https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 01:40:04 +0000 https://cve.radiocsirt.org/vuln/bdu:2020-01455 bdu:2020-01455 https://cve.radiocsirt.org/vuln/bdu:2020-01455 https://cve.radiocsirt.org/vuln/certfr-2020-avi-012 certfr-2020-avi-012 https://cve.radiocsirt.org/vuln/certfr-2020-avi-012 https://cve.radiocsirt.org/vuln/cnvd-2020-01175 cnvd-2020-01175 https://cve.radiocsirt.org/vuln/cnvd-2020-01175 https://cve.radiocsirt.org/vuln/euvd-2026-58086 EUVD-2026-58086 https://cve.radiocsirt.org/vuln/euvd-2026-58086 https://cve.radiocsirt.org/vuln/fkie_cve-2019-17022 <p>When pasting a &amp;lt;style&amp;gt; tag from the clipboard into a rich text editor, the CSS sanitizer does not escape &amp;lt; and &amp;gt; characters. Because the resulting string is pasted directly into the text node of the element this does not result in a direct injection into the webpage; however, if a webpage subsequently copies the node&#39;s innerHTML, assigning it to another innerHTML, this would result in an XSS vulnerability. Two WYSIWYG editors were identified with this behavior, more may exist. This vulnerability affects Firefox ESR &lt; 68.4 and Firefox &lt; 72.</p> <p>When pasting a &amp;lt;style&amp;gt; tag from the clipboard into a rich text editor, the CSS sanitizer does not escape &amp;lt; and &amp;gt; characters. Because the resulting string is pasted directly into the text node of the element this does not result in a direct injection into the webpage; however, if a webpage subsequently copies the node&#39;s innerHTML, assigning it to another innerHTML, this would result in an XSS vulnerability. Two WYSIWYG editors were identified with this behavior, more may exist. This vulnerability affects Firefox ESR &lt; 68.4 and Firefox &lt; 72.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-17022 https://cve.radiocsirt.org/vuln/ghsa-wgfq-5c99-wv2w <p>When pasting a &amp;lt;style&amp;gt; tag from the clipboard into a rich text editor, the CSS sanitizer does not escape &amp;lt; and &amp;gt; characters. Because the resulting string is pasted directly into the text node of the element this does not result in a direct injection into the webpage; however, if a webpage subsequently copies the node&#39;s innerHTML, assigning it to another innerHTML, this would result in an XSS vulnerability. Two WYSIWYG editors were identified with this behavior, more may exist. This vulnerability affects Firefox ESR &lt; 68.4 and Firefox &lt; 72.</p> <p>When pasting a &amp;lt;style&amp;gt; tag from the clipboard into a rich text editor, the CSS sanitizer does not escape &amp;lt; and &amp;gt; characters. Because the resulting string is pasted directly into the text node of the element this does not result in a direct injection into the webpage; however, if a webpage subsequently copies the node&#39;s innerHTML, assigning it to another innerHTML, this would result in an XSS vulnerability. Two WYSIWYG editors were identified with this behavior, more may exist. This vulnerability affects Firefox ESR &lt; 68.4 and Firefox &lt; 72.</p> https://cve.radiocsirt.org/vuln/ghsa-wgfq-5c99-wv2w https://cve.radiocsirt.org/vuln/gsd-2019-17022 gsd-2019-17022 https://cve.radiocsirt.org/vuln/gsd-2019-17022 https://cve.radiocsirt.org/vuln/opensuse-su-2020:0060-1 <p>Security update for MozillaFirefox</p> <p>Security update for MozillaFirefox</p> https://cve.radiocsirt.org/vuln/opensuse-su-2020:0060-1 https://cve.radiocsirt.org/vuln/rhsa-2020:0086 <p>Mozilla: Bypass of @namespace CSS sanitization during pasting Mozilla: Type Confusion in XPCVariant.cpp Mozilla: CSS sanitization does not escape HTML tags Mozilla: Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4 Mozilla: IonMonkey type confusion with StoreElementHole and FallibleStoreElement</p> <p>Mozilla: Bypass of @namespace CSS sanitization during pasting Mozilla: Type Confusion in XPCVariant.cpp Mozilla: CSS sanitization does not escape HTML tags Mozilla: Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4 Mozilla: IonMonkey type confusion with StoreElementHole and FallibleStoreElement</p> https://cve.radiocsirt.org/vuln/rhsa-2020:0086 https://cve.radiocsirt.org/vuln/suse-su-2020:0068-1 <p>Security update for MozillaFirefox</p> <p>Security update for MozillaFirefox</p> https://cve.radiocsirt.org/vuln/suse-su-2020:0068-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-17022 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: firefox, Ubuntu:16.04:LTS: thunderbird, Ubuntu:18.04:LTS: firefox, Ubuntu:18.04:LTS: thunderbird, Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: firefox, Ubuntu:20.04:LTS: thunderbird, Ubuntu:20.04:LTS: mozjs52</p> <p>When pasting a &amp;lt;style&amp;gt; tag from the clipboard into a rich text editor, the CSS sanitizer does not escape &amp;lt; and &amp;gt; characters. Because the resulting string is pasted directly into the text node of the element this does not result in a direct injection into the webpage; however, if a webpage subsequently copies the node&#39;s innerHTML, assigning it to another innerHTML, this would result in an XSS vulnerability. Two WYSIWYG editors were identified with this behavior, more may exist. This vulnerability affects Firefox ESR &lt; 68.4 and Firefox &lt; 72.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: firefox, Ubuntu:16.04:LTS: thunderbird, Ubuntu:18.04:LTS: firefox, Ubuntu:18.04:LTS: thunderbird, Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: firefox, Ubuntu:20.04:LTS: thunderbird, Ubuntu:20.04:LTS: mozjs52</p> <p>When pasting a &amp;lt;style&amp;gt; tag from the clipboard into a rich text editor, the CSS sanitizer does not escape &amp;lt; and &amp;gt; characters. Because the resulting string is pasted directly into the text node of the element this does not result in a direct injection into the webpage; however, if a webpage subsequently copies the node&#39;s innerHTML, assigning it to another innerHTML, this would result in an XSS vulnerability. Two WYSIWYG editors were identified with this behavior, more may exist. This vulnerability affects Firefox ESR &lt; 68.4 and Firefox &lt; 72.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-17022