https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T08:31:08.998663+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2015-avi-272 certfr-2015-avi-272 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Apple iOS</span>. Elles permettent à un attaqua… 2026-10-03T08:31:09.006075+00:00 certfr-2015-avi-272 https://cve.radiocsirt.org/vuln/cnvd-2015-04246 cnvd-2015-04246 2026-10-03T08:31:09.006125+00:00 cnvd-2015-04246 https://cve.radiocsirt.org/vuln/euvd-2026-91986 EUVD-2026-91986 2026-10-03T08:31:09.006141+00:00 EUVD-2026-91986 https://cve.radiocsirt.org/vuln/fkie_cve-2015-3658 fkie_cve-2015-3658 2026-10-03T08:31:09.006153+00:00

The Page Loading functionality in WebKit in Apple Safari before 6.2.7, 7.x before 7.1.7, and 8.x before 8.0.7, as used in Apple iOS before 8.4 and other products, does not properly consider redirects during decisions about sending an Origin header, which makes it easier for remote attackers to bypass CSRF protection mechanisms via a crafted web site.

 https://cve.radiocsirt.org/vuln/ghsa-7w75-mgjq-f5m7 GHSA-7w75-mgjq-f5m7 2026-10-03T08:31:09.006185+00:00

The Page Loading functionality in WebKit in Apple Safari before 6.2.7, 7.x before 7.1.7, and 8.x before 8.0.7, as used in Apple iOS before 8.4 and other products, does not properly consider redirects during decisions about sending an Origin header, which makes it easier for remote attackers to bypass CSRF protection mechanisms via a crafted web site.

 https://cve.radiocsirt.org/vuln/gsd-2015-3658 gsd-2015-3658 2026-10-03T08:31:09.006202+00:00 gsd-2015-3658 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10461-1 openSUSE-SU-2024:10461-1 — libjavascriptcoregtk-1_0-0-2.4.11-3.3 on GA media 2026-10-03T08:31:09.006213+00:00

libjavascriptcoregtk-1_0-0-2.4.11-3.3 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-3658 UBUNTU-CVE-2015-3658 2026-10-03T08:31:09.006241+00:00

Affected: Ubuntu:14.04:LTS: webkitgtk, Ubuntu:16.04:LTS: webkitgtk, Ubuntu:16.04:LTS: qtwebkit-source, Ubuntu:16.04:LTS: qtwebkit-opensource-src

The Page Loading functionality in WebKit in Apple Safari before 6.2.7, 7.x before 7.1.7, and 8.x before 8.0.7, as used in Apple iOS before 8.4 and other products, does not properly consider redirects during decisions about sending an Origin header, which makes it easier for remote attackers to bypass CSRF protection mechanisms via a crafted web site.