MozillaFirefox vulnerabilities (openSUSE)
3,079 vulnerabilities.
MozillaFirefoxopenSUSEMozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 improperly follow the CORS cross...7.5 HighMozillaFirefoxopenSUSERace condition in the JPEGEncoder function in Mozilla Firefox before 42.0 and Firefox ESR 38.x...6.8 MediumMozillaFirefoxopenSUSEMozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allow remote attackers to bypass the...7.5 HighMozillaFirefoxopenSUSEThe Add-on SDK in Mozilla Firefox before 42.0 misinterprets a "script: false" panel setting,...4.3 MediumMozillaFirefoxopenSUSEInteger overflow in the PL_ARENA_ALLOCATE implementation in Netscape Portable Runtime (NSPR) in...7.5 HighMozillaFirefoxopenSUSEHeap-based buffer overflow in the ASN.1 decoder in Mozilla Network Security Services (NSS) before...9.8 CriticalMozillaFirefoxopenSUSEThe sec_asn1d_parse_leaf function in Mozilla Network Security Services (NSS) before 3.19.2.1 and...7.5 HighMozillaFirefoxopenSUSEThe Reader View implementation in Mozilla Firefox before 42.0 has an improper whitelist, which...4.3 MediumMozillaFirefoxopenSUSEMozilla Firefox before 42.0, when NTLM v1 is enabled for HTTP authentication, allows remote...4.3 MediumMozillaFirefoxopenSUSEMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 42.0 allow...7.5 HighMozillaFirefoxopenSUSEMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 42.0 and...7.5 HighMozillaFirefoxopenSUSEThe fetch API implementation in Mozilla Firefox before 41.0.2 does not restrict access to the...6.8 MediumMozillaFirefoxopenSUSEThe VertexBufferInterface::reserveVertexSpace function in libGLES in ANGLE, as used in Mozilla...7.5 HighMozillaFirefoxopenSUSEThe ProgramBinary::linkAttributes function in libGLES in ANGLE, as used in Mozilla Firefox before...7.5 HighMozillaFirefoxopenSUSEupdater.exe in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 on Windows allows...6.6 MediumMozillaFirefoxopenSUSEThe TCP Socket API implementation in Mozilla Firefox before 41.0 mishandles array boundaries that...5.0 MediumMozillaFirefoxopenSUSEMozilla Firefox before 41.0 on Android allows user-assisted remote attackers to spoof address-bar...4.3 MediumMozillaFirefoxopenSUSEHeap-based buffer overflow in the nestegg_track_codec_data function in Mozilla Firefox before 41...6.8 MediumMozillaFirefoxopenSUSEThe ReadbackResultWriterD3D11::Run function in Mozilla Firefox before 41.0 and Firefox ESR 38.x...7.5 HighMozillaFirefoxopenSUSEThe InitTextures function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might...7.5 HighMozillaFirefoxopenSUSEThe AnimationThread function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 uses...7.5 HighMozillaFirefoxopenSUSEThe XULContentSinkImpl::AddText function in Mozilla Firefox before 41.0 and Firefox ESR 38.x...7.5 HighMozillaFirefoxopenSUSEThe nsAttrAndChildArray::GrowBy function in Mozilla Firefox before 41.0 and Firefox ESR 38.x...7.5 HighMozillaFirefoxopenSUSEThe nsUnicodeToUTF8::GetMaxLength function in Mozilla Firefox before 41.0 and Firefox ESR 38.x...7.5 HighMozillaFirefoxopenSUSEThe ConvertDialogOptions function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3...7.5 HighMozillaFirefoxopenSUSEMozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allow remote attackers to bypass...6.4 MediumMozillaFirefoxopenSUSEMozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allow user-assisted remote attackers...4.3 MediumMozillaFirefoxopenSUSENetworkUtils.cpp in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow...7.5 HighMozillaFirefoxopenSUSEMozilla Firefox before 41.0 allows remote attackers to bypass certain ECMAScript 5 (aka ES5) API...9.3 HighMozillaFirefoxopenSUSEgfx/2d/DataSurfaceHelpers.cpp in Mozilla Firefox before 41.0 on Linux improperly attempts to use...6.4 MediumMozillaFirefoxopenSUSERace condition in the WorkerPrivate::NotifyFeatures function in Mozilla Firefox before 41.0...6.8 MediumMozillaFirefoxopenSUSEUse-after-free vulnerability in the HTMLVideoElement interface in Mozilla Firefox before 41.0 and...7.5 HighMozillaFirefoxopenSUSEMozilla Firefox before 41.0, when reader mode is enabled, allows remote attackers to spoof the...2.6 LowMozillaFirefoxopenSUSEThe SavedStacks class in the JavaScript implementation in Mozilla Firefox before 41.0, when the...5.1 MediumMozillaFirefoxopenSUSEBuffer overflow in the vp9_init_context_buffers function in libvpx, as used in Mozilla Firefox...6.8 MediumMozillaFirefoxopenSUSEThe lut_inverse_interp16 function in the QCMS library in Mozilla Firefox before 41.0 allows...6.4 MediumMozillaFirefoxopenSUSEjs/src/proxy/Proxy.cpp in Mozilla Firefox before 41.0 mishandles certain receiver arguments,...4.3 MediumMozillaFirefoxopenSUSEMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 41.0 allow...7.5 HighMozillaFirefoxopenSUSEMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 41.0 and...7.5 HighMozillaFirefoxopenSUSEThe add-on installation feature in Mozilla Firefox before 40.0.3 and Firefox ESR 38.x before 38.2...7.5 HighMozillaFirefoxopenSUSEUse-after-free vulnerability in the CanvasRenderingContext2D implementation in Mozilla Firefox...10.0 HighMozillaFirefoxopenSUSEMozilla Firefox before 40.0 allows man-in-the-middle attackers to bypass a mixed-content...4.3 MediumMozillaFirefoxopenSUSEmar_read.c in the Updater in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows...4.6 MediumMozillaFirefoxopenSUSERace condition in the Mozilla Maintenance Service in Mozilla Firefox before 40.0 and Firefox ESR...3.3 LowMozillaFirefoxopenSUSEHeap-based buffer overflow in the stagefright::ESDS::parseESDescriptor function in libstagefright...9.3 HighMozillaFirefoxopenSUSEUse-after-free vulnerability in the XMLHttpRequest::Open implementation in Mozilla Firefox before...7.5 HighMozillaFirefoxopenSUSEInteger overflow in the make_filter_table function in pixops/pixops.c in gdk-pixbuf before 2.31.5...6.8 MediumMozillaFirefoxopenSUSEThe nsCSPHostSrc::permits function in dom/security/nsCSPUtils.cpp in Mozilla Firefox before 40.0...4.3 MediumMozillaFirefoxopenSUSEThe nsTArray_Impl class in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox...7.5 HighMozillaFirefoxopenSUSEUse-after-free vulnerability in the StyleAnimationValue class in Mozilla Firefox before 40.0,...7.5 High- Show moreLoading…