https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 23:54:24 +0000 https://cve.radiocsirt.org/vuln/certfr-2020-avi-448 certfr-2020-avi-448 https://cve.radiocsirt.org/vuln/certfr-2020-avi-448 https://cve.radiocsirt.org/vuln/cnvd-2020-54922 cnvd-2020-54922 https://cve.radiocsirt.org/vuln/cnvd-2020-54922 https://cve.radiocsirt.org/vuln/euvd-2026-43076 EUVD-2026-43076 https://cve.radiocsirt.org/vuln/euvd-2026-43076 https://cve.radiocsirt.org/vuln/fkie_cve-2020-15648 <p>Using object or embed tags, it was possible to frame other websites, even if they disallowed framing using the X-Frame-Options header. This vulnerability affects Thunderbird &lt; 78 and Firefox &lt; 78.0.2.</p> <p>Using object or embed tags, it was possible to frame other websites, even if they disallowed framing using the X-Frame-Options header. This vulnerability affects Thunderbird &lt; 78 and Firefox &lt; 78.0.2.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-15648 https://cve.radiocsirt.org/vuln/ghsa-jrmg-2w74-rwc9 <p>Using object or embed tags, it was possible to frame other websites, even if they disallowed framing using the X-Frame-Options header. This vulnerability affects Thunderbird &lt; 78 and Firefox &lt; 78.0.2.</p> <p>Using object or embed tags, it was possible to frame other websites, even if they disallowed framing using the X-Frame-Options header. This vulnerability affects Thunderbird &lt; 78 and Firefox &lt; 78.0.2.</p> https://cve.radiocsirt.org/vuln/ghsa-jrmg-2w74-rwc9 https://cve.radiocsirt.org/vuln/gsd-2020-15648 gsd-2020-15648 https://cve.radiocsirt.org/vuln/gsd-2020-15648 https://cve.radiocsirt.org/vuln/rhsa-2020:3555 <p>Mozilla: Integer overflow in nsJPEGEncoder::emptyOutputBuffer Mozilla: WebRTC permission prompt could have been bypassed by a compromised content process Mozilla: Out of bound read in Date.parse() Mozilla: X-Frame-Options bypass using object or embed tags Mozilla: Bypassing iframe sandbox when allowing popups Mozilla: Custom cursor can overlay user interface Mozilla: Type confusion for special arguments in IonMonkey Mozilla: Overriding file type when saving to disk Mozilla: Attacker-induced prompt for extension installation Mozilla: Use-After-Free when aborting an operation</p> <p>Mozilla: Integer overflow in nsJPEGEncoder::emptyOutputBuffer Mozilla: WebRTC permission prompt could have been bypassed by a compromised content process Mozilla: Out of bound read in Date.parse() Mozilla: X-Frame-Options bypass using object or embed tags Mozilla: Bypassing iframe sandbox when allowing popups Mozilla: Custom cursor can overlay user interface Mozilla: Type confusion for special arguments in IonMonkey Mozilla: Overriding file type when saving to disk Mozilla: Attacker-induced prompt for extension installation Mozilla: Use-After-Free when aborting an operation</p> https://cve.radiocsirt.org/vuln/rhsa-2020:3555 https://cve.radiocsirt.org/vuln/rhsa-2020:3557 <p>Mozilla: Incorrect serialization of nsIPrincipal.origin for IPv6 addresses Mozilla: Integer overflow in nsJPEGEncoder::emptyOutputBuffer Mozilla: WebRTC permission prompt could have been bypassed by a compromised content process Mozilla: Out of bound read in Date.parse() Mozilla: X-Frame-Options bypass using object or embed tags Mozilla: Bypassing iframe sandbox when allowing popups Mozilla: Custom cursor can overlay user interface Mozilla: Type confusion for special arguments in IonMonkey Mozilla: Overriding file type when saving to disk Mozilla: Attacker-induced prompt for extension installation Mozilla: Use-After-Free when aborting an operation</p> <p>Mozilla: Incorrect serialization of nsIPrincipal.origin for IPv6 addresses Mozilla: Integer overflow in nsJPEGEncoder::emptyOutputBuffer Mozilla: WebRTC permission prompt could have been bypassed by a compromised content process Mozilla: Out of bound read in Date.parse() Mozilla: X-Frame-Options bypass using object or embed tags Mozilla: Bypassing iframe sandbox when allowing popups Mozilla: Custom cursor can overlay user interface Mozilla: Type confusion for special arguments in IonMonkey Mozilla: Overriding file type when saving to disk Mozilla: Attacker-induced prompt for extension installation Mozilla: Use-After-Free when aborting an operation</p> https://cve.radiocsirt.org/vuln/rhsa-2020:3557 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-15648 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: firefox, Ubuntu:18.04:LTS: firefox, Ubuntu:18.04:LTS: thunderbird, Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: firefox, Ubuntu:20.04:LTS: thunderbird, Ubuntu:20.04:LTS: mozjs68, Ubuntu:20.04:LTS: mozjs52</p> <p>Using object or embed tags, it was possible to frame other websites, even if they disallowed framing using the X-Frame-Options header. This vulnerability affects Thunderbird &lt; 78 and Firefox &lt; 78.0.2.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: firefox, Ubuntu:18.04:LTS: firefox, Ubuntu:18.04:LTS: thunderbird, Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: firefox, Ubuntu:20.04:LTS: thunderbird, Ubuntu:20.04:LTS: mozjs68, Ubuntu:20.04:LTS: mozjs52</p> <p>Using object or embed tags, it was possible to frame other websites, even if they disallowed framing using the X-Frame-Options header. This vulnerability affects Thunderbird &lt; 78 and Firefox &lt; 78.0.2.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-15648 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0457 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Mozilla Firefox und Thunderbird ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Mozilla Firefox und Thunderbird ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0457