https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 11:35:33 +0000 https://cve.radiocsirt.org/vuln/certfr-2020-avi-138 certfr-2020-avi-138 https://cve.radiocsirt.org/vuln/certfr-2020-avi-138 https://cve.radiocsirt.org/vuln/cnvd-2020-16722 cnvd-2020-16722 https://cve.radiocsirt.org/vuln/cnvd-2020-16722 https://cve.radiocsirt.org/vuln/euvd-2026-37596 EUVD-2026-37596 https://cve.radiocsirt.org/vuln/euvd-2026-37596 https://cve.radiocsirt.org/vuln/fkie_cve-2020-6811 <p>The &#39;Copy as cURL&#39; feature of Devtools&#39; network tab did not properly escape the HTTP method of a request, which can be controlled by the website. If a user used the &#39;Copy as Curl&#39; feature and pasted the command into a terminal, it could have resulted in command injection and arbitrary command execution. This vulnerability affects Thunderbird &lt; 68.6, Firefox &lt; 74, Firefox &lt; ESR68.6, and Firefox ESR &lt; 68.6.</p> <p>The &#39;Copy as cURL&#39; feature of Devtools&#39; network tab did not properly escape the HTTP method of a request, which can be controlled by the website. If a user used the &#39;Copy as Curl&#39; feature and pasted the command into a terminal, it could have resulted in command injection and arbitrary command execution. This vulnerability affects Thunderbird &lt; 68.6, Firefox &lt; 74, Firefox &lt; ESR68.6, and Firefox ESR &lt; 68.6.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-6811 https://cve.radiocsirt.org/vuln/ghsa-ffwg-6pqv-h33r <p>The &#39;Copy as cURL&#39; feature of Devtools&#39; network tab did not properly escape the HTTP method of a request, which can be controlled by the website. If a user used the &#39;Copy as Curl&#39; feature and pasted the command into a terminal, it could have resulted in command injection and arbitrary command execution. This vulnerability affects Thunderbird &lt; 68.6, Firefox &lt; 74, Firefox &lt; ESR68.6, and Firefox ESR &lt; 68.6.</p> <p>The &#39;Copy as cURL&#39; feature of Devtools&#39; network tab did not properly escape the HTTP method of a request, which can be controlled by the website. If a user used the &#39;Copy as Curl&#39; feature and pasted the command into a terminal, it could have resulted in command injection and arbitrary command execution. This vulnerability affects Thunderbird &lt; 68.6, Firefox &lt; 74, Firefox &lt; ESR68.6, and Firefox ESR &lt; 68.6.</p> https://cve.radiocsirt.org/vuln/ghsa-ffwg-6pqv-h33r https://cve.radiocsirt.org/vuln/gsd-2020-6811 gsd-2020-6811 https://cve.radiocsirt.org/vuln/gsd-2020-6811 https://cve.radiocsirt.org/vuln/opensuse-su-2020:0340-1 <p>Security update for MozillaFirefox</p> <p>Security update for MozillaFirefox</p> https://cve.radiocsirt.org/vuln/opensuse-su-2020:0340-1 https://cve.radiocsirt.org/vuln/rhsa-2020:0816 <p>usrsctp: Out of bounds reads in sctp_load_addresses_from_init() Mozilla: Use-after-free when removing data about origins Mozilla: BodyStream:: OnInputStreamReady was missing protections against state confusion Mozilla: Use-after-free in cubeb during stream destruction Mozilla: Devtools&#39; &#39;Copy as cURL&#39; feature did not fully escape website-controlled data, potentially leading to command injection Mozilla: The names of AirPods with personally identifiable information were exposed to websites with camera or microphone permission Mozilla: Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</p> <p>usrsctp: Out of bounds reads in sctp_load_addresses_from_init() Mozilla: Use-after-free when removing data about origins Mozilla: BodyStream:: OnInputStreamReady was missing protections against state confusion Mozilla: Use-after-free in cubeb during stream destruction Mozilla: Devtools&#39; &#39;Copy as cURL&#39; feature did not fully escape website-controlled data, potentially leading to command injection Mozilla: The names of AirPods with personally identifiable information were exposed to websites with camera or microphone permission Mozilla: Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</p> https://cve.radiocsirt.org/vuln/rhsa-2020:0816 https://cve.radiocsirt.org/vuln/suse-su-2020:0686-1 <p>Security update for MozillaFirefox</p> <p>Security update for MozillaFirefox</p> https://cve.radiocsirt.org/vuln/suse-su-2020:0686-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-6811 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: firefox, Ubuntu:16.04:LTS: thunderbird, Ubuntu:18.04:LTS: firefox, Ubuntu:18.04:LTS: thunderbird, Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: firefox, Ubuntu:20.04:LTS: thunderbird, Ubuntu:20.04:LTS: mozjs52</p> <p>The &#39;Copy as cURL&#39; feature of Devtools&#39; network tab did not properly escape the HTTP method of a request, which can be controlled by the website. If a user used the &#39;Copy as Curl&#39; feature and pasted the command into a terminal, it could have resulted in command injection and arbitrary command execution. This vulnerability affects Thunderbird &lt; 68.6, Firefox &lt; 74, Firefox &lt; ESR68.6, and Firefox ESR &lt; 68.6.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: firefox, Ubuntu:16.04:LTS: thunderbird, Ubuntu:18.04:LTS: firefox, Ubuntu:18.04:LTS: thunderbird, Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: firefox, Ubuntu:20.04:LTS: thunderbird, Ubuntu:20.04:LTS: mozjs52</p> <p>The &#39;Copy as cURL&#39; feature of Devtools&#39; network tab did not properly escape the HTTP method of a request, which can be controlled by the website. If a user used the &#39;Copy as Curl&#39; feature and pasted the command into a terminal, it could have resulted in command injection and arbitrary command execution. This vulnerability affects Thunderbird &lt; 68.6, Firefox &lt; 74, Firefox &lt; ESR68.6, and Firefox ESR &lt; 68.6.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-6811