https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 22:05:12 +0000 https://cve.radiocsirt.org/vuln/certa-2009-avi-048 certa-2009-avi-048 https://cve.radiocsirt.org/vuln/certa-2009-avi-048 https://cve.radiocsirt.org/vuln/euvd-2026-121575 EUVD-2026-121575 https://cve.radiocsirt.org/vuln/euvd-2026-121575 https://cve.radiocsirt.org/vuln/fkie_cve-2009-0357 <p>Mozilla Firefox before 3.0.6 and SeaMonkey before 1.1.15 do not properly restrict access from web pages to the (1) Set-Cookie and (2) Set-Cookie2 HTTP response headers, which allows remote attackers to obtain sensitive information from cookies via XMLHttpRequest calls, related to the HTTPOnly protection mechanism.</p> <p>Mozilla Firefox before 3.0.6 and SeaMonkey before 1.1.15 do not properly restrict access from web pages to the (1) Set-Cookie and (2) Set-Cookie2 HTTP response headers, which allows remote attackers to obtain sensitive information from cookies via XMLHttpRequest calls, related to the HTTPOnly protection mechanism.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2009-0357 https://cve.radiocsirt.org/vuln/ghsa-xprr-83m2-vv8v <p>Mozilla Firefox before 3.0.6 and SeaMonkey before 1.1.15 do not properly restrict access from web pages to the (1) Set-Cookie and (2) Set-Cookie2 HTTP response headers, which allows remote attackers to obtain sensitive information from cookies via XMLHttpRequest calls, related to the HTTPOnly protection mechanism.</p> <p>Mozilla Firefox before 3.0.6 and SeaMonkey before 1.1.15 do not properly restrict access from web pages to the (1) Set-Cookie and (2) Set-Cookie2 HTTP response headers, which allows remote attackers to obtain sensitive information from cookies via XMLHttpRequest calls, related to the HTTPOnly protection mechanism.</p> https://cve.radiocsirt.org/vuln/ghsa-xprr-83m2-vv8v https://cve.radiocsirt.org/vuln/gsd-2009-0357 gsd-2009-0357 https://cve.radiocsirt.org/vuln/gsd-2009-0357 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10600-1 <p>MozillaFirefox-92.0-1.2 on GA media</p> <p>MozillaFirefox-92.0-1.2 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10600-1 https://cve.radiocsirt.org/vuln/rhsa-2009:0256 <p>Firefox layout crashes with evidence of memory corruption Firefox javascript crashes with evidence of memory corruption Firefox XSS using a chrome XBL method and window.eval Firefox local file stealing with SessionStore Firefox Chrome privilege escalation via local .desktop files Firefox XMLHttpRequest allows reading HTTPOnly cookies Firefox directives to not cache pages ignored</p> <p>Firefox layout crashes with evidence of memory corruption Firefox javascript crashes with evidence of memory corruption Firefox XSS using a chrome XBL method and window.eval Firefox local file stealing with SessionStore Firefox Chrome privilege escalation via local .desktop files Firefox XMLHttpRequest allows reading HTTPOnly cookies Firefox directives to not cache pages ignored</p> https://cve.radiocsirt.org/vuln/rhsa-2009:0256