https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 21:15:37 +0000 https://cve.radiocsirt.org/vuln/bdu:2022-05936 bdu:2022-05936 https://cve.radiocsirt.org/vuln/bdu:2022-05936 https://cve.radiocsirt.org/vuln/certfr-2020-avi-532 certfr-2020-avi-532 https://cve.radiocsirt.org/vuln/certfr-2020-avi-532 https://cve.radiocsirt.org/vuln/cnvd-2020-51034 cnvd-2020-51034 https://cve.radiocsirt.org/vuln/cnvd-2020-51034 https://cve.radiocsirt.org/vuln/euvd-2026-43074 EUVD-2026-43074 https://cve.radiocsirt.org/vuln/euvd-2026-43074 https://cve.radiocsirt.org/vuln/fkie_cve-2020-15664 <p>By holding a reference to the eval() function from an about:blank window, a malicious webpage could have gained access to the InstallTrigger object which would allow them to prompt the user to install an extension. Combined with user confusion, this could result in an unintended or malicious extension being installed. This vulnerability affects Firefox &lt; 80, Thunderbird &lt; 78.2, Thunderbird &lt; 68.12, Firefox ESR &lt; 68.12, Firefox ESR &lt; 78.2, and Firefox for Android &lt; 80.</p> <p>By holding a reference to the eval() function from an about:blank window, a malicious webpage could have gained access to the InstallTrigger object which would allow them to prompt the user to install an extension. Combined with user confusion, this could result in an unintended or malicious extension being installed. This vulnerability affects Firefox &lt; 80, Thunderbird &lt; 78.2, Thunderbird &lt; 68.12, Firefox ESR &lt; 68.12, Firefox ESR &lt; 78.2, and Firefox for Android &lt; 80.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-15664 https://cve.radiocsirt.org/vuln/ghsa-f4gc-pc7j-rfxr <p>By holding a reference to the eval() function from an about:blank window, a malicious webpage could have gained access to the InstallTrigger object which would allow them to prompt the user to install an extension. Combined with user confusion, this could result in an unintended or malicious extension being installed. This vulnerability affects Firefox &lt; 80, Thunderbird &lt; 78.2, Thunderbird &lt; 68.12, Firefox ESR &lt; 68.12, Firefox ESR &lt; 78.2, and Firefox for Android &lt; 80.</p> <p>By holding a reference to the eval() function from an about:blank window, a malicious webpage could have gained access to the InstallTrigger object which would allow them to prompt the user to install an extension. Combined with user confusion, this could result in an unintended or malicious extension being installed. This vulnerability affects Firefox &lt; 80, Thunderbird &lt; 78.2, Thunderbird &lt; 68.12, Firefox ESR &lt; 68.12, Firefox ESR &lt; 78.2, and Firefox for Android &lt; 80.</p> https://cve.radiocsirt.org/vuln/ghsa-f4gc-pc7j-rfxr https://cve.radiocsirt.org/vuln/gsd-2020-15664 gsd-2020-15664 https://cve.radiocsirt.org/vuln/gsd-2020-15664 https://cve.radiocsirt.org/vuln/opensuse-su-2020:1383-1 <p>Security update for MozillaThunderbird</p> <p>Security update for MozillaThunderbird</p> https://cve.radiocsirt.org/vuln/opensuse-su-2020:1383-1 https://cve.radiocsirt.org/vuln/rhsa-2020:3555 <p>Mozilla: Integer overflow in nsJPEGEncoder::emptyOutputBuffer Mozilla: WebRTC permission prompt could have been bypassed by a compromised content process Mozilla: Out of bound read in Date.parse() Mozilla: X-Frame-Options bypass using object or embed tags Mozilla: Bypassing iframe sandbox when allowing popups Mozilla: Custom cursor can overlay user interface Mozilla: Type confusion for special arguments in IonMonkey Mozilla: Overriding file type when saving to disk Mozilla: Attacker-induced prompt for extension installation Mozilla: Use-After-Free when aborting an operation</p> <p>Mozilla: Integer overflow in nsJPEGEncoder::emptyOutputBuffer Mozilla: WebRTC permission prompt could have been bypassed by a compromised content process Mozilla: Out of bound read in Date.parse() Mozilla: X-Frame-Options bypass using object or embed tags Mozilla: Bypassing iframe sandbox when allowing popups Mozilla: Custom cursor can overlay user interface Mozilla: Type confusion for special arguments in IonMonkey Mozilla: Overriding file type when saving to disk Mozilla: Attacker-induced prompt for extension installation Mozilla: Use-After-Free when aborting an operation</p> https://cve.radiocsirt.org/vuln/rhsa-2020:3555 https://cve.radiocsirt.org/vuln/suse-su-2020:14489-1 <p>Security update for MozillaFirefox</p> <p>Security update for MozillaFirefox</p> https://cve.radiocsirt.org/vuln/suse-su-2020:14489-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-15664 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: firefox, Ubuntu:18.04:LTS: firefox, Ubuntu:18.04:LTS: thunderbird, Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: firefox, Ubuntu:20.04:LTS: thunderbird, Ubuntu:20.04:LTS: mozjs68, Ubuntu:20.04:LTS: mozjs52</p> <p>By holding a reference to the eval() function from an about:blank window, a malicious webpage could have gained access to the InstallTrigger object which would allow them to prompt the user to install an extension. Combined with user confusion, this could result in an unintended or malicious extension being installed. This vulnerability affects Firefox &lt; 80, Thunderbird &lt; 78.2, Thunderbird &lt; 68.12, Firefox ESR &lt; 68.12, Firefox ESR &lt; 78.2, and Firefox for Android &lt; 80.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: firefox, Ubuntu:18.04:LTS: firefox, Ubuntu:18.04:LTS: thunderbird, Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: firefox, Ubuntu:20.04:LTS: thunderbird, Ubuntu:20.04:LTS: mozjs68, Ubuntu:20.04:LTS: mozjs52</p> <p>By holding a reference to the eval() function from an about:blank window, a malicious webpage could have gained access to the InstallTrigger object which would allow them to prompt the user to install an extension. Combined with user confusion, this could result in an unintended or malicious extension being installed. This vulnerability affects Firefox &lt; 80, Thunderbird &lt; 78.2, Thunderbird &lt; 68.12, Firefox ESR &lt; 68.12, Firefox ESR &lt; 78.2, and Firefox for Android &lt; 80.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-15664