MozillaFirefox-branding-SLED vulnerabilities (SUSE)
292 vulnerabilities.
MozillaFirefox-branding-SLEDSUSEWebRTC in Firefox will honor persisted permissions given to sites for access to microphone and...6.5 MediumMozillaFirefox-branding-SLEDSUSEThe "Forget about this site" feature in the History pane is intended to remove all saved user...6.5 MediumMozillaFirefox-branding-SLEDSUSEA use-after-free vulnerability can occur while manipulating video elements if the body is freed...8.8 HighMozillaFirefox-branding-SLEDSUSESome HTML elements, such as <title> and <textarea>, can contain literal angle...6.1 MediumMozillaFirefox-branding-SLEDSUSENavigation events were not fully adhering to the W3C's "Navigation-Timing Level 2" draft...3.7 LowMozillaFirefox-branding-SLEDSUSEA same-origin policy violation occurs allowing the theft of cross-origin images through a...6.5 MediumMozillaFirefox-branding-SLEDSUSEMozilla developers and community members reported memory safety bugs present in Firefox 68,...8.8 HighMozillaFirefox-branding-SLEDSUSEIf a Content Security Policy (CSP) directive is defined that uses a hash-based source that takes...6.3 MediumMozillaFirefox-branding-SLEDSUSEMozilla developers and community members reported memory safety bugs present in Firefox 68 and...8.8 HighMozillaFirefox-branding-SLEDSUSEWhen a master password is set, it is required to be entered again before stored passwords can be...9.8 CriticalMozillaFirefox-branding-SLEDSUSESome HTTP/2 implementations are vulnerable to a flood of empty frames, potentially leading to a denial of service7.5 HighMozillaFirefox-branding-SLEDSUSESome HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service7.5 HighMozillaFirefox-branding-SLEDSUSESome HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service7.5 HighMozillaFirefox-branding-SLEDSUSESome HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service7.5 HighMozillaFirefox-branding-SLEDSUSESome HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service7.5 HighMozillaFirefox-branding-SLEDSUSESome HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service7.5 HighMozillaFirefox-branding-SLEDSUSESome HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service7.5 HighMozillaFirefox-branding-SLEDSUSESome HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service7.5 HighMozillaFirefox-branding-SLEDSUSEhttp.cookiejar.DefaultPolicy.domain_return_ok in Lib/http/cookiejar.py in Python before 3.7.3...5.3 MediumMozillaFirefox-branding-SLEDSUSEAs part of a winning Pwn2Own entry, a researcher demonstrated a sandbox escape by installing a...8.3 HighMozillaFirefox-branding-SLEDSUSEA vulnerability exists where if a user opens a locally saved HTML file, this file can use file:...6.5 MediumMozillaFirefox-branding-SLEDSUSEEmpty or malformed p256-ECDH public keys may trigger a segmentation fault due values being...7.5 HighMozillaFirefox-branding-SLEDSUSEThe HTTP Alternative Services header, Alt-Svc, can be used by a malicious site to scan all TCP...4.7 MediumMozillaFirefox-branding-SLEDSUSEA vulnerability exists where it possible to force Network Security Services (NSS) to sign...5.3 MediumMozillaFirefox-branding-SLEDSUSEWhen a user navigates to site marked as unsafe by the Safebrowsing API, warning messages are...6.5 MediumMozillaFirefox-branding-SLEDSUSEApplication permissions give additional remote troubleshooting permission to the site input...6.1 MediumMozillaFirefox-branding-SLEDSUSEA vulnerability exists during the installation of add-ons where the initial fetch ignored the...7.5 HighMozillaFirefox-branding-SLEDSUSEThe unicode latin 'kra' character can be used to spoof a standard 'k' character in the addressbar...6.5 MediumMozillaFirefox-branding-SLEDSUSESome unicode characters are incorrectly treated as whitespace during the parsing of web content...6.1 MediumMozillaFirefox-branding-SLEDSUSEWhen importing a curve25519 private key in PKCS#8format with leading 0x00 bytes, it is possible...7.5 HighMozillaFirefox-branding-SLEDSUSEActivity Stream can display content from sent from the Snippet Service website. This content is...5.3 MediumMozillaFirefox-branding-SLEDSUSEA vulnerability exists where the caret ("^") character is improperly escaped constructing some...5.3 MediumMozillaFirefox-branding-SLEDSUSEUntil explicitly accessed by script, window.globalThis is not enumerable and, as a result, is not...8.3 HighMozillaFirefox-branding-SLEDSUSEDue to an error while parsing page content, it is possible for properly sanitized user input to...6.1 MediumMozillaFirefox-branding-SLEDSUSENecko can access a child on the wrong thread during UDP connections, resulting in a potentially...9.8 CriticalMozillaFirefox-branding-SLEDSUSEA use-after-free vulnerability can occur in HTTP/2 when a cached HTTP/2 stream is closed while...9.8 CriticalMozillaFirefox-branding-SLEDSUSEPOST requests made by NPAPI plugins, such as Flash, that receive a status 308 redirect response...8.8 HighMozillaFirefox-branding-SLEDSUSEWhen an inner window is reused, it does not consider the use of document.domain for cross-origin...8.8 HighMozillaFirefox-branding-SLEDSUSEMozilla developers and community members reported memory safety bugs present in Firefox 67. Some...9.8 CriticalMozillaFirefox-branding-SLEDSUSEMozilla developers and community members reported memory safety bugs present in Firefox 67 and...9.8 CriticalMozillaFirefox-branding-SLEDSUSEA security regression of CVE-2019-9636 was discovered in python since commit...9.8 CriticalMozillaFirefox-branding-SLEDSUSEArbitrary File Overwrite in fstream7.5 HighMozillaFirefox-branding-SLEDSUSEAn issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through...6.1 MediumMozillaFirefox-branding-SLEDSUSEIn Node.js including 6.x before 6.17.0, 8.x before 8.15.1, 10.x before 10.15.2, and 11.x before...7.5 HighMozillaFirefox-branding-SLEDSUSEPython 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode...9.8 CriticalMozillaFirefox-branding-SLEDSUSEAn exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python...5.9 MediumMozillaFirefox-branding-SLEDSUSEModules/_pickle.c in Python before 3.7.1 has an integer overflow via a large LONG_BINPUT value...7.5 HighMozillaFirefox-branding-SLEDSUSENode.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Hostname spoofing in...4.3 MediumMozillaFirefox-branding-SLEDSUSENode.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Slowloris HTTP Denial...7.5 HighMozillaFirefox-branding-SLEDSUSENode.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Denial of Service with...7.5 High- Show moreLoading…