https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T17:47:59.659954+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2019-03418 bdu:2019-03418 2026-10-03T17:47:59.875813+00:00 bdu:2019-03418 https://cve.radiocsirt.org/vuln/certfr-2018-avi-230 certfr-2018-avi-230 — De multiples vulnérabilités ont été découvertes dans Mozilla Firefox. Certaines d'entre elles permettent à un attaquant… 2026-10-03T17:47:59.875860+00:00 certfr-2018-avi-230 https://cve.radiocsirt.org/vuln/cnvd-2018-10240 cnvd-2018-10240 2026-10-03T17:47:59.875882+00:00 cnvd-2018-10240 https://cve.radiocsirt.org/vuln/euvd-2026-62050 EUVD-2026-62050 2026-10-03T17:47:59.875895+00:00 EUVD-2026-62050 https://cve.radiocsirt.org/vuln/fkie_cve-2018-5152 fkie_cve-2018-5152 2026-10-03T17:47:59.875906+00:00

WebExtensions with the appropriate permissions can attach content scripts to Mozilla sites such as accounts.firefox.com and listen to network traffic to the site through the "webRequest" API. For example, this allows for the interception of username and an encrypted password during login to Firefox Accounts. This issue does not expose synchronization traffic directly and is limited to the process of user login to the website and the data displayed to the user once logged in. This vulnerability affects Firefox < 60.

 https://cve.radiocsirt.org/vuln/ghsa-v8rx-7xrc-grgm GHSA-v8rx-7xrc-grgm 2026-10-03T17:47:59.875938+00:00

WebExtensions with the appropriate permissions can attach content scripts to Mozilla sites such as accounts.firefox.com and listen to network traffic to the site through the "webRequest" API. For example, this allows for the interception of username and an encrypted password during login to Firefox Accounts. This issue does not expose synchronization traffic directly and is limited to the process of user login to the website and the data displayed to the user once logged in. This vulnerability affects Firefox < 60.

 https://cve.radiocsirt.org/vuln/gsd-2018-5152 gsd-2018-5152 2026-10-03T17:47:59.875957+00:00 gsd-2018-5152 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10600-1 openSUSE-SU-2024:10600-1 — MozillaFirefox-92.0-1.2 on GA media 2026-10-03T17:47:59.875967+00:00

MozillaFirefox-92.0-1.2 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2019:2872-1 SUSE-SU-2019:2872-1 — Security update for MozillaFirefox 2026-10-03T17:47:59.876351+00:00

Security update for MozillaFirefox

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-5152 UBUNTU-CVE-2018-5152 2026-10-03T17:47:59.876396+00:00

Affected: Ubuntu:14.04:LTS: firefox, Ubuntu:16.04:LTS: firefox, Ubuntu:18.04:LTS: firefox

WebExtensions with the appropriate permissions can attach content scripts to Mozilla sites such as accounts.firefox.com and listen to network traffic to the site through the "webRequest" API. For example, this allows for the interception of username and an encrypted password during login to Firefox Accounts. This issue does not expose synchronization traffic directly and is limited to the process of user login to the website and the data displayed to the user once logged in. This vulnerability affects Firefox < 60.