Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 02:14:04 +0000 certa-2010-avi-419 — De multiples vulnérabilités dans Mozilla Thunderbird permettent, entre autre, l'exécution de code arbitraire à distance. https://cve.radiocsirt.org/vuln/certa-2010-avi-419 certa-2010-avi-419 https://cve.radiocsirt.org/vuln/certa-2010-avi-419 EUVD-2026-119420 https://cve.radiocsirt.org/vuln/euvd-2026-119420 EUVD-2026-119420 https://cve.radiocsirt.org/vuln/euvd-2026-119420 fkie_cve-2010-2763 https://cve.radiocsirt.org/vuln/fkie_cve-2010-2763 <p>The XPCSafeJSObjectWrapper class in the SafeJSObjectWrapper (aka SJOW) implementation in Mozilla Firefox before 3.5.12, Thunderbird before 3.0.7, and SeaMonkey before 2.0.7 does not properly restrict scripted functions, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via a crafted function.</p> <p>The XPCSafeJSObjectWrapper class in the SafeJSObjectWrapper (aka SJOW) implementation in Mozilla Firefox before 3.5.12, Thunderbird before 3.0.7, and SeaMonkey before 2.0.7 does not properly restrict scripted functions, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via a crafted function.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2010-2763 GHSA-39cx-g389-rw9j https://cve.radiocsirt.org/vuln/ghsa-39cx-g389-rw9j <p>The XPCSafeJSObjectWrapper class in the SafeJSObjectWrapper (aka SJOW) implementation in Mozilla Firefox before 3.5.12, Thunderbird before 3.0.7, and SeaMonkey before 2.0.7 does not properly restrict scripted functions, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via a crafted function.</p> <p>The XPCSafeJSObjectWrapper class in the SafeJSObjectWrapper (aka SJOW) implementation in Mozilla Firefox before 3.5.12, Thunderbird before 3.0.7, and SeaMonkey before 2.0.7 does not properly restrict scripted functions, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via a crafted function.</p> https://cve.radiocsirt.org/vuln/ghsa-39cx-g389-rw9j gsd-2010-2763 https://cve.radiocsirt.org/vuln/gsd-2010-2763 gsd-2010-2763 https://cve.radiocsirt.org/vuln/gsd-2010-2763 openSUSE-SU-2024:10218-1 — seamonkey-2.40-6.1 on GA media https://cve.radiocsirt.org/vuln/opensuse-su-2024:10218-1 <p>seamonkey-2.40-6.1 on GA media</p> <p>seamonkey-2.40-6.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10218-1