https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 15:49:27 +0000 https://cve.radiocsirt.org/vuln/certa-2009-avi-459 certa-2009-avi-459 https://cve.radiocsirt.org/vuln/certa-2009-avi-459 https://cve.radiocsirt.org/vuln/euvd-2026-124082 EUVD-2026-124082 https://cve.radiocsirt.org/vuln/euvd-2026-124082 https://cve.radiocsirt.org/vuln/fkie_cve-2009-3374 <p>The XPCVariant::VariantDataToJS function in the XPCOM implementation in Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4 does not enforce intended restrictions on interaction between chrome privileged code and objects obtained from remote web sites, which allows remote attackers to execute arbitrary JavaScript with chrome privileges via unspecified method calls, related to &#34;doubly-wrapped objects.&#34;</p> <p>The XPCVariant::VariantDataToJS function in the XPCOM implementation in Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4 does not enforce intended restrictions on interaction between chrome privileged code and objects obtained from remote web sites, which allows remote attackers to execute arbitrary JavaScript with chrome privileges via unspecified method calls, related to &#34;doubly-wrapped objects.&#34;</p> https://cve.radiocsirt.org/vuln/fkie_cve-2009-3374 https://cve.radiocsirt.org/vuln/ghsa-wr76-gg23-hq72 <p>The XPCVariant::VariantDataToJS function in the XPCOM implementation in Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4 does not enforce intended restrictions on interaction between chrome privileged code and objects obtained from remote web sites, which allows remote attackers to execute arbitrary JavaScript with chrome privileges via unspecified method calls, related to &#34;doubly-wrapped objects.&#34;</p> <p>The XPCVariant::VariantDataToJS function in the XPCOM implementation in Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4 does not enforce intended restrictions on interaction between chrome privileged code and objects obtained from remote web sites, which allows remote attackers to execute arbitrary JavaScript with chrome privileges via unspecified method calls, related to &#34;doubly-wrapped objects.&#34;</p> https://cve.radiocsirt.org/vuln/ghsa-wr76-gg23-hq72 https://cve.radiocsirt.org/vuln/gsd-2009-3374 gsd-2009-3374 https://cve.radiocsirt.org/vuln/gsd-2009-3374 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10071-1 <p>MozillaFirefox-50.1.0-1.1 on GA media</p> <p>MozillaFirefox-50.1.0-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10071-1 https://cve.radiocsirt.org/vuln/rhsa-2009:1530 <p>array index error in dtoa implementation of many products firefox: (rejected CVE-2009-1563) Firefox heap buffer overflow in string to number conversion Firefox: Predictable /tmp pathname use Firefox form history vulnerable to stealing Firefox crash in proxy auto-configuration regexp parsing Firefox heap buffer overflow in GIF color map parser XPCVariant:: VariantDataToJS() Firefox cross-origin data theft through document.getSelection() Firefox download filename spoofing with RTL override Firefox crashes with evidence of memory corruption Firefox crashes with evidence of memory corruption Firefox integer underflow in FTP directory list parser</p> <p>array index error in dtoa implementation of many products firefox: (rejected CVE-2009-1563) Firefox heap buffer overflow in string to number conversion Firefox: Predictable /tmp pathname use Firefox form history vulnerable to stealing Firefox crash in proxy auto-configuration regexp parsing Firefox heap buffer overflow in GIF color map parser XPCVariant:: VariantDataToJS() Firefox cross-origin data theft through document.getSelection() Firefox download filename spoofing with RTL override Firefox crashes with evidence of memory corruption Firefox crashes with evidence of memory corruption Firefox integer underflow in FTP directory list parser</p> https://cve.radiocsirt.org/vuln/rhsa-2009:1530