firefox-gdk-pixbuf vulnerabilities (SUSE)
119 vulnerabilities.
firefox-gdk-pixbufSUSESecurity update for MozillaFirefox, mozilla-nss, mozilla-nsprNo scorefirefox-gdk-pixbufSUSEMozilla community member Philipp reported a memory safety bug present in Firefox 68 when 360...8.8 Highfirefox-gdk-pixbufSUSEMozilla developers and community members reported memory safety bugs present in Firefox 69 and...8.8 Highfirefox-gdk-pixbufSUSEFailure to correctly handle null bytes when processing HTML entities resulted in Firefox...6.1 Mediumfirefox-gdk-pixbufSUSEIf two same-origin documents set document.domain differently to become cross-origin, it was...6.1 Mediumfirefox-gdk-pixbufSUSEBy using a form with a data URI it was possible to gain access to the privileged JSONView object...5.4 Mediumfirefox-gdk-pixbufSUSEA fixed-size stack buffer could overflow in nrappkit when doing WebRTC signaling. This resulted...8.8 Highfirefox-gdk-pixbufSUSEAn attacker could have caused 4 bytes of HMAC output to be written past the end of a buffer...8.8 Highfirefox-gdk-pixbufSUSEWhen following the value's prototype chain, it was possible to retain a reference to a locale,...8.8 Highfirefox-gdk-pixbufSUSEThe Firefox installer allows Firefox to be installed to a custom user writable location, leaving...7.8 Highfirefox-gdk-pixbufSUSELogging-related command line parameters are not properly sanitized when Firefox is launched by...8.8 Highfirefox-gdk-pixbufSUSEThe Mozilla Maintenance Service does not guard against files being hardlinked to another file in...7.0 Highfirefox-gdk-pixbufSUSEGiven a compromised sandboxed content process due to a separate vulnerability, it is possible to...9.3 Criticalfirefox-gdk-pixbufSUSEIn libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing...7.5 Highfirefox-gdk-pixbufSUSEIt is possible to delete an IndexedDB key value and subsequently try to extract it during...8.8 Highfirefox-gdk-pixbufSUSEA type confusion vulnerability exists in Spidermonkey, which results in a non-exploitable crash....6.5 Mediumfirefox-gdk-pixbufSUSEA vulnerability exists in WebRTC where malicious web content can use probing techniques on the...4.3 Mediumfirefox-gdk-pixbufSUSEWebRTC in Firefox will honor persisted permissions given to sites for access to microphone and...6.5 Mediumfirefox-gdk-pixbufSUSEThe "Forget about this site" feature in the History pane is intended to remove all saved user...6.5 Mediumfirefox-gdk-pixbufSUSEA use-after-free vulnerability can occur while manipulating video elements if the body is freed...8.8 Highfirefox-gdk-pixbufSUSESome HTML elements, such as <title> and <textarea>, can contain literal angle...6.1 Mediumfirefox-gdk-pixbufSUSENavigation events were not fully adhering to the W3C's "Navigation-Timing Level 2" draft...3.7 Lowfirefox-gdk-pixbufSUSEA same-origin policy violation occurs allowing the theft of cross-origin images through a...6.5 Mediumfirefox-gdk-pixbufSUSEMozilla developers and community members reported memory safety bugs present in Firefox 68,...8.8 Highfirefox-gdk-pixbufSUSEIf a Content Security Policy (CSP) directive is defined that uses a hash-based source that takes...6.3 Mediumfirefox-gdk-pixbufSUSEMozilla developers and community members reported memory safety bugs present in Firefox 68 and...8.8 Highfirefox-gdk-pixbufSUSEWhen a master password is set, it is required to be entered again before stored passwords can be...9.8 Criticalfirefox-gdk-pixbufSUSESome HTTP/2 implementations are vulnerable to a flood of empty frames, potentially leading to a denial of service7.5 Highfirefox-gdk-pixbufSUSESome HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service7.5 Highfirefox-gdk-pixbufSUSESome HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service7.5 Highfirefox-gdk-pixbufSUSESome HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service7.5 Highfirefox-gdk-pixbufSUSESome HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service7.5 Highfirefox-gdk-pixbufSUSESome HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service7.5 Highfirefox-gdk-pixbufSUSESome HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service7.5 Highfirefox-gdk-pixbufSUSESome HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service7.5 Highfirefox-gdk-pixbufSUSEhttp.cookiejar.DefaultPolicy.domain_return_ok in Lib/http/cookiejar.py in Python before 3.7.3...5.3 Mediumfirefox-gdk-pixbufSUSEAs part of a winning Pwn2Own entry, a researcher demonstrated a sandbox escape by installing a...8.3 Highfirefox-gdk-pixbufSUSEA vulnerability exists where if a user opens a locally saved HTML file, this file can use file:...6.5 Mediumfirefox-gdk-pixbufSUSEEmpty or malformed p256-ECDH public keys may trigger a segmentation fault due values being...7.5 Highfirefox-gdk-pixbufSUSEThe HTTP Alternative Services header, Alt-Svc, can be used by a malicious site to scan all TCP...4.7 Mediumfirefox-gdk-pixbufSUSEA vulnerability exists where it possible to force Network Security Services (NSS) to sign...5.3 Mediumfirefox-gdk-pixbufSUSEWhen a user navigates to site marked as unsafe by the Safebrowsing API, warning messages are...6.5 Mediumfirefox-gdk-pixbufSUSEApplication permissions give additional remote troubleshooting permission to the site input...6.1 Mediumfirefox-gdk-pixbufSUSEA vulnerability exists during the installation of add-ons where the initial fetch ignored the...7.5 Highfirefox-gdk-pixbufSUSEThe unicode latin 'kra' character can be used to spoof a standard 'k' character in the addressbar...6.5 Mediumfirefox-gdk-pixbufSUSESome unicode characters are incorrectly treated as whitespace during the parsing of web content...6.1 Mediumfirefox-gdk-pixbufSUSEWhen importing a curve25519 private key in PKCS#8format with leading 0x00 bytes, it is possible...7.5 Highfirefox-gdk-pixbufSUSEActivity Stream can display content from sent from the Snippet Service website. This content is...5.3 Mediumfirefox-gdk-pixbufSUSEA vulnerability exists where the caret ("^") character is improperly escaped constructing some...5.3 Mediumfirefox-gdk-pixbufSUSEUntil explicitly accessed by script, window.globalThis is not enumerable and, as a result, is not...8.3 High- Show olderLoading…