https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T12:42:51.494674+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2020-avi-138 certfr-2020-avi-138 — De multiples vulnérabilités ont été découvertes dans Mozilla Firefox. Elles permettent à un attaquant de provoquer une… 2026-10-03T12:42:51.853219+00:00 certfr-2020-avi-138 https://cve.radiocsirt.org/vuln/cnvd-2020-16722 cnvd-2020-16722 2026-10-03T12:42:51.853285+00:00 cnvd-2020-16722 https://cve.radiocsirt.org/vuln/euvd-2026-37596 EUVD-2026-37596 2026-10-03T12:42:51.853302+00:00 EUVD-2026-37596 https://cve.radiocsirt.org/vuln/fkie_cve-2020-6811 fkie_cve-2020-6811 2026-10-03T12:42:51.853314+00:00

The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a request, which can be controlled by the website. If a user used the 'Copy as Curl' feature and pasted the command into a terminal, it could have resulted in command injection and arbitrary command execution. This vulnerability affects Thunderbird < 68.6, Firefox < 74, Firefox < ESR68.6, and Firefox ESR < 68.6.

 https://cve.radiocsirt.org/vuln/ghsa-ffwg-6pqv-h33r GHSA-ffwg-6pqv-h33r 2026-10-03T12:42:51.853347+00:00

The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a request, which can be controlled by the website. If a user used the 'Copy as Curl' feature and pasted the command into a terminal, it could have resulted in command injection and arbitrary command execution. This vulnerability affects Thunderbird < 68.6, Firefox < 74, Firefox < ESR68.6, and Firefox ESR < 68.6.

 https://cve.radiocsirt.org/vuln/gsd-2020-6811 gsd-2020-6811 2026-10-03T12:42:51.853366+00:00 gsd-2020-6811 https://cve.radiocsirt.org/vuln/opensuse-su-2020:0340-1 openSUSE-SU-2020:0340-1 — Security update for MozillaFirefox 2026-10-03T12:42:51.853376+00:00

Security update for MozillaFirefox

 https://cve.radiocsirt.org/vuln/rhsa-2020:0816 RHSA-2020:0816 — Red Hat Security Advisory: firefox security update 2026-10-03T12:42:51.853397+00:00

usrsctp: Out of bounds reads in sctp_load_addresses_from_init() Mozilla: Use-after-free when removing data about origins Mozilla: BodyStream:: OnInputStreamReady was missing protections against state confusion Mozilla: Use-after-free in cubeb during stream destruction Mozilla: Devtools' 'Copy as cURL' feature did not fully escape website-controlled data, potentially leading to command injection Mozilla: The names of AirPods with personally identifiable information were exposed to websites with camera or microphone permission Mozilla: Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6

 https://cve.radiocsirt.org/vuln/suse-su-2020:0686-1 SUSE-SU-2020:0686-1 — Security update for MozillaFirefox 2026-10-03T12:42:51.853426+00:00

Security update for MozillaFirefox

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-6811 UBUNTU-CVE-2020-6811 2026-10-03T12:42:51.853445+00:00

Affected: Ubuntu:16.04:LTS: firefox, Ubuntu:16.04:LTS: thunderbird, Ubuntu:18.04:LTS: firefox, Ubuntu:18.04:LTS: thunderbird, Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: firefox, Ubuntu:20.04:LTS: thunderbird, Ubuntu:20.04:LTS: mozjs52

The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a request, which can be controlled by the website. If a user used the 'Copy as Curl' feature and pasted the command into a terminal, it could have resulted in command injection and arbitrary command execution. This vulnerability affects Thunderbird < 68.6, Firefox < 74, Firefox < ESR68.6, and Firefox ESR < 68.6.