Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 01:36:04 +0000 certa-2008-avi-160 — Plusieurs vulnérabilités affectent le navigateur <span class="textit">Firefox</span>. Leur exploitation permet à un uti… https://cve.radiocsirt.org/vuln/certa-2008-avi-160 certa-2008-avi-160 https://cve.radiocsirt.org/vuln/certa-2008-avi-160 EUVD-2026-126436 https://cve.radiocsirt.org/vuln/euvd-2026-126436 EUVD-2026-126436 https://cve.radiocsirt.org/vuln/euvd-2026-126436 fkie_cve-2008-1238 https://cve.radiocsirt.org/vuln/fkie_cve-2008-1238 <p>Mozilla Firefox before 2.0.0.13 and SeaMonkey before 1.1.9, when generating the HTTP Referer header, does not list the entire URL when it contains Basic Authentication credentials without a username, which makes it easier for remote attackers to bypass application protection mechanisms that rely on Referer headers, such as with some Cross-Site Request Forgery (CSRF) mechanisms.</p> <p>Mozilla Firefox before 2.0.0.13 and SeaMonkey before 1.1.9, when generating the HTTP Referer header, does not list the entire URL when it contains Basic Authentication credentials without a username, which makes it easier for remote attackers to bypass application protection mechanisms that rely on Referer headers, such as with some Cross-Site Request Forgery (CSRF) mechanisms.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2008-1238 GHSA-q345-fgmq-3pf3 https://cve.radiocsirt.org/vuln/ghsa-q345-fgmq-3pf3 <p>Mozilla Firefox before 2.0.0.13 and SeaMonkey before 1.1.9, when generating the HTTP Referer header, does not list the entire URL when it contains Basic Authentication credentials without a username, which makes it easier for remote attackers to bypass application protection mechanisms that rely on Referer headers, such as with some Cross-Site Request Forgery (CSRF) mechanisms.</p> <p>Mozilla Firefox before 2.0.0.13 and SeaMonkey before 1.1.9, when generating the HTTP Referer header, does not list the entire URL when it contains Basic Authentication credentials without a username, which makes it easier for remote attackers to bypass application protection mechanisms that rely on Referer headers, such as with some Cross-Site Request Forgery (CSRF) mechanisms.</p> https://cve.radiocsirt.org/vuln/ghsa-q345-fgmq-3pf3 gsd-2008-1238 https://cve.radiocsirt.org/vuln/gsd-2008-1238 gsd-2008-1238 https://cve.radiocsirt.org/vuln/gsd-2008-1238 openSUSE-SU-2024:10590-1 — seamonkey-2.53.9.1-1.1 on GA media https://cve.radiocsirt.org/vuln/opensuse-su-2024:10590-1 <p>seamonkey-2.53.9.1-1.1 on GA media</p> <p>seamonkey-2.53.9.1-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10590-1 RHSA-2008:0207 — Red Hat Security Advisory: firefox security update https://cve.radiocsirt.org/vuln/rhsa-2008:0207 <p>Mozilla products XPCNativeWrapper pollution universal XSS using event handlers chrome privilege via wrong principal browser engine crashes javascript crashes Referrer spoofing bug XUL popup spoofing</p> <p>Mozilla products XPCNativeWrapper pollution universal XSS using event handlers chrome privilege via wrong principal browser engine crashes javascript crashes Referrer spoofing bug XUL popup spoofing</p> https://cve.radiocsirt.org/vuln/rhsa-2008:0207