https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T14:49:56.772350+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2015-11246 bdu:2015-11246 2026-10-02T14:49:56.981082+00:00 bdu:2015-11246 https://cve.radiocsirt.org/vuln/certfr-2015-avi-349 certfr-2015-avi-349 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Mozilla Firefox</span>. Certaines d'entre elles… 2026-10-02T14:49:56.981129+00:00 certfr-2015-avi-349 https://cve.radiocsirt.org/vuln/cnvd-2015-05587 cnvd-2015-05587 2026-10-02T14:49:56.981149+00:00 cnvd-2015-05587 https://cve.radiocsirt.org/vuln/euvd-2026-92675 EUVD-2026-92675 2026-10-02T14:49:56.981162+00:00 EUVD-2026-92675 https://cve.radiocsirt.org/vuln/fkie_cve-2015-4490 fkie_cve-2015-4490 2026-10-02T14:49:56.981173+00:00

The nsCSPHostSrc::permits function in dom/security/nsCSPUtils.cpp in Mozilla Firefox before 40.0 does not implement the Content Security Policy Level 2 exceptions for the blob, data, and filesystem URL schemes during wildcard source-expression matching, which might make it easier for remote attackers to conduct cross-site scripting (XSS) attacks by leveraging unexpected policy-enforcement behavior.

 https://cve.radiocsirt.org/vuln/ghsa-346h-r83r-9vqj GHSA-346h-r83r-9vqj 2026-10-02T14:49:56.981203+00:00

The nsCSPHostSrc::permits function in dom/security/nsCSPUtils.cpp in Mozilla Firefox before 40.0 does not implement the Content Security Policy Level 2 exceptions for the blob, data, and filesystem URL schemes during wildcard source-expression matching, which might make it easier for remote attackers to conduct cross-site scripting (XSS) attacks by leveraging unexpected policy-enforcement behavior.

 https://cve.radiocsirt.org/vuln/gsd-2015-4490 gsd-2015-4490 2026-10-02T14:49:56.981219+00:00 gsd-2015-4490 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10071-1 openSUSE-SU-2024:10071-1 — MozillaFirefox-50.1.0-1.1 on GA media 2026-10-02T14:49:56.981230+00:00

MozillaFirefox-50.1.0-1.1 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-4490 UBUNTU-CVE-2015-4490 2026-10-02T14:49:56.981749+00:00

Affected: Ubuntu:14.04:LTS: firefox

The nsCSPHostSrc::permits function in dom/security/nsCSPUtils.cpp in Mozilla Firefox before 40.0 does not implement the Content Security Policy Level 2 exceptions for the blob, data, and filesystem URL schemes during wildcard source-expression matching, which might make it easier for remote attackers to conduct cross-site scripting (XSS) attacks by leveraging unexpected policy-enforcement behavior.