https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 20:11:45 +0000 https://cve.radiocsirt.org/vuln/bdu:2020-00592 bdu:2020-00592 https://cve.radiocsirt.org/vuln/bdu:2020-00592 https://cve.radiocsirt.org/vuln/certfr-2019-avi-118 certfr-2019-avi-118 https://cve.radiocsirt.org/vuln/certfr-2019-avi-118 https://cve.radiocsirt.org/vuln/cnvd-2019-08537 cnvd-2019-08537 https://cve.radiocsirt.org/vuln/cnvd-2019-08537 https://cve.radiocsirt.org/vuln/euvd-2026-53125 EUVD-2026-53125 https://cve.radiocsirt.org/vuln/euvd-2026-53125 https://cve.radiocsirt.org/vuln/fkie_cve-2019-9803 <p>The Upgrade-Insecure-Requests (UIR) specification states that if UIR is enabled through Content Security Policy (CSP), navigation to a same-origin URL must be upgraded to HTTPS. Firefox will incorrectly navigate to an HTTP URL rather than perform the security upgrade requested by the CSP in some circumstances, allowing for potential man-in-the-middle attacks on the linked resources. This vulnerability affects Firefox &lt; 66.</p> <p>The Upgrade-Insecure-Requests (UIR) specification states that if UIR is enabled through Content Security Policy (CSP), navigation to a same-origin URL must be upgraded to HTTPS. Firefox will incorrectly navigate to an HTTP URL rather than perform the security upgrade requested by the CSP in some circumstances, allowing for potential man-in-the-middle attacks on the linked resources. This vulnerability affects Firefox &lt; 66.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-9803 https://cve.radiocsirt.org/vuln/ghsa-6h7p-w66v-f7vw <p>The Upgrade-Insecure-Requests (UIR) specification states that if UIR is enabled through Content Security Policy (CSP), navigation to a same-origin URL must be upgraded to HTTPS. Firefox will incorrectly navigate to an HTTP URL rather than perform the security upgrade requested by the CSP in some circumstances, allowing for potential man-in-the-middle attacks on the linked resources. This vulnerability affects Firefox &lt; 66.</p> <p>The Upgrade-Insecure-Requests (UIR) specification states that if UIR is enabled through Content Security Policy (CSP), navigation to a same-origin URL must be upgraded to HTTPS. Firefox will incorrectly navigate to an HTTP URL rather than perform the security upgrade requested by the CSP in some circumstances, allowing for potential man-in-the-middle attacks on the linked resources. This vulnerability affects Firefox &lt; 66.</p> https://cve.radiocsirt.org/vuln/ghsa-6h7p-w66v-f7vw https://cve.radiocsirt.org/vuln/gsd-2019-9803 gsd-2019-9803 https://cve.radiocsirt.org/vuln/gsd-2019-9803 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10600-1 <p>MozillaFirefox-92.0-1.2 on GA media</p> <p>MozillaFirefox-92.0-1.2 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10600-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-9803 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: firefox, Ubuntu:16.04:LTS: firefox, Ubuntu:18.04:LTS: firefox, Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: mozjs52</p> <p>The Upgrade-Insecure-Requests (UIR) specification states that if UIR is enabled through Content Security Policy (CSP), navigation to a same-origin URL must be upgraded to HTTPS. Firefox will incorrectly navigate to an HTTP URL rather than perform the security upgrade requested by the CSP in some circumstances, allowing for potential man-in-the-middle attacks on the linked resources. This vulnerability affects Firefox &lt; 66.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: firefox, Ubuntu:16.04:LTS: firefox, Ubuntu:18.04:LTS: firefox, Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: mozjs52</p> <p>The Upgrade-Insecure-Requests (UIR) specification states that if UIR is enabled through Content Security Policy (CSP), navigation to a same-origin URL must be upgraded to HTTPS. Firefox will incorrectly navigate to an HTTP URL rather than perform the security upgrade requested by the CSP in some circumstances, allowing for potential man-in-the-middle attacks on the linked resources. This vulnerability affects Firefox &lt; 66.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-9803