https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T09:26:46.811435+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2015-09887 bdu:2015-09887 2026-10-03T09:26:47.010478+00:00 bdu:2015-09887 https://cve.radiocsirt.org/vuln/certfr-2015-avi-131 certfr-2015-avi-131 — De multiples vulnérabilités ont été corrigées dans les produits <span class="textit">Mozilla</span>. Certaines d'entre… 2026-10-03T09:26:47.010522+00:00 certfr-2015-avi-131 https://cve.radiocsirt.org/vuln/cnvd-2015-02258 cnvd-2015-02258 2026-10-03T09:26:47.010542+00:00 cnvd-2015-02258 https://cve.radiocsirt.org/vuln/euvd-2026-89739 EUVD-2026-89739 2026-10-03T09:26:47.010555+00:00 EUVD-2026-89739 https://cve.radiocsirt.org/vuln/fkie_cve-2015-0812 fkie_cve-2015-0812 2026-10-03T09:26:47.010565+00:00

Mozilla Firefox before 37.0 does not require an HTTPS session for lightweight theme add-on installations, which allows man-in-the-middle attackers to bypass an intended user-confirmation requirement by deploying a crafted web site and conducting a DNS spoofing attack against a mozilla.org subdomain.

 https://cve.radiocsirt.org/vuln/ghsa-xp29-g429-j593 GHSA-xp29-g429-j593 2026-10-03T09:26:47.010594+00:00

Mozilla Firefox before 37.0 does not require an HTTPS session for lightweight theme add-on installations, which allows man-in-the-middle attackers to bypass an intended user-confirmation requirement by deploying a crafted web site and conducting a DNS spoofing attack against a mozilla.org subdomain.

 https://cve.radiocsirt.org/vuln/gsd-2015-0812 gsd-2015-0812 2026-10-03T09:26:47.010609+00:00 gsd-2015-0812 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10071-1 openSUSE-SU-2024:10071-1 — MozillaFirefox-50.1.0-1.1 on GA media 2026-10-03T09:26:47.010619+00:00

MozillaFirefox-50.1.0-1.1 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-0812 UBUNTU-CVE-2015-0812 2026-10-03T09:26:47.011120+00:00

Affected: Ubuntu:14.04:LTS: firefox

Mozilla Firefox before 37.0 does not require an HTTPS session for lightweight theme add-on installations, which allows man-in-the-middle attackers to bypass an intended user-confirmation requirement by deploying a crafted web site and conducting a DNS spoofing attack against a mozilla.org subdomain.