https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 14:50:51 +0000 https://cve.radiocsirt.org/vuln/certfr-2015-avi-432 certfr-2015-avi-432 https://cve.radiocsirt.org/vuln/certfr-2015-avi-432 https://cve.radiocsirt.org/vuln/cnvd-2015-06907 cnvd-2015-06907 https://cve.radiocsirt.org/vuln/cnvd-2015-06907 https://cve.radiocsirt.org/vuln/euvd-2026-94764 EUVD-2026-94764 https://cve.radiocsirt.org/vuln/euvd-2026-94764 https://cve.radiocsirt.org/vuln/fkie_cve-2015-7184 <p>The fetch API implementation in Mozilla Firefox before 41.0.2 does not restrict access to the HTTP response body in certain situations where user credentials are supplied but the CORS cross-origin request algorithm is improperly followed, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.</p> <p>The fetch API implementation in Mozilla Firefox before 41.0.2 does not restrict access to the HTTP response body in certain situations where user credentials are supplied but the CORS cross-origin request algorithm is improperly followed, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2015-7184 https://cve.radiocsirt.org/vuln/ghsa-xj5m-432r-gpqm <p>The fetch API implementation in Mozilla Firefox before 41.0.2 does not restrict access to the HTTP response body in certain situations where user credentials are supplied but the CORS cross-origin request algorithm is improperly followed, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.</p> <p>The fetch API implementation in Mozilla Firefox before 41.0.2 does not restrict access to the HTTP response body in certain situations where user credentials are supplied but the CORS cross-origin request algorithm is improperly followed, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.</p> https://cve.radiocsirt.org/vuln/ghsa-xj5m-432r-gpqm https://cve.radiocsirt.org/vuln/gsd-2015-7184 gsd-2015-7184 https://cve.radiocsirt.org/vuln/gsd-2015-7184 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10071-1 <p>MozillaFirefox-50.1.0-1.1 on GA media</p> <p>MozillaFirefox-50.1.0-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10071-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-7184 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: firefox</p> <p>The fetch API implementation in Mozilla Firefox before 41.0.2 does not restrict access to the HTTP response body in certain situations where user credentials are supplied but the CORS cross-origin request algorithm is improperly followed, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: firefox</p> <p>The fetch API implementation in Mozilla Firefox before 41.0.2 does not restrict access to the HTTP response body in certain situations where user credentials are supplied but the CORS cross-origin request algorithm is improperly followed, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-7184