https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T05:42:55.728475+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2015-avi-206 certfr-2015-avi-206 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Apple Safari</span>. Certaines d'entre elles pe… 2026-10-03T05:42:55.734368+00:00 certfr-2015-avi-206 https://cve.radiocsirt.org/vuln/cnvd-2015-02944 cnvd-2015-02944 2026-10-03T05:42:55.734398+00:00 cnvd-2015-02944 https://cve.radiocsirt.org/vuln/euvd-2026-90043 EUVD-2026-90043 2026-10-03T05:42:55.734413+00:00 EUVD-2026-90043 https://cve.radiocsirt.org/vuln/fkie_cve-2015-1156 fkie_cve-2015-1156 2026-10-03T05:42:55.734425+00:00

The page-loading implementation in WebKit, as used in Apple Safari before 6.2.6, 7.x before 7.1.6, and 8.x before 8.0.6, does not properly handle the rel attribute in an A element, which allows remote attackers to bypass the Same Origin Policy for a link's target, and spoof the user interface, via a crafted web site.

 https://cve.radiocsirt.org/vuln/ghsa-cvr8-mgjg-pg2x GHSA-cvr8-mgjg-pg2x 2026-10-03T05:42:55.734450+00:00

The page-loading implementation in WebKit, as used in Apple Safari before 6.2.6, 7.x before 7.1.6, and 8.x before 8.0.6, does not properly handle the rel attribute in an A element, which allows remote attackers to bypass the Same Origin Policy for a link's target, and spoof the user interface, via a crafted web site.

 https://cve.radiocsirt.org/vuln/gsd-2015-1156 gsd-2015-1156 2026-10-03T05:42:55.734466+00:00 gsd-2015-1156 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-1156 UBUNTU-CVE-2015-1156 2026-10-03T05:42:55.734476+00:00

Affected: Ubuntu:16.04:LTS: qtwebkit-source, Ubuntu:16.04:LTS: webkitgtk, Ubuntu:16.04:LTS: qtwebkit-opensource-src

The page-loading implementation in WebKit, as used in Apple Safari before 6.2.6, 7.x before 7.1.6, and 8.x before 8.0.6, does not properly handle the rel attribute in an A element, which allows remote attackers to bypass the Same Origin Policy for a link's target, and spoof the user interface, via a crafted web site.