yelp vulnerabilities (Red Hat)
91 vulnerabilities.
-
yelpRed Hat Yelp: yelp-xsl: overly permissive content security policy in yelp allows host file disclosure from flatpak applications 7.1 High -
yelpRed Hat Yelp: arbitrary file read 7.4 High -
yelpRed Hat FreeType before 2.6.1 has a buffer over-read in skip_comment in psaux/psobjs.c because... 6.5 Medium -
yelpRed Hat FreeType before 2.6.1 has a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c. 8.8 High -
yelpRed Hat Poppler through 0.62 contains an out of bounds read vulnerability due to an incorrect memory... 6.5 Medium -
yelpRed Hat Directory Traversal with ../ sequences occurs in AccountsService before 0.6.50 because of an... 6.5 Medium -
yelpRed Hat The get_cookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have... 9.8 Critical -
yelpRed Hat An issue was discovered in certain Apple products. iOS before 11.4 is affected. iOS before 11.3.1... 8.8 High -
yelpRed Hat WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of... 6.5 Medium -
yelpRed Hat WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of... 7.5 High -
yelpRed Hat The FoFiType1C::cvtGlyph function in fofi/FoFiType1C.cc in Poppler through 0.64.0 allows remote... 5.5 Medium -
yelpRed Hat An issue was discovered in certain Apple products. iOS before 11.3.1 is affected. Safari before... 8.8 High -
yelpRed Hat There is a stack-based buffer over-read in calling GLib in the function... 6.5 Medium -
yelpRed Hat There is a NULL pointer dereference in the AnnotPath::getCoordsLength function in Annot.h in an... 6.5 Medium -
yelpRed Hat There is a heap-based buffer over-read in the function ft_font_face_hash of gxps-fonts.c in... 6.5 Medium -
yelpRed Hat An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11... 8.8 High -
yelpRed Hat An exploitable heap overflow vulnerability exists in the gdk_pixbuf__jpeg_image_load_increment... 8.8 High -
yelpRed Hat Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 19.0,... 9.3 High -
yelpRed Hat Heap-based buffer overflow in the nsSaveAsCharset::DoCharsetConversion function in Mozilla... 9.3 High -
yelpRed Hat Use-after-free vulnerability in the nsOverflowContinuationTracker::Finish function in Mozilla... 9.3 High -
yelpRed Hat Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3,... 4.0 Medium -
yelpRed Hat Use-after-free vulnerability in the nsImageLoadingContent::OnStopContainer function in Mozilla... 9.3 High -
yelpRed Hat Mozilla Firefox before 3.6 Beta 3 does not properly handle overlong UTF-8 encoding, which makes... 4.3 Medium -
yelpRed Hat The JavaScript engine in Mozilla Firefox 3.6.x before 3.6.4 allow remote attackers to cause a... 9.3 High -
yelpRed Hat Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox 3.5.x before 3.5... 9.3 High -
yelpRed Hat Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.10... 9.3 High -
yelpRed Hat Integer overflow in the XSLT node sorting implementation in Mozilla Firefox 3.5.x before 3.5.10... 9.3 High -
yelpRed Hat Use-after-free vulnerability in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and... 9.3 High -
yelpRed Hat Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, does not... 4.3 Medium -
yelpRed Hat Integer overflow in the nsGenericDOMDataNode::SetTextInternal function in Mozilla Firefox 3.5.x... 9.3 High -
yelpRed Hat The XMLDocument::load function in Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2,... 4.3 Medium -
yelpRed Hat The JavaScript implementation in Mozilla Firefox 3.x before 3.5.10 and 3.6.x before 3.6.4, and... 5.8 Medium -
yelpRed Hat Mozilla Firefox 3.6.x before 3.6.3 does not properly manage the scopes of DOM nodes that are... 10.0 High -
yelpRed Hat The Math.random function in the JavaScript implementation in Mozilla Firefox 3.5.x before 3.5.10... 4.9 Medium -
yelpRed Hat The AppendAttributeValue function in the JavaScript engine in Mozilla Firefox 2.x before 2.0.0.18... 10.0 High -
yelpRed Hat Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18,... 7.5 High -
yelpRed Hat Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows... 7.5 High -
yelpRed Hat The nsXMLHttpRequest::NotifyEventListeners method in Firefox 3.x before 3.0.4, Firefox 2.x before... 7.5 High -
yelpRed Hat nsFrameManager in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2... 9.3 High -
yelpRed Hat The session restore feature in Mozilla Firefox 3.x before 3.0.4 and 2.x before 2.0.0.18 allows... 4.3 Medium -
yelpRed Hat The JavaScript engine in Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18,... 10.0 High -
yelpRed Hat Integer overflow in xpcom/io/nsEscape.cpp in the browser engine in Mozilla Firefox 3.x before 3.0... 10.0 High -
yelpRed Hat The layout engine in Mozilla Firefox 3.x before 3.0.4, Thunderbird 2.x before 2.0.0.18, and... 5.0 Medium -
yelpRed Hat Mozilla Firefox 3.x before 3.0.4 assigns chrome privileges to a file: URI when it is accessed in... 5.1 Medium -
yelpRed Hat jslock.cpp in Mozilla Firefox 3.x before 3.0.2, Firefox 2.x before 2.0.0.18, Thunderbird 2.x... 10.0 High -
yelpRed Hat The http-index-format MIME type parser (nsDirIndexParser) in Firefox 3.x before 3.0.4, Firefox 2... 9.3 High -
yelpRed Hat Directory traversal vulnerability in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2,... 7.8 High -
yelpRed Hat Directory traversal vulnerability in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2,... 4.3 Medium -
yelpRed Hat Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey... 4.3 Medium -
yelpRed Hat Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.2 allow remote attackers... 10.0 High - Show olderLoading…