https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T15:25:49.389794+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-123808 EUVD-2026-123808 2026-10-02T15:25:49.452072+00:00 EUVD-2026-123808 https://cve.radiocsirt.org/vuln/fkie_cve-2009-3010 fkie_cve-2009-3010 2026-10-02T15:25:49.452109+00:00

Mozilla Firefox 3.0.13 and earlier, 3.5, 3.6 a1 pre, and 3.7 a1 pre; SeaMonkey 1.1.17; and Mozilla 1.7.x and earlier do not properly block data: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header that contains JavaScript sequences in a data:text/html URI or (2) entering a data:text/html URI with JavaScript sequences when specifying the content of a Refresh header. NOTE: in some product versions, the JavaScript executes outside of the context of the HTTP site.

 https://cve.radiocsirt.org/vuln/ghsa-mv6q-6xwq-rrw9 GHSA-mv6q-6xwq-rrw9 2026-10-02T15:25:49.452143+00:00

Mozilla Firefox 3.0.13 and earlier, 3.5, 3.6 a1 pre, and 3.7 a1 pre; SeaMonkey 1.1.17; and Mozilla 1.7.x and earlier do not properly block data: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header that contains JavaScript sequences in a data:text/html URI or (2) entering a data:text/html URI with JavaScript sequences when specifying the content of a Refresh header. NOTE: in some product versions, the JavaScript executes outside of the context of the HTTP site.

 https://cve.radiocsirt.org/vuln/gsd-2009-3010 gsd-2009-3010 2026-10-02T15:25:49.452163+00:00 gsd-2009-3010