https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T18:01:00.750154+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2016-00764 bdu:2016-00764 2026-10-02T18:01:00.878690+00:00 bdu:2016-00764 https://cve.radiocsirt.org/vuln/certfr-2016-avi-086 certfr-2016-avi-086 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Mozilla Firefox</span>. Certaines d'entre elles… 2026-10-02T18:01:00.878747+00:00 certfr-2016-avi-086 https://cve.radiocsirt.org/vuln/cnvd-2016-01633 cnvd-2016-01633 2026-10-02T18:01:00.878769+00:00 cnvd-2016-01633 https://cve.radiocsirt.org/vuln/euvd-2026-82614 EUVD-2026-82614 2026-10-02T18:01:00.878782+00:00 EUVD-2026-82614 https://cve.radiocsirt.org/vuln/fkie_cve-2016-1954 fkie_cve-2016-1954 2026-10-02T18:01:00.878794+00:00

The nsCSPContext::SendReports function in dom/security/nsCSPContext.cpp in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 does not prevent use of a non-HTTP report-uri for a Content Security Policy (CSP) violation report, which allows remote attackers to cause a denial of service (data overwrite) or possibly gain privileges by specifying a URL of a local file.

 https://cve.radiocsirt.org/vuln/ghsa-hh86-fc79-9mq4 GHSA-hh86-fc79-9mq4 2026-10-02T18:01:00.878826+00:00

The nsCSPContext::SendReports function in dom/security/nsCSPContext.cpp in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 does not prevent use of a non-HTTP report-uri for a Content Security Policy (CSP) violation report, which allows remote attackers to cause a denial of service (data overwrite) or possibly gain privileges by specifying a URL of a local file.

 https://cve.radiocsirt.org/vuln/gsd-2016-1954 gsd-2016-1954 2026-10-02T18:01:00.878842+00:00 gsd-2016-1954 https://cve.radiocsirt.org/vuln/opensuse-su-2016:1769-1 openSUSE-SU-2016:1769-1 — Security update for Mozilla Thunderbird 2026-10-02T18:01:00.878853+00:00

Security update for Mozilla Thunderbird

 https://cve.radiocsirt.org/vuln/suse-su-2016:0727-1 SUSE-SU-2016:0727-1 — Security update for MozillaFirefox, mozilla-nspr, mozilla-nss 2026-10-02T18:01:00.878885+00:00

Security update for MozillaFirefox, mozilla-nspr, mozilla-nss

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-1954 UBUNTU-CVE-2016-1954 2026-10-02T18:01:00.878923+00:00

Affected: Ubuntu:14.04:LTS: firefox, Ubuntu:14.04:LTS: thunderbird, Ubuntu:16.04:LTS: thunderbird

The nsCSPContext::SendReports function in dom/security/nsCSPContext.cpp in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 does not prevent use of a non-HTTP report-uri for a Content Security Policy (CSP) violation report, which allows remote attackers to cause a denial of service (data overwrite) or possibly gain privileges by specifying a URL of a local file.