iceape vulnerabilities (Mageia)
472 vulnerabilities.
iceapeMageiaURLs containing certain unicode glyphs for alternative hyphens and quotes do not properly trigger...5.3 MediumiceapeMageiaFeed preview for RSS feeds can be used to capture errors and exceptions generated by privileged...7.5 HighiceapeMageiaThe "export" function in the Certificate Viewer can force local filesystem navigation when the ...7.5 HighiceapeMageiaA potential use-after-free found through fuzzing during DOM manipulation of SVG content. This...9.8 CriticaliceapeMageiaUse-after-free vulnerability in Web Animations when interacting with cycle collection found...7.5 HighiceapeMageiaHashed codes of JavaScript objects are shared between pages. This allows for pointer leaks...7.5 HighiceapeMageiaA memory corruption vulnerability in Skia that can occur when using transforms to make gradients,...9.8 CriticaliceapeMageiaUse-after-free while manipulating XSL in XSLT documents. This vulnerability affects Thunderbird <...9.8 CriticaliceapeMageiaJIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential...9.8 CriticaliceapeMageiaMemory safety bugs were reported in Firefox 50.1. Some of these bugs showed evidence of memory...9.8 CriticaliceapeMageiaMemory safety bugs were reported in Firefox 50.1 and Firefox ESR 45.6. Some of these bugs showed...9.8 CriticaliceapeMageiaStack-based buffer overflow in the evutil_parse_sockaddr_port function in evutil.c in libevent...7.5 HighiceapeMageiaAn attacker could use a JavaScript Map/Set timing attack to determine whether an atom is used by...7.5 HighiceapeMageiaMozilla's add-ons SDK had a world-accessible resource with an HTML injection vulnerability. If an...6.1 MediumiceapeMageiaThe Pocket toolbar button, once activated, listens for events fired from it's own pages but does...7.5 HighiceapeMageiaHTML tags received from the Pocket server will be processed without sanitization and any...9.8 CriticaliceapeMageiaExternal resources that should be blocked when loaded by SVG images can bypass security...7.5 HighiceapeMageiaUse-after-free while manipulating DOM events and removing audio elements due to errors in the...9.8 CriticaliceapeMageiaUse-after-free resulting in potentially exploitable crash when manipulating DOM subtrees in the...9.8 CriticaliceapeMageiaMemory corruption resulting in a potentially exploitable crash during WebGL functions using a...7.5 HighiceapeMageiaUse-after-free while manipulating the "navigator" object within WebVR. Note: WebVR is not...8.1 HighiceapeMageiaEvent handlers on "marquee" elements were executed despite a strict Content Security Policy (CSP)...6.1 MediumiceapeMageiaA buffer overflow in SkiaGl caused when a GrGLBuffer is truncated during allocation. Later...7.5 HighiceapeMageiaMemory safety bugs were reported in Thunderbird 45.5. Some of these bugs showed evidence of...9.8 CriticaliceapeMageiaMemory safety bugs were reported in Firefox 50.0.2. Some of these bugs showed evidence of memory...9.8 CriticaliceapeMageiaRedirection from an HTTP connection to a "data:" URL assigns the referring site's origin to the ...8.8 HighiceapeMageiaWebExtensions can bypass security checks to load privileged URLs and potentially escape the...7.5 HighiceapeMageiaCanvas allows the use of the "feDisplacementMap" filter on images loaded cross-origin. The...7.0 HighiceapeMageiaAn issue where a "<select>" dropdown menu can be used to cover location bar content, resulting in...5.9 MediumiceapeMageiaAn issue where WebExtensions can use the mozAddonManager API to elevate privilege due to...9.8 CriticaliceapeMageiaContent Security Policy combined with HTTP to HTTPS redirection can be used by malicious server...5.3 MediumiceapeMageiaA maliciously crafted page loaded to the sidebar through a bookmark can reference a privileged...8.0 HighiceapeMageiaA use-after-free during web animations when working with timelines resulting in a potentially...7.5 HighiceapeMageiaTwo use-after-free errors during DOM operations resulting in potentially exploitable crashes....6.5 MediumiceapeMageiaAn integer overflow during the parsing of XML using the Expat library. This vulnerability affects...9.8 CriticaliceapeMageiaDuring URL parsing, a maliciously crafted URL can cause a potentially exploitable crash. This...6.5 MediumiceapeMageiaMemory safety bugs were reported in Firefox 49. Some of these bugs showed evidence of memory...9.8 CriticaliceapeMageiaA buffer overflow resulting in a potentially exploitable crash due to memory allocation issues...7.5 HighiceapeMageiaAdd-on updates failed to verify that the add-on ID inside the signed package matched the ID of...5.9 MediumiceapeMageiaAn error in argument length checking in JavaScript, leading to potential integer overflows or...9.8 CriticaliceapeMageiaA same-origin policy bypass with local shortcut files to load arbitrary local content from disk....5.5 MediumiceapeMageiaMemory safety bugs were reported in Firefox 49 and Firefox ESR 45.4. Some of these bugs showed...9.8 CriticaliceapeMageiaWeb content could access information in the HTTP cache if e10s is disabled. This can reveal some...5.9 MediumiceapeMageiaA potentially exploitable use-after-free crash during actor destruction with service workers....9.8 CriticaliceapeMageiaMozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird < 45.4 rely on...7.4 HighiceapeMageiaUse-after-free vulnerability in the DOMSVGLength class in Mozilla Firefox before 49.0, Firefox...9.8 CriticaliceapeMageiaUse-after-free vulnerability in the mozilla::nsTextNodeDirectionalityMap::RemoveElementFromMap...9.8 CriticaliceapeMageiaHeap-based buffer overflow in the nsBMPEncoder::AddImageFrame function in Mozilla Firefox before...8.8 HighiceapeMageiaUse-after-free vulnerability in the nsRefreshDriver::Tick function in Mozilla Firefox before 49.0...9.8 CriticaliceapeMageiaUse-after-free vulnerability in the mozilla::a11y::DocAccessible::ProcessInvalidationList...9.8 Critical- Show moreLoading…