https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 18:55:17 +0000 https://cve.radiocsirt.org/vuln/certa-2008-avi-606 certa-2008-avi-606 https://cve.radiocsirt.org/vuln/certa-2008-avi-606 https://cve.radiocsirt.org/vuln/euvd-2026-130396 EUVD-2026-130396 https://cve.radiocsirt.org/vuln/euvd-2026-130396 https://cve.radiocsirt.org/vuln/fkie_cve-2008-5506 <p>Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to bypass the same origin policy by causing the browser to issue an XMLHttpRequest to an attacker-controlled resource that uses a 302 redirect to a resource in a different domain, then reading content from the response, aka &#34;response disclosure.&#34;</p> <p>Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to bypass the same origin policy by causing the browser to issue an XMLHttpRequest to an attacker-controlled resource that uses a 302 redirect to a resource in a different domain, then reading content from the response, aka &#34;response disclosure.&#34;</p> https://cve.radiocsirt.org/vuln/fkie_cve-2008-5506 https://cve.radiocsirt.org/vuln/ghsa-rcg4-3qvg-p2xp <p>Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to bypass the same origin policy by causing the browser to issue an XMLHttpRequest to an attacker-controlled resource that uses a 302 redirect to a resource in a different domain, then reading content from the response, aka &#34;response disclosure.&#34;</p> <p>Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to bypass the same origin policy by causing the browser to issue an XMLHttpRequest to an attacker-controlled resource that uses a 302 redirect to a resource in a different domain, then reading content from the response, aka &#34;response disclosure.&#34;</p> https://cve.radiocsirt.org/vuln/ghsa-rcg4-3qvg-p2xp https://cve.radiocsirt.org/vuln/gsd-2008-5506 gsd-2008-5506 https://cve.radiocsirt.org/vuln/gsd-2008-5506 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10601-1 <p>MozillaThunderbird-91.1.1-1.1 on GA media</p> <p>MozillaThunderbird-91.1.1-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10601-1 https://cve.radiocsirt.org/vuln/rhsa-2008:1036 <p>Layout engine crashes - Firefox 2 and 3 Layout engine crash - Firefox 3 only JavaScript engine crash - Firefox 3 only Firefox 3 User tracking via XUL persist attribute Firefox XMLHttpRequest 302 response disclosure Firefox Cross-domain data theft via script redirect error message Firefox errors parsing URLs with control characters Firefox null characters ignored by CSS parser Firefox XSS via XBL bindings to unloaded document Firefox JavaScript privilege escalation Firefox XSS vulnerabilities in SessionStore</p> <p>Layout engine crashes - Firefox 2 and 3 Layout engine crash - Firefox 3 only JavaScript engine crash - Firefox 3 only Firefox 3 User tracking via XUL persist attribute Firefox XMLHttpRequest 302 response disclosure Firefox Cross-domain data theft via script redirect error message Firefox errors parsing URLs with control characters Firefox null characters ignored by CSS parser Firefox XSS via XBL bindings to unloaded document Firefox JavaScript privilege escalation Firefox XSS vulnerabilities in SessionStore</p> https://cve.radiocsirt.org/vuln/rhsa-2008:1036