https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 00:11:47 +0000 https://cve.radiocsirt.org/vuln/bdu:2016-01148 bdu:2016-01148 https://cve.radiocsirt.org/vuln/bdu:2016-01148 https://cve.radiocsirt.org/vuln/certfr-2016-avi-146 certfr-2016-avi-146 https://cve.radiocsirt.org/vuln/certfr-2016-avi-146 https://cve.radiocsirt.org/vuln/cnvd-2016-02671 cnvd-2016-02671 https://cve.radiocsirt.org/vuln/cnvd-2016-02671 https://cve.radiocsirt.org/vuln/euvd-2026-83203 EUVD-2026-83203 https://cve.radiocsirt.org/vuln/euvd-2026-83203 https://cve.radiocsirt.org/vuln/fkie_cve-2016-2817 <p>The WebExtension sandbox feature in browser/components/extensions/ext-tabs.js in Mozilla Firefox before 46.0 does not properly restrict principal inheritance during chrome.tabs.create and chrome.tabs.update API calls, which allows remote attackers to conduct Universal XSS (UXSS) attacks via a crafted extension that accesses a (1) javascript: or (2) data: URL.</p> <p>The WebExtension sandbox feature in browser/components/extensions/ext-tabs.js in Mozilla Firefox before 46.0 does not properly restrict principal inheritance during chrome.tabs.create and chrome.tabs.update API calls, which allows remote attackers to conduct Universal XSS (UXSS) attacks via a crafted extension that accesses a (1) javascript: or (2) data: URL.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2016-2817 https://cve.radiocsirt.org/vuln/ghsa-px89-65ch-24x4 <p>The WebExtension sandbox feature in browser/components/extensions/ext-tabs.js in Mozilla Firefox before 46.0 does not properly restrict principal inheritance during chrome.tabs.create and chrome.tabs.update API calls, which allows remote attackers to conduct Universal XSS (UXSS) attacks via a crafted extension that accesses a (1) javascript: or (2) data: URL.</p> <p>The WebExtension sandbox feature in browser/components/extensions/ext-tabs.js in Mozilla Firefox before 46.0 does not properly restrict principal inheritance during chrome.tabs.create and chrome.tabs.update API calls, which allows remote attackers to conduct Universal XSS (UXSS) attacks via a crafted extension that accesses a (1) javascript: or (2) data: URL.</p> https://cve.radiocsirt.org/vuln/ghsa-px89-65ch-24x4 https://cve.radiocsirt.org/vuln/gsd-2016-2817 gsd-2016-2817 https://cve.radiocsirt.org/vuln/gsd-2016-2817 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10071-1 <p>MozillaFirefox-50.1.0-1.1 on GA media</p> <p>MozillaFirefox-50.1.0-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10071-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-2817 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: firefox, Ubuntu:16.04:LTS: firefox</p> <p>The WebExtension sandbox feature in browser/components/extensions/ext-tabs.js in Mozilla Firefox before 46.0 does not properly restrict principal inheritance during chrome.tabs.create and chrome.tabs.update API calls, which allows remote attackers to conduct Universal XSS (UXSS) attacks via a crafted extension that accesses a (1) javascript: or (2) data: URL.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: firefox, Ubuntu:16.04:LTS: firefox</p> <p>The WebExtension sandbox feature in browser/components/extensions/ext-tabs.js in Mozilla Firefox before 46.0 does not properly restrict principal inheritance during chrome.tabs.create and chrome.tabs.update API calls, which allows remote attackers to conduct Universal XSS (UXSS) attacks via a crafted extension that accesses a (1) javascript: or (2) data: URL.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-2817