nss vulnerabilities (Mageia)
1,368 vulnerabilities.
nssMageiaA vulnerability exists where if a user opens a locally saved HTML file, this file can use file:...6.5 MediumnssMageiaEmpty or malformed p256-ECDH public keys may trigger a segmentation fault due values being...7.5 HighnssMageiaThe HTTP Alternative Services header, Alt-Svc, can be used by a malicious site to scan all TCP...4.7 MediumnssMageiaA vulnerability exists where it possible to force Network Security Services (NSS) to sign...5.3 MediumnssMageiaWhen a user navigates to site marked as unsafe by the Safebrowsing API, warning messages are...6.5 MediumnssMageiaApplication permissions give additional remote troubleshooting permission to the site input...6.1 MediumnssMageiaA vulnerability exists during the installation of add-ons where the initial fetch ignored the...7.5 HighnssMageiaThe unicode latin 'kra' character can be used to spoof a standard 'k' character in the addressbar...6.5 MediumnssMageiaSome unicode characters are incorrectly treated as whitespace during the parsing of web content...6.1 MediumnssMageiaWhen importing a curve25519 private key in PKCS#8format with leading 0x00 bytes, it is possible...7.5 HighnssMageiaActivity Stream can display content from sent from the Snippet Service website. This content is...5.3 MediumnssMageiaA vulnerability exists where the caret ("^") character is improperly escaped constructing some...5.3 MediumnssMageiaUntil explicitly accessed by script, window.globalThis is not enumerable and, as a result, is not...8.3 HighnssMageiaDue to an error while parsing page content, it is possible for properly sanitized user input to...6.1 MediumnssMageiaNecko can access a child on the wrong thread during UDP connections, resulting in a potentially...9.8 CriticalnssMageiaA use-after-free vulnerability can occur in HTTP/2 when a cached HTTP/2 stream is closed while...9.8 CriticalnssMageiaPOST requests made by NPAPI plugins, such as Flash, that receive a status 308 redirect response...8.8 HighnssMageiaWhen an inner window is reused, it does not consider the use of document.domain for cross-origin...8.8 HighnssMageiaMozilla developers and community members reported memory safety bugs present in Firefox 67. Some...9.8 CriticalnssMageiaMozilla developers and community members reported memory safety bugs present in Firefox 67 and...9.8 CriticalnssMageiaA use-after-free vulnerability can occur when the SMIL animation controller incorrectly registers...9.8 CriticalnssMageiaA vulnerability where type-confusion in the IonMonkey just-in-time (JIT) compiler could...9.8 CriticalnssMageiaA mechanism was discovered that removes some bounds checking for string, array, or typed array...5.9 MediumnssMageiaThe IonMonkey just-in-time (JIT) compiler can leak an internal JS_OPTIMIZED_OUT magic value to...9.8 CriticalnssMageiaThe type inference system allows the compilation of functions that can cause type confusions...9.8 CriticalnssMageiaA use-after-free vulnerability can occur when a raw pointer to a DOM element on a page is...9.8 CriticalnssMageiaMozilla developers and community members reported memory safety bugs present in Firefox 65,...9.8 CriticalnssMageiaWhen proxy auto-detection is enabled, if a web server serves a Proxy Auto-Configuration (PAC)...5.9 MediumnssMageiaAn earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added...10.0 CriticalnssMageiaMozilla developers and community members reported memory safety bugs present in Firefox 64 and...9.8 CriticalnssMageiaA use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom...9.8 CriticalnssMageiaA cached side channel attack during handshakes using RSA encryption could allow for the...5.9 MediumnssMageiaA WebExtension can request access to local files without the warning prompt stating that the...7.1 HighnssMageiaA vulnerability where a WebExtension can run content scripts in disallowed contexts following...6.5 MediumnssMageiaBy rewriting the Host: request headers using the webRequest API, a WebExtension can bypass domain...7.5 HighnssMageiaA potential vulnerability was found in 32-bit builds where an integer overflow during the...7.5 HighnssMageiaWhen manipulating user events in nested loops while opening a document through script, it is...9.8 CriticalnssMageiaMozilla developers and community members reported memory safety bugs present in Firefox 62 and...9.8 CriticalnssMageiaMozilla developers and community members reported memory safety bugs present in Firefox ESR 60.2....8.8 HighnssMageiaWhen handling a SSLv2-compatible ClientHello request, the server doesn't generate a new random...5.9 MediumnssMageiaPlaintext of decrypted emails can leak through by user submitting an embedded form by pressing...4.3 MediumnssMageiadDecrypted S/MIME parts hidden with CSS or the plaintext HTML tag can leak plaintext when...6.5 MediumnssMageiaDecrypted S/MIME parts, when included in HTML crafted for an attack, can leak plaintext when...6.5 MediumnssMageiaMemory safety bugs present in Firefox 60, Firefox ESR 60, and Firefox ESR 52.8. Some of these...9.8 CriticalnssMageiaAn invalid grid size during QCMS (color profile) transformations can result in the out-of-bounds...6.5 MediumnssMageiaA compromised IPC child process can escape the content sandbox and list the names of arbitrary...6.5 MediumnssMageiaNPAPI plugins, such as Adobe Flash, can send non-simple cross-origin requests, bypassing CORS by...8.8 HighnssMageiaA use-after-free vulnerability can occur when script uses mutation events to move DOM nodes...8.8 HighnssMageiaAn integer overflow can occur during graphics operations done by the Supplemental Streaming SIMD...8.8 HighnssMageiaA use-after-free vulnerability can occur when deleting an input element during a mutation event...8.8 High- Show moreLoading…