https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T19:27:55.121453+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2019-08524 cnvd-2019-08524 2026-10-06T19:27:55.128992+00:00 cnvd-2019-08524 https://cve.radiocsirt.org/vuln/euvd-2026-69198 EUVD-2026-69198 2026-10-06T19:27:55.129025+00:00 EUVD-2026-69198 https://cve.radiocsirt.org/vuln/fkie_cve-2018-18499 fkie_cve-2018-18499 2026-10-06T19:27:55.129039+00:00

A same-origin policy violation allowing the theft of cross-origin URL entries when using a meta http-equiv="refresh" on a page to cause a redirection to another site using performance.getEntries(). This is a same-origin policy violation and could allow for data theft. This vulnerability affects Firefox < 62, Firefox ESR < 60.2, and Thunderbird < 60.2.1.

 https://cve.radiocsirt.org/vuln/ghsa-h7hh-7f6j-x9mh GHSA-h7hh-7f6j-x9mh 2026-10-06T19:27:55.129068+00:00

A same-origin policy violation allowing the theft of cross-origin URL entries when using a meta http-equiv="refresh" on a page to cause a redirection to another site using performance.getEntries(). This is a same-origin policy violation and could allow for data theft. This vulnerability affects Firefox < 62, Firefox ESR < 60.2, and Thunderbird < 60.2.1.

 https://cve.radiocsirt.org/vuln/gsd-2018-18499 gsd-2018-18499 2026-10-06T19:27:55.129085+00:00 gsd-2018-18499 https://cve.radiocsirt.org/vuln/rhsa-2018:2692 RHSA-2018:2692 — Red Hat Security Advisory: firefox security update 2026-10-06T19:27:55.129096+00:00

Mozilla: Proxy bypass using automount and autofs Mozilla: Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2 Mozilla: Use-after-free in driver timers Mozilla: Use-after-free in IndexedDB Mozilla: Out-of-bounds write with malicious MAR file Mozilla: Same-origin policy violation using meta refresh and performance.getEntries to steal cross-origin URLs

 https://cve.radiocsirt.org/vuln/rhsa-2018:2693 RHSA-2018:2693 — Red Hat Security Advisory: firefox security update 2026-10-06T19:27:55.129119+00:00

Mozilla: Proxy bypass using automount and autofs Mozilla: Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2 Mozilla: Use-after-free in driver timers Mozilla: Use-after-free in IndexedDB Mozilla: Out-of-bounds write with malicious MAR file Mozilla: Same-origin policy violation using meta refresh and performance.getEntries to steal cross-origin URLs

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-18499 UBUNTU-CVE-2018-18499 2026-10-06T19:27:55.129139+00:00

Affected: Ubuntu:14.04:LTS: thunderbird, Ubuntu:16.04:LTS: firefox, Ubuntu:16.04:LTS: thunderbird, Ubuntu:18.04:LTS: thunderbird, Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: mozjs52

A same-origin policy violation allowing the theft of cross-origin URL entries when using a meta http-equiv="refresh" on a page to cause a redirection to another site using performance.getEntries(). This is a same-origin policy violation and could allow for data theft. This vulnerability affects Firefox < 62, Firefox ESR < 60.2, and Thunderbird < 60.2.1.