Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 21:43:41 +0000 certa-2012-avi-680 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Mozilla SeaMonkey</span>. Elles permettent à un… https://cve.radiocsirt.org/vuln/certa-2012-avi-680 certa-2012-avi-680 https://cve.radiocsirt.org/vuln/certa-2012-avi-680 EUVD-2026-112276 https://cve.radiocsirt.org/vuln/euvd-2026-112276 EUVD-2026-112276 https://cve.radiocsirt.org/vuln/euvd-2026-112276 fkie_cve-2012-4205 https://cve.radiocsirt.org/vuln/fkie_cve-2012-4205 <p>Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 assign the system principal, rather than the sandbox principal, to XMLHttpRequest objects created in sandboxes, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks or obtain sensitive information by leveraging a sandboxed add-on.</p> <p>Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 assign the system principal, rather than the sandbox principal, to XMLHttpRequest objects created in sandboxes, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks or obtain sensitive information by leveraging a sandboxed add-on.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2012-4205 GHSA-mj3h-hrp4-mfr6 https://cve.radiocsirt.org/vuln/ghsa-mj3h-hrp4-mfr6 <p>Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 assign the system principal, rather than the sandbox principal, to XMLHttpRequest objects created in sandboxes, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks or obtain sensitive information by leveraging a sandboxed add-on.</p> <p>Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 assign the system principal, rather than the sandbox principal, to XMLHttpRequest objects created in sandboxes, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks or obtain sensitive information by leveraging a sandboxed add-on.</p> https://cve.radiocsirt.org/vuln/ghsa-mj3h-hrp4-mfr6 gsd-2012-4205 https://cve.radiocsirt.org/vuln/gsd-2012-4205 gsd-2012-4205 https://cve.radiocsirt.org/vuln/gsd-2012-4205 openSUSE-SU-2024:10071-1 — MozillaFirefox-50.1.0-1.1 on GA media https://cve.radiocsirt.org/vuln/opensuse-su-2024:10071-1 <p>MozillaFirefox-50.1.0-1.1 on GA media</p> <p>MozillaFirefox-50.1.0-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10071-1