https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 18:55:26 +0000 https://cve.radiocsirt.org/vuln/bdu:2021-00028 bdu:2021-00028 https://cve.radiocsirt.org/vuln/bdu:2021-00028 https://cve.radiocsirt.org/vuln/certfr-2017-avi-174 certfr-2017-avi-174 https://cve.radiocsirt.org/vuln/certfr-2017-avi-174 https://cve.radiocsirt.org/vuln/cnvd-2017-12551 cnvd-2017-12551 https://cve.radiocsirt.org/vuln/cnvd-2017-12551 https://cve.radiocsirt.org/vuln/euvd-2026-74948 EUVD-2026-74948 https://cve.radiocsirt.org/vuln/euvd-2026-74948 https://cve.radiocsirt.org/vuln/fkie_cve-2017-7764 <p>Characters from the &#34;Canadian Syllabics&#34; unicode block can be mixed with characters from other unicode blocks in the addressbar instead of being rendered as their raw &#34;punycode&#34; form, allowing for domain name spoofing attacks through character confusion. The current Unicode standard allows characters from &#34;Aspirational Use Scripts&#34; such as Canadian Syllabics to be mixed with Latin characters in the &#34;moderately restrictive&#34; IDN profile. We have changed Firefox behavior to match the upcoming Unicode version 10.0 which removes this category and treats them as &#34;Limited Use Scripts.&#34;. This vulnerability affects Firefox &lt; 54, Firefox ESR &lt; 52.2, and Thunderbird &lt; 52.2.</p> <p>Characters from the &#34;Canadian Syllabics&#34; unicode block can be mixed with characters from other unicode blocks in the addressbar instead of being rendered as their raw &#34;punycode&#34; form, allowing for domain name spoofing attacks through character confusion. The current Unicode standard allows characters from &#34;Aspirational Use Scripts&#34; such as Canadian Syllabics to be mixed with Latin characters in the &#34;moderately restrictive&#34; IDN profile. We have changed Firefox behavior to match the upcoming Unicode version 10.0 which removes this category and treats them as &#34;Limited Use Scripts.&#34;. This vulnerability affects Firefox &lt; 54, Firefox ESR &lt; 52.2, and Thunderbird &lt; 52.2.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-7764 https://cve.radiocsirt.org/vuln/ghsa-mc3w-fw7x-qrw7 <p>Characters from the &#34;Canadian Syllabics&#34; unicode block can be mixed with characters from other unicode blocks in the addressbar instead of being rendered as their raw &#34;punycode&#34; form, allowing for domain name spoofing attacks through character confusion. The current Unicode standard allows characters from &#34;Aspirational Use Scripts&#34; such as Canadian Syllabics to be mixed with Latin characters in the &#34;moderately restrictive&#34; IDN profile. We have changed Firefox behavior to match the upcoming Unicode version 10.0 which removes this category and treats them as &#34;Limited Use Scripts.&#34;. This vulnerability affects Firefox &lt; 54, Firefox ESR &lt; 52.2, and Thunderbird &lt; 52.2.</p> <p>Characters from the &#34;Canadian Syllabics&#34; unicode block can be mixed with characters from other unicode blocks in the addressbar instead of being rendered as their raw &#34;punycode&#34; form, allowing for domain name spoofing attacks through character confusion. The current Unicode standard allows characters from &#34;Aspirational Use Scripts&#34; such as Canadian Syllabics to be mixed with Latin characters in the &#34;moderately restrictive&#34; IDN profile. We have changed Firefox behavior to match the upcoming Unicode version 10.0 which removes this category and treats them as &#34;Limited Use Scripts.&#34;. This vulnerability affects Firefox &lt; 54, Firefox ESR &lt; 52.2, and Thunderbird &lt; 52.2.</p> https://cve.radiocsirt.org/vuln/ghsa-mc3w-fw7x-qrw7 https://cve.radiocsirt.org/vuln/gsd-2017-7764 gsd-2017-7764 https://cve.radiocsirt.org/vuln/gsd-2017-7764 https://cve.radiocsirt.org/vuln/opensuse-su-2017:1579-1 <p>Security update for Mozilla Thunderbird</p> <p>Security update for Mozilla Thunderbird</p> https://cve.radiocsirt.org/vuln/opensuse-su-2017:1579-1 https://cve.radiocsirt.org/vuln/suse-su-2017:1669-1 <p>Security update for MozillaFirefox, MozillaFirefox-branding-SLE</p> <p>Security update for MozillaFirefox, MozillaFirefox-branding-SLE</p> https://cve.radiocsirt.org/vuln/suse-su-2017:1669-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-7764 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: firefox, Ubuntu:14.04:LTS: thunderbird, Ubuntu:16.04:LTS: firefox, Ubuntu:16.04:LTS: thunderbird</p> <p>Characters from the &#34;Canadian Syllabics&#34; unicode block can be mixed with characters from other unicode blocks in the addressbar instead of being rendered as their raw &#34;punycode&#34; form, allowing for domain name spoofing attacks through character confusion. The current Unicode standard allows characters from &#34;Aspirational Use Scripts&#34; such as Canadian Syllabics to be mixed with Latin characters in the &#34;moderately restrictive&#34; IDN profile. We have changed Firefox behavior to match the upcoming Unicode version 10.0 which removes this category and treats them as &#34;Limited Use Scripts.&#34;. This vulnerability affects Firefox &lt; 54, Firefox ESR &lt; 52.2, and Thunderbird &lt; 52.2.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: firefox, Ubuntu:14.04:LTS: thunderbird, Ubuntu:16.04:LTS: firefox, Ubuntu:16.04:LTS: thunderbird</p> <p>Characters from the &#34;Canadian Syllabics&#34; unicode block can be mixed with characters from other unicode blocks in the addressbar instead of being rendered as their raw &#34;punycode&#34; form, allowing for domain name spoofing attacks through character confusion. The current Unicode standard allows characters from &#34;Aspirational Use Scripts&#34; such as Canadian Syllabics to be mixed with Latin characters in the &#34;moderately restrictive&#34; IDN profile. We have changed Firefox behavior to match the upcoming Unicode version 10.0 which removes this category and treats them as &#34;Limited Use Scripts.&#34;. This vulnerability affects Firefox &lt; 54, Firefox ESR &lt; 52.2, and Thunderbird &lt; 52.2.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-7764