nspr vulnerabilities (Mageia)
403 vulnerabilities.
nsprMageiaBy observing the stack trace for JavaScript errors in web workers, it was possible to leak the...6.5 MediumnsprMageiaInappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker...6.5 MediumnsprMageiaWhen performing add-on updates, certificate chains terminating in non-built-in-roots were...6.5 MediumnsprMageiaWhen trying to connect to a STUN server, a race condition could have caused a use-after-free of a...8.8 HighnsprMageiaWhen processing callbacks that occurred during window flushing in the parent process, the...8.8 HighnsprMageiaManipulating individual parts of a URL object could have caused an out-of-bounds read, leaking...6.5 MediumnsprMageiaDue to confusion about ValueTags on JavaScript Objects, an object may pass through the type...8.8 HighnsprMageiaUse after free in ANGLE in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to...8.8 HighnsprMageiaMozilla developers and community members reported memory safety bugs present in Firefox 72 and...8.8 HighnsprMageiaIf a template tag was used in a select tag, the parser could be confused and allow JavaScript...6.1 MediumnsprMageiaA content process could have modified shared memory relating to crash reporting information,...8.8 HighnsprMageiaWhen running, the updater service wrote status and log files to an unrestricted location;...7.8 HighnsprMageiaInappropriate implementation in WebRTC in Google Chrome prior to 79.0.3945.79 allowed a remote...6.5 MediumnsprMageiaMozilla developers reported memory safety bugs present in Firefox 70 and Firefox ESR 68.2. Some...8.8 HighnsprMageiaUnder certain conditions, when retrieving a document from a DocShell in the antitracking code, a...7.5 HighnsprMageiaUnder certain conditions, when checking the Resist Fingerprinting preference during device...7.5 HighnsprMageiaWhen using nested workers, a use-after-free could occur during worker destruction. This resulted...8.8 HighnsprMageiaThe plain text serializer used a fixed-size array for the number of <ol> elements it could...8.8 HighnsprMageiaMozilla community member Philipp reported a memory safety bug present in Firefox 68 when 360...8.8 HighnsprMageiaMozilla developers and community members reported memory safety bugs present in Firefox 69 and...8.8 HighnsprMageiaFailure to correctly handle null bytes when processing HTML entities resulted in Firefox...6.1 MediumnsprMageiaIf two same-origin documents set document.domain differently to become cross-origin, it was...6.1 MediumnsprMageiaBy using a form with a data URI it was possible to gain access to the privileged JSONView object...5.4 MediumnsprMageiaA fixed-size stack buffer could overflow in nrappkit when doing WebRTC signaling. This resulted...8.8 HighnsprMageiaAn attacker could have caused 4 bytes of HMAC output to be written past the end of a buffer...8.8 HighnsprMageiaWhen following the value's prototype chain, it was possible to retain a reference to a locale,...8.8 HighnsprMageiaThe Firefox installer allows Firefox to be installed to a custom user writable location, leaving...7.8 HighnsprMageiaLogging-related command line parameters are not properly sanitized when Firefox is launched by...8.8 HighnsprMageiaThe Mozilla Maintenance Service does not guard against files being hardlinked to another file in...7.0 HighnsprMageiaGiven a compromised sandboxed content process due to a separate vulnerability, it is possible to...9.3 CriticalnsprMageiaIn libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing...7.5 HighnsprMageiaIt is possible to delete an IndexedDB key value and subsequently try to extract it during...8.8 HighnsprMageiaA type confusion vulnerability exists in Spidermonkey, which results in a non-exploitable crash....6.5 MediumnsprMageiaA vulnerability exists in WebRTC where malicious web content can use probing techniques on the...4.3 MediumnsprMageiaWebRTC in Firefox will honor persisted permissions given to sites for access to microphone and...6.5 MediumnsprMageiaThe "Forget about this site" feature in the History pane is intended to remove all saved user...6.5 MediumnsprMageiaA use-after-free vulnerability can occur while manipulating video elements if the body is freed...8.8 HighnsprMageiaSome HTML elements, such as <title> and <textarea>, can contain literal angle...6.1 MediumnsprMageiaNavigation events were not fully adhering to the W3C's "Navigation-Timing Level 2" draft...3.7 LownsprMageiaA same-origin policy violation occurs allowing the theft of cross-origin images through a...6.5 MediumnsprMageiaMozilla developers and community members reported memory safety bugs present in Firefox 68,...8.8 HighnsprMageiaIf a Content Security Policy (CSP) directive is defined that uses a hash-based source that takes...6.3 MediumnsprMageiaMozilla developers and community members reported memory safety bugs present in Firefox 68 and...8.8 HighnsprMageiaWhen a master password is set, it is required to be entered again before stored passwords can be...9.8 CriticalnsprMageiaA use-after-free vulnerability can occur when the SMIL animation controller incorrectly registers...9.8 CriticalnsprMageiaA vulnerability where type-confusion in the IonMonkey just-in-time (JIT) compiler could...9.8 CriticalnsprMageiaA mechanism was discovered that removes some bounds checking for string, array, or typed array...5.9 MediumnsprMageiaThe IonMonkey just-in-time (JIT) compiler can leak an internal JS_OPTIMIZED_OUT magic value to...9.8 CriticalnsprMageiaThe type inference system allows the compilation of functions that can cause type confusions...9.8 CriticalnsprMageiaA use-after-free vulnerability can occur when a raw pointer to a DOM element on a page is...9.8 Critical- Show moreLoading…