https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T02:20:20.018179+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2020-00610 bdu:2020-00610 2026-10-03T02:20:20.202150+00:00 bdu:2020-00610 https://cve.radiocsirt.org/vuln/certfr-2018-avi-592 certfr-2018-avi-592 — De multiples vulnérabilités ont été découvertes dans Mozilla Firefox. Certaines d'entre elles permettent à un attaquant… 2026-10-03T02:20:20.202209+00:00 certfr-2018-avi-592 https://cve.radiocsirt.org/vuln/cnvd-2018-25866 cnvd-2018-25866 2026-10-03T02:20:20.202240+00:00 cnvd-2018-25866 https://cve.radiocsirt.org/vuln/euvd-2026-69214 EUVD-2026-69214 2026-10-03T02:20:20.202261+00:00 EUVD-2026-69214 https://cve.radiocsirt.org/vuln/fkie_cve-2018-18497 fkie_cve-2018-18497 2026-10-03T02:20:20.202279+00:00

Limitations on the URIs allowed to WebExtensions by the browser.windows.create API can be bypassed when a pipe in the URL field is used within the extension to load multiple pages as a single argument. This could allow a malicious WebExtension to open privileged about: or file: locations. This vulnerability affects Firefox < 64.

 https://cve.radiocsirt.org/vuln/ghsa-9467-r3c9-7387 GHSA-9467-r3c9-7387 2026-10-03T02:20:20.202363+00:00

Limitations on the URIs allowed to WebExtensions by the browser.windows.create API can be bypassed when a pipe in the URL field is used within the extension to load multiple pages as a single argument. This could allow a malicious WebExtension to open privileged about: or file: locations. This vulnerability affects Firefox < 64.

 https://cve.radiocsirt.org/vuln/gsd-2018-18497 gsd-2018-18497 2026-10-03T02:20:20.202394+00:00 gsd-2018-18497 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10600-1 openSUSE-SU-2024:10600-1 — MozillaFirefox-92.0-1.2 on GA media 2026-10-03T02:20:20.202419+00:00

MozillaFirefox-92.0-1.2 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-18497 UBUNTU-CVE-2018-18497 2026-10-03T02:20:20.202937+00:00

Affected: Ubuntu:14.04:LTS: firefox, Ubuntu:16.04:LTS: firefox, Ubuntu:18.04:LTS: firefox

Limitations on the URIs allowed to WebExtensions by the browser.windows.create API can be bypassed when a pipe in the URL field is used within the extension to load multiple pages as a single argument. This could allow a malicious WebExtension to open privileged about: or file: locations. This vulnerability affects Firefox < 64.