https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 05:12:53 +0000 https://cve.radiocsirt.org/vuln/bdu:2015-09887 bdu:2015-09887 https://cve.radiocsirt.org/vuln/bdu:2015-09887 https://cve.radiocsirt.org/vuln/certfr-2015-avi-131 certfr-2015-avi-131 https://cve.radiocsirt.org/vuln/certfr-2015-avi-131 https://cve.radiocsirt.org/vuln/cnvd-2015-02258 cnvd-2015-02258 https://cve.radiocsirt.org/vuln/cnvd-2015-02258 https://cve.radiocsirt.org/vuln/euvd-2026-89739 EUVD-2026-89739 https://cve.radiocsirt.org/vuln/euvd-2026-89739 https://cve.radiocsirt.org/vuln/fkie_cve-2015-0812 <p>Mozilla Firefox before 37.0 does not require an HTTPS session for lightweight theme add-on installations, which allows man-in-the-middle attackers to bypass an intended user-confirmation requirement by deploying a crafted web site and conducting a DNS spoofing attack against a mozilla.org subdomain.</p> <p>Mozilla Firefox before 37.0 does not require an HTTPS session for lightweight theme add-on installations, which allows man-in-the-middle attackers to bypass an intended user-confirmation requirement by deploying a crafted web site and conducting a DNS spoofing attack against a mozilla.org subdomain.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2015-0812 https://cve.radiocsirt.org/vuln/ghsa-xp29-g429-j593 <p>Mozilla Firefox before 37.0 does not require an HTTPS session for lightweight theme add-on installations, which allows man-in-the-middle attackers to bypass an intended user-confirmation requirement by deploying a crafted web site and conducting a DNS spoofing attack against a mozilla.org subdomain.</p> <p>Mozilla Firefox before 37.0 does not require an HTTPS session for lightweight theme add-on installations, which allows man-in-the-middle attackers to bypass an intended user-confirmation requirement by deploying a crafted web site and conducting a DNS spoofing attack against a mozilla.org subdomain.</p> https://cve.radiocsirt.org/vuln/ghsa-xp29-g429-j593 https://cve.radiocsirt.org/vuln/gsd-2015-0812 gsd-2015-0812 https://cve.radiocsirt.org/vuln/gsd-2015-0812 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10071-1 <p>MozillaFirefox-50.1.0-1.1 on GA media</p> <p>MozillaFirefox-50.1.0-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10071-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-0812 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: firefox</p> <p>Mozilla Firefox before 37.0 does not require an HTTPS session for lightweight theme add-on installations, which allows man-in-the-middle attackers to bypass an intended user-confirmation requirement by deploying a crafted web site and conducting a DNS spoofing attack against a mozilla.org subdomain.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: firefox</p> <p>Mozilla Firefox before 37.0 does not require an HTTPS session for lightweight theme add-on installations, which allows man-in-the-middle attackers to bypass an intended user-confirmation requirement by deploying a crafted web site and conducting a DNS spoofing attack against a mozilla.org subdomain.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-0812