https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T16:11:54.045755+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2016-01911 bdu:2016-01911 2026-10-03T16:11:54.240857+00:00 bdu:2016-01911 https://cve.radiocsirt.org/vuln/certfr-2016-avi-259 certfr-2016-avi-259 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Mozilla Firefox</span>. Certaines d'entre elles… 2026-10-03T16:11:54.240918+00:00 certfr-2016-avi-259 https://cve.radiocsirt.org/vuln/cnvd-2016-06171 cnvd-2016-06171 2026-10-03T16:11:54.240941+00:00 cnvd-2016-06171 https://cve.radiocsirt.org/vuln/euvd-2026-85152 EUVD-2026-85152 2026-10-03T16:11:54.240954+00:00 EUVD-2026-85152 https://cve.radiocsirt.org/vuln/fkie_cve-2016-5266 fkie_cve-2016-5266 2026-10-03T16:11:54.240965+00:00

Mozilla Firefox before 48.0 does not properly restrict drag-and-drop (aka dataTransfer) actions for file: URIs, which allows user-assisted remote attackers to access local files via a crafted web site.

 https://cve.radiocsirt.org/vuln/ghsa-2fjc-qvwr-7hf8 GHSA-2fjc-qvwr-7hf8 2026-10-03T16:11:54.240994+00:00

Mozilla Firefox before 48.0 does not properly restrict drag-and-drop (aka dataTransfer) actions for file: URIs, which allows user-assisted remote attackers to access local files via a crafted web site.

 https://cve.radiocsirt.org/vuln/gsd-2016-5266 gsd-2016-5266 2026-10-03T16:11:54.241009+00:00 gsd-2016-5266 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10071-1 openSUSE-SU-2024:10071-1 — MozillaFirefox-50.1.0-1.1 on GA media 2026-10-03T16:11:54.241019+00:00

MozillaFirefox-50.1.0-1.1 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-5266 UBUNTU-CVE-2016-5266 2026-10-03T16:11:54.241577+00:00

Affected: Ubuntu:14.04:LTS: firefox, Ubuntu:16.04:LTS: firefox

Mozilla Firefox before 48.0 does not properly restrict drag-and-drop (aka dataTransfer) actions for file: URIs, which allows user-assisted remote attackers to access local files via a crafted web site.