https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 08:13:20 +0000 https://cve.radiocsirt.org/vuln/bdu:2016-00751 bdu:2016-00751 https://cve.radiocsirt.org/vuln/bdu:2016-00751 https://cve.radiocsirt.org/vuln/certfr-2016-avi-086 certfr-2016-avi-086 https://cve.radiocsirt.org/vuln/certfr-2016-avi-086 https://cve.radiocsirt.org/vuln/cnvd-2016-01642 cnvd-2016-01642 https://cve.radiocsirt.org/vuln/cnvd-2016-01642 https://cve.radiocsirt.org/vuln/euvd-2026-82635 EUVD-2026-82635 https://cve.radiocsirt.org/vuln/euvd-2026-82635 https://cve.radiocsirt.org/vuln/fkie_cve-2016-1967 <p>Mozilla Firefox before 45.0 does not properly restrict the availability of IFRAME Resource Timing API times, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via crafted JavaScript code that leverages history.back and performance.getEntries calls after restoring a browser session. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-7207.</p> <p>Mozilla Firefox before 45.0 does not properly restrict the availability of IFRAME Resource Timing API times, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via crafted JavaScript code that leverages history.back and performance.getEntries calls after restoring a browser session. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-7207.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2016-1967 https://cve.radiocsirt.org/vuln/ghsa-697m-2pgc-69m6 <p>Mozilla Firefox before 45.0 does not properly restrict the availability of IFRAME Resource Timing API times, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via crafted JavaScript code that leverages history.back and performance.getEntries calls after restoring a browser session. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-7207.</p> <p>Mozilla Firefox before 45.0 does not properly restrict the availability of IFRAME Resource Timing API times, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via crafted JavaScript code that leverages history.back and performance.getEntries calls after restoring a browser session. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-7207.</p> https://cve.radiocsirt.org/vuln/ghsa-697m-2pgc-69m6 https://cve.radiocsirt.org/vuln/gsd-2016-1967 gsd-2016-1967 https://cve.radiocsirt.org/vuln/gsd-2016-1967 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10071-1 <p>MozillaFirefox-50.1.0-1.1 on GA media</p> <p>MozillaFirefox-50.1.0-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10071-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-1967 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: firefox</p> <p>Mozilla Firefox before 45.0 does not properly restrict the availability of IFRAME Resource Timing API times, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via crafted JavaScript code that leverages history.back and performance.getEntries calls after restoring a browser session. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-7207.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: firefox</p> <p>Mozilla Firefox before 45.0 does not properly restrict the availability of IFRAME Resource Timing API times, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via crafted JavaScript code that leverages history.back and performance.getEntries calls after restoring a browser session. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-7207.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-1967