https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 12:49:30 +0000 https://cve.radiocsirt.org/vuln/cve-2018-12401 <p><strong>Affected:</strong> Mozilla Firefox</p> <p>Some special resource URIs will cause a non-exploitable crash if loaded with optional parameters following a &#39;?&#39; in the parsed string. This could lead to denial of service (DOS) attacks. This vulnerability affects Firefox &lt; 63.</p> <p><strong>Affected:</strong> Mozilla Firefox</p> <p>Some special resource URIs will cause a non-exploitable crash if loaded with optional parameters following a &#39;?&#39; in the parsed string. This could lead to denial of service (DOS) attacks. This vulnerability affects Firefox &lt; 63.</p> https://cve.radiocsirt.org/vuln/cve-2018-12401 https://cve.radiocsirt.org/vuln/usn-3801-1 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: firefox, Ubuntu:16.04:LTS: firefox, Ubuntu:18.04:LTS: firefox</p> <p>Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, bypass CSP restrictions, spoof the protocol registration notification bar, leak SameSite cookies, bypass mixed content warnings, or execute arbitrary code. (CVE-2018-12388, CVE-2018-12390, CVE-2018-12392, CVE-2018-12393, CVE-2018-12398, CVE-2018-12399, CVE-2018-12401, CVE-2018-12402, CVE-2018-12403)</p> <p>Multiple security issues were discovered with WebExtensions in Firefox. If a user were tricked in to installing a specially crafted extension, an attacker could potentially exploit these to bypass domain restrictions, gain additional privileges, or run content scripts in local pages without permission. (CVE-2018-12395, CVE-2018-12396, CVE-2018-12397)</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: firefox, Ubuntu:16.04:LTS: firefox, Ubuntu:18.04:LTS: firefox</p> <p>Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, bypass CSP restrictions, spoof the protocol registration notification bar, leak SameSite cookies, bypass mixed content warnings, or execute arbitrary code. (CVE-2018-12388, CVE-2018-12390, CVE-2018-12392, CVE-2018-12393, CVE-2018-12398, CVE-2018-12399, CVE-2018-12401, CVE-2018-12402, CVE-2018-12403)</p> <p>Multiple security issues were discovered with WebExtensions in Firefox. If a user were tricked in to installing a specially crafted extension, an attacker could potentially exploit these to bypass domain restrictions, gain additional privileges, or run content scripts in local pages without permission. (CVE-2018-12395, CVE-2018-12396, CVE-2018-12397)</p> https://cve.radiocsirt.org/vuln/usn-3801-1