nss vulnerabilities (Mageia)
1,368 vulnerabilities.
nssMageiaA buffer overflow can occur when rendering canvas content while adjusting the height and width of...8.8 HighnssMageiaThe signature verification routine in Enigmail before 2.0.7 interprets user ids as status/control...7.5 HighnssMageiaLibgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA...4.7 MediumnssMageiamainproc.c in GnuPG before 2.2.8 mishandles the original filename during decryption and...7.5 HighnssMageiaIf websocket data is sent with mixed text and binary in a single message, the binary data can be...7.5 HighnssMageiaA buffer overflow was found during UTF8 to Unicode string conversion within JavaScript with...8.1 HighnssMageiaSites can bypass security checks on permissions to install lightweight themes by manipulating the...5.3 MediumnssMageiaAn integer overflow can occur in the Skia library due to 32-bit integer use in an array without...9.8 CriticalnssMageiaMalicious PDF can inject JavaScript into PDF Viewer8.8 HighnssMageiaSame-origin protections for the PDF viewer can be bypassed, allowing a malicious site to...7.5 HighnssMageiaA use-after-free vulnerability can occur while adjusting layout during SVG animations with text...9.8 CriticalnssMageiaA use-after-free vulnerability can occur while enumerating attributes during SVG animations with...9.8 CriticalnssMageiaMemory safety bugs were reported in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7. Some of...9.8 CriticalnssMageiaA use-after-free vulnerability can occur while editing events in form elements on a page,...9.8 CriticalnssMageiaIf right-to-left text is used in the addressbar with left-to-right alignment, it is possible in...5.3 MediumnssMageiaA use-after-free vulnerability can occur during font face manipulation when a font face is freed...9.8 CriticalnssMageiaA use-after-free vulnerability can occur during mouse event handling due to issues with...9.8 CriticalnssMageiaA use-after-free vulnerability can occur when manipulating HTML media elements with media streams...9.8 CriticalnssMageiaA use-after-free vulnerability can occur when the widget listener is holding strong references to...9.8 CriticalnssMageiaA use-after-free vulnerability can occur when form input elements, focus, and selections are...9.8 CriticalnssMageiaA use-after-free vulnerability can occur during XSL transformations when the source document for...9.8 CriticalnssMageiaAn integer overflow vulnerability in the Skia library when allocating memory for edge builders on...9.8 CriticalnssMageiaA use-after-free vulnerability can occur during WebRTC connections when interacting with the DTMF...9.8 CriticalnssMageiaMemory safety bugs were reported in Firefox 57 and Firefox ESR 52.5. Some of these bugs showed...9.8 CriticalnssMageiaUpdated rootcerts packages fix security vulnerabilityNo scorenssMageiaThe Resource Timing API incorrectly revealed navigations in cross-origin iframes. This is a same...6.5 MediumnssMageiaA use-after-free vulnerability can occur when flushing and resizing layout because the ...9.8 CriticalnssMageiaMemory safety bugs were reported in Firefox 56 and Firefox ESR 52.4. Some of these bugs showed...9.8 CriticalnssMageiaA buffer overflow occurs when drawing and validating elements with the ANGLE graphics library,...9.8 CriticalnssMageiaThe content security policy (CSP) "sandbox" directive did not create a unique origin for the...5.4 MediumnssMageiaA use-after-free vulnerability can occur in design mode when image objects are resized if objects...9.8 CriticalnssMageiaA use-after-free vulnerability can occur when manipulating arrays of Accessible Rich Internet...9.8 CriticalnssMageiaFile downloads encoded with "blob:" and "data:" URL elements bypassed normal file download checks...7.8 HighnssMageiaMemory safety bugs were reported in Firefox 55 and Firefox ESR 52.3. Some of these bugs showed...9.8 CriticalnssMageiaDuring TLS 1.2 exchanges, handshake hashes are generated which point to a message buffer. This...7.5 HighnssMageiaA use-after-free vulnerability can occur in the Fetch API when the worker or the associated...9.8 CriticalnssMageiaA use-after-free vulnerability can occur when an editor DOM node is deleted prematurely during...9.8 CriticalnssMageiaA mechanism that uses AppCache to hijack a URL in a domain using fallback by serving the files...8.1 HighnssMageiaWhen a page's content security policy (CSP) header contains a "sandbox" directive, other...7.5 HighnssMageiaA use-after-free vulnerability can occur when manipulating the DOM during the resize event of an...9.8 CriticalnssMageiaA use-after-free vulnerability can occur while re-computing layout for a "marquee" element during...9.8 CriticalnssMageiaA use-after-free vulnerability can occur in WebSockets when the object holding the connection is...9.8 CriticalnssMageiaThe Developer Tools feature suffers from a XUL injection vulnerability due to improper...8.8 HighnssMageiaA buffer overflow will occur when viewing a certificate in the certificate manager if the...9.8 CriticalnssMageiaOn pages containing an iframe, the "data:" protocol can be used to create a modal alert that will...5.3 MediumnssMageiaSame-origin policy protections can be bypassed on pages with embedded iframes during page reloads...7.5 HighnssMageiaA buffer overflow can occur when the image renderer attempts to paint non-displayable SVG...9.8 CriticalnssMageiaA buffer overflow can occur when manipulating Accessible Rich Internet Applications (ARIA)...9.8 CriticalnssMageiaA use-after-free vulnerability can occur when reading an image observer during frame...9.8 CriticalnssMageiaMemory safety bugs were reported in Firefox 54, Firefox ESR 52.2, and Thunderbird 52.2. Some of...9.8 Critical- Show moreLoading…