https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T01:36:04.970606+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2008-avi-160 certa-2008-avi-160 — Plusieurs vulnérabilités affectent le navigateur <span class="textit">Firefox</span>. Leur exploitation permet à un uti… 2026-10-03T01:36:04.979260+00:00 certa-2008-avi-160 https://cve.radiocsirt.org/vuln/euvd-2026-126436 EUVD-2026-126436 2026-10-03T01:36:04.979301+00:00 EUVD-2026-126436 https://cve.radiocsirt.org/vuln/fkie_cve-2008-1238 fkie_cve-2008-1238 2026-10-03T01:36:04.979317+00:00

Mozilla Firefox before 2.0.0.13 and SeaMonkey before 1.1.9, when generating the HTTP Referer header, does not list the entire URL when it contains Basic Authentication credentials without a username, which makes it easier for remote attackers to bypass application protection mechanisms that rely on Referer headers, such as with some Cross-Site Request Forgery (CSRF) mechanisms.

 https://cve.radiocsirt.org/vuln/ghsa-q345-fgmq-3pf3 GHSA-q345-fgmq-3pf3 2026-10-03T01:36:04.979346+00:00

Mozilla Firefox before 2.0.0.13 and SeaMonkey before 1.1.9, when generating the HTTP Referer header, does not list the entire URL when it contains Basic Authentication credentials without a username, which makes it easier for remote attackers to bypass application protection mechanisms that rely on Referer headers, such as with some Cross-Site Request Forgery (CSRF) mechanisms.

 https://cve.radiocsirt.org/vuln/gsd-2008-1238 gsd-2008-1238 2026-10-03T01:36:04.979362+00:00 gsd-2008-1238 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10590-1 openSUSE-SU-2024:10590-1 — seamonkey-2.53.9.1-1.1 on GA media 2026-10-03T01:36:04.979373+00:00

seamonkey-2.53.9.1-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2008:0207 RHSA-2008:0207 — Red Hat Security Advisory: firefox security update 2026-10-03T01:36:04.979399+00:00

Mozilla products XPCNativeWrapper pollution universal XSS using event handlers chrome privilege via wrong principal browser engine crashes javascript crashes Referrer spoofing bug XUL popup spoofing