https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 06:48:59 +0000 https://vulnerability.circl.lu/vuln/cve-2021-38503 <p><strong>Affected:</strong> Mozilla Firefox, Mozilla Thunderbird, Mozilla Firefox ESR</p> <p>The iframe sandbox rules were not correctly applied to XSLT stylesheets, allowing an iframe to bypass restrictions such as executing scripts or navigating the top-level frame. This vulnerability affects Firefox &lt; 94, Thunderbird &lt; 91.3, and Firefox ESR &lt; 91.3.</p> <p><strong>Affected:</strong> Mozilla Firefox, Mozilla Thunderbird, Mozilla Firefox ESR</p> <p>The iframe sandbox rules were not correctly applied to XSLT stylesheets, allowing an iframe to bypass restrictions such as executing scripts or navigating the top-level frame. This vulnerability affects Firefox &lt; 94, Thunderbird &lt; 91.3, and Firefox ESR &lt; 91.3.</p> https://vulnerability.circl.lu/vuln/cve-2021-38503 https://vulnerability.circl.lu/vuln/usn-5131-1 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: firefox, Ubuntu:20.04:LTS: firefox</p> <p>Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, bypass security restrictions, spoof the browser UI, confuse the user, conduct phishing attacks, or execute arbitrary code. (CVE-2021-38503, CVE-2021-38504, CVE-2021-38506, CVE-2021-38507, CVE-2021-38508, CVE-2021-38509)</p> <p>It was discovered that the &#39;Copy Image Link&#39; context menu action would copy the final image URL after redirects. If a user were tricked into copying and pasting a link for an embedded image that triggered authentication flows back to the page, an attacker could potentially exploit this to steal authentication tokens.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: firefox, Ubuntu:20.04:LTS: firefox</p> <p>Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, bypass security restrictions, spoof the browser UI, confuse the user, conduct phishing attacks, or execute arbitrary code. (CVE-2021-38503, CVE-2021-38504, CVE-2021-38506, CVE-2021-38507, CVE-2021-38508, CVE-2021-38509)</p> <p>It was discovered that the &#39;Copy Image Link&#39; context menu action would copy the final image URL after redirects. If a user were tricked into copying and pasting a link for an embedded image that triggered authentication flows back to the page, an attacker could potentially exploit this to steal authentication tokens.</p> https://vulnerability.circl.lu/vuln/usn-5131-1