https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 17:29:36 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-117392 EUVD-2026-117392 https://cve.radiocsirt.org/vuln/euvd-2026-117392 https://cve.radiocsirt.org/vuln/fkie_cve-2010-0168 <p>The nsDocument::MaybePreLoadImage function in content/base/src/nsDocument.cpp in the image-preloading implementation in Mozilla Firefox 3.6 before 3.6.2 does not apply scheme restrictions and policy restrictions to the image&#39;s URL, which might allow remote attackers to cause a denial of service (application crash or hang) or hijack the functionality of the browser&#39;s add-ons via a crafted SRC attribute of an IMG element, as demonstrated by remote command execution through an ssh: URL in a configuration that supports gnome-vfs with a nonstandard network.gnomevfs.supported-protocols setting.</p> <p>The nsDocument::MaybePreLoadImage function in content/base/src/nsDocument.cpp in the image-preloading implementation in Mozilla Firefox 3.6 before 3.6.2 does not apply scheme restrictions and policy restrictions to the image&#39;s URL, which might allow remote attackers to cause a denial of service (application crash or hang) or hijack the functionality of the browser&#39;s add-ons via a crafted SRC attribute of an IMG element, as demonstrated by remote command execution through an ssh: URL in a configuration that supports gnome-vfs with a nonstandard network.gnomevfs.supported-protocols setting.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2010-0168 https://cve.radiocsirt.org/vuln/ghsa-vpv3-qgmw-47f8 <p>The nsDocument::MaybePreLoadImage function in content/base/src/nsDocument.cpp in the image-preloading implementation in Mozilla Firefox 3.6 before 3.6.2 does not apply scheme restrictions and policy restrictions to the image&#39;s URL, which might allow remote attackers to cause a denial of service (application crash or hang) or hijack the functionality of the browser&#39;s add-ons via a crafted SRC attribute of an IMG element, as demonstrated by remote command execution through an ssh: URL in a configuration that supports gnome-vfs with a nonstandard network.gnomevfs.supported-protocols setting.</p> <p>The nsDocument::MaybePreLoadImage function in content/base/src/nsDocument.cpp in the image-preloading implementation in Mozilla Firefox 3.6 before 3.6.2 does not apply scheme restrictions and policy restrictions to the image&#39;s URL, which might allow remote attackers to cause a denial of service (application crash or hang) or hijack the functionality of the browser&#39;s add-ons via a crafted SRC attribute of an IMG element, as demonstrated by remote command execution through an ssh: URL in a configuration that supports gnome-vfs with a nonstandard network.gnomevfs.supported-protocols setting.</p> https://cve.radiocsirt.org/vuln/ghsa-vpv3-qgmw-47f8 https://cve.radiocsirt.org/vuln/gsd-2010-0168 gsd-2010-0168 https://cve.radiocsirt.org/vuln/gsd-2010-0168 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10071-1 <p>MozillaFirefox-50.1.0-1.1 on GA media</p> <p>MozillaFirefox-50.1.0-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10071-1