https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T07:38:28.133177+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2008-avi-555 certa-2008-avi-555 — Plusieurs vulnérabilités ont été découvertes dans Mozilla Firefox et permettent, entre autres, à une personne malveilla… 2026-10-04T07:38:28.204661+00:00 certa-2008-avi-555 https://cve.radiocsirt.org/vuln/euvd-2026-129982 EUVD-2026-129982 2026-10-04T07:38:28.204701+00:00 EUVD-2026-129982 https://cve.radiocsirt.org/vuln/fkie_cve-2008-5015 fkie_cve-2008-5015 2026-10-04T07:38:28.204717+00:00

Mozilla Firefox 3.x before 3.0.4 assigns chrome privileges to a file: URI when it is accessed in the same tab from a chrome or privileged about: page, which makes it easier for user-assisted attackers to execute arbitrary JavaScript with chrome privileges via malicious code in a file that has already been saved on the local system.

 https://cve.radiocsirt.org/vuln/ghsa-w7p9-j7cw-wfpm GHSA-w7p9-j7cw-wfpm 2026-10-04T07:38:28.204747+00:00

Mozilla Firefox 3.x before 3.0.4 assigns chrome privileges to a file: URI when it is accessed in the same tab from a chrome or privileged about: page, which makes it easier for user-assisted attackers to execute arbitrary JavaScript with chrome privileges via malicious code in a file that has already been saved on the local system.

 https://cve.radiocsirt.org/vuln/gsd-2008-5015 gsd-2008-5015 2026-10-04T07:38:28.204764+00:00 gsd-2008-5015 https://cve.radiocsirt.org/vuln/rhsa-2008:0978 RHSA-2008:0978 — Red Hat Security Advisory: firefox security update 2026-10-04T07:38:28.204776+00:00

Mozilla buffer overflow in http-index-format parser Mozilla crash and remote code execution via __proto__ tampering file: URIs inherit chrome privileges Mozilla crash with evidence of memory corruption Mozilla crash with evidence of memory corruption Mozilla crash with evidence of memory corruption Mozilla XSS via session restore Mozilla crash and remote code execution in nsFrameManager nsXMLHttpRequest:: NotifyEventListeners() same-origin violation Mozilla -moz-binding property bypasses security checks on codebase principals Mozilla parsing error in E4X default namespace security flaw