https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T23:17:24.811022+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2021-00215 bdu:2021-00215 2026-10-02T23:17:24.989384+00:00 bdu:2021-00215 https://cve.radiocsirt.org/vuln/certfr-2017-avi-412 certfr-2017-avi-412 — De multiples vulnérabilités ont été découvertes dans Mozilla Firefox. Certaines d'entre elles permettent à un attaquant… 2026-10-02T23:17:24.989430+00:00 certfr-2017-avi-412 https://cve.radiocsirt.org/vuln/euvd-2026-75005 EUVD-2026-75005 2026-10-02T23:17:24.989450+00:00 EUVD-2026-75005 https://cve.radiocsirt.org/vuln/fkie_cve-2017-7834 fkie_cve-2017-7834 2026-10-02T23:17:24.989462+00:00

A "data:" URL loaded in a new tab did not inherit the Content Security Policy (CSP) of the original page, allowing for bypasses of the policy including the execution of JavaScript. In prior versions when "data:" documents also inherited the context of the original page this would allow for potential cross-site scripting (XSS) attacks. This vulnerability affects Firefox < 57.

 https://cve.radiocsirt.org/vuln/ghsa-5q3m-44wf-w4hc GHSA-5q3m-44wf-w4hc 2026-10-02T23:17:24.989494+00:00

A "data:" URL loaded in a new tab did not inherit the Content Security Policy (CSP) of the original page, allowing for bypasses of the policy including the execution of JavaScript. In prior versions when "data:" documents also inherited the context of the original page this would allow for potential cross-site scripting (XSS) attacks. This vulnerability affects Firefox < 57.

 https://cve.radiocsirt.org/vuln/gsd-2017-7834 gsd-2017-7834 2026-10-02T23:17:24.989510+00:00 gsd-2017-7834 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10600-1 openSUSE-SU-2024:10600-1 — MozillaFirefox-92.0-1.2 on GA media 2026-10-02T23:17:24.989521+00:00

MozillaFirefox-92.0-1.2 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-7834 UBUNTU-CVE-2017-7834 2026-10-02T23:17:24.989895+00:00

Affected: Ubuntu:14.04:LTS: firefox, Ubuntu:16.04:LTS: firefox, Ubuntu:18.04:LTS: firefox

A "data:" URL loaded in a new tab did not inherit the Content Security Policy (CSP) of the original page, allowing for bypasses of the policy including the execution of JavaScript. In prior versions when "data:" documents also inherited the context of the original page this would allow for potential cross-site scripting (XSS) attacks. This vulnerability affects Firefox < 57.