https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 19:04:32 +0000 https://cve.radiocsirt.org/vuln/bdu:2015-09893 bdu:2015-09893 https://cve.radiocsirt.org/vuln/bdu:2015-09893 https://cve.radiocsirt.org/vuln/certfr-2015-avi-131 certfr-2015-avi-131 https://cve.radiocsirt.org/vuln/certfr-2015-avi-131 https://cve.radiocsirt.org/vuln/cnvd-2015-02151 cnvd-2015-02151 https://cve.radiocsirt.org/vuln/cnvd-2015-02151 https://cve.radiocsirt.org/vuln/euvd-2026-89760 EUVD-2026-89760 https://cve.radiocsirt.org/vuln/euvd-2026-89760 https://cve.radiocsirt.org/vuln/fkie_cve-2015-0807 <p>The navigator.sendBeacon implementation in Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 processes HTTP 30x status codes for redirects after a preflight request has occurred, which allows remote attackers to bypass intended CORS access-control checks and conduct cross-site request forgery (CSRF) attacks via a crafted web site, a similar issue to CVE-2014-8638.</p> <p>The navigator.sendBeacon implementation in Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 processes HTTP 30x status codes for redirects after a preflight request has occurred, which allows remote attackers to bypass intended CORS access-control checks and conduct cross-site request forgery (CSRF) attacks via a crafted web site, a similar issue to CVE-2014-8638.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2015-0807 https://cve.radiocsirt.org/vuln/ghsa-h77x-2hj5-ggjw <p>The navigator.sendBeacon implementation in Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 processes HTTP 30x status codes for redirects after a preflight request has occurred, which allows remote attackers to bypass intended CORS access-control checks and conduct cross-site request forgery (CSRF) attacks via a crafted web site, a similar issue to CVE-2014-8638.</p> <p>The navigator.sendBeacon implementation in Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 processes HTTP 30x status codes for redirects after a preflight request has occurred, which allows remote attackers to bypass intended CORS access-control checks and conduct cross-site request forgery (CSRF) attacks via a crafted web site, a similar issue to CVE-2014-8638.</p> https://cve.radiocsirt.org/vuln/ghsa-h77x-2hj5-ggjw https://cve.radiocsirt.org/vuln/gsd-2015-0807 gsd-2015-0807 https://cve.radiocsirt.org/vuln/gsd-2015-0807 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10071-1 <p>MozillaFirefox-50.1.0-1.1 on GA media</p> <p>MozillaFirefox-50.1.0-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10071-1 https://cve.radiocsirt.org/vuln/suse-su-2015:0704-1 <p>Security update for MozillaFirefox</p> <p>Security update for MozillaFirefox</p> https://cve.radiocsirt.org/vuln/suse-su-2015:0704-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-0807 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: firefox, Ubuntu:14.04:LTS: thunderbird</p> <p>The navigator.sendBeacon implementation in Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 processes HTTP 30x status codes for redirects after a preflight request has occurred, which allows remote attackers to bypass intended CORS access-control checks and conduct cross-site request forgery (CSRF) attacks via a crafted web site, a similar issue to CVE-2014-8638.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: firefox, Ubuntu:14.04:LTS: thunderbird</p> <p>The navigator.sendBeacon implementation in Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 processes HTTP 30x status codes for redirects after a preflight request has occurred, which allows remote attackers to bypass intended CORS access-control checks and conduct cross-site request forgery (CSRF) attacks via a crafted web site, a similar issue to CVE-2014-8638.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-0807