https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T06:28:41.598577+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2015-avi-020 certfr-2015-avi-020 — De multiples vulnérabilités ont été corrigées dans les produits <span class="textit">Mozilla</span>. Certaines d'entre… 2026-10-03T06:28:41.713113+00:00 certfr-2015-avi-020 https://cve.radiocsirt.org/vuln/cnvd-2015-00365 cnvd-2015-00365 2026-10-03T06:28:41.713172+00:00 cnvd-2015-00365 https://cve.radiocsirt.org/vuln/euvd-2026-103419 EUVD-2026-103419 2026-10-03T06:28:41.713188+00:00 EUVD-2026-103419 https://cve.radiocsirt.org/vuln/fkie_cve-2014-8638 fkie_cve-2014-8638 2026-10-03T06:28:41.713201+00:00

The navigator.sendBeacon implementation in Mozilla Firefox before 35.0, Firefox ESR 31.x before 31.4, Thunderbird before 31.4, and SeaMonkey before 2.32 omits the CORS Origin header, which allows remote attackers to bypass intended CORS access-control checks and conduct cross-site request forgery (CSRF) attacks via a crafted web site.

 https://cve.radiocsirt.org/vuln/ghsa-38xr-6jm2-v69w GHSA-38xr-6jm2-v69w 2026-10-03T06:28:41.713232+00:00

The navigator.sendBeacon implementation in Mozilla Firefox before 35.0, Firefox ESR 31.x before 31.4, Thunderbird before 31.4, and SeaMonkey before 2.32 omits the CORS Origin header, which allows remote attackers to bypass intended CORS access-control checks and conduct cross-site request forgery (CSRF) attacks via a crafted web site.

 https://cve.radiocsirt.org/vuln/gsd-2014-8638 gsd-2014-8638 2026-10-03T06:28:41.713249+00:00 gsd-2014-8638 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10071-1 openSUSE-SU-2024:10071-1 — MozillaFirefox-50.1.0-1.1 on GA media 2026-10-03T06:28:41.713259+00:00

MozillaFirefox-50.1.0-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2015:0047 RHSA-2015:0047 — Red Hat Security Advisory: thunderbird security update 2026-10-03T06:28:41.713739+00:00

Mozilla: Miscellaneous memory safety hazards (rv:31.4) (MFSA 2015-01) Mozilla: sendBeacon requests lack an Origin header (MFSA 2015-03) Mozilla: Cookie injection through Proxy Authenticate responses (MFSA 2015-04)

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-8638 UBUNTU-CVE-2014-8638 2026-10-03T06:28:41.713761+00:00

Affected: Ubuntu:14.04:LTS: firefox, Ubuntu:14.04:LTS: thunderbird

The navigator.sendBeacon implementation in Mozilla Firefox before 35.0, Firefox ESR 31.x before 31.4, Thunderbird before 31.4, and SeaMonkey before 2.32 omits the CORS Origin header, which allows remote attackers to bypass intended CORS access-control checks and conduct cross-site request forgery (CSRF) attacks via a crafted web site.