https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T17:29:38.188959+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2015-12007 bdu:2015-12007 2026-10-02T17:29:38.323167+00:00 bdu:2015-12007 https://cve.radiocsirt.org/vuln/certfr-2015-avi-461 certfr-2015-avi-461 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Mozilla Firefox</span>. Certaines d'entre elles… 2026-10-02T17:29:38.323211+00:00 certfr-2015-avi-461 https://cve.radiocsirt.org/vuln/cnvd-2015-07428 cnvd-2015-07428 2026-10-02T17:29:38.323244+00:00 cnvd-2015-07428 https://cve.radiocsirt.org/vuln/euvd-2026-92677 EUVD-2026-92677 2026-10-02T17:29:38.323258+00:00 EUVD-2026-92677 https://cve.radiocsirt.org/vuln/fkie_cve-2015-4518 fkie_cve-2015-4518 2026-10-02T17:29:38.323269+00:00

The Reader View implementation in Mozilla Firefox before 42.0 has an improper whitelist, which makes it easier for remote attackers to bypass the Content Security Policy (CSP) protection mechanism and conduct cross-site scripting (XSS) attacks via vectors involving SVG animations and the about:reader URL.

 https://cve.radiocsirt.org/vuln/ghsa-23c8-qcpq-5v6v GHSA-23c8-qcpq-5v6v 2026-10-02T17:29:38.323299+00:00

The Reader View implementation in Mozilla Firefox before 42.0 has an improper whitelist, which makes it easier for remote attackers to bypass the Content Security Policy (CSP) protection mechanism and conduct cross-site scripting (XSS) attacks via vectors involving SVG animations and the about:reader URL.

 https://cve.radiocsirt.org/vuln/gsd-2015-4518 gsd-2015-4518 2026-10-02T17:29:38.323314+00:00 gsd-2015-4518 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10071-1 openSUSE-SU-2024:10071-1 — MozillaFirefox-50.1.0-1.1 on GA media 2026-10-02T17:29:38.323324+00:00

MozillaFirefox-50.1.0-1.1 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-4518 UBUNTU-CVE-2015-4518 2026-10-02T17:29:38.323800+00:00

Affected: Ubuntu:14.04:LTS: firefox

The Reader View implementation in Mozilla Firefox before 42.0 has an improper whitelist, which makes it easier for remote attackers to bypass the Content Security Policy (CSP) protection mechanism and conduct cross-site scripting (XSS) attacks via vectors involving SVG animations and the about:reader URL.