https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T03:38:05.587955+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2020-avi-083 certfr-2020-avi-083 — De multiples vulnérabilités ont été découvertes dans Mozilla Firefox. Elles permettent à un attaquant de provoquer une… 2026-10-03T03:38:05.930168+00:00 certfr-2020-avi-083 https://cve.radiocsirt.org/vuln/cnvd-2020-07197 cnvd-2020-07197 2026-10-03T03:38:05.930244+00:00 cnvd-2020-07197 https://cve.radiocsirt.org/vuln/euvd-2026-37551 EUVD-2026-37551 2026-10-03T03:38:05.930273+00:00 EUVD-2026-37551 https://cve.radiocsirt.org/vuln/fkie_cve-2020-6798 fkie_cve-2020-6798 2026-10-03T03:38:05.930296+00:00

If a template tag was used in a select tag, the parser could be confused and allow JavaScript parsing and execution when it should not be allowed. A site that relied on the browser behaving correctly could suffer a cross-site scripting vulnerability as a result. In general, this flaw cannot be exploited through email in the Thunderbird product because scripting is disabled when reading mail, but is potentially a risk in browser or browser-like contexts. This vulnerability affects Thunderbird < 68.5, Firefox < 73, and Firefox < ESR68.5.

 https://cve.radiocsirt.org/vuln/ghsa-qwm2-p76q-cw3g GHSA-qwm2-p76q-cw3g 2026-10-03T03:38:05.930344+00:00

If a template tag was used in a select tag, the parser could be confused and allow JavaScript parsing and execution when it should not be allowed. A site that relied on the browser behaving correctly could suffer a cross-site scripting vulnerability as a result. In general, this flaw cannot be exploited through email in the Thunderbird product because scripting is disabled when reading mail, but is potentially a risk in browser or browser-like contexts. This vulnerability affects Thunderbird < 68.5, Firefox < 73, and Firefox < ESR68.5.

 https://cve.radiocsirt.org/vuln/gsd-2020-6798 gsd-2020-6798 2026-10-03T03:38:05.930377+00:00 gsd-2020-6798 https://cve.radiocsirt.org/vuln/opensuse-su-2020:0230-1 openSUSE-SU-2020:0230-1 — Security update for MozillaFirefox 2026-10-03T03:38:05.930396+00:00

Security update for MozillaFirefox

 https://cve.radiocsirt.org/vuln/rhsa-2020:0519 RHSA-2020:0519 — Red Hat Security Advisory: firefox security update 2026-10-03T03:38:05.930434+00:00

Mozilla: Missing bounds check on shared memory read in the parent process Mozilla: Incorrect parsing of template tag could result in JavaScript injection Mozilla: Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5

 https://cve.radiocsirt.org/vuln/suse-su-2020:0383-1 SUSE-SU-2020:0383-1 — Security update for MozillaFirefox 2026-10-03T03:38:05.930476+00:00

Security update for MozillaFirefox

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-6798 UBUNTU-CVE-2020-6798 2026-10-03T03:38:05.930512+00:00

Affected: Ubuntu:16.04:LTS: firefox, Ubuntu:16.04:LTS: thunderbird, Ubuntu:18.04:LTS: firefox, Ubuntu:18.04:LTS: thunderbird, Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: firefox, Ubuntu:20.04:LTS: thunderbird, Ubuntu:20.04:LTS: mozjs52

If a template tag was used in a select tag, the parser could be confused and allow JavaScript parsing and execution when it should not be allowed. A site that relied on the browser behaving correctly could suffer a cross-site scripting vulnerability as a result. In general, this flaw cannot be exploited through email in the Thunderbird product because scripting is disabled when reading mail, but is potentially a risk in browser or browser-like contexts. This vulnerability affects Thunderbird < 68.5, Firefox < 73, and Firefox < ESR68.5.