https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T16:29:56.698341+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2019-02934 bdu:2019-02934 2026-10-02T16:29:56.861528+00:00 bdu:2019-02934 https://cve.radiocsirt.org/vuln/certfr-2019-avi-316 certfr-2019-avi-316 — De multiples vulnérabilités ont été découvertes dans Mozilla Firefox. Certaines d'entre elles permettent à un attaquant… 2026-10-02T16:29:56.861596+00:00 certfr-2019-avi-316 https://cve.radiocsirt.org/vuln/cnvd-2019-22856 cnvd-2019-22856 2026-10-02T16:29:56.861618+00:00 cnvd-2019-22856 https://cve.radiocsirt.org/vuln/euvd-2026-54556 EUVD-2026-54556 2026-10-02T16:29:56.861631+00:00 EUVD-2026-54556 https://cve.radiocsirt.org/vuln/fkie_cve-2019-11712 fkie_cve-2019-11712 2026-10-02T16:29:56.861642+00:00

POST requests made by NPAPI plugins, such as Flash, that receive a status 308 redirect response can bypass CORS requirements. This can allow an attacker to perform Cross-Site Request Forgery (CSRF) attacks. This vulnerability affects Firefox ESR < 60.8, Firefox < 68, and Thunderbird < 60.8.

 https://cve.radiocsirt.org/vuln/ghsa-f95x-f7xq-cfm6 GHSA-f95x-f7xq-cfm6 2026-10-02T16:29:56.861674+00:00

POST requests made by NPAPI plugins, such as Flash, that receive a status 308 redirect response can bypass CORS requirements. This can allow an attacker to perform Cross-Site Request Forgery (CSRF) attacks. This vulnerability affects Firefox ESR < 60.8, Firefox < 68, and Thunderbird < 60.8.

 https://cve.radiocsirt.org/vuln/gsd-2019-11712 gsd-2019-11712 2026-10-02T16:29:56.861691+00:00 gsd-2019-11712 https://cve.radiocsirt.org/vuln/opensuse-su-2019:1782-1 openSUSE-SU-2019:1782-1 — Security update for MozillaFirefox 2026-10-02T16:29:56.861701+00:00

Security update for MozillaFirefox

 https://cve.radiocsirt.org/vuln/rhsa-2019:1765 RHSA-2019:1765 — Red Hat Security Advisory: firefox security update 2026-10-02T16:29:56.861724+00:00

Mozilla: Sandbox escape via installation of malicious language pack Mozilla: Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8 Mozilla: Script injection within domain through inner window reuse Mozilla: Cross-origin POST requests can be made with NPAPI plugins by following 308 redirects Mozilla: Use-after-free with HTTP/2 cached stream Mozilla: HTML parsing error can contribute to content XSS Mozilla: Caret character improperly escaped in origins Mozilla: Same-origin policy treats all files in a directory as having the same-origin

 https://cve.radiocsirt.org/vuln/suse-su-2019:14124-1 SUSE-SU-2019:14124-1 — Security update for MozillaFirefox 2026-10-02T16:29:56.861753+00:00

Security update for MozillaFirefox

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-11712 UBUNTU-CVE-2019-11712 2026-10-02T16:29:56.861774+00:00

Affected: Ubuntu:16.04:LTS: firefox, Ubuntu:16.04:LTS: thunderbird, Ubuntu:18.04:LTS: firefox, Ubuntu:18.04:LTS: thunderbird, Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: mozjs52

POST requests made by NPAPI plugins, such as Flash, that receive a status 308 redirect response can bypass CORS requirements. This can allow an attacker to perform Cross-Site Request Forgery (CSRF) attacks. This vulnerability affects Firefox ESR < 60.8, Firefox < 68, and Thunderbird < 60.8.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0459 WID-SEC-W-2023-0459 — Mozilla Firefox/Firefox ESR: Mehrere Schwachstellen 2026-10-02T16:29:56.861806+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Mozilla Firefox und Mozilla Firefox ESR ausnutzen, um einen Denial of Service Angriff durchzuführen, Daten zu manipulieren, Sicherheitsmechanismen zu umgehen, vertrauliche Daten einzusehen oder Code mit den Privilegien des Angegriffenen zur Ausführung zu bringen.