mozilla-nspr vulnerabilities (SUSE)
436 vulnerabilities.
mozilla-nsprSUSEA use-after-free vulnerability can occur when refresh driver timers are refreshed in some...9.8 Criticalmozilla-nsprSUSEMemory safety bugs present in Firefox 61 and Firefox ESR 60.1. Some of these bugs showed evidence...9.8 Criticalmozilla-nsprSUSEWhen handling a SSLv2-compatible ClientHello request, the server doesn't generate a new random...5.9 Mediummozilla-nsprSUSEIn all versions of Node.js prior to 6.14.4, 8.11.4 and 10.9.0 when used with UCS-2 encoding ...7.5 Highmozilla-nsprSUSECalling Buffer.fill() or Buffer.alloc() with some parameters can lead to a hang which could...7.5 Highmozilla-nsprSUSEAll versions of Node.js 8.x, 9.x, and 10.x are vulnerable and the severity is HIGH. An attacker...7.5 Highmozilla-nsprSUSELibgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA...4.7 Mediummozilla-nsprSUSEClient DoS due to large DH parameter7.5 Highmozilla-nsprSUSEWithdrawn Advisory: Node.js Inspector RCE via DNS Rebinding8.8 Highmozilla-nsprSUSEThe HTTP parser in all current versions of Node.js ignores spaces in the `Content-Length` header,...5.3 Mediummozilla-nsprSUSEThe `'path'` module in the Node.js 4.x release line contains a potential regular expression...7.5 Highmozilla-nsprSUSEnghttp2 version >= 1.10.0 and nghttp2 <= v1.31.0 contains an Improper Input Validation CWE-20...7.5 Highmozilla-nsprSUSE** DISPUTED ** The Wave_read._read_fmt_chunk function in Lib/wave.py in Python through 3.6.4 does...6.5 Mediummozilla-nsprSUSEIn Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in pp_list_one_macro in asm...5.5 Mediummozilla-nsprSUSEIn Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in the function find_cc()...5.5 Mediummozilla-nsprSUSEIn Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer over-read that will cause a...7.5 Highmozilla-nsprSUSEIn Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in pp_verror in asm/preproc.c that...5.5 Mediummozilla-nsprSUSEIn Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in pp_getline in asm/preproc.c...5.5 Mediummozilla-nsprSUSEIn Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in is_mmacro() in asm...5.5 Mediummozilla-nsprSUSEIn Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in do_directive in asm/preproc.c...5.5 Mediummozilla-nsprSUSEIn Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in the pp_list_one_macro function...5.5 Mediummozilla-nsprSUSEIn Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer over-read in the function...5.5 Mediummozilla-nsprSUSEIn Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer overflow that will cause a...5.5 Mediummozilla-nsprSUSEIn Netwide Assembler (NASM) 2.14rc0, there is a "SEGV on unknown address" that will cause a...5.5 Mediummozilla-nsprSUSENode.js had a bug in versions 8.X and 9.X which caused buffers to not be initialized when the...3.1 Lowmozilla-nsprSUSENode.js was affected by OpenSSL vulnerability CVE-2017-3737 in regards to the use of SSL_read()...9.1 Criticalmozilla-nsprSUSEThere is an overflow bug in the AVX2 Montgomery multiplication procedure used in exponentiation...5.9 Mediummozilla-nsprSUSETor Browser before 7.0.9 on macOS and Linux allows remote attackers to bypass the intended...6.5 Mediummozilla-nsprSUSEThere is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1...6.5 Mediummozilla-nsprSUSENode.js before 4.8.5, 6.x before 6.11.5, and 8.x before 8.8.0 allows remote attackers to cause a...7.5 Highmozilla-nsprSUSENode.js 4.0.0, 4.1.0, and 4.1.1 allows remote attackers to cause a denial of service.7.5 Highmozilla-nsprSUSENode.js 8.5.0 before 8.6.0 allows remote attackers to access unintended files, because a change...7.5 Highmozilla-nsprSUSEIn Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in the function...5.5 Mediummozilla-nsprSUSEWhile parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one...5.3 Mediummozilla-nsprSUSENode.js v4.0 through v4.8.3, all versions of v5.x, v6.0 through v6.11.0, v7.0 through v7.10.0,...7.5 Highmozilla-nsprSUSEIn Netwide Assembler (NASM) 2.14rc0, preproc.c allows remote attackers to cause a denial of...7.8 Highmozilla-nsprSUSEIn Netwide Assembler (NASM) 2.14rc0, there are multiple heap use after free vulnerabilities in...7.8 Highmozilla-nsprSUSEThe c-ares function `ares_parse_naptr_reply()`, which is used for parsing NAPTR responses, could...7.5 Highmozilla-nsprSUSEnss before version 3.30 is vulnerable to a remote denial of service during the session handshake...5.9 Mediummozilla-nsprSUSEFixed potential buffer overflows in generated Firefox code due to CVE-2016-6354 issue in Flex....9.8 Criticalmozilla-nsprSUSEAn out-of-bounds read while processing SVG content in "ConvolvePixel". This results in a crash...9.1 Criticalmozilla-nsprSUSEDuring DOM manipulations of the accessibility tree through script, the DOM tree can become out of...9.8 Criticalmozilla-nsprSUSEA flaw in DRBG number generation within the Network Security Services (NSS) library where the...5.3 Mediummozilla-nsprSUSEMozilla Network Security Services (NSS) before 3.21.4, 3.22.x through 3.28.x before 3.28.4, 3.29...9.8 Criticalmozilla-nsprSUSEA use-after-free vulnerability in frame selection triggered by a combination of malicious script...9.8 Criticalmozilla-nsprSUSEA buffer overflow in WebGL triggerable by web content, resulting in a potentially exploitable...9.8 Criticalmozilla-nsprSUSEAn out-of-bounds write in "ClearKeyDecryptor" while decrypting some Clearkey-encrypted media...8.6 Highmozilla-nsprSUSEAn out-of-bounds read during the processing of glyph widths during text layout. This results in a...9.1 Criticalmozilla-nsprSUSEAn out-of-bounds read when an HTTP/2 connection to a servers sends "DATA" frames with incorrect...9.8 Criticalmozilla-nsprSUSEA vulnerability while parsing "application/http-index-format" format content where uninitialized...7.5 High- Show moreLoading…