MozillaFirefox vulnerabilities (SUSE)
1,883 vulnerabilities.
MozillaFirefoxSUSEA use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this...7.5 HighMozillaFirefoxSUSEWebExtensions can bypass security checks to load privileged URLs and potentially escape the...7.5 HighMozillaFirefoxSUSECanvas allows the use of the "feDisplacementMap" filter on images loaded cross-origin. The...7.0 HighMozillaFirefoxSUSEAn issue where a "<select>" dropdown menu can be used to cover location bar content, resulting in...5.9 MediumMozillaFirefoxSUSEAn issue where WebExtensions can use the mozAddonManager API to elevate privilege due to...9.8 CriticalMozillaFirefoxSUSEContent Security Policy combined with HTTP to HTTPS redirection can be used by malicious server...5.3 MediumMozillaFirefoxSUSEA use-after-free in nsINode::ReplaceOrInsertBefore during DOM operations resulting in potentially...7.8 HighMozillaFirefoxSUSEA use-after-free during web animations when working with timelines resulting in a potentially...7.5 HighMozillaFirefoxSUSETwo use-after-free errors during DOM operations resulting in potentially exploitable crashes....6.5 MediumMozillaFirefoxSUSEAn integer overflow during the parsing of XML using the Expat library. This vulnerability affects...9.8 CriticalMozillaFirefoxSUSEIt was found that Diffie Hellman Client key exchange handling in NSS 3.21.x was vulnerable to...5.3 MediumMozillaFirefoxSUSEDuring URL parsing, a maliciously crafted URL can cause a potentially exploitable crash. This...6.5 MediumMozillaFirefoxSUSEMemory safety bugs were reported in Firefox 49. Some of these bugs showed evidence of memory...9.8 CriticalMozillaFirefoxSUSEAn existing mitigation of timing side-channel attacks is insufficient in some circumstances. This...5.9 MediumMozillaFirefoxSUSEA buffer overflow resulting in a potentially exploitable crash due to memory allocation issues...7.5 HighMozillaFirefoxSUSEAdd-on updates failed to verify that the add-on ID inside the signed package matched the ID of...5.9 MediumMozillaFirefoxSUSEAn error in argument length checking in JavaScript, leading to potential integer overflows or...9.8 CriticalMozillaFirefoxSUSEA heap-buffer-overflow in Cairo when processing SVG content caused by compiler optimization,...7.5 HighMozillaFirefoxSUSEA same-origin policy bypass with local shortcut files to load arbitrary local content from disk....5.5 MediumMozillaFirefoxSUSEMemory safety bugs were reported in Firefox 49 and Firefox ESR 45.4. Some of these bugs showed...9.8 CriticalMozillaFirefoxSUSENull pointer dereference vulnerability exists in K11_SignWithSymKey /...7.5 HighMozillaFirefoxSUSEThe tls.checkServerIdentity function in Node.js 0.10.x before 0.10.47, 0.12.x before 0.12.16, 4.x...5.9 MediumMozillaFirefoxSUSECRLF injection vulnerability in the ServerResponse#writeHead function in Node.js 0.10.x before 0...6.1 MediumMozillaFirefoxSUSEcrypto/x509/x509_vfy.c in OpenSSL 1.0.2i allows remote attackers to cause a denial of service ...7.5 HighMozillaFirefoxSUSEMultiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before...7.5 HighMozillaFirefoxSUSEMozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird < 45.4 rely on...7.4 HighMozillaFirefoxSUSEUse-after-free vulnerability in the DOMSVGLength class in Mozilla Firefox before 49.0, Firefox...9.8 CriticalMozillaFirefoxSUSEUse-after-free vulnerability in the mozilla::nsTextNodeDirectionalityMap::RemoveElementFromMap...9.8 CriticalMozillaFirefoxSUSEHeap-based buffer overflow in the nsBMPEncoder::AddImageFrame function in Mozilla Firefox before...8.8 HighMozillaFirefoxSUSEUse-after-free vulnerability in the nsRefreshDriver::Tick function in Mozilla Firefox before 49.0...9.8 CriticalMozillaFirefoxSUSEUse-after-free vulnerability in the mozilla::a11y::DocAccessible::ProcessInvalidationList...9.8 CriticalMozillaFirefoxSUSEUse-after-free vulnerability in the nsFrameManager::CaptureFrameState function in Mozilla Firefox...9.8 CriticalMozillaFirefoxSUSEThe nsImageGeometryMixin class in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and...8.8 HighMozillaFirefoxSUSEHeap-based buffer overflow in the nsCaseTransformTextRunFactory::TransformString function in...9.8 CriticalMozillaFirefoxSUSEMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 49.0,...9.8 CriticalMozillaFirefoxSUSEThe certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote...5.9 MediumMozillaFirefoxSUSEThe parser in Google V8, as used in Google Chrome before 53.0.2785.113, mishandles scopes, which...6.5 MediumMozillaFirefoxSUSEThe DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols...7.5 HighMozillaFirefoxSUSEHeap-based buffer overflow in the yy_get_next_buffer function in Flex before 2.6.1 might allow...9.8 CriticalMozillaFirefoxSUSEMozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allow user-assisted remote attackers...5.5 MediumMozillaFirefoxSUSEUse-after-free vulnerability in the nsNodeUtils::NativeAnonymousChildListChange function in...8.8 HighMozillaFirefoxSUSEThe nsDisplayList::HitTest function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45...8.8 HighMozillaFirefoxSUSEMozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 process JavaScript event-handler...6.1 MediumMozillaFirefoxSUSEInteger overflow in the WebSocketChannel class in the WebSockets subsystem in Mozilla Firefox...8.8 HighMozillaFirefoxSUSEUse-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox...8.8 HighMozillaFirefoxSUSEUse-after-free vulnerability in the WebRTC socket thread in Mozilla Firefox before 48.0 and...8.8 HighMozillaFirefoxSUSEUse-after-free vulnerability in the nsXULPopupManager::KeyDown function in Mozilla Firefox before...9.8 CriticalMozillaFirefoxSUSEStack-based buffer underflow in the mozilla::gfx::BasePoint4d function in Mozilla Firefox before...8.8 HighMozillaFirefoxSUSEMozilla Firefox before 48.0, Firefox ESR < 45.4 and Thunderbird < 45.4 allow remote attackers to...4.3 MediumMozillaFirefoxSUSEMozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 on Linux make cairo...6.5 Medium- Show moreLoading…