mozilla-nspr vulnerabilities (SUSE)
436 vulnerabilities.
mozilla-nsprSUSESome HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service7.5 Highmozilla-nsprSUSESome HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service7.5 Highmozilla-nsprSUSEhttp.cookiejar.DefaultPolicy.domain_return_ok in Lib/http/cookiejar.py in Python before 3.7.3...5.3 Mediummozilla-nsprSUSEAs part of a winning Pwn2Own entry, a researcher demonstrated a sandbox escape by installing a...8.3 Highmozilla-nsprSUSEA vulnerability exists where if a user opens a locally saved HTML file, this file can use file:...6.5 Mediummozilla-nsprSUSEEmpty or malformed p256-ECDH public keys may trigger a segmentation fault due values being...7.5 Highmozilla-nsprSUSEThe HTTP Alternative Services header, Alt-Svc, can be used by a malicious site to scan all TCP...4.7 Mediummozilla-nsprSUSEA vulnerability exists where it possible to force Network Security Services (NSS) to sign...5.3 Mediummozilla-nsprSUSEWhen a user navigates to site marked as unsafe by the Safebrowsing API, warning messages are...6.5 Mediummozilla-nsprSUSEApplication permissions give additional remote troubleshooting permission to the site input...6.1 Mediummozilla-nsprSUSEA vulnerability exists during the installation of add-ons where the initial fetch ignored the...7.5 Highmozilla-nsprSUSEThe unicode latin 'kra' character can be used to spoof a standard 'k' character in the addressbar...6.5 Mediummozilla-nsprSUSESome unicode characters are incorrectly treated as whitespace during the parsing of web content...6.1 Mediummozilla-nsprSUSEWhen importing a curve25519 private key in PKCS#8format with leading 0x00 bytes, it is possible...7.5 Highmozilla-nsprSUSEActivity Stream can display content from sent from the Snippet Service website. This content is...5.3 Mediummozilla-nsprSUSEA vulnerability exists where the caret ("^") character is improperly escaped constructing some...5.3 Mediummozilla-nsprSUSEUntil explicitly accessed by script, window.globalThis is not enumerable and, as a result, is not...8.3 Highmozilla-nsprSUSEDue to an error while parsing page content, it is possible for properly sanitized user input to...6.1 Mediummozilla-nsprSUSENecko can access a child on the wrong thread during UDP connections, resulting in a potentially...9.8 Criticalmozilla-nsprSUSEA use-after-free vulnerability can occur in HTTP/2 when a cached HTTP/2 stream is closed while...9.8 Criticalmozilla-nsprSUSEPOST requests made by NPAPI plugins, such as Flash, that receive a status 308 redirect response...8.8 Highmozilla-nsprSUSEWhen an inner window is reused, it does not consider the use of document.domain for cross-origin...8.8 Highmozilla-nsprSUSEMozilla developers and community members reported memory safety bugs present in Firefox 67. Some...9.8 Criticalmozilla-nsprSUSEMozilla developers and community members reported memory safety bugs present in Firefox 67 and...9.8 Criticalmozilla-nsprSUSEA security regression of CVE-2019-9636 was discovered in python since commit...9.8 Criticalmozilla-nsprSUSEArbitrary File Overwrite in fstream7.5 Highmozilla-nsprSUSEAn issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through...6.1 Mediummozilla-nsprSUSEIn Node.js including 6.x before 6.17.0, 8.x before 8.15.1, 10.x before 10.15.2, and 11.x before...7.5 Highmozilla-nsprSUSEPython 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode...9.8 Criticalmozilla-nsprSUSEAn exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python...5.9 Mediummozilla-nsprSUSEIn Network Security Services (NSS) before 3.36.7 and before 3.41.1, a malformed signature can...6.5 Mediummozilla-nsprSUSEModules/_pickle.c in Python before 3.7.1 has an integer overflow via a large LONG_BINPUT value...7.5 Highmozilla-nsprSUSEA cached side channel attack during handshakes using RSA encryption could allow for the...5.9 Mediummozilla-nsprSUSEA potential vulnerability leading to an integer overflow can occur during buffer size...9.8 Criticalmozilla-nsprSUSEA same-origin policy violation allowing the theft of cross-origin URL entries when using the...6.5 Mediummozilla-nsprSUSEA buffer overflow can occur in the Skia library during buffer offset calculations with hardware...9.8 Criticalmozilla-nsprSUSEA use-after-free vulnerability can occur after deleting a selection element due to a weak...9.8 Criticalmozilla-nsprSUSEMozilla developers and community members reported memory safety bugs present in Firefox 63 and...9.8 Criticalmozilla-nsprSUSENode.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Hostname spoofing in...4.3 Mediummozilla-nsprSUSENode.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Slowloris HTTP Denial...7.5 Highmozilla-nsprSUSENode.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Denial of Service with...7.5 Highmozilla-nsprSUSENode.js: All versions prior to Node.js 6.15.0 and 8.14.0: HTTP request splitting: If Node.js can...7.5 Highmozilla-nsprSUSEIncorrect texture handling in Angle in Google Chrome prior to 70.0.3538.67 allowed a remote...8.8 Highmozilla-nsprSUSEA vulnerability where the JavaScript JIT compiler inlines Array.prototype.push with multiple...9.1 Criticalmozilla-nsprSUSEA vulnerability in register allocation in JavaScript can lead to type confusion, allowing for an...8.1 Highmozilla-nsprSUSEManually dragging and dropping an Outlook email message into the browser will trigger a page...5.3 Mediummozilla-nsprSUSEWhen the Mozilla Updater opens a MAR format file which contains a very long item filename, an out...7.8 Highmozilla-nsprSUSEA potentially exploitable crash in TransportSecurityInfo used for SSL can be triggered by data...7.0 Highmozilla-nsprSUSEIf a user saved passwords before Firefox 58 and then later set a master password, an unencrypted...5.5 Mediummozilla-nsprSUSEA use-after-free vulnerability can occur when an IndexedDB index is deleted while still in use by...9.8 Critical- Show moreLoading…