https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 11:52:57 +0000 https://cve.radiocsirt.org/vuln/cve-2018-5142 <p><strong>Affected:</strong> Mozilla Firefox</p> <p>If Media Capture and Streams API permission is requested from documents with &#34;data:&#34; or &#34;blob:&#34; URLs, the permission notifications do not properly display the originating domain. The notification states &#34;Unknown protocol&#34; as the requestee, leading to user confusion about which site is asking for this permission. This vulnerability affects Firefox &lt; 59.</p> <p><strong>Affected:</strong> Mozilla Firefox</p> <p>If Media Capture and Streams API permission is requested from documents with &#34;data:&#34; or &#34;blob:&#34; URLs, the permission notifications do not properly display the originating domain. The notification states &#34;Unknown protocol&#34; as the requestee, leading to user confusion about which site is asking for this permission. This vulnerability affects Firefox &lt; 59.</p> https://cve.radiocsirt.org/vuln/cve-2018-5142 https://cve.radiocsirt.org/vuln/usn-3596-1 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: firefox, Ubuntu:16.04:LTS: firefox</p> <p>Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service via application crash or opening new tabs, escape the sandbox, bypass same-origin restrictions, obtain sensitive information, confuse the user with misleading permission requests, or execute arbitrary code. (CVE-2018-5125, CVE-2018-5126, CVE-2018-5127, CVE-2018-5128, CVE-2018-5129, CVE-2018-5130, CVE-2018-5136, CVE-2018-5137, CVE-2018-5140, CVE-2018-5141, CVE-2018-5142)</p> <p>It was discovered that the fetch() API could incorrectly return cached copies of no-store/no-cache resources in some circumstances. A local attacker could potentially exploit this to obtain sensitive information in environments where multiple users share a common profile. (CVE-2018-5131)</p> <p>Multiple security issues were discovered with WebExtensions. If a user were tricked in to installing a specially crafted extension, an attacker could potentially exploit these to obtain sensitive information or bypass security restrictions. (CVE-2018-5132, CVE-2018-5134, CVE-2018-5135)</p> <p>It was discovered that the value of app.support.baseURL is not sanitized properly. If a malicious local application were to set this to a specially crafted value, an attacker could potentially exploit this to execute arbitrary code. (CVE-2018-5133)</p> <p>It was discovered that javascript: URLs with embedded tab characters could be pasted in to the addressbar…</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: firefox, Ubuntu:16.04:LTS: firefox</p> <p>Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service via application crash or opening new tabs, escape the sandbox, bypass same-origin restrictions, obtain sensitive information, confuse the user with misleading permission requests, or execute arbitrary code. (CVE-2018-5125, CVE-2018-5126, CVE-2018-5127, CVE-2018-5128, CVE-2018-5129, CVE-2018-5130, CVE-2018-5136, CVE-2018-5137, CVE-2018-5140, CVE-2018-5141, CVE-2018-5142)</p> <p>It was discovered that the fetch() API could incorrectly return cached copies of no-store/no-cache resources in some circumstances. A local attacker could potentially exploit this to obtain sensitive information in environments where multiple users share a common profile. (CVE-2018-5131)</p> <p>Multiple security issues were discovered with WebExtensions. If a user were tricked in to installing a specially crafted extension, an attacker could potentially exploit these to obtain sensitive information or bypass security restrictions. (CVE-2018-5132, CVE-2018-5134, CVE-2018-5135)</p> <p>It was discovered that the value of app.support.baseURL is not sanitized properly. If a malicious local application were to set this to a specially crafted value, an attacker could potentially exploit this to execute arbitrary code. (CVE-2018-5133)</p> <p>It was discovered that javascript: URLs with embedded tab characters could be pasted in to the addressbar…</p> https://cve.radiocsirt.org/vuln/usn-3596-1