MozillaFirefox-branding-SLED vulnerabilities (SUSE)
292 vulnerabilities.
MozillaFirefox-branding-SLEDSUSENode.js: All versions prior to Node.js 6.15.0 and 8.14.0: HTTP request splitting: If Node.js can...7.5 HighMozillaFirefox-branding-SLEDSUSEIn all versions of Node.js prior to 6.14.4, 8.11.4 and 10.9.0 when used with UCS-2 encoding ...7.5 HighMozillaFirefox-branding-SLEDSUSECalling Buffer.fill() or Buffer.alloc() with some parameters can lead to a hang which could...7.5 HighMozillaFirefox-branding-SLEDSUSEAll versions of Node.js 8.x, 9.x, and 10.x are vulnerable and the severity is HIGH. An attacker...7.5 HighMozillaFirefox-branding-SLEDSUSEClient DoS due to large DH parameter7.5 HighMozillaFirefox-branding-SLEDSUSEWithdrawn Advisory: Node.js Inspector RCE via DNS Rebinding8.8 HighMozillaFirefox-branding-SLEDSUSEThe HTTP parser in all current versions of Node.js ignores spaces in the `Content-Length` header,...5.3 MediumMozillaFirefox-branding-SLEDSUSEThe `'path'` module in the Node.js 4.x release line contains a potential regular expression...7.5 HighMozillaFirefox-branding-SLEDSUSEnghttp2 version >= 1.10.0 and nghttp2 <= v1.31.0 contains an Improper Input Validation CWE-20...7.5 HighMozillaFirefox-branding-SLEDSUSE** DISPUTED ** The Wave_read._read_fmt_chunk function in Lib/wave.py in Python through 3.6.4 does...6.5 MediumMozillaFirefox-branding-SLEDSUSEIn Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in pp_list_one_macro in asm...5.5 MediumMozillaFirefox-branding-SLEDSUSEIn Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in the function find_cc()...5.5 MediumMozillaFirefox-branding-SLEDSUSEIn Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer over-read that will cause a...7.5 HighMozillaFirefox-branding-SLEDSUSEIn Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in pp_verror in asm/preproc.c that...5.5 MediumMozillaFirefox-branding-SLEDSUSEIn Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in pp_getline in asm/preproc.c...5.5 MediumMozillaFirefox-branding-SLEDSUSEIn Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in is_mmacro() in asm...5.5 MediumMozillaFirefox-branding-SLEDSUSEIn Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in do_directive in asm/preproc.c...5.5 MediumMozillaFirefox-branding-SLEDSUSEIn Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in the pp_list_one_macro function...5.5 MediumMozillaFirefox-branding-SLEDSUSEIn Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer over-read in the function...5.5 MediumMozillaFirefox-branding-SLEDSUSEIn Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer overflow that will cause a...5.5 MediumMozillaFirefox-branding-SLEDSUSEIn Netwide Assembler (NASM) 2.14rc0, there is a "SEGV on unknown address" that will cause a...5.5 MediumMozillaFirefox-branding-SLEDSUSENode.js had a bug in versions 8.X and 9.X which caused buffers to not be initialized when the...3.1 LowMozillaFirefox-branding-SLEDSUSENode.js was affected by OpenSSL vulnerability CVE-2017-3737 in regards to the use of SSL_read()...9.1 CriticalMozillaFirefox-branding-SLEDSUSEThere is an overflow bug in the AVX2 Montgomery multiplication procedure used in exponentiation...5.9 MediumMozillaFirefox-branding-SLEDSUSEThere is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1...6.5 MediumMozillaFirefox-branding-SLEDSUSENode.js before 4.8.5, 6.x before 6.11.5, and 8.x before 8.8.0 allows remote attackers to cause a...7.5 HighMozillaFirefox-branding-SLEDSUSENode.js 4.0.0, 4.1.0, and 4.1.1 allows remote attackers to cause a denial of service.7.5 HighMozillaFirefox-branding-SLEDSUSENode.js 8.5.0 before 8.6.0 allows remote attackers to access unintended files, because a change...7.5 HighMozillaFirefox-branding-SLEDSUSEIn Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in the function...5.5 MediumMozillaFirefox-branding-SLEDSUSEWhile parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one...5.3 MediumMozillaFirefox-branding-SLEDSUSEThe destructor function for the "WindowsDllDetourPatcher" class can be re-purposed by malicious...7.5 HighMozillaFirefox-branding-SLEDSUSEAn error in the "WindowsDllDetourPatcher" where a RWX ("Read/Write/Execute") 4k block is...5.3 MediumMozillaFirefox-branding-SLEDSUSEA mechanism that uses AppCache to hijack a URL in a domain using fallback by serving the files...8.1 HighMozillaFirefox-branding-SLEDSUSEWhen a page's content security policy (CSP) header contains a "sandbox" directive, other...7.5 HighMozillaFirefox-branding-SLEDSUSEA use-after-free vulnerability can occur when manipulating the DOM during the resize event of an...9.8 CriticalMozillaFirefox-branding-SLEDSUSEA use-after-free vulnerability can occur while re-computing layout for a "marquee" element during...9.8 CriticalMozillaFirefox-branding-SLEDSUSEA use-after-free vulnerability can occur in WebSockets when the object holding the connection is...9.8 CriticalMozillaFirefox-branding-SLEDSUSEThe Developer Tools feature suffers from a XUL injection vulnerability due to improper...8.8 HighMozillaFirefox-branding-SLEDSUSEA buffer overflow will occur when viewing a certificate in the certificate manager if the...9.8 CriticalMozillaFirefox-branding-SLEDSUSEOn pages containing an iframe, the "data:" protocol can be used to create a modal alert that will...5.3 MediumMozillaFirefox-branding-SLEDSUSESame-origin policy protections can be bypassed on pages with embedded iframes during page reloads...7.5 HighMozillaFirefox-branding-SLEDSUSEA buffer overflow can occur when the image renderer attempts to paint non-displayable SVG...9.8 CriticalMozillaFirefox-branding-SLEDSUSEA buffer overflow can occur when manipulating Accessible Rich Internet Applications (ARIA)...9.8 CriticalMozillaFirefox-branding-SLEDSUSEA use-after-free vulnerability can occur when reading an image observer during frame...9.8 CriticalMozillaFirefox-branding-SLEDSUSEMemory safety bugs were reported in Firefox 54, Firefox ESR 52.2, and Thunderbird 52.2. Some of...9.8 CriticalMozillaFirefox-branding-SLEDSUSEAn out-of-bounds read occurs when applying style rules to pseudo-elements, such as ::first-line,...9.1 CriticalMozillaFirefox-branding-SLEDSUSENode.js v4.0 through v4.8.3, all versions of v5.x, v6.0 through v6.11.0, v7.0 through v7.10.0,...7.5 HighMozillaFirefox-branding-SLEDSUSEIn Netwide Assembler (NASM) 2.14rc0, preproc.c allows remote attackers to cause a denial of...7.8 HighMozillaFirefox-branding-SLEDSUSEIn Netwide Assembler (NASM) 2.14rc0, there are multiple heap use after free vulnerabilities in...7.8 HighMozillaFirefox-branding-SLEDSUSEThe Mozilla Maintenance Service can be invoked by an unprivileged user to read 32 bytes of any...5.5 Medium- Show moreLoading…