https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T21:14:52.541491+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2009-avi-157 certa-2009-avi-157 — Plusieurs vulnérabilités ont été identifiées dans le navigateur Mozilla Firefox. L'exploitation de celles-ci peut avoir… 2026-10-02T21:14:52.712956+00:00 certa-2009-avi-157 https://cve.radiocsirt.org/vuln/euvd-2026-122365 EUVD-2026-122365 2026-10-02T21:14:52.713007+00:00 EUVD-2026-122365 https://cve.radiocsirt.org/vuln/fkie_cve-2009-1307 fkie_cve-2009-1307 2026-10-02T21:14:52.713022+00:00

The view-source: URI implementation in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey does not properly implement the Same Origin Policy, which allows remote attackers to (1) bypass crossdomain.xml restrictions and connect to arbitrary web sites via a Flash file; (2) read, create, or modify Local Shared Objects via a Flash file; or (3) bypass unspecified restrictions and render content via vectors involving a jar: URI.

 https://cve.radiocsirt.org/vuln/ghsa-5cxh-4rwm-2jh3 GHSA-5cxh-4rwm-2jh3 2026-10-02T21:14:52.713052+00:00

The view-source: URI implementation in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey does not properly implement the Same Origin Policy, which allows remote attackers to (1) bypass crossdomain.xml restrictions and connect to arbitrary web sites via a Flash file; (2) read, create, or modify Local Shared Objects via a Flash file; or (3) bypass unspecified restrictions and render content via vectors involving a jar: URI.

 https://cve.radiocsirt.org/vuln/gsd-2009-1307 gsd-2009-1307 2026-10-02T21:14:52.713069+00:00 gsd-2009-1307 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10071-1 openSUSE-SU-2024:10071-1 — MozillaFirefox-50.1.0-1.1 on GA media 2026-10-02T21:14:52.713081+00:00

MozillaFirefox-50.1.0-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2009:0436 RHSA-2009:0436 — Red Hat Security Advisory: firefox security update 2026-10-02T21:14:52.713576+00:00

firefox: does not properly prevent the literal rendering of homoglyph characters in IDN domain names (spoof URLs and conduct phishing attacks) Firefox 3 Layout engine crashes Firefox 2 and 3 Layout engine crash Firefox 3 JavaScript engine crashes Firefox 2 and 3 JavaScript engine crash jar: scheme ignores the content-disposition: header on the inner URI view-source: protocol Firefox XSS hazard using third-party stylesheets and XBL bindings Firefox Same-origin violations in XMLHttpRequest and XPCNativeWrapper.toString Firefox Malicious search plugins can inject code into arbitrary sites Firefox POST data sent to wrong site when saving web page with embedded frame javascript: URIs