https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T21:40:18.498761+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2020-avi-470 certfr-2020-avi-470 — De multiples vulnérabilités ont été découvertes dans Mozilla Firefox. Certaines d'entre elles permettent à un attaquant… 2026-10-03T21:40:18.792954+00:00 certfr-2020-avi-470 https://cve.radiocsirt.org/vuln/cnvd-2020-43764 cnvd-2020-43764 2026-10-03T21:40:18.793015+00:00 cnvd-2020-43764 https://cve.radiocsirt.org/vuln/euvd-2026-43064 EUVD-2026-43064 2026-10-03T21:40:18.793031+00:00 EUVD-2026-43064 https://cve.radiocsirt.org/vuln/fkie_cve-2020-15658 fkie_cve-2020-15658 2026-10-03T21:40:18.793043+00:00

The code for downloading files did not properly take care of special characters, which led to an attacker being able to cut off the file ending at an earlier position, leading to a different file type being downloaded than shown in the dialog. This vulnerability affects Firefox ESR < 78.1, Firefox < 79, and Thunderbird < 78.1.

 https://cve.radiocsirt.org/vuln/ghsa-5c48-vfr3-8jxq GHSA-5c48-vfr3-8jxq 2026-10-03T21:40:18.793076+00:00

The code for downloading files did not properly take care of special characters, which led to an attacker being able to cut off the file ending at an earlier position, leading to a different file type being downloaded than shown in the dialog. This vulnerability affects Firefox ESR < 78.1, Firefox < 79, and Thunderbird < 78.1.

 https://cve.radiocsirt.org/vuln/gsd-2020-15658 gsd-2020-15658 2026-10-03T21:40:18.793093+00:00 gsd-2020-15658 https://cve.radiocsirt.org/vuln/opensuse-su-2020:1147-1 openSUSE-SU-2020:1147-1 — Security update for MozillaFirefox 2026-10-03T21:40:18.793104+00:00

Security update for MozillaFirefox

 https://cve.radiocsirt.org/vuln/rhsa-2020:3555 RHSA-2020:3555 — Red Hat Security Advisory: firefox security update 2026-10-03T21:40:18.793127+00:00

Mozilla: Integer overflow in nsJPEGEncoder::emptyOutputBuffer Mozilla: WebRTC permission prompt could have been bypassed by a compromised content process Mozilla: Out of bound read in Date.parse() Mozilla: X-Frame-Options bypass using object or embed tags Mozilla: Bypassing iframe sandbox when allowing popups Mozilla: Custom cursor can overlay user interface Mozilla: Type confusion for special arguments in IonMonkey Mozilla: Overriding file type when saving to disk Mozilla: Attacker-induced prompt for extension installation Mozilla: Use-After-Free when aborting an operation

 https://cve.radiocsirt.org/vuln/suse-su-2020:14456-1 SUSE-SU-2020:14456-1 — Security update for MozillaFirefox 2026-10-03T21:40:18.793160+00:00

Security update for MozillaFirefox

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-15658 UBUNTU-CVE-2020-15658 2026-10-03T21:40:18.793181+00:00

Affected: Ubuntu:16.04:LTS: firefox, Ubuntu:18.04:LTS: firefox, Ubuntu:18.04:LTS: thunderbird, Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: firefox, Ubuntu:20.04:LTS: thunderbird, Ubuntu:20.04:LTS: mozjs68, Ubuntu:20.04:LTS: mozjs52

The code for downloading files did not properly take care of special characters, which led to an attacker being able to cut off the file ending at an earlier position, leading to a different file type being downloaded than shown in the dialog. This vulnerability affects Firefox ESR < 78.1, Firefox < 79, and Thunderbird < 78.1.