https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 15:28:05 +0000 https://cve.radiocsirt.org/vuln/bdu:2020-01822 bdu:2020-01822 https://cve.radiocsirt.org/vuln/bdu:2020-01822 https://cve.radiocsirt.org/vuln/certfr-2019-avi-421 certfr-2019-avi-421 https://cve.radiocsirt.org/vuln/certfr-2019-avi-421 https://cve.radiocsirt.org/vuln/cnvd-2019-30443 cnvd-2019-30443 https://cve.radiocsirt.org/vuln/cnvd-2019-30443 https://cve.radiocsirt.org/vuln/euvd-2026-54577 EUVD-2026-54577 https://cve.radiocsirt.org/vuln/euvd-2026-54577 https://cve.radiocsirt.org/vuln/fkie_cve-2019-11738 <p>If a Content Security Policy (CSP) directive is defined that uses a hash-based source that takes the empty string as input, execution of any javascript: URIs will be allowed. This could allow for malicious JavaScript content to be run, bypassing CSP permissions. This vulnerability affects Firefox &lt; 69 and Firefox ESR &lt; 68.1.</p> <p>If a Content Security Policy (CSP) directive is defined that uses a hash-based source that takes the empty string as input, execution of any javascript: URIs will be allowed. This could allow for malicious JavaScript content to be run, bypassing CSP permissions. This vulnerability affects Firefox &lt; 69 and Firefox ESR &lt; 68.1.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-11738 https://cve.radiocsirt.org/vuln/ghsa-v2rv-c5w8-f538 <p>If a Content Security Policy (CSP) directive is defined that uses a hash-based source that takes the empty string as input, execution of any javascript: URIs will be allowed. This could allow for malicious JavaScript content to be run, bypassing CSP permissions. This vulnerability affects Firefox &lt; 69 and Firefox ESR &lt; 68.1.</p> <p>If a Content Security Policy (CSP) directive is defined that uses a hash-based source that takes the empty string as input, execution of any javascript: URIs will be allowed. This could allow for malicious JavaScript content to be run, bypassing CSP permissions. This vulnerability affects Firefox &lt; 69 and Firefox ESR &lt; 68.1.</p> https://cve.radiocsirt.org/vuln/ghsa-v2rv-c5w8-f538 https://cve.radiocsirt.org/vuln/gsd-2019-11738 gsd-2019-11738 https://cve.radiocsirt.org/vuln/gsd-2019-11738 https://cve.radiocsirt.org/vuln/opensuse-su-2019:2251-1 <p>Security update for MozillaFirefox</p> <p>Security update for MozillaFirefox</p> https://cve.radiocsirt.org/vuln/opensuse-su-2019:2251-1 https://cve.radiocsirt.org/vuln/suse-su-2019:14246-1 <p>Security update for Mozilla Firefox</p> <p>Security update for Mozilla Firefox</p> https://cve.radiocsirt.org/vuln/suse-su-2019:14246-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-11738 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: firefox, Ubuntu:18.04:LTS: firefox, Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: mozjs52</p> <p>If a Content Security Policy (CSP) directive is defined that uses a hash-based source that takes the empty string as input, execution of any javascript: URIs will be allowed. This could allow for malicious JavaScript content to be run, bypassing CSP permissions. This vulnerability affects Firefox &lt; 69 and Firefox ESR &lt; 68.1.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: firefox, Ubuntu:18.04:LTS: firefox, Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: mozjs52</p> <p>If a Content Security Policy (CSP) directive is defined that uses a hash-based source that takes the empty string as input, execution of any javascript: URIs will be allowed. This could allow for malicious JavaScript content to be run, bypassing CSP permissions. This vulnerability affects Firefox &lt; 69 and Firefox ESR &lt; 68.1.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-11738