https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:04:34.931100+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2015-09893 bdu:2015-09893 2026-10-02T19:04:35.051472+00:00 bdu:2015-09893 https://cve.radiocsirt.org/vuln/certfr-2015-avi-131 certfr-2015-avi-131 — De multiples vulnérabilités ont été corrigées dans les produits <span class="textit">Mozilla</span>. Certaines d'entre… 2026-10-02T19:04:35.051537+00:00 certfr-2015-avi-131 https://cve.radiocsirt.org/vuln/cnvd-2015-02151 cnvd-2015-02151 2026-10-02T19:04:35.051581+00:00 cnvd-2015-02151 https://cve.radiocsirt.org/vuln/euvd-2026-89760 EUVD-2026-89760 2026-10-02T19:04:35.051609+00:00 EUVD-2026-89760 https://cve.radiocsirt.org/vuln/fkie_cve-2015-0807 fkie_cve-2015-0807 2026-10-02T19:04:35.051619+00:00

The navigator.sendBeacon implementation in Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 processes HTTP 30x status codes for redirects after a preflight request has occurred, which allows remote attackers to bypass intended CORS access-control checks and conduct cross-site request forgery (CSRF) attacks via a crafted web site, a similar issue to CVE-2014-8638.

 https://cve.radiocsirt.org/vuln/ghsa-h77x-2hj5-ggjw GHSA-h77x-2hj5-ggjw 2026-10-02T19:04:35.051653+00:00

The navigator.sendBeacon implementation in Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 processes HTTP 30x status codes for redirects after a preflight request has occurred, which allows remote attackers to bypass intended CORS access-control checks and conduct cross-site request forgery (CSRF) attacks via a crafted web site, a similar issue to CVE-2014-8638.

 https://cve.radiocsirt.org/vuln/gsd-2015-0807 gsd-2015-0807 2026-10-02T19:04:35.051670+00:00 gsd-2015-0807 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10071-1 openSUSE-SU-2024:10071-1 — MozillaFirefox-50.1.0-1.1 on GA media 2026-10-02T19:04:35.051681+00:00

MozillaFirefox-50.1.0-1.1 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2015:0704-1 SUSE-SU-2015:0704-1 — Security update for MozillaFirefox 2026-10-02T19:04:35.052067+00:00

Security update for MozillaFirefox

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-0807 UBUNTU-CVE-2015-0807 2026-10-02T19:04:35.052086+00:00

Affected: Ubuntu:14.04:LTS: firefox, Ubuntu:14.04:LTS: thunderbird

The navigator.sendBeacon implementation in Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 processes HTTP 30x status codes for redirects after a preflight request has occurred, which allows remote attackers to bypass intended CORS access-control checks and conduct cross-site request forgery (CSRF) attacks via a crafted web site, a similar issue to CVE-2014-8638.