https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 14:50:04 +0000 https://cve.radiocsirt.org/vuln/certa-2013-avi-613 certa-2013-avi-613 https://cve.radiocsirt.org/vuln/certa-2013-avi-613 https://cve.radiocsirt.org/vuln/euvd-2026-108122 EUVD-2026-108122 https://cve.radiocsirt.org/vuln/euvd-2026-108122 https://cve.radiocsirt.org/vuln/fkie_cve-2013-5596 <p>The cycle collection (CC) implementation in Mozilla Firefox before 25.0, Firefox ESR 24.x before 24.1, Thunderbird before 24.1, and SeaMonkey before 2.22 does not properly determine the thread for release of an image object, which allows remote attackers to execute arbitrary code or cause a denial of service (race condition and application crash) via a large HTML document containing IMG elements, as demonstrated by the Never-Ending Reddit on reddit.com.</p> <p>The cycle collection (CC) implementation in Mozilla Firefox before 25.0, Firefox ESR 24.x before 24.1, Thunderbird before 24.1, and SeaMonkey before 2.22 does not properly determine the thread for release of an image object, which allows remote attackers to execute arbitrary code or cause a denial of service (race condition and application crash) via a large HTML document containing IMG elements, as demonstrated by the Never-Ending Reddit on reddit.com.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2013-5596 https://cve.radiocsirt.org/vuln/ghsa-mr8h-ff7v-3qqc <p>The cycle collection (CC) implementation in Mozilla Firefox before 25.0, Firefox ESR 24.x before 24.1, Thunderbird before 24.1, and SeaMonkey before 2.22 does not properly determine the thread for release of an image object, which allows remote attackers to execute arbitrary code or cause a denial of service (race condition and application crash) via a large HTML document containing IMG elements, as demonstrated by the Never-Ending Reddit on reddit.com.</p> <p>The cycle collection (CC) implementation in Mozilla Firefox before 25.0, Firefox ESR 24.x before 24.1, Thunderbird before 24.1, and SeaMonkey before 2.22 does not properly determine the thread for release of an image object, which allows remote attackers to execute arbitrary code or cause a denial of service (race condition and application crash) via a large HTML document containing IMG elements, as demonstrated by the Never-Ending Reddit on reddit.com.</p> https://cve.radiocsirt.org/vuln/ghsa-mr8h-ff7v-3qqc https://cve.radiocsirt.org/vuln/gsd-2013-5596 gsd-2013-5596 https://cve.radiocsirt.org/vuln/gsd-2013-5596 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10071-1 <p>MozillaFirefox-50.1.0-1.1 on GA media</p> <p>MozillaFirefox-50.1.0-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10071-1