mozilla-nss vulnerabilities (SUSE)
489 vulnerabilities.
mozilla-nssSUSESome HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service7.5 Highmozilla-nssSUSEhttp.cookiejar.DefaultPolicy.domain_return_ok in Lib/http/cookiejar.py in Python before 3.7.3...5.3 Mediummozilla-nssSUSEAs part of a winning Pwn2Own entry, a researcher demonstrated a sandbox escape by installing a...8.3 Highmozilla-nssSUSEA vulnerability exists where if a user opens a locally saved HTML file, this file can use file:...6.5 Mediummozilla-nssSUSEEmpty or malformed p256-ECDH public keys may trigger a segmentation fault due values being...7.5 Highmozilla-nssSUSEThe HTTP Alternative Services header, Alt-Svc, can be used by a malicious site to scan all TCP...4.7 Mediummozilla-nssSUSEA vulnerability exists where it possible to force Network Security Services (NSS) to sign...5.3 Mediummozilla-nssSUSEWhen a user navigates to site marked as unsafe by the Safebrowsing API, warning messages are...6.5 Mediummozilla-nssSUSEApplication permissions give additional remote troubleshooting permission to the site input...6.1 Mediummozilla-nssSUSEA vulnerability exists during the installation of add-ons where the initial fetch ignored the...7.5 Highmozilla-nssSUSEThe unicode latin 'kra' character can be used to spoof a standard 'k' character in the addressbar...6.5 Mediummozilla-nssSUSESome unicode characters are incorrectly treated as whitespace during the parsing of web content...6.1 Mediummozilla-nssSUSEWhen importing a curve25519 private key in PKCS#8format with leading 0x00 bytes, it is possible...7.5 Highmozilla-nssSUSEActivity Stream can display content from sent from the Snippet Service website. This content is...5.3 Mediummozilla-nssSUSEA vulnerability exists where the caret ("^") character is improperly escaped constructing some...5.3 Mediummozilla-nssSUSEUntil explicitly accessed by script, window.globalThis is not enumerable and, as a result, is not...8.3 Highmozilla-nssSUSEDue to an error while parsing page content, it is possible for properly sanitized user input to...6.1 Mediummozilla-nssSUSENecko can access a child on the wrong thread during UDP connections, resulting in a potentially...9.8 Criticalmozilla-nssSUSEA use-after-free vulnerability can occur in HTTP/2 when a cached HTTP/2 stream is closed while...9.8 Criticalmozilla-nssSUSEPOST requests made by NPAPI plugins, such as Flash, that receive a status 308 redirect response...8.8 Highmozilla-nssSUSEWhen an inner window is reused, it does not consider the use of document.domain for cross-origin...8.8 Highmozilla-nssSUSEMozilla developers and community members reported memory safety bugs present in Firefox 67. Some...9.8 Criticalmozilla-nssSUSEMozilla developers and community members reported memory safety bugs present in Firefox 67 and...9.8 Criticalmozilla-nssSUSEA security regression of CVE-2019-9636 was discovered in python since commit...9.8 Criticalmozilla-nssSUSEArbitrary File Overwrite in fstream7.5 Highmozilla-nssSUSEAn issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through...6.1 Mediummozilla-nssSUSEIn Node.js including 6.x before 6.17.0, 8.x before 8.15.1, 10.x before 10.15.2, and 11.x before...7.5 Highmozilla-nssSUSEPython 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode...9.8 Criticalmozilla-nssSUSEAn earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added...10.0 Criticalmozilla-nssSUSEMozilla developers and community members reported memory safety bugs present in Firefox 64 and...9.8 Criticalmozilla-nssSUSEA use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom...9.8 Criticalmozilla-nssSUSEAn exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python...5.9 Mediummozilla-nssSUSEIn Network Security Services (NSS) before 3.36.7 and before 3.41.1, a malformed signature can...6.5 Mediummozilla-nssSUSEModules/_pickle.c in Python before 3.7.1 has an integer overflow via a large LONG_BINPUT value...7.5 Highmozilla-nssSUSEA cached side channel attack during handshakes using RSA encryption could allow for the...5.9 Mediummozilla-nssSUSEA potential vulnerability leading to an integer overflow can occur during buffer size...9.8 Criticalmozilla-nssSUSEA same-origin policy violation allowing the theft of cross-origin URL entries when using the...6.5 Mediummozilla-nssSUSEA buffer overflow can occur in the Skia library during buffer offset calculations with hardware...9.8 Criticalmozilla-nssSUSEA use-after-free vulnerability can occur after deleting a selection element due to a weak...9.8 Criticalmozilla-nssSUSEMozilla developers and community members reported memory safety bugs present in Firefox 63 and...9.8 Criticalmozilla-nssSUSENode.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Hostname spoofing in...4.3 Mediummozilla-nssSUSENode.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Slowloris HTTP Denial...7.5 Highmozilla-nssSUSENode.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Denial of Service with...7.5 Highmozilla-nssSUSENode.js: All versions prior to Node.js 6.15.0 and 8.14.0: HTTP request splitting: If Node.js can...7.5 Highmozilla-nssSUSEIncorrect texture handling in Angle in Google Chrome prior to 70.0.3538.67 allowed a remote...8.8 Highmozilla-nssSUSEA vulnerability where the JavaScript JIT compiler inlines Array.prototype.push with multiple...9.1 Criticalmozilla-nssSUSEA vulnerability in register allocation in JavaScript can lead to type confusion, allowing for an...8.1 Highmozilla-nssSUSEManually dragging and dropping an Outlook email message into the browser will trigger a page...5.3 Mediummozilla-nssSUSEWhen the Mozilla Updater opens a MAR format file which contains a very long item filename, an out...7.8 Highmozilla-nssSUSEA potentially exploitable crash in TransportSecurityInfo used for SSL can be triggered by data...7.0 High- Show moreLoading…