https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 18:40:14 +0000 https://cve.radiocsirt.org/vuln/certa-2009-avi-048 certa-2009-avi-048 https://cve.radiocsirt.org/vuln/certa-2009-avi-048 https://cve.radiocsirt.org/vuln/euvd-2026-121504 EUVD-2026-121504 https://cve.radiocsirt.org/vuln/euvd-2026-121504 https://cve.radiocsirt.org/vuln/fkie_cve-2009-0355 <p>components/sessionstore/src/nsSessionStore.js in Mozilla Firefox before 3.0.6 does not block changes of INPUT elements to type=&#34;file&#34; during tab restoration, which allows user-assisted remote attackers to read arbitrary files on a client machine via a crafted INPUT element.</p> <p>components/sessionstore/src/nsSessionStore.js in Mozilla Firefox before 3.0.6 does not block changes of INPUT elements to type=&#34;file&#34; during tab restoration, which allows user-assisted remote attackers to read arbitrary files on a client machine via a crafted INPUT element.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2009-0355 https://cve.radiocsirt.org/vuln/ghsa-h2q7-pj3w-pr6f <p>components/sessionstore/src/nsSessionStore.js in Mozilla Firefox before 3.0.6 does not block changes of INPUT elements to type=&#34;file&#34; during tab restoration, which allows user-assisted remote attackers to read arbitrary files on a client machine via a crafted INPUT element.</p> <p>components/sessionstore/src/nsSessionStore.js in Mozilla Firefox before 3.0.6 does not block changes of INPUT elements to type=&#34;file&#34; during tab restoration, which allows user-assisted remote attackers to read arbitrary files on a client machine via a crafted INPUT element.</p> https://cve.radiocsirt.org/vuln/ghsa-h2q7-pj3w-pr6f https://cve.radiocsirt.org/vuln/gsd-2009-0355 gsd-2009-0355 https://cve.radiocsirt.org/vuln/gsd-2009-0355 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10600-1 <p>MozillaFirefox-92.0-1.2 on GA media</p> <p>MozillaFirefox-92.0-1.2 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10600-1 https://cve.radiocsirt.org/vuln/rhsa-2009:0256 <p>Firefox layout crashes with evidence of memory corruption Firefox javascript crashes with evidence of memory corruption Firefox XSS using a chrome XBL method and window.eval Firefox local file stealing with SessionStore Firefox Chrome privilege escalation via local .desktop files Firefox XMLHttpRequest allows reading HTTPOnly cookies Firefox directives to not cache pages ignored</p> <p>Firefox layout crashes with evidence of memory corruption Firefox javascript crashes with evidence of memory corruption Firefox XSS using a chrome XBL method and window.eval Firefox local file stealing with SessionStore Firefox Chrome privilege escalation via local .desktop files Firefox XMLHttpRequest allows reading HTTPOnly cookies Firefox directives to not cache pages ignored</p> https://cve.radiocsirt.org/vuln/rhsa-2009:0256