https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 03:38:35 +0000 https://cve.radiocsirt.org/vuln/certfr-2020-avi-083 certfr-2020-avi-083 https://cve.radiocsirt.org/vuln/certfr-2020-avi-083 https://cve.radiocsirt.org/vuln/cnvd-2020-07197 cnvd-2020-07197 https://cve.radiocsirt.org/vuln/cnvd-2020-07197 https://cve.radiocsirt.org/vuln/euvd-2026-37551 EUVD-2026-37551 https://cve.radiocsirt.org/vuln/euvd-2026-37551 https://cve.radiocsirt.org/vuln/fkie_cve-2020-6798 <p>If a template tag was used in a select tag, the parser could be confused and allow JavaScript parsing and execution when it should not be allowed. A site that relied on the browser behaving correctly could suffer a cross-site scripting vulnerability as a result. In general, this flaw cannot be exploited through email in the Thunderbird product because scripting is disabled when reading mail, but is potentially a risk in browser or browser-like contexts. This vulnerability affects Thunderbird &lt; 68.5, Firefox &lt; 73, and Firefox &lt; ESR68.5.</p> <p>If a template tag was used in a select tag, the parser could be confused and allow JavaScript parsing and execution when it should not be allowed. A site that relied on the browser behaving correctly could suffer a cross-site scripting vulnerability as a result. In general, this flaw cannot be exploited through email in the Thunderbird product because scripting is disabled when reading mail, but is potentially a risk in browser or browser-like contexts. This vulnerability affects Thunderbird &lt; 68.5, Firefox &lt; 73, and Firefox &lt; ESR68.5.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-6798 https://cve.radiocsirt.org/vuln/ghsa-qwm2-p76q-cw3g <p>If a template tag was used in a select tag, the parser could be confused and allow JavaScript parsing and execution when it should not be allowed. A site that relied on the browser behaving correctly could suffer a cross-site scripting vulnerability as a result. In general, this flaw cannot be exploited through email in the Thunderbird product because scripting is disabled when reading mail, but is potentially a risk in browser or browser-like contexts. This vulnerability affects Thunderbird &lt; 68.5, Firefox &lt; 73, and Firefox &lt; ESR68.5.</p> <p>If a template tag was used in a select tag, the parser could be confused and allow JavaScript parsing and execution when it should not be allowed. A site that relied on the browser behaving correctly could suffer a cross-site scripting vulnerability as a result. In general, this flaw cannot be exploited through email in the Thunderbird product because scripting is disabled when reading mail, but is potentially a risk in browser or browser-like contexts. This vulnerability affects Thunderbird &lt; 68.5, Firefox &lt; 73, and Firefox &lt; ESR68.5.</p> https://cve.radiocsirt.org/vuln/ghsa-qwm2-p76q-cw3g https://cve.radiocsirt.org/vuln/gsd-2020-6798 gsd-2020-6798 https://cve.radiocsirt.org/vuln/gsd-2020-6798 https://cve.radiocsirt.org/vuln/opensuse-su-2020:0230-1 <p>Security update for MozillaFirefox</p> <p>Security update for MozillaFirefox</p> https://cve.radiocsirt.org/vuln/opensuse-su-2020:0230-1 https://cve.radiocsirt.org/vuln/rhsa-2020:0519 <p>Mozilla: Missing bounds check on shared memory read in the parent process Mozilla: Incorrect parsing of template tag could result in JavaScript injection Mozilla: Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</p> <p>Mozilla: Missing bounds check on shared memory read in the parent process Mozilla: Incorrect parsing of template tag could result in JavaScript injection Mozilla: Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</p> https://cve.radiocsirt.org/vuln/rhsa-2020:0519 https://cve.radiocsirt.org/vuln/suse-su-2020:0383-1 <p>Security update for MozillaFirefox</p> <p>Security update for MozillaFirefox</p> https://cve.radiocsirt.org/vuln/suse-su-2020:0383-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-6798 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: firefox, Ubuntu:16.04:LTS: thunderbird, Ubuntu:18.04:LTS: firefox, Ubuntu:18.04:LTS: thunderbird, Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: firefox, Ubuntu:20.04:LTS: thunderbird, Ubuntu:20.04:LTS: mozjs52</p> <p>If a template tag was used in a select tag, the parser could be confused and allow JavaScript parsing and execution when it should not be allowed. A site that relied on the browser behaving correctly could suffer a cross-site scripting vulnerability as a result. In general, this flaw cannot be exploited through email in the Thunderbird product because scripting is disabled when reading mail, but is potentially a risk in browser or browser-like contexts. This vulnerability affects Thunderbird &lt; 68.5, Firefox &lt; 73, and Firefox &lt; ESR68.5.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: firefox, Ubuntu:16.04:LTS: thunderbird, Ubuntu:18.04:LTS: firefox, Ubuntu:18.04:LTS: thunderbird, Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: firefox, Ubuntu:20.04:LTS: thunderbird, Ubuntu:20.04:LTS: mozjs52</p> <p>If a template tag was used in a select tag, the parser could be confused and allow JavaScript parsing and execution when it should not be allowed. A site that relied on the browser behaving correctly could suffer a cross-site scripting vulnerability as a result. In general, this flaw cannot be exploited through email in the Thunderbird product because scripting is disabled when reading mail, but is potentially a risk in browser or browser-like contexts. This vulnerability affects Thunderbird &lt; 68.5, Firefox &lt; 73, and Firefox &lt; ESR68.5.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-6798