https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 19:36:44 +0000 https://cve.radiocsirt.org/vuln/certfr-2020-avi-755 certfr-2020-avi-755 https://cve.radiocsirt.org/vuln/certfr-2020-avi-755 https://cve.radiocsirt.org/vuln/euvd-2026-46257 EUVD-2026-46257 https://cve.radiocsirt.org/vuln/euvd-2026-46257 https://cve.radiocsirt.org/vuln/fkie_cve-2020-26953 <p>It was possible to cause the browser to enter fullscreen mode without displaying the security UI; thus making it possible to attempt a phishing attack or otherwise confuse the user. This vulnerability affects Firefox &lt; 83, Firefox ESR &lt; 78.5, and Thunderbird &lt; 78.5.</p> <p>It was possible to cause the browser to enter fullscreen mode without displaying the security UI; thus making it possible to attempt a phishing attack or otherwise confuse the user. This vulnerability affects Firefox &lt; 83, Firefox ESR &lt; 78.5, and Thunderbird &lt; 78.5.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-26953 https://cve.radiocsirt.org/vuln/ghsa-vw8x-xjwp-7888 <p>It was possible to cause the browser to enter fullscreen mode without displaying the security UI; thus making it possible to attempt a phishing attack or otherwise confuse the user. This vulnerability affects Firefox &lt; 83, Firefox ESR &lt; 78.5, and Thunderbird &lt; 78.5.</p> <p>It was possible to cause the browser to enter fullscreen mode without displaying the security UI; thus making it possible to attempt a phishing attack or otherwise confuse the user. This vulnerability affects Firefox &lt; 83, Firefox ESR &lt; 78.5, and Thunderbird &lt; 78.5.</p> https://cve.radiocsirt.org/vuln/ghsa-vw8x-xjwp-7888 https://cve.radiocsirt.org/vuln/gsd-2020-26953 gsd-2020-26953 https://cve.radiocsirt.org/vuln/gsd-2020-26953 https://cve.radiocsirt.org/vuln/oesa-2023-1672 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: firefox</p> <p>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. Security Fix(es): Side-channel information leakage in graphics in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to leak cross-origin data via a crafted HTML page.(CVE-2020-16012) (CVE-2020-26951) (CVE-2020-26953) (CVE-2020-26956) (CVE-2020-26958) (CVE-2020-26959) (CVE-2020-26960) (CVE-2020-26961) (CVE-2020-26965)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: firefox</p> <p>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. Security Fix(es): Side-channel information leakage in graphics in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to leak cross-origin data via a crafted HTML page.(CVE-2020-16012) (CVE-2020-26951) (CVE-2020-26953) (CVE-2020-26956) (CVE-2020-26958) (CVE-2020-26959) (CVE-2020-26960) (CVE-2020-26961) (CVE-2020-26965)</p> https://cve.radiocsirt.org/vuln/oesa-2023-1672 https://cve.radiocsirt.org/vuln/opensuse-su-2020:2020-1 <p>Security update for MozillaFirefox</p> <p>Security update for MozillaFirefox</p> https://cve.radiocsirt.org/vuln/opensuse-su-2020:2020-1 https://cve.radiocsirt.org/vuln/rhsa-2020:5231 <p>Mozilla: Variable time processing of cross-origin images during drawImage calls Mozilla: Parsing mismatches could confuse and bypass security sanitizer for chrome privileged code Mozilla: Fullscreen could be enabled without displaying the security UI Mozilla: XSS through paste (manual and clipboard API) Mozilla: Requests intercepted through ServiceWorkers lacked MIME type restrictions Mozilla: Use-after-free in WebRequestService Mozilla: Potential use-after-free in uses of nsTArray Mozilla: DoH did not filter IPv4 mapped IP Addresses Mozilla: Software keyboards may have remembered typed passwords Mozilla: Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</p> <p>Mozilla: Variable time processing of cross-origin images during drawImage calls Mozilla: Parsing mismatches could confuse and bypass security sanitizer for chrome privileged code Mozilla: Fullscreen could be enabled without displaying the security UI Mozilla: XSS through paste (manual and clipboard API) Mozilla: Requests intercepted through ServiceWorkers lacked MIME type restrictions Mozilla: Use-after-free in WebRequestService Mozilla: Potential use-after-free in uses of nsTArray Mozilla: DoH did not filter IPv4 mapped IP Addresses Mozilla: Software keyboards may have remembered typed passwords Mozilla: Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</p> https://cve.radiocsirt.org/vuln/rhsa-2020:5231 https://cve.radiocsirt.org/vuln/suse-su-2020:14548-1 <p>Security update for MozillaFirefox</p> <p>Security update for MozillaFirefox</p> https://cve.radiocsirt.org/vuln/suse-su-2020:14548-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-26953 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: firefox, Ubuntu:18.04:LTS: firefox, Ubuntu:18.04:LTS: thunderbird, Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: firefox, Ubuntu:20.04:LTS: thunderbird, Ubuntu:20.04:LTS: mozjs68, Ubuntu:20.04:LTS: mozjs52</p> <p>It was possible to cause the browser to enter fullscreen mode without displaying the security UI; thus making it possible to attempt a phishing attack or otherwise confuse the user. This vulnerability affects Firefox &lt; 83, Firefox ESR &lt; 78.5, and Thunderbird &lt; 78.5.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: firefox, Ubuntu:18.04:LTS: firefox, Ubuntu:18.04:LTS: thunderbird, Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: firefox, Ubuntu:20.04:LTS: thunderbird, Ubuntu:20.04:LTS: mozjs68, Ubuntu:20.04:LTS: mozjs52</p> <p>It was possible to cause the browser to enter fullscreen mode without displaying the security UI; thus making it possible to attempt a phishing attack or otherwise confuse the user. This vulnerability affects Firefox &lt; 83, Firefox ESR &lt; 78.5, and Thunderbird &lt; 78.5.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-26953 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0337 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Mozilla Firefox, Mozilla Firefox ESR, Mozilla Thunderbird ausnutzen, um beliebigen Programmcode mit Benutzerrechten auszuführen, den Speicher zu korrumpieren, Daten zu manipulieren, vertrauliche Daten einzusehen, Sicherheitsmechanismen zu umgehen oder einen Cross Site Scripting Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Mozilla Firefox, Mozilla Firefox ESR, Mozilla Thunderbird ausnutzen, um beliebigen Programmcode mit Benutzerrechten auszuführen, den Speicher zu korrumpieren, Daten zu manipulieren, vertrauliche Daten einzusehen, Sicherheitsmechanismen zu umgehen oder einen Cross Site Scripting Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0337