rootcerts vulnerabilities (Mageia)
567 vulnerabilities.
rootcertsMageiaA race condition when running shutdown code for Web Worker led to a use-after-free vulnerability....8.1 HighrootcertsMageiaWhen encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller...8.8 HighrootcertsMageiaMozilla community member Philipp reported a memory safety bug present in Firefox 68 when 360...8.8 HighrootcertsMageiaMozilla developers and community members reported memory safety bugs present in Firefox 69 and...8.8 HighrootcertsMageiaFailure to correctly handle null bytes when processing HTML entities resulted in Firefox...6.1 MediumrootcertsMageiaIf two same-origin documents set document.domain differently to become cross-origin, it was...6.1 MediumrootcertsMageiaBy using a form with a data URI it was possible to gain access to the privileged JSONView object...5.4 MediumrootcertsMageiaA fixed-size stack buffer could overflow in nrappkit when doing WebRTC signaling. This resulted...8.8 HighrootcertsMageiaAn attacker could have caused 4 bytes of HMAC output to be written past the end of a buffer...8.8 HighrootcertsMageiaWhen following the value's prototype chain, it was possible to retain a reference to a locale,...8.8 HighrootcertsMageiaThe Firefox installer allows Firefox to be installed to a custom user writable location, leaving...7.8 HighrootcertsMageiaLogging-related command line parameters are not properly sanitized when Firefox is launched by...8.8 HighrootcertsMageiaThe Mozilla Maintenance Service does not guard against files being hardlinked to another file in...7.0 HighrootcertsMageiaGiven a compromised sandboxed content process due to a separate vulnerability, it is possible to...9.3 CriticalrootcertsMageiaIn libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing...7.5 HighrootcertsMageiaIt is possible to delete an IndexedDB key value and subsequently try to extract it during...8.8 HighrootcertsMageiaA type confusion vulnerability exists in Spidermonkey, which results in a non-exploitable crash....6.5 MediumrootcertsMageiaA vulnerability exists in WebRTC where malicious web content can use probing techniques on the...4.3 MediumrootcertsMageiaWebRTC in Firefox will honor persisted permissions given to sites for access to microphone and...6.5 MediumrootcertsMageiaThe "Forget about this site" feature in the History pane is intended to remove all saved user...6.5 MediumrootcertsMageiaA use-after-free vulnerability can occur while manipulating video elements if the body is freed...8.8 HighrootcertsMageiaSome HTML elements, such as <title> and <textarea>, can contain literal angle...6.1 MediumrootcertsMageiaNavigation events were not fully adhering to the W3C's "Navigation-Timing Level 2" draft...3.7 LowrootcertsMageiaA same-origin policy violation occurs allowing the theft of cross-origin images through a...6.5 MediumrootcertsMageiaMozilla developers and community members reported memory safety bugs present in Firefox 68,...8.8 HighrootcertsMageiaIf a Content Security Policy (CSP) directive is defined that uses a hash-based source that takes...6.3 MediumrootcertsMageiaMozilla developers and community members reported memory safety bugs present in Firefox 68 and...8.8 HighrootcertsMageiaWhen a master password is set, it is required to be entered again before stored passwords can be...9.8 CriticalrootcertsMageiaAs part of a winning Pwn2Own entry, a researcher demonstrated a sandbox escape by installing a...8.3 HighrootcertsMageiaA vulnerability exists where if a user opens a locally saved HTML file, this file can use file:...6.5 MediumrootcertsMageiaEmpty or malformed p256-ECDH public keys may trigger a segmentation fault due values being...7.5 HighrootcertsMageiaThe HTTP Alternative Services header, Alt-Svc, can be used by a malicious site to scan all TCP...4.7 MediumrootcertsMageiaA vulnerability exists where it possible to force Network Security Services (NSS) to sign...5.3 MediumrootcertsMageiaWhen a user navigates to site marked as unsafe by the Safebrowsing API, warning messages are...6.5 MediumrootcertsMageiaApplication permissions give additional remote troubleshooting permission to the site input...6.1 MediumrootcertsMageiaA vulnerability exists during the installation of add-ons where the initial fetch ignored the...7.5 HighrootcertsMageiaThe unicode latin 'kra' character can be used to spoof a standard 'k' character in the addressbar...6.5 MediumrootcertsMageiaSome unicode characters are incorrectly treated as whitespace during the parsing of web content...6.1 MediumrootcertsMageiaWhen importing a curve25519 private key in PKCS#8format with leading 0x00 bytes, it is possible...7.5 HighrootcertsMageiaActivity Stream can display content from sent from the Snippet Service website. This content is...5.3 MediumrootcertsMageiaA vulnerability exists where the caret ("^") character is improperly escaped constructing some...5.3 MediumrootcertsMageiaUntil explicitly accessed by script, window.globalThis is not enumerable and, as a result, is not...8.3 HighrootcertsMageiaDue to an error while parsing page content, it is possible for properly sanitized user input to...6.1 MediumrootcertsMageiaNecko can access a child on the wrong thread during UDP connections, resulting in a potentially...9.8 CriticalrootcertsMageiaA use-after-free vulnerability can occur in HTTP/2 when a cached HTTP/2 stream is closed while...9.8 CriticalrootcertsMageiaPOST requests made by NPAPI plugins, such as Flash, that receive a status 308 redirect response...8.8 HighrootcertsMageiaWhen an inner window is reused, it does not consider the use of document.domain for cross-origin...8.8 HighrootcertsMageiaMozilla developers and community members reported memory safety bugs present in Firefox 67. Some...9.8 CriticalrootcertsMageiaMozilla developers and community members reported memory safety bugs present in Firefox 67 and...9.8 CriticalrootcertsMageiaA use-after-free vulnerability can occur when the SMIL animation controller incorrectly registers...9.8 Critical- Show moreLoading…