MozillaFirefox vulnerabilities (SUSE)
1,883 vulnerabilities.
MozillaFirefoxSUSESome HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service7.5 HighMozillaFirefoxSUSESome HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service7.5 HighMozillaFirefoxSUSESome HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service7.5 HighMozillaFirefoxSUSESome HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service7.5 HighMozillaFirefoxSUSEhttp.cookiejar.DefaultPolicy.domain_return_ok in Lib/http/cookiejar.py in Python before 3.7.3...5.3 MediumMozillaFirefoxSUSEAs part of a winning Pwn2Own entry, a researcher demonstrated a sandbox escape by installing a...8.3 HighMozillaFirefoxSUSEA vulnerability exists where if a user opens a locally saved HTML file, this file can use file:...6.5 MediumMozillaFirefoxSUSEEmpty or malformed p256-ECDH public keys may trigger a segmentation fault due values being...7.5 HighMozillaFirefoxSUSEThe HTTP Alternative Services header, Alt-Svc, can be used by a malicious site to scan all TCP...4.7 MediumMozillaFirefoxSUSEA vulnerability exists where it possible to force Network Security Services (NSS) to sign...5.3 MediumMozillaFirefoxSUSEWhen a user navigates to site marked as unsafe by the Safebrowsing API, warning messages are...6.5 MediumMozillaFirefoxSUSEApplication permissions give additional remote troubleshooting permission to the site input...6.1 MediumMozillaFirefoxSUSEA vulnerability exists during the installation of add-ons where the initial fetch ignored the...7.5 HighMozillaFirefoxSUSEThe unicode latin 'kra' character can be used to spoof a standard 'k' character in the addressbar...6.5 MediumMozillaFirefoxSUSESome unicode characters are incorrectly treated as whitespace during the parsing of web content...6.1 MediumMozillaFirefoxSUSEWhen importing a curve25519 private key in PKCS#8format with leading 0x00 bytes, it is possible...7.5 HighMozillaFirefoxSUSEActivity Stream can display content from sent from the Snippet Service website. This content is...5.3 MediumMozillaFirefoxSUSEA vulnerability exists where the caret ("^") character is improperly escaped constructing some...5.3 MediumMozillaFirefoxSUSEUntil explicitly accessed by script, window.globalThis is not enumerable and, as a result, is not...8.3 HighMozillaFirefoxSUSEDue to an error while parsing page content, it is possible for properly sanitized user input to...6.1 MediumMozillaFirefoxSUSENecko can access a child on the wrong thread during UDP connections, resulting in a potentially...9.8 CriticalMozillaFirefoxSUSEA use-after-free vulnerability can occur in HTTP/2 when a cached HTTP/2 stream is closed while...9.8 CriticalMozillaFirefoxSUSEPOST requests made by NPAPI plugins, such as Flash, that receive a status 308 redirect response...8.8 HighMozillaFirefoxSUSEWhen an inner window is reused, it does not consider the use of document.domain for cross-origin...8.8 HighMozillaFirefoxSUSEMozilla developers and community members reported memory safety bugs present in Firefox 67. Some...9.8 CriticalMozillaFirefoxSUSEMozilla developers and community members reported memory safety bugs present in Firefox 67 and...9.8 CriticalMozillaFirefoxSUSEInsufficient vetting of parameters passed with the Prompt:Open IPC message between child and...10.0 CriticalMozillaFirefoxSUSEA type confusion vulnerability can occur when manipulating JavaScript objects due to issues in...8.8 HighMozillaFirefoxSUSEA security regression of CVE-2019-9636 was discovered in python since commit...9.8 CriticalMozillaFirefoxSUSEA race condition is present in the crash generation server used to generate data for the crash...8.3 HighMozillaFirefoxSUSEIf hyperthreading is not disabled, a timing attack vulnerability exists, similar to previous...8.1 HighMozillaFirefoxSUSEA vulnerability exists in the Windows sandbox where an uninitialized value in memory can be...7.5 HighMozillaFirefoxSUSEArbitrary File Overwrite in fstream7.5 HighMozillaFirefoxSUSEA use-after-free vulnerability can occur in the chrome event handler when it is freed while still...9.8 CriticalMozillaFirefoxSUSEA vulnerability where a JavaScript compartment mismatch can occur while working with the fetch...9.8 CriticalMozillaFirefoxSUSEImages from a different domain can be read using a canvas object in some circumstances. This...5.3 MediumMozillaFirefoxSUSEA possible vulnerability exists where type confusion can occur when manipulating JavaScript...5.9 MediumMozillaFirefoxSUSEMozilla developers and community members reported memory safety bugs present in Firefox 66,...9.8 CriticalMozillaFirefoxSUSEIf a crafted hyperlink is dragged and dropped to the bookmark bar or sidebar and the resulting...5.3 MediumMozillaFirefoxSUSEThe bufferdata function in WebGL is vulnerable to a buffer overflow with specific graphics...9.8 CriticalMozillaFirefoxSUSEA use-after-free vulnerability can occur when listeners are removed from the event listener...9.8 CriticalMozillaFirefoxSUSEA use-after-free vulnerability can occur when working with XMLHttpRequest (XHR) in an event loop,...9.8 CriticalMozillaFirefoxSUSEFirefox will accept any registered Program ID as an external protocol handler and offer to launch...5.3 MediumMozillaFirefoxSUSEA vulnerability was discovered where specific command line arguments are not properly discarded...9.8 CriticalMozillaFirefoxSUSEIncorrect handling of __proto__ mutations may lead to type confusion in IonMonkey JIT code and...8.8 HighMozillaFirefoxSUSEIncorrect alias information in IonMonkey JIT compiler for Array.prototype.slice method may lead...8.8 HighMozillaFirefoxSUSEAn issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through...6.1 MediumMozillaFirefoxSUSEA use-after-free vulnerability can occur when the SMIL animation controller incorrectly registers...9.8 CriticalMozillaFirefoxSUSEA vulnerability where type-confusion in the IonMonkey just-in-time (JIT) compiler could...9.8 CriticalMozillaFirefoxSUSEA mechanism was discovered that removes some bounds checking for string, array, or typed array...5.9 Medium- Show moreLoading…