https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T15:29:12.451108+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2020-01398 bdu:2020-01398 2026-10-02T15:29:12.618543+00:00 bdu:2020-01398 https://cve.radiocsirt.org/vuln/certfr-2019-avi-421 certfr-2019-avi-421 — De multiples vulnérabilités ont été découvertes dans Mozilla Firefox. Certaines d'entre elles permettent à un attaquant… 2026-10-02T15:29:12.618598+00:00 certfr-2019-avi-421 https://cve.radiocsirt.org/vuln/cnvd-2019-30437 cnvd-2019-30437 2026-10-02T15:29:12.618635+00:00 cnvd-2019-30437 https://cve.radiocsirt.org/vuln/euvd-2026-54598 EUVD-2026-54598 2026-10-02T15:29:12.618649+00:00 EUVD-2026-54598 https://cve.radiocsirt.org/vuln/fkie_cve-2019-11743 fkie_cve-2019-11743 2026-10-02T15:29:12.618660+00:00

Navigation events were not fully adhering to the W3C's "Navigation-Timing Level 2" draft specification in some instances for the unload event, which restricts access to detailed timing attributes to only be same-origin. This resulted in potential cross-origin information exposure of history through timing side-channel attacks. This vulnerability affects Firefox < 69, Thunderbird < 68.1, Thunderbird < 60.9, Firefox ESR < 60.9, and Firefox ESR < 68.1.

 https://cve.radiocsirt.org/vuln/ghsa-98fg-hp5j-cm68 GHSA-98fg-hp5j-cm68 2026-10-02T15:29:12.618693+00:00

Navigation events were not fully adhering to the W3C's "Navigation-Timing Level 2" draft specification in some instances for the unload event, which restricts access to detailed timing attributes to only be same-origin. This resulted in potential cross-origin information exposure of history through timing side-channel attacks. This vulnerability affects Firefox < 69, Thunderbird < 68.1, Thunderbird < 60.9, Firefox ESR < 60.9, and Firefox ESR < 68.1.

 https://cve.radiocsirt.org/vuln/gsd-2019-11743 gsd-2019-11743 2026-10-02T15:29:12.618711+00:00 gsd-2019-11743 https://cve.radiocsirt.org/vuln/opensuse-su-2019:2248-1 openSUSE-SU-2019:2248-1 — Security update for MozillaThunderbird 2026-10-02T15:29:12.618722+00:00

Security update for MozillaThunderbird

 https://cve.radiocsirt.org/vuln/rhsa-2019:2694 RHSA-2019:2694 — Red Hat Security Advisory: firefox security update 2026-10-02T15:29:12.618755+00:00

Mozilla: Sandbox escape through Firefox Sync firefox: stored passwords in 'Saved Logins' can be copied without master password entry Mozilla: Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9 Mozilla: Same-origin policy violation with SVG filters and canvas to steal cross-origin images Mozilla: Cross-origin access to unload event attributes Mozilla: XSS by breaking out of title and textarea elements using innerHTML Mozilla: Use-after-free while manipulating video Mozilla: Use-after-free while extracting a key value in IndexedDB

 https://cve.radiocsirt.org/vuln/suse-su-2019:14173-1 SUSE-SU-2019:14173-1 — Security update for MozillaFirefox, firefox-glib2, firefox-gtk3 2026-10-02T15:29:12.618786+00:00

Security update for MozillaFirefox, firefox-glib2, firefox-gtk3

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-11743 UBUNTU-CVE-2019-11743 2026-10-02T15:29:12.618807+00:00

Affected: Ubuntu:16.04:LTS: firefox, Ubuntu:16.04:LTS: thunderbird, Ubuntu:18.04:LTS: firefox, Ubuntu:18.04:LTS: thunderbird, Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: mozjs52

Navigation events were not fully adhering to the W3C's "Navigation-Timing Level 2" draft specification in some instances for the unload event, which restricts access to detailed timing attributes to only be same-origin. This resulted in potential cross-origin information exposure of history through timing side-channel attacks. This vulnerability affects Firefox < 69, Thunderbird < 68.1, Thunderbird < 60.9, Firefox ESR < 60.9, and Firefox ESR < 68.1.