https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 00:59:35 +0000 https://cve.radiocsirt.org/vuln/certfr-2016-avi-259 certfr-2016-avi-259 https://cve.radiocsirt.org/vuln/certfr-2016-avi-259 https://cve.radiocsirt.org/vuln/cnvd-2016-06151 cnvd-2016-06151 https://cve.radiocsirt.org/vuln/cnvd-2016-06151 https://cve.radiocsirt.org/vuln/euvd-2026-85120 EUVD-2026-85120 https://cve.radiocsirt.org/vuln/euvd-2026-85120 https://cve.radiocsirt.org/vuln/fkie_cve-2016-5262 <p>Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 process JavaScript event-handler attributes of a MARQUEE element within a sandboxed IFRAME element that lacks the sandbox=&#34;allow-scripts&#34; attribute value, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted web site.</p> <p>Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 process JavaScript event-handler attributes of a MARQUEE element within a sandboxed IFRAME element that lacks the sandbox=&#34;allow-scripts&#34; attribute value, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted web site.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2016-5262 https://cve.radiocsirt.org/vuln/ghsa-3qpq-w8fc-xx86 <p>Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 process JavaScript event-handler attributes of a MARQUEE element within a sandboxed IFRAME element that lacks the sandbox=&#34;allow-scripts&#34; attribute value, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted web site.</p> <p>Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 process JavaScript event-handler attributes of a MARQUEE element within a sandboxed IFRAME element that lacks the sandbox=&#34;allow-scripts&#34; attribute value, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted web site.</p> https://cve.radiocsirt.org/vuln/ghsa-3qpq-w8fc-xx86 https://cve.radiocsirt.org/vuln/gsd-2016-5262 gsd-2016-5262 https://cve.radiocsirt.org/vuln/gsd-2016-5262 https://cve.radiocsirt.org/vuln/opensuse-su-2016:2253-1 <p>Security update for MozillaThunderbird</p> <p>Security update for MozillaThunderbird</p> https://cve.radiocsirt.org/vuln/opensuse-su-2016:2253-1 https://cve.radiocsirt.org/vuln/suse-su-2016:2061-1 <p>Security update for MozillaFirefox, MozillaFirefox-branding-SLED, mozilla-nspr and mozilla-nss</p> <p>Security update for MozillaFirefox, MozillaFirefox-branding-SLED, mozilla-nspr and mozilla-nss</p> https://cve.radiocsirt.org/vuln/suse-su-2016:2061-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-5262 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: firefox, Ubuntu:16.04:LTS: firefox</p> <p>Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 process JavaScript event-handler attributes of a MARQUEE element within a sandboxed IFRAME element that lacks the sandbox=&#34;allow-scripts&#34; attribute value, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted web site.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: firefox, Ubuntu:16.04:LTS: firefox</p> <p>Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 process JavaScript event-handler attributes of a MARQUEE element within a sandboxed IFRAME element that lacks the sandbox=&#34;allow-scripts&#34; attribute value, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted web site.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-5262