nss vulnerabilities (Mageia)
1,368 vulnerabilities.
nssMageiaManipulating individual parts of a URL object could have caused an out-of-bounds read, leaking...6.5 MediumnssMageiaDue to confusion about ValueTags on JavaScript Objects, an object may pass through the type...8.8 HighnssMageiaUse after free in ANGLE in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to...8.8 HighnssMageiaA buffer overflow could occur when parsing and validating SCTP chunks in WebRTC. This could have...9.8 CriticalnssMageiaMozilla developers and community members reported memory safety bugs present in Firefox 75 and...9.8 CriticalnssMageiaThe 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP POST data of...5.5 MediumnssMageiaA race condition when running shutdown code for Web Worker led to a use-after-free vulnerability....8.1 HighnssMageiaMozilla developers reported memory safety bugs present in Firefox and Thunderbird 68.5. Some of...9.8 CriticalnssMageiaThe first time AirPods are connected to an iPhone, they become named after the user's name by...5.3 MediumnssMageiaThe 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a...8.8 HighnssMageiaWhen a device was changed while a stream was about to be destroyed, the <code>stream-reinit</code...8.8 HighnssMageiaBy carefully crafting promise resolutions, it was possible to cause an out-of-bounds read off the...8.8 HighnssMageiaWhen removing data about an origin whose tab was recently closed, a use-after-free could occur in...8.8 HighnssMageiausrsctp before 2019-12-20 has out-of-bounds reads in sctp_load_addresses_from_init.6.5 MediumnssMageiaMozilla developers and community members reported memory safety bugs present in Firefox 72 and...8.8 HighnssMageiaIf a template tag was used in a select tag, the parser could be confused and allow JavaScript...6.1 MediumnssMageiaA content process could have modified shared memory relating to crash reporting information,...8.8 HighnssMageiaIncorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a...8.8 HighnssMageiaMozilla developers reported memory safety bugs present in Firefox 71 and Firefox ESR 68.3. Some...8.8 HighnssMageiaWhen pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer...6.1 MediumnssMageiaDue to a missing case handling object types, a type confusion vulnerability could occur,...8.8 HighnssMageiaWhen pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer...6.1 MediumnssMageiaWhen encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller...8.8 HighnssMageiaMozilla community member Philipp reported a memory safety bug present in Firefox 68 when 360...8.8 HighnssMageiaMozilla developers and community members reported memory safety bugs present in Firefox 69 and...8.8 HighnssMageiaFailure to correctly handle null bytes when processing HTML entities resulted in Firefox...6.1 MediumnssMageiaIf two same-origin documents set document.domain differently to become cross-origin, it was...6.1 MediumnssMageiaBy using a form with a data URI it was possible to gain access to the privileged JSONView object...5.4 MediumnssMageiaA fixed-size stack buffer could overflow in nrappkit when doing WebRTC signaling. This resulted...8.8 HighnssMageiaAn attacker could have caused 4 bytes of HMAC output to be written past the end of a buffer...8.8 HighnssMageiaWhen following the value's prototype chain, it was possible to retain a reference to a locale,...8.8 HighnssMageiaThe Firefox installer allows Firefox to be installed to a custom user writable location, leaving...7.8 HighnssMageiaLogging-related command line parameters are not properly sanitized when Firefox is launched by...8.8 HighnssMageiaThe Mozilla Maintenance Service does not guard against files being hardlinked to another file in...7.0 HighnssMageiaGiven a compromised sandboxed content process due to a separate vulnerability, it is possible to...9.3 CriticalnssMageiaIn libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing...7.5 HighnssMageiaIt is possible to delete an IndexedDB key value and subsequently try to extract it during...8.8 HighnssMageiaA type confusion vulnerability exists in Spidermonkey, which results in a non-exploitable crash....6.5 MediumnssMageiaA vulnerability exists in WebRTC where malicious web content can use probing techniques on the...4.3 MediumnssMageiaWebRTC in Firefox will honor persisted permissions given to sites for access to microphone and...6.5 MediumnssMageiaThe "Forget about this site" feature in the History pane is intended to remove all saved user...6.5 MediumnssMageiaA use-after-free vulnerability can occur while manipulating video elements if the body is freed...8.8 HighnssMageiaSome HTML elements, such as <title> and <textarea>, can contain literal angle...6.1 MediumnssMageiaNavigation events were not fully adhering to the W3C's "Navigation-Timing Level 2" draft...3.7 LownssMageiaA same-origin policy violation occurs allowing the theft of cross-origin images through a...6.5 MediumnssMageiaMozilla developers and community members reported memory safety bugs present in Firefox 68,...8.8 HighnssMageiaIf a Content Security Policy (CSP) directive is defined that uses a hash-based source that takes...6.3 MediumnssMageiaMozilla developers and community members reported memory safety bugs present in Firefox 68 and...8.8 HighnssMageiaWhen a master password is set, it is required to be entered again before stored passwords can be...9.8 CriticalnssMageiaAs part of a winning Pwn2Own entry, a researcher demonstrated a sandbox escape by installing a...8.3 High- Show moreLoading…