https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T17:29:36.726289+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2015-avi-020 certfr-2015-avi-020 — De multiples vulnérabilités ont été corrigées dans les produits <span class="textit">Mozilla</span>. Certaines d'entre… 2026-10-02T17:29:36.820273+00:00 certfr-2015-avi-020 https://cve.radiocsirt.org/vuln/cnvd-2015-00371 cnvd-2015-00371 2026-10-02T17:29:36.820324+00:00 cnvd-2015-00371 https://cve.radiocsirt.org/vuln/euvd-2026-103332 EUVD-2026-103332 2026-10-02T17:29:36.820341+00:00 EUVD-2026-103332 https://cve.radiocsirt.org/vuln/fkie_cve-2014-8636 fkie_cve-2014-8636 2026-10-02T17:29:36.820353+00:00

The XrayWrapper implementation in Mozilla Firefox before 35.0 and SeaMonkey before 2.32 does not properly interact with a DOM object that has a named getter, which might allow remote attackers to execute arbitrary JavaScript code with chrome privileges via unspecified vectors.

 https://cve.radiocsirt.org/vuln/ghsa-7xcg-82gw-cm6p GHSA-7xcg-82gw-cm6p 2026-10-02T17:29:36.820384+00:00

The XrayWrapper implementation in Mozilla Firefox before 35.0 and SeaMonkey before 2.32 does not properly interact with a DOM object that has a named getter, which might allow remote attackers to execute arbitrary JavaScript code with chrome privileges via unspecified vectors.

 https://cve.radiocsirt.org/vuln/gsd-2014-8636 gsd-2014-8636 2026-10-02T17:29:36.820400+00:00 gsd-2014-8636 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10071-1 openSUSE-SU-2024:10071-1 — MozillaFirefox-50.1.0-1.1 on GA media 2026-10-02T17:29:36.820411+00:00

MozillaFirefox-50.1.0-1.1 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-8636 UBUNTU-CVE-2014-8636 2026-10-02T17:29:36.820888+00:00

Affected: Ubuntu:14.04:LTS: firefox

The XrayWrapper implementation in Mozilla Firefox before 35.0 and SeaMonkey before 2.32 does not properly interact with a DOM object that has a named getter, which might allow remote attackers to execute arbitrary JavaScript code with chrome privileges via unspecified vectors.