firefox-harfbuzz vulnerabilities (SUSE)
119 vulnerabilities.
firefox-harfbuzzSUSEDue to an error while parsing page content, it is possible for properly sanitized user input to...6.1 Mediumfirefox-harfbuzzSUSENecko can access a child on the wrong thread during UDP connections, resulting in a potentially...9.8 Criticalfirefox-harfbuzzSUSEA use-after-free vulnerability can occur in HTTP/2 when a cached HTTP/2 stream is closed while...9.8 Criticalfirefox-harfbuzzSUSEPOST requests made by NPAPI plugins, such as Flash, that receive a status 308 redirect response...8.8 Highfirefox-harfbuzzSUSEWhen an inner window is reused, it does not consider the use of document.domain for cross-origin...8.8 Highfirefox-harfbuzzSUSEMozilla developers and community members reported memory safety bugs present in Firefox 67. Some...9.8 Criticalfirefox-harfbuzzSUSEMozilla developers and community members reported memory safety bugs present in Firefox 67 and...9.8 Criticalfirefox-harfbuzzSUSEA security regression of CVE-2019-9636 was discovered in python since commit...9.8 Criticalfirefox-harfbuzzSUSEArbitrary File Overwrite in fstream7.5 Highfirefox-harfbuzzSUSEAn issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through...6.1 Mediumfirefox-harfbuzzSUSEIn Node.js including 6.x before 6.17.0, 8.x before 8.15.1, 10.x before 10.15.2, and 11.x before...7.5 Highfirefox-harfbuzzSUSEPython 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode...9.8 Criticalfirefox-harfbuzzSUSEAn exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python...5.9 Mediumfirefox-harfbuzzSUSEModules/_pickle.c in Python before 3.7.1 has an integer overflow via a large LONG_BINPUT value...7.5 Highfirefox-harfbuzzSUSENode.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Hostname spoofing in...4.3 Mediumfirefox-harfbuzzSUSENode.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Slowloris HTTP Denial...7.5 Highfirefox-harfbuzzSUSENode.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Denial of Service with...7.5 Highfirefox-harfbuzzSUSENode.js: All versions prior to Node.js 6.15.0 and 8.14.0: HTTP request splitting: If Node.js can...7.5 Highfirefox-harfbuzzSUSEIn all versions of Node.js prior to 6.14.4, 8.11.4 and 10.9.0 when used with UCS-2 encoding ...7.5 Highfirefox-harfbuzzSUSECalling Buffer.fill() or Buffer.alloc() with some parameters can lead to a hang which could...7.5 Highfirefox-harfbuzzSUSEAll versions of Node.js 8.x, 9.x, and 10.x are vulnerable and the severity is HIGH. An attacker...7.5 Highfirefox-harfbuzzSUSEClient DoS due to large DH parameter7.5 Highfirefox-harfbuzzSUSEWithdrawn Advisory: Node.js Inspector RCE via DNS Rebinding8.8 Highfirefox-harfbuzzSUSEThe HTTP parser in all current versions of Node.js ignores spaces in the `Content-Length` header,...5.3 Mediumfirefox-harfbuzzSUSEThe `'path'` module in the Node.js 4.x release line contains a potential regular expression...7.5 Highfirefox-harfbuzzSUSEnghttp2 version >= 1.10.0 and nghttp2 <= v1.31.0 contains an Improper Input Validation CWE-20...7.5 Highfirefox-harfbuzzSUSE** DISPUTED ** The Wave_read._read_fmt_chunk function in Lib/wave.py in Python through 3.6.4 does...6.5 Mediumfirefox-harfbuzzSUSEIn Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in pp_list_one_macro in asm...5.5 Mediumfirefox-harfbuzzSUSEIn Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in the function find_cc()...5.5 Mediumfirefox-harfbuzzSUSEIn Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer over-read that will cause a...7.5 Highfirefox-harfbuzzSUSEIn Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in pp_verror in asm/preproc.c that...5.5 Mediumfirefox-harfbuzzSUSEIn Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in pp_getline in asm/preproc.c...5.5 Mediumfirefox-harfbuzzSUSEIn Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in is_mmacro() in asm...5.5 Mediumfirefox-harfbuzzSUSEIn Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in do_directive in asm/preproc.c...5.5 Mediumfirefox-harfbuzzSUSEIn Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in the pp_list_one_macro function...5.5 Mediumfirefox-harfbuzzSUSEIn Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer over-read in the function...5.5 Mediumfirefox-harfbuzzSUSEIn Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer overflow that will cause a...5.5 Mediumfirefox-harfbuzzSUSEIn Netwide Assembler (NASM) 2.14rc0, there is a "SEGV on unknown address" that will cause a...5.5 Mediumfirefox-harfbuzzSUSENode.js had a bug in versions 8.X and 9.X which caused buffers to not be initialized when the...3.1 Lowfirefox-harfbuzzSUSENode.js was affected by OpenSSL vulnerability CVE-2017-3737 in regards to the use of SSL_read()...9.1 Criticalfirefox-harfbuzzSUSEThere is an overflow bug in the AVX2 Montgomery multiplication procedure used in exponentiation...5.9 Mediumfirefox-harfbuzzSUSEThere is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1...6.5 Mediumfirefox-harfbuzzSUSENode.js before 4.8.5, 6.x before 6.11.5, and 8.x before 8.8.0 allows remote attackers to cause a...7.5 Highfirefox-harfbuzzSUSENode.js 4.0.0, 4.1.0, and 4.1.1 allows remote attackers to cause a denial of service.7.5 Highfirefox-harfbuzzSUSENode.js 8.5.0 before 8.6.0 allows remote attackers to access unintended files, because a change...7.5 Highfirefox-harfbuzzSUSEIn Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in the function...5.5 Mediumfirefox-harfbuzzSUSEWhile parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one...5.3 Mediumfirefox-harfbuzzSUSENode.js v4.0 through v4.8.3, all versions of v5.x, v6.0 through v6.11.0, v7.0 through v7.10.0,...7.5 Highfirefox-harfbuzzSUSEIn Netwide Assembler (NASM) 2.14rc0, preproc.c allows remote attackers to cause a denial of...7.8 Highfirefox-harfbuzzSUSEIn Netwide Assembler (NASM) 2.14rc0, there are multiple heap use after free vulnerabilities in...7.8 High- Show moreLoading…