https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 17:59:14 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-08142 bdu:2023-08142 https://cve.radiocsirt.org/vuln/bdu:2023-08142 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0969 certfr-2023-avi-0969 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0969 https://cve.radiocsirt.org/vuln/euvd-2026-217067 EUVD-2026-217067 https://cve.radiocsirt.org/vuln/euvd-2026-217067 https://cve.radiocsirt.org/vuln/fkie_cve-2023-6211 <p>If an attacker needed a user to load an insecure http: page and knew that user had enabled HTTPS-only mode, the attacker could have tricked the user into clicking to grant an HTTPS-only exception if they could get the user to participate in a clicking game. This vulnerability affects Firefox &lt; 120.</p> <p>If an attacker needed a user to load an insecure http: page and knew that user had enabled HTTPS-only mode, the attacker could have tricked the user into clicking to grant an HTTPS-only exception if they could get the user to participate in a clicking game. This vulnerability affects Firefox &lt; 120.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-6211 https://cve.radiocsirt.org/vuln/ghsa-mv6j-qcrj-q856 <p>If an attacker needed a user to load an insecure http: page and knew that user had enabled HTTPS-only mode, the attacker could have tricked the user into clicking to grant an HTTPS-only exception if they could get the user to participate in a clicking game. This vulnerability affects Firefox &lt; 120.</p> <p>If an attacker needed a user to load an insecure http: page and knew that user had enabled HTTPS-only mode, the attacker could have tricked the user into clicking to grant an HTTPS-only exception if they could get the user to participate in a clicking game. This vulnerability affects Firefox &lt; 120.</p> https://cve.radiocsirt.org/vuln/ghsa-mv6j-qcrj-q856 https://cve.radiocsirt.org/vuln/gsd-2023-6211 gsd-2023-6211 https://cve.radiocsirt.org/vuln/gsd-2023-6211 https://cve.radiocsirt.org/vuln/msrc_cve-2023-6211 msrc_CVE-2023-6211 https://cve.radiocsirt.org/vuln/msrc_cve-2023-6211 https://cve.radiocsirt.org/vuln/oesa-2025-1322 <p><strong>Affected:</strong> openEuler:22.03-LTS-SP3: firefox</p> <p>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. %if 0 %global moz_debug_prefix /lib/debug %global moz_debug_dir /lib/debug/ %global uname_m %(uname -m) %global symbols_file_name -.en-US.-%(uname.crashreporter-symbols.zip %global symbols_file_path /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip %global _find_debuginfo_opts -p /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip -o debugcrashreporter.list %global crashreporter_pkg_name mozilla-crashreporter--debuginfo Security Fix(es):</p> <p>Multiple NSS NIST curves were susceptible to a side-channel attack known as &amp;quot;Minerva&amp;quot;. This attack could potentially allow an attacker to recover the private key. This vulnerability affects Firefox &amp;lt; 121.(CVE-2023-6135)</p> <p>Ownership mismanagement led to a use-after-free in ReadableByteStreams This vulnerability affects Firefox &amp;lt; 120, Firefox ESR &amp;lt; 115.5.0, and Thunderbird &amp;lt; 115.5.(CVE-2023-6207)</p> <p>When using X11, text selected by the page using the Selection API was erroneously copied into the primary selection, a temporary storage not unlike the clipboard. *This bug only affects Firefox on X11. Other systems are unaffected.* This vulnerability affects Firefox &amp;lt; 120, Firefox ESR &amp;lt; 115.5.0, and Thunderbird &amp;lt; 115.5.(CVE-2023-6208)</p> <p>Relative URLs starting with three slashes were incorrectly parsed, and a path-traversal &amp;quot;/../&amp;quot; part in the path could be used to override the specified host…</p> <p><strong>Affected:</strong> openEuler:22.03-LTS-SP3: firefox</p> <p>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. %if 0 %global moz_debug_prefix /lib/debug %global moz_debug_dir /lib/debug/ %global uname_m %(uname -m) %global symbols_file_name -.en-US.-%(uname.crashreporter-symbols.zip %global symbols_file_path /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip %global _find_debuginfo_opts -p /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip -o debugcrashreporter.list %global crashreporter_pkg_name mozilla-crashreporter--debuginfo Security Fix(es):</p> <p>Multiple NSS NIST curves were susceptible to a side-channel attack known as &amp;quot;Minerva&amp;quot;. This attack could potentially allow an attacker to recover the private key. This vulnerability affects Firefox &amp;lt; 121.(CVE-2023-6135)</p> <p>Ownership mismanagement led to a use-after-free in ReadableByteStreams This vulnerability affects Firefox &amp;lt; 120, Firefox ESR &amp;lt; 115.5.0, and Thunderbird &amp;lt; 115.5.(CVE-2023-6207)</p> <p>When using X11, text selected by the page using the Selection API was erroneously copied into the primary selection, a temporary storage not unlike the clipboard. *This bug only affects Firefox on X11. Other systems are unaffected.* This vulnerability affects Firefox &amp;lt; 120, Firefox ESR &amp;lt; 115.5.0, and Thunderbird &amp;lt; 115.5.(CVE-2023-6208)</p> <p>Relative URLs starting with three slashes were incorrectly parsed, and a path-traversal &amp;quot;/../&amp;quot; part in the path could be used to override the specified host…</p> https://cve.radiocsirt.org/vuln/oesa-2025-1322 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13468-1 <p>MozillaFirefox-120.0-1.1 on GA media</p> <p>MozillaFirefox-120.0-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:13468-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-6211 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: firefox, Ubuntu:20.04:LTS: mozjs68, Ubuntu:20.04:LTS: mozjs52, Ubuntu:22.04:LTS: mozjs102, Ubuntu:22.04:LTS: mozjs78, Ubuntu:22.04:LTS: mozjs91, Ubuntu:24.04:LTS: mozjs102</p> <p>If an attacker needed a user to load an insecure http: page and knew that user had enabled HTTPS-only mode, the attacker could have tricked the user into clicking to grant an HTTPS-only exception if they could get the user to participate in a clicking game. This vulnerability affects Firefox &lt; 120.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: firefox, Ubuntu:20.04:LTS: mozjs68, Ubuntu:20.04:LTS: mozjs52, Ubuntu:22.04:LTS: mozjs102, Ubuntu:22.04:LTS: mozjs78, Ubuntu:22.04:LTS: mozjs91, Ubuntu:24.04:LTS: mozjs102</p> <p>If an attacker needed a user to load an insecure http: page and knew that user had enabled HTTPS-only mode, the attacker could have tricked the user into clicking to grant an HTTPS-only exception if they could get the user to participate in a clicking game. This vulnerability affects Firefox &lt; 120.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-6211 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2995 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Mozilla Firefox, Mozilla Firefox ESR und Mozilla Thunderbird ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Mozilla Firefox, Mozilla Firefox ESR und Mozilla Thunderbird ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2995