https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T20:11:51.618404+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2020-00592 bdu:2020-00592 2026-10-02T20:11:51.697678+00:00 bdu:2020-00592 https://cve.radiocsirt.org/vuln/certfr-2019-avi-118 certfr-2019-avi-118 — De multiples vulnérabilités ont été découvertes dans Mozilla Firefox. Certaines d'entre elles permettent à un attaquant… 2026-10-02T20:11:51.697730+00:00 certfr-2019-avi-118 https://cve.radiocsirt.org/vuln/cnvd-2019-08537 cnvd-2019-08537 2026-10-02T20:11:51.697751+00:00 cnvd-2019-08537 https://cve.radiocsirt.org/vuln/euvd-2026-53125 EUVD-2026-53125 2026-10-02T20:11:51.697764+00:00 EUVD-2026-53125 https://cve.radiocsirt.org/vuln/fkie_cve-2019-9803 fkie_cve-2019-9803 2026-10-02T20:11:51.697775+00:00

The Upgrade-Insecure-Requests (UIR) specification states that if UIR is enabled through Content Security Policy (CSP), navigation to a same-origin URL must be upgraded to HTTPS. Firefox will incorrectly navigate to an HTTP URL rather than perform the security upgrade requested by the CSP in some circumstances, allowing for potential man-in-the-middle attacks on the linked resources. This vulnerability affects Firefox < 66.

 https://cve.radiocsirt.org/vuln/ghsa-6h7p-w66v-f7vw GHSA-6h7p-w66v-f7vw 2026-10-02T20:11:51.697805+00:00

The Upgrade-Insecure-Requests (UIR) specification states that if UIR is enabled through Content Security Policy (CSP), navigation to a same-origin URL must be upgraded to HTTPS. Firefox will incorrectly navigate to an HTTP URL rather than perform the security upgrade requested by the CSP in some circumstances, allowing for potential man-in-the-middle attacks on the linked resources. This vulnerability affects Firefox < 66.

 https://cve.radiocsirt.org/vuln/gsd-2019-9803 gsd-2019-9803 2026-10-02T20:11:51.697823+00:00 gsd-2019-9803 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10600-1 openSUSE-SU-2024:10600-1 — MozillaFirefox-92.0-1.2 on GA media 2026-10-02T20:11:51.697833+00:00

MozillaFirefox-92.0-1.2 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-9803 UBUNTU-CVE-2019-9803 2026-10-02T20:11:51.698204+00:00

Affected: Ubuntu:14.04:LTS: firefox, Ubuntu:16.04:LTS: firefox, Ubuntu:18.04:LTS: firefox, Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: mozjs52

The Upgrade-Insecure-Requests (UIR) specification states that if UIR is enabled through Content Security Policy (CSP), navigation to a same-origin URL must be upgraded to HTTPS. Firefox will incorrectly navigate to an HTTP URL rather than perform the security upgrade requested by the CSP in some circumstances, allowing for potential man-in-the-middle attacks on the linked resources. This vulnerability affects Firefox < 66.