mozilla-nss vulnerabilities (SUSE)
489 vulnerabilities.
mozilla-nssSUSEIf a user saved passwords before Firefox 58 and then later set a master password, an unencrypted...5.5 Mediummozilla-nssSUSEA use-after-free vulnerability can occur when an IndexedDB index is deleted while still in use by...9.8 Criticalmozilla-nssSUSEA use-after-free vulnerability can occur when refresh driver timers are refreshed in some...9.8 Criticalmozilla-nssSUSEMemory safety bugs present in Firefox 61 and Firefox ESR 60.1. Some of these bugs showed evidence...9.8 Criticalmozilla-nssSUSEWhen handling a SSLv2-compatible ClientHello request, the server doesn't generate a new random...5.9 Mediummozilla-nssSUSEIn all versions of Node.js prior to 6.14.4, 8.11.4 and 10.9.0 when used with UCS-2 encoding ...7.5 Highmozilla-nssSUSECalling Buffer.fill() or Buffer.alloc() with some parameters can lead to a hang which could...7.5 Highmozilla-nssSUSEAll versions of Node.js 8.x, 9.x, and 10.x are vulnerable and the severity is HIGH. An attacker...7.5 Highmozilla-nssSUSELibgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA...4.7 Mediummozilla-nssSUSEClient DoS due to large DH parameter7.5 Highmozilla-nssSUSEWithdrawn Advisory: Node.js Inspector RCE via DNS Rebinding8.8 Highmozilla-nssSUSEThe HTTP parser in all current versions of Node.js ignores spaces in the `Content-Length` header,...5.3 Mediummozilla-nssSUSEThe `'path'` module in the Node.js 4.x release line contains a potential regular expression...7.5 Highmozilla-nssSUSEnghttp2 version >= 1.10.0 and nghttp2 <= v1.31.0 contains an Improper Input Validation CWE-20...7.5 Highmozilla-nssSUSE** DISPUTED ** The Wave_read._read_fmt_chunk function in Lib/wave.py in Python through 3.6.4 does...6.5 Mediummozilla-nssSUSEIn Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in pp_list_one_macro in asm...5.5 Mediummozilla-nssSUSEIn Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in the function find_cc()...5.5 Mediummozilla-nssSUSEIn Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer over-read that will cause a...7.5 Highmozilla-nssSUSEIn Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in pp_verror in asm/preproc.c that...5.5 Mediummozilla-nssSUSEIn Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in pp_getline in asm/preproc.c...5.5 Mediummozilla-nssSUSEIn Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in is_mmacro() in asm...5.5 Mediummozilla-nssSUSEIn Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in do_directive in asm/preproc.c...5.5 Mediummozilla-nssSUSEIn Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in the pp_list_one_macro function...5.5 Mediummozilla-nssSUSEIn Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer over-read in the function...5.5 Mediummozilla-nssSUSEIn Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer overflow that will cause a...5.5 Mediummozilla-nssSUSEIn Netwide Assembler (NASM) 2.14rc0, there is a "SEGV on unknown address" that will cause a...5.5 Mediummozilla-nssSUSENode.js had a bug in versions 8.X and 9.X which caused buffers to not be initialized when the...3.1 Lowmozilla-nssSUSENode.js was affected by OpenSSL vulnerability CVE-2017-3737 in regards to the use of SSL_read()...9.1 Criticalmozilla-nssSUSEThere is an overflow bug in the AVX2 Montgomery multiplication procedure used in exponentiation...5.9 Mediummozilla-nssSUSETor Browser before 7.0.9 on macOS and Linux allows remote attackers to bypass the intended...6.5 Mediummozilla-nssSUSEThere is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1...6.5 Mediummozilla-nssSUSENode.js before 4.8.5, 6.x before 6.11.5, and 8.x before 8.8.0 allows remote attackers to cause a...7.5 Highmozilla-nssSUSENode.js 4.0.0, 4.1.0, and 4.1.1 allows remote attackers to cause a denial of service.7.5 Highmozilla-nssSUSESeveral fonts on OS X display some Tibetan and Arabic characters as whitespace. When used in the...5.3 Mediummozilla-nssSUSEA buffer overflow occurs when drawing and validating elements with the ANGLE graphics library,...9.8 Criticalmozilla-nssSUSEThe content security policy (CSP) "sandbox" directive did not create a unique origin for the...5.4 Mediummozilla-nssSUSEA use-after-free vulnerability can occur in design mode when image objects are resized if objects...9.8 Criticalmozilla-nssSUSEA use-after-free vulnerability can occur when manipulating arrays of Accessible Rich Internet...9.8 Criticalmozilla-nssSUSEFile downloads encoded with "blob:" and "data:" URL elements bypassed normal file download checks...7.8 Highmozilla-nssSUSEMemory safety bugs were reported in Firefox 55 and Firefox ESR 52.3. Some of these bugs showed...9.8 Criticalmozilla-nssSUSEDuring TLS 1.2 exchanges, handshake hashes are generated which point to a message buffer. This...7.5 Highmozilla-nssSUSEA use-after-free vulnerability can occur in the Fetch API when the worker or the associated...9.8 Criticalmozilla-nssSUSENode.js 8.5.0 before 8.6.0 allows remote attackers to access unintended files, because a change...7.5 Highmozilla-nssSUSEIn Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in the function...5.5 Mediummozilla-nssSUSEWhile parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one...5.3 Mediummozilla-nssSUSENode.js v4.0 through v4.8.3, all versions of v5.x, v6.0 through v6.11.0, v7.0 through v7.10.0,...7.5 Highmozilla-nssSUSEIn Netwide Assembler (NASM) 2.14rc0, preproc.c allows remote attackers to cause a denial of...7.8 Highmozilla-nssSUSEIn Netwide Assembler (NASM) 2.14rc0, there are multiple heap use after free vulnerabilities in...7.8 Highmozilla-nssSUSEThe Mozilla Maintenance Service can be invoked by an unprivileged user to read 32 bytes of any...5.5 Mediummozilla-nssSUSEThe Mozilla Maintenance Service "helper.exe" application creates a temporary directory writable...5.5 Medium- Show moreLoading…