An unspecified flaw exists that is triggered as certain input is not properly validated. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code.
 - A flaw exists in the 'CanAttachAddElement()' function in 'jit/CacheIR.cpp' that is triggered when handling shadowing indexed properties. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code.
 - A flaw exists in 'mozglue/android/NSSBridge.cpp' that is triggered as certain input is not properly validated when decoding base64 data. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code.
 - A flaw exists that is triggered when handling HTTP/2 streams. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code.
 - A type confusion flaw exists in the 'EventStateManager::NotifyMouseOver()' function in 'dom/events/EventStateManager.cpp' that is triggered when handling mouseover events. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code.
 - A flaw exists in the 'JSStructuredCloneReader::readHeader()' function in 'vm/StructuredClone.cpp' that is triggered when handling structured clone data. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code.
 - A flaw exists in the 'jit::MakeMRegExpHoistable()' function in 'jit/IonAnalysis.cpp' that is triggered when optimization for regular expressions. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code.
 - A type confusion flaw exists in the 'JSObject::setFlags()' function in 'vm/Shape.cpp' that is triggered when checking for dictionary mode. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code.
 - A flaw exists in the 'vpx_codec_enc_init_multi_ver()' function in 'vpx_encoder.c' that is triggered when handling memory during early exits. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code.
 - A flaw exists that is related to document renderer handling. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code.
 - An arithmetic flaw exists in the 'nsTextFrame::GetRenderedText()' function in 'layout/generic/nsTextFrame.cpp' that is triggered as certain input is not properly validated. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code.
 - A use-after-free error exists in the EditorBase destructor in 'editor/libeditor/EditorBase.cpp' that is triggered when unlinking cycle collectors. This may allow a context-dependent attacker to dereference already freed memory and potentially execute arbitrary code.
 - An out-of-bounds write flaw exists in 'vp9/encoder/x86/vp9_quantize_ssse3_x86_64.asm' that is triggered when handling memory 'pointers.This' may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code.
 - A flaw exists in the 'nsDocumentEncoder::SerializeToStringRecursive()' function in 'dom/base/nsDocumentEncoder.cpp' that is triggered when serializing DOM nodes. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code.
 - An out-of-bounds write flaw exists in the 'vorbis_book_decodevs_add()', 'vorbis_book_decodev_add()', and 'vorbis_book_decodevv_add()' functions in 'codebook.c' that is triggered when decoding codebooks from Vorbis audio data. This may allow a context-dependent attacker to corrupt memory and execute arbitrary code.

ID	名稱	產品	系列	已發布	已更新	嚴重性
108375	Mozilla Firefox < 59 Multiple Vulnerabilities (macOS)	Nessus	MacOS X Local Security Checks	2018/3/15	2019/11/8	critical
108315	FreeBSD : mozilla -- multiple vulnerabilities (c71cdc95-3c18-45b7-866a-af28b59aabb5)	Nessus	FreeBSD Local Security Checks	2018/3/14	2019/7/10	critical
108315	FreeBSD: mozilla -- 複数の脆弱性（c71cdc95-3c18-45b7-866a-af28b59aabb5）	Nessus	FreeBSD Local Security Checks	2018/3/14	2019/7/10	critical
108375	Mozilla Firefox < 59の複数の脆弱性（macOS）	Nessus	MacOS X Local Security Checks	2018/3/15	2019/11/8	critical
108375	Mozilla Firefox < 59 Multiple Vulnerabilities (macOS)	Nessus	MacOS X Local Security Checks	2018/3/15	2019/11/8	critical
108375	Mozilla Firefox < 59 Multiple Vulnerabilities (macOS)	Nessus	MacOS X Local Security Checks	2018/3/15	2019/11/8	critical
108370	Ubuntu 14.04 LTS / 16.04 LTS : Firefox vulnerabilities (USN-3596-1)	Nessus	Ubuntu Local Security Checks	2018/3/15	2024/8/27	critical
108377	Mozilla Firefox < 59 Multiple Vulnerabilities	Nessus	Windows	2018/3/15	2019/11/8	critical
108370	Ubuntu 14.04LTS / 16.04LTS : Firefox の脆弱性 (USN-3596-1)	Nessus	Ubuntu Local Security Checks	2018/3/15	2024/8/27	critical
108377	Mozilla Firefox<59の複数の脆弱性	Nessus	Windows	2018/3/15	2019/11/8	critical
108370	Ubuntu 14.04 LTS / 16.04 LTS：Firefox 弱點 (USN-3596-1)	Nessus	Ubuntu Local Security Checks	2018/3/15	2024/8/27	critical
108377	Mozilla Firefox < 59 Multiple Vulnerabilities	Nessus	Windows	2018/3/15	2019/11/8	critical
108370	Ubuntu 14.04 LTS / 16.04 LTS：Firefox 漏洞 (USN-3596-1)	Nessus	Ubuntu Local Security Checks	2018/3/15	2024/8/27	critical
108377	Mozilla Firefox < 59 多个漏洞	Nessus	Windows	2018/3/15	2019/11/8	critical
700328	Mozilla Firefox < 59 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	2018/8/21	2019/3/6	high

偵測

搜尋 Plugin

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

high