MozillaFirefox vulnerabilities (SUSE)
1,883 vulnerabilities.
MozillaFirefoxSUSEA compromised IPC child process can escape the content sandbox and list the names of arbitrary...6.5 MediumMozillaFirefoxSUSENPAPI plugins, such as Adobe Flash, can send non-simple cross-origin requests, bypassing CORS by...8.8 HighMozillaFirefoxSUSEA use-after-free vulnerability can occur when script uses mutation events to move DOM nodes...8.8 HighMozillaFirefoxSUSEAn integer overflow can occur during graphics operations done by the Supplemental Streaming SIMD...8.8 HighMozillaFirefoxSUSEA use-after-free vulnerability can occur when deleting an input element during a mutation event...8.8 HighMozillaFirefoxSUSEA buffer overflow can occur when rendering canvas content while adjusting the height and width of...8.8 HighMozillaFirefoxSUSECalling Buffer.fill() or Buffer.alloc() with some parameters can lead to a hang which could...7.5 HighMozillaFirefoxSUSEAll versions of Node.js 8.x, 9.x, and 10.x are vulnerable and the severity is HIGH. An attacker...7.5 HighMozillaFirefoxSUSELibgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA...4.7 MediumMozillaFirefoxSUSEClient DoS due to large DH parameter7.5 HighMozillaFirefoxSUSEIn 32-bit versions of Firefox, the Adobe Flash plugin setting for "Enable Adobe Flash protected...5.3 MediumMozillaFirefoxSUSEA precision error in Skia in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to...8.8 HighMozillaFirefoxSUSEIn the Windows 10 April 2018 Update, Windows Defender SmartScreen honors the "SEE_MASK_FLAG_NO_UI...7.5 HighMozillaFirefoxSUSEIf a text string that happens to be a filename in the operating system's native format is dragged...7.5 HighMozillaFirefoxSUSEIf a URL using the "file:" protocol is dragged and dropped onto an open tab that is running in a...7.5 HighMozillaFirefoxSUSEA use-after-free vulnerability can occur during WebGL operations. While this results in a...7.5 HighMozillaFirefoxSUSEA vulnerability exists in XSLT during number formatting where a negative buffer size may be...7.5 HighMozillaFirefoxSUSEThe JSON Viewer displays clickable hyperlinks for strings that are parseable as URLs, including ...6.1 MediumMozillaFirefoxSUSEA mechanism to bypass Content Security Policy (CSP) protections on sites that have a "script-src"...6.1 MediumMozillaFirefoxSUSEThe filename appearing in the "Downloads" panel improperly renders some Unicode characters,...5.3 MediumMozillaFirefoxSUSEThe Live Bookmarks page and the PDF viewer can run injected script content if a user pastes...4.3 MediumMozillaFirefoxSUSEIf manipulated hyperlinked text with "chrome:" URL contained in it is dragged and dropped on the ...6.5 MediumMozillaFirefoxSUSEThe web console and JavaScript debugger do not sanitize all output that can be hyperlinked. Both...4.3 MediumMozillaFirefoxSUSEWebExtensions can use request redirection and a "filterReponseData" filter to bypass host...7.5 HighMozillaFirefoxSUSEContent Security Policy (CSP) is not applied correctly to all parts of multipart content sent...6.1 MediumMozillaFirefoxSUSEIf a malicious attacker has used another vulnerability to gain full control over a content...8.1 HighMozillaFirefoxSUSEWebRTC can use a "WrappedI420Buffer" pixel buffer but the owning image object can be freed while...7.5 HighMozillaFirefoxSUSEIf websocket data is sent with mixed text and binary in a single message, the binary data can be...7.5 HighMozillaFirefoxSUSEWebExtensions with the appropriate permissions can attach content scripts to Mozilla sites such...6.5 MediumMozillaFirefoxSUSEMemory safety bugs were reported in Firefox 59. Some of these bugs showed evidence of memory...9.8 CriticalMozillaFirefoxSUSEMozilla developers backported selected changes in the Skia library. These changes correct memory...9.8 CriticalMozillaFirefoxSUSEA buffer overflow was found during UTF8 to Unicode string conversion within JavaScript with...8.1 HighMozillaFirefoxSUSESites can bypass security checks on permissions to install lightweight themes by manipulating the...5.3 MediumMozillaFirefoxSUSEAn integer overflow can occur in the Skia library due to 32-bit integer use in an array without...9.8 CriticalMozillaFirefoxSUSEMalicious PDF can inject JavaScript into PDF Viewer8.8 HighMozillaFirefoxSUSESame-origin protections for the PDF viewer can be bypassed, allowing a malicious site to...7.5 HighMozillaFirefoxSUSEA use-after-free vulnerability can occur while adjusting layout during SVG animations with text...9.8 CriticalMozillaFirefoxSUSEA use-after-free vulnerability can occur while enumerating attributes during SVG animations with...9.8 CriticalMozillaFirefoxSUSEMemory safety bugs were reported in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7. Some of...9.8 CriticalMozillaFirefoxSUSEWithdrawn Advisory: Node.js Inspector RCE via DNS Rebinding8.8 HighMozillaFirefoxSUSEThe HTTP parser in all current versions of Node.js ignores spaces in the `Content-Length` header,...5.3 MediumMozillaFirefoxSUSEThe `'path'` module in the Node.js 4.x release line contains a potential regular expression...7.5 HighMozillaFirefoxSUSEnghttp2 version >= 1.10.0 and nghttp2 <= v1.31.0 contains an Improper Input Validation CWE-20...7.5 HighMozillaFirefoxSUSEA use-after-free vulnerability can occur in the compositor during certain graphics operations...9.8 CriticalMozillaFirefoxSUSEThe libtremor library has the same flaw as CVE-2018-5146. This library is used by Firefox in...9.8 CriticalMozillaFirefoxSUSEAn out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own...8.8 HighMozillaFirefoxSUSEMemory safety bugs were reported in Firefox ESR 52.6. These bugs showed evidence of memory...9.8 CriticalMozillaFirefoxSUSEAn integer overflow can occur during conversion of text to some Unicode character sets due to an...7.3 HighMozillaFirefoxSUSEUnder certain circumstances the "fetch()" API can return transient local copies of resources that...5.9 MediumMozillaFirefoxSUSEWhen packets with a mismatched RTP payload type are sent in WebRTC connections, in some...8.8 High- Show moreLoading…