https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 20:30:53 +0000 https://cve.radiocsirt.org/vuln/certa-2008-avi-606 certa-2008-avi-606 https://cve.radiocsirt.org/vuln/certa-2008-avi-606 https://cve.radiocsirt.org/vuln/euvd-2026-130375 EUVD-2026-130375 https://cve.radiocsirt.org/vuln/euvd-2026-130375 https://cve.radiocsirt.org/vuln/fkie_cve-2008-5503 <p>The loadBindingDocument function in Mozilla Firefox 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 does not perform any security checks related to the same-domain policy, which allows remote attackers to read or access data from other domains via crafted XBL bindings.</p> <p>The loadBindingDocument function in Mozilla Firefox 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 does not perform any security checks related to the same-domain policy, which allows remote attackers to read or access data from other domains via crafted XBL bindings.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2008-5503 https://cve.radiocsirt.org/vuln/ghsa-xmfc-3wmp-72qq <p>The loadBindingDocument function in Mozilla Firefox 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 does not perform any security checks related to the same-domain policy, which allows remote attackers to read or access data from other domains via crafted XBL bindings.</p> <p>The loadBindingDocument function in Mozilla Firefox 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 does not perform any security checks related to the same-domain policy, which allows remote attackers to read or access data from other domains via crafted XBL bindings.</p> https://cve.radiocsirt.org/vuln/ghsa-xmfc-3wmp-72qq https://cve.radiocsirt.org/vuln/gsd-2008-5503 gsd-2008-5503 https://cve.radiocsirt.org/vuln/gsd-2008-5503 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10601-1 <p>MozillaThunderbird-91.1.1-1.1 on GA media</p> <p>MozillaThunderbird-91.1.1-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10601-1 https://cve.radiocsirt.org/vuln/rhsa-2008:1037 <p>Layout engine crashes - Firefox 2 and 3 Layout engine crash - Firefox 3 only JavaScript engine crash - Firefox 3 only Firefox 2 Information stealing via loadBindingDocument Firefox 2 XSS attack vectors in feed preview Firefox XMLHttpRequest 302 response disclosure Firefox Cross-domain data theft via script redirect error message Firefox errors parsing URLs with control characters Firefox XSS via XBL bindings to unloaded document Firefox JavaScript privilege escalation Firefox XSS vulnerabilities in SessionStore</p> <p>Layout engine crashes - Firefox 2 and 3 Layout engine crash - Firefox 3 only JavaScript engine crash - Firefox 3 only Firefox 2 Information stealing via loadBindingDocument Firefox 2 XSS attack vectors in feed preview Firefox XMLHttpRequest 302 response disclosure Firefox Cross-domain data theft via script redirect error message Firefox errors parsing URLs with control characters Firefox XSS via XBL bindings to unloaded document Firefox JavaScript privilege escalation Firefox XSS vulnerabilities in SessionStore</p> https://cve.radiocsirt.org/vuln/rhsa-2008:1037