https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 11:35:53 +0000 https://cve.radiocsirt.org/vuln/cve-2016-1949 <p>Mozilla Firefox before 44.0.2 does not properly restrict the interaction between Service Workers and plugins, which allows remote attackers to bypass the Same Origin Policy via a crafted web site that triggers spoofed responses to requests that use NPAPI, as demonstrated by a request for a crossdomain.xml file.</p> <p>Mozilla Firefox before 44.0.2 does not properly restrict the interaction between Service Workers and plugins, which allows remote attackers to bypass the Same Origin Policy via a crafted web site that triggers spoofed responses to requests that use NPAPI, as demonstrated by a request for a crossdomain.xml file.</p> https://cve.radiocsirt.org/vuln/cve-2016-1949 https://cve.radiocsirt.org/vuln/usn-2893-1 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: firefox</p> <p>Jason Pang discovered that service workers intercept responses to plugin network requests made through the browser. An attacker could potentially exploit this to bypass same origin restrictions using the Flash plugin. (CVE-2016-1949)</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: firefox</p> <p>Jason Pang discovered that service workers intercept responses to plugin network requests made through the browser. An attacker could potentially exploit this to bypass same origin restrictions using the Flash plugin. (CVE-2016-1949)</p> https://cve.radiocsirt.org/vuln/usn-2893-1