mozilla-nspr vulnerabilities (SUSE)
436 vulnerabilities.
mozilla-nsprSUSEFirefox sometimes ran the onload handler for SVG elements that the DOM sanitizer decided to...6.1 Mediummozilla-nsprSUSEMozilla developers reported memory safety bugs present in Firefox 80 and Firefox ESR 78.2. Some...8.8 Highmozilla-nsprSUSEA flaw was found in the way CHACHA20-POLY1305 was implemented in NSS in versions before 3.55....9.1 Criticalmozilla-nsprSUSEWhen performing EC scalar point multiplication, the wNAF point multiplication algorithm was used;...5.3 Mediummozilla-nsprSUSEDuring ECDSA signature generation, padding applied in the nonce designed to ensure constant-time...4.7 Mediummozilla-nsprSUSEWhen converting coordinates from projective to affine, the modular inversion was not performed in...4.7 Mediummozilla-nsprSUSEDuring RSA key generation, bignum implementations used a variation of the Binary Extended...4.4 Mediummozilla-nsprSUSESecurity update for MozillaFirefox, mozilla-nss, mozilla-nsprNo scoremozilla-nsprSUSENSS has shown timing differences when performing DSA signatures, which was exploitable and could...4.4 Mediummozilla-nsprSUSEIn Network Security Services (NSS) before 3.46, several cryptographic primitives had missing...9.8 Criticalmozilla-nsprSUSEWhen running, the updater service wrote status and log files to an unrestricted location;...7.8 Highmozilla-nsprSUSEInappropriate implementation in WebRTC in Google Chrome prior to 79.0.3945.79 allowed a remote...6.5 Mediummozilla-nsprSUSEMozilla developers reported memory safety bugs present in Firefox 70 and Firefox ESR 68.2. Some...8.8 Highmozilla-nsprSUSEUnder certain conditions, when retrieving a document from a DocShell in the antitracking code, a...7.5 Highmozilla-nsprSUSEUnder certain conditions, when checking the Resist Fingerprinting preference during device...7.5 Highmozilla-nsprSUSEWhen using nested workers, a use-after-free could occur during worker destruction. This resulted...8.8 Highmozilla-nsprSUSEThe plain text serializer used a fixed-size array for the number of <ol> elements it could...8.8 Highmozilla-nsprSUSEWhen encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller...8.8 Highmozilla-nsprSUSEMozilla community member Philipp reported a memory safety bug present in Firefox 68 when 360...8.8 Highmozilla-nsprSUSEMozilla developers and community members reported memory safety bugs present in Firefox 69 and...8.8 Highmozilla-nsprSUSEFailure to correctly handle null bytes when processing HTML entities resulted in Firefox...6.1 Mediummozilla-nsprSUSEIf two same-origin documents set document.domain differently to become cross-origin, it was...6.1 Mediummozilla-nsprSUSEBy using a form with a data URI it was possible to gain access to the privileged JSONView object...5.4 Mediummozilla-nsprSUSEA fixed-size stack buffer could overflow in nrappkit when doing WebRTC signaling. This resulted...8.8 Highmozilla-nsprSUSEAn attacker could have caused 4 bytes of HMAC output to be written past the end of a buffer...8.8 Highmozilla-nsprSUSEWhen following the value's prototype chain, it was possible to retain a reference to a locale,...8.8 Highmozilla-nsprSUSEThe Firefox installer allows Firefox to be installed to a custom user writable location, leaving...7.8 Highmozilla-nsprSUSELogging-related command line parameters are not properly sanitized when Firefox is launched by...8.8 Highmozilla-nsprSUSEThe Mozilla Maintenance Service does not guard against files being hardlinked to another file in...7.0 Highmozilla-nsprSUSEGiven a compromised sandboxed content process due to a separate vulnerability, it is possible to...9.3 Criticalmozilla-nsprSUSEIn libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing...7.5 Highmozilla-nsprSUSEIt is possible to delete an IndexedDB key value and subsequently try to extract it during...8.8 Highmozilla-nsprSUSEA type confusion vulnerability exists in Spidermonkey, which results in a non-exploitable crash....6.5 Mediummozilla-nsprSUSEA vulnerability exists in WebRTC where malicious web content can use probing techniques on the...4.3 Mediummozilla-nsprSUSEWebRTC in Firefox will honor persisted permissions given to sites for access to microphone and...6.5 Mediummozilla-nsprSUSEThe "Forget about this site" feature in the History pane is intended to remove all saved user...6.5 Mediummozilla-nsprSUSEA use-after-free vulnerability can occur while manipulating video elements if the body is freed...8.8 Highmozilla-nsprSUSESome HTML elements, such as <title> and <textarea>, can contain literal angle...6.1 Mediummozilla-nsprSUSENavigation events were not fully adhering to the W3C's "Navigation-Timing Level 2" draft...3.7 Lowmozilla-nsprSUSEA same-origin policy violation occurs allowing the theft of cross-origin images through a...6.5 Mediummozilla-nsprSUSEMozilla developers and community members reported memory safety bugs present in Firefox 68,...8.8 Highmozilla-nsprSUSEIf a Content Security Policy (CSP) directive is defined that uses a hash-based source that takes...6.3 Mediummozilla-nsprSUSEMozilla developers and community members reported memory safety bugs present in Firefox 68 and...8.8 Highmozilla-nsprSUSEWhen a master password is set, it is required to be entered again before stored passwords can be...9.8 Criticalmozilla-nsprSUSESome HTTP/2 implementations are vulnerable to a flood of empty frames, potentially leading to a denial of service7.5 Highmozilla-nsprSUSESome HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service7.5 Highmozilla-nsprSUSESome HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service7.5 Highmozilla-nsprSUSESome HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service7.5 Highmozilla-nsprSUSESome HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service7.5 Highmozilla-nsprSUSESome HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service7.5 High- Show moreLoading…