mozilla-nss vulnerabilities (SUSE)
489 vulnerabilities.
mozilla-nssSUSEStack-based buffer overflow in the evutil_parse_sockaddr_port function in evutil.c in libevent...7.5 Highmozilla-nssSUSEA use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this...7.5 Highmozilla-nssSUSEIt was found that Diffie Hellman Client key exchange handling in NSS 3.21.x was vulnerable to...5.3 Mediummozilla-nssSUSEAn existing mitigation of timing side-channel attacks is insufficient in some circumstances. This...5.9 Mediummozilla-nssSUSEA buffer overflow resulting in a potentially exploitable crash due to memory allocation issues...7.5 Highmozilla-nssSUSEAdd-on updates failed to verify that the add-on ID inside the signed package matched the ID of...5.9 Mediummozilla-nssSUSEAn error in argument length checking in JavaScript, leading to potential integer overflows or...9.8 Criticalmozilla-nssSUSEA heap-buffer-overflow in Cairo when processing SVG content caused by compiler optimization,...7.5 Highmozilla-nssSUSEA same-origin policy bypass with local shortcut files to load arbitrary local content from disk....5.5 Mediummozilla-nssSUSEMemory safety bugs were reported in Firefox 49 and Firefox ESR 45.4. Some of these bugs showed...9.8 Criticalmozilla-nssSUSENull pointer dereference vulnerability exists in K11_SignWithSymKey /...7.5 Highmozilla-nssSUSEThe tls.checkServerIdentity function in Node.js 0.10.x before 0.10.47, 0.12.x before 0.12.16, 4.x...5.9 Mediummozilla-nssSUSECRLF injection vulnerability in the ServerResponse#writeHead function in Node.js 0.10.x before 0...6.1 Mediummozilla-nssSUSEcrypto/x509/x509_vfy.c in OpenSSL 1.0.2i allows remote attackers to cause a denial of service ...7.5 Highmozilla-nssSUSEMultiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before...7.5 Highmozilla-nssSUSEThe certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote...5.9 Mediummozilla-nssSUSEThe parser in Google V8, as used in Google Chrome before 53.0.2785.113, mishandles scopes, which...6.5 Mediummozilla-nssSUSEThe DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols...7.5 Highmozilla-nssSUSEHeap-based buffer overflow in the yy_get_next_buffer function in Flex before 2.6.1 might allow...9.8 Criticalmozilla-nssSUSEMozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allow user-assisted remote attackers...5.5 Mediummozilla-nssSUSEUse-after-free vulnerability in the nsNodeUtils::NativeAnonymousChildListChange function in...8.8 Highmozilla-nssSUSEThe nsDisplayList::HitTest function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45...8.8 Highmozilla-nssSUSEMozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 process JavaScript event-handler...6.1 Mediummozilla-nssSUSEUse-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox...8.8 Highmozilla-nssSUSEUse-after-free vulnerability in the WebRTC socket thread in Mozilla Firefox before 48.0 and...8.8 Highmozilla-nssSUSEUse-after-free vulnerability in the nsXULPopupManager::KeyDown function in Mozilla Firefox before...9.8 Criticalmozilla-nssSUSEStack-based buffer underflow in the mozilla::gfx::BasePoint4d function in Mozilla Firefox before...8.8 Highmozilla-nssSUSEMozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 on Linux make cairo...6.5 Mediummozilla-nssSUSEHeap-based buffer overflow in the nsBidi::BracketData::AddOpening function in Mozilla Firefox...8.8 Highmozilla-nssSUSEHeap-based buffer overflow in the ClearKey Content Decryption Module (CDM) in the Encrypted Media...6.3 Mediummozilla-nssSUSEMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 48.0 and...8.8 Highmozilla-nssSUSEMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 48.0 allow...8.8 Highmozilla-nssSUSEMozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 preserve the network connection used...4.3 Mediummozilla-nssSUSEThe dsa_sign_setup function in crypto/dsa/dsa_ossl.c in OpenSSL through 1.0.2h does not properly...5.5 Mediummozilla-nssSUSEThe TSymbolTableLevel class in ANGLE, as used in Mozilla Firefox before 47.0 and Firefox ESR 45.x...8.8 Highmozilla-nssSUSEMozilla Network Security Services (NSS) before 3.23, as used in Mozilla Firefox before 47.0,...8.8 Highmozilla-nssSUSEMozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 do not ensure that the user approves...8.8 Highmozilla-nssSUSEUse-after-free vulnerability in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2...8.8 Highmozilla-nssSUSEMozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allow remote attackers to spoof the...6.5 Mediummozilla-nssSUSEUse-after-free vulnerability in the mozilla::dom::Element class in Mozilla Firefox before 47.0...7.5 Highmozilla-nssSUSEHeap-based buffer overflow in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allows...8.8 Highmozilla-nssSUSEMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 and...8.8 Highmozilla-nssSUSEMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 allow...8.8 Highmozilla-nssSUSEHeap-based buffer overflow in the stagefright::SampleTable::parseSampleCencInfo function in...8.8 Highmozilla-nssSUSEThe watch implementation in the JavaScript engine in Mozilla Firefox before 46.0, Firefox ESR 38...7.5 Highmozilla-nssSUSEMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 46.0,...8.8 Highmozilla-nssSUSEUnspecified vulnerability in the browser engine in Mozilla Firefox ESR 38.x before 38.8 allows...8.8 Highmozilla-nssSUSEUse-after-free vulnerability in the ssl3_HandleECDHServerKeyExchange function in Mozilla Network...7.3 Highmozilla-nssSUSEUse-after-free vulnerability in the PK11_ImportDERPrivateKeyInfoAndReturnKey function in Mozilla...8.8 Highmozilla-nssSUSEThe nsScannerString::AppendUnicodeTo function in Mozilla Firefox before 45.0 and Firefox ESR 38.x...8.8 High- Show moreLoading…