https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T11:55:16.145632+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-08142 bdu:2023-08142 2026-10-04T11:55:16.351541+00:00 bdu:2023-08142 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0969 certfr-2023-avi-0969 — De multiples vulnérabilités ont été découvertes dans <span class="textit">les produits Mozilla</span>. Certaines d'entr… 2026-10-04T11:55:16.351636+00:00 certfr-2023-avi-0969 https://cve.radiocsirt.org/vuln/euvd-2026-217067 EUVD-2026-217067 2026-10-04T11:55:16.351657+00:00 EUVD-2026-217067 https://cve.radiocsirt.org/vuln/fkie_cve-2023-6211 fkie_cve-2023-6211 2026-10-04T11:55:16.351670+00:00

If an attacker needed a user to load an insecure http: page and knew that user had enabled HTTPS-only mode, the attacker could have tricked the user into clicking to grant an HTTPS-only exception if they could get the user to participate in a clicking game. This vulnerability affects Firefox < 120.

 https://cve.radiocsirt.org/vuln/ghsa-mv6j-qcrj-q856 GHSA-mv6j-qcrj-q856 2026-10-04T11:55:16.351702+00:00

If an attacker needed a user to load an insecure http: page and knew that user had enabled HTTPS-only mode, the attacker could have tricked the user into clicking to grant an HTTPS-only exception if they could get the user to participate in a clicking game. This vulnerability affects Firefox < 120.

 https://cve.radiocsirt.org/vuln/gsd-2023-6211 gsd-2023-6211 2026-10-04T11:55:16.351719+00:00 gsd-2023-6211 https://cve.radiocsirt.org/vuln/msrc_cve-2023-6211 msrc_CVE-2023-6211 — If an attacker needed a user to load an insecure http: page and knew that user had enabled HTTPS-only mode, the attacke… 2026-10-04T11:55:16.351729+00:00 msrc_CVE-2023-6211 https://cve.radiocsirt.org/vuln/oesa-2025-1322 OESA-2025-1322 — firefox security update 2026-10-04T11:55:16.351747+00:00

Affected: openEuler:22.03-LTS-SP3: firefox

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. %if 0 %global moz_debug_prefix /lib/debug %global moz_debug_dir /lib/debug/ %global uname_m %(uname -m) %global symbols_file_name -.en-US.-%(uname.crashreporter-symbols.zip %global symbols_file_path /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip %global _find_debuginfo_opts -p /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip -o debugcrashreporter.list %global crashreporter_pkg_name mozilla-crashreporter--debuginfo Security Fix(es):

Multiple NSS NIST curves were susceptible to a side-channel attack known as &quot;Minerva&quot;. This attack could potentially allow an attacker to recover the private key. This vulnerability affects Firefox &lt; 121.(CVE-2023-6135)

Ownership mismanagement led to a use-after-free in ReadableByteStreams This vulnerability affects Firefox &lt; 120, Firefox ESR &lt; 115.5.0, and Thunderbird &lt; 115.5.(CVE-2023-6207)

When using X11, text selected by the page using the Selection API was erroneously copied into the primary selection, a temporary storage not unlike the clipboard. *This bug only affects Firefox on X11. Other systems are unaffected.* This vulnerability affects Firefox &lt; 120, Firefox ESR &lt; 115.5.0, and Thunderbird &lt; 115.5.(CVE-2023-6208)

Relative URLs starting with three slashes were incorrectly parsed, and a path-traversal &quot;/../&quot; part in the path could be used to override the specified host…

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13468-1 openSUSE-SU-2024:13468-1 — MozillaFirefox-120.0-1.1 on GA media 2026-10-04T11:55:16.351818+00:00

MozillaFirefox-120.0-1.1 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-6211 UBUNTU-CVE-2023-6211 2026-10-04T11:55:16.351841+00:00

Affected: Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: firefox, Ubuntu:20.04:LTS: mozjs68, Ubuntu:20.04:LTS: mozjs52, Ubuntu:22.04:LTS: mozjs102, Ubuntu:22.04:LTS: mozjs78, Ubuntu:22.04:LTS: mozjs91, Ubuntu:24.04:LTS: mozjs102

If an attacker needed a user to load an insecure http: page and knew that user had enabled HTTPS-only mode, the attacker could have tricked the user into clicking to grant an HTTPS-only exception if they could get the user to participate in a clicking game. This vulnerability affects Firefox < 120.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2995 WID-SEC-W-2023-2995 — Mozilla Firefox, Mozilla Firefox ESR und Mozilla Thunderbird: Mehrere Schwachstellen 2026-10-04T11:55:16.351875+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Mozilla Firefox, Mozilla Firefox ESR und Mozilla Thunderbird ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.