https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T04:21:39.370513+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2016-1949 CVE-2016-1949 2026-10-04T04:21:39.404057+00:00

Mozilla Firefox before 44.0.2 does not properly restrict the interaction between Service Workers and plugins, which allows remote attackers to bypass the Same Origin Policy via a crafted web site that triggers spoofed responses to requests that use NPAPI, as demonstrated by a request for a crossdomain.xml file.

 https://cve.radiocsirt.org/vuln/usn-2893-1 USN-2893-1 — firefox vulnerability 2026-10-04T04:21:39.404106+00:00

Affected: Ubuntu:14.04:LTS: firefox

Jason Pang discovered that service workers intercept responses to plugin network requests made through the browser. An attacker could potentially exploit this to bypass same origin restrictions using the Flash plugin. (CVE-2016-1949)