Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 22:35:50 +0000 certa-2011-avi-537 — Plusieurs vulnérabilités ont été corrigées dans les produits de la fondation Mozilla, dont certaines permettent l'exécu… https://cve.radiocsirt.org/vuln/certa-2011-avi-537 certa-2011-avi-537 https://cve.radiocsirt.org/vuln/certa-2011-avi-537 EUVD-2026-115953 https://cve.radiocsirt.org/vuln/euvd-2026-115953 EUVD-2026-115953 https://cve.radiocsirt.org/vuln/euvd-2026-115953 fkie_cve-2011-3000 https://cve.radiocsirt.org/vuln/fkie_cve-2011-3000 <p>Mozilla Firefox before 3.6.23 and 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 do not properly handle HTTP responses that contain multiple Location, Content-Length, or Content-Disposition headers, which makes it easier for remote attackers to conduct HTTP response splitting attacks via crafted header values.</p> <p>Mozilla Firefox before 3.6.23 and 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 do not properly handle HTTP responses that contain multiple Location, Content-Length, or Content-Disposition headers, which makes it easier for remote attackers to conduct HTTP response splitting attacks via crafted header values.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2011-3000 GHSA-mm6x-3vj3-q4jp https://cve.radiocsirt.org/vuln/ghsa-mm6x-3vj3-q4jp <p>Mozilla Firefox before 3.6.23 and 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 do not properly handle HTTP responses that contain multiple Location, Content-Length, or Content-Disposition headers, which makes it easier for remote attackers to conduct HTTP response splitting attacks via crafted header values.</p> <p>Mozilla Firefox before 3.6.23 and 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 do not properly handle HTTP responses that contain multiple Location, Content-Length, or Content-Disposition headers, which makes it easier for remote attackers to conduct HTTP response splitting attacks via crafted header values.</p> https://cve.radiocsirt.org/vuln/ghsa-mm6x-3vj3-q4jp gsd-2011-3000 https://cve.radiocsirt.org/vuln/gsd-2011-3000 gsd-2011-3000 https://cve.radiocsirt.org/vuln/gsd-2011-3000 openSUSE-SU-2024:10071-1 — MozillaFirefox-50.1.0-1.1 on GA media https://cve.radiocsirt.org/vuln/opensuse-su-2024:10071-1 <p>MozillaFirefox-50.1.0-1.1 on GA media</p> <p>MozillaFirefox-50.1.0-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10071-1 RHSA-2011:1341 — Red Hat Security Advisory: firefox security update https://cve.radiocsirt.org/vuln/rhsa-2011:1341 <p>Mozilla: Code installation through holding down Enter (MFSA 2011-40) Mozilla: Miscellaneous memory safety hazards (MFSA 2011-36) Mozilla: Integer underflow when using JavaScript RegExp (MFSA 2011-37) Mozilla: XSS via plugins and shadowed window.location object (MFSA 2011-38) Mozilla: Defense against multiple Location headers due to CRLF Injection (MFSA 2011-39)</p> <p>Mozilla: Code installation through holding down Enter (MFSA 2011-40) Mozilla: Miscellaneous memory safety hazards (MFSA 2011-36) Mozilla: Integer underflow when using JavaScript RegExp (MFSA 2011-37) Mozilla: XSS via plugins and shadowed window.location object (MFSA 2011-38) Mozilla: Defense against multiple Location headers due to CRLF Injection (MFSA 2011-39)</p> https://cve.radiocsirt.org/vuln/rhsa-2011:1341