MozillaFirefox vulnerabilities (openSUSE)
3,079 vulnerabilities.
MozillaFirefoxopenSUSEA mechanism that uses AppCache to hijack a URL in a domain using fallback by serving the files...8.1 HighMozillaFirefoxopenSUSEA use-after-free vulnerability can occur when the layer manager is freed too early when rendering...7.5 HighMozillaFirefoxopenSUSEWhen a page's content security policy (CSP) header contains a "sandbox" directive, other...7.5 HighMozillaFirefoxopenSUSEA use-after-free vulnerability can occur when manipulating the DOM during the resize event of an...9.8 CriticalMozillaFirefoxopenSUSEA use-after-free vulnerability can occur while re-computing layout for a "marquee" element during...9.8 CriticalMozillaFirefoxopenSUSEA use-after-free vulnerability can occur in WebSockets when the object holding the connection is...9.8 CriticalMozillaFirefoxopenSUSEJavaScript in the "about:webrtc" page is not sanitized properly being assigned to "innerHTML"....6.1 MediumMozillaFirefoxopenSUSEThe Developer Tools feature suffers from a XUL injection vulnerability due to improper...8.8 HighMozillaFirefoxopenSUSEResponse header name interning does not have same-origin protections and these headers are stored...7.5 HighMozillaFirefoxopenSUSEOn Linux systems, if the content process is compromised, the sandbox broker will allow files to...7.8 HighMozillaFirefoxopenSUSEA buffer overflow will occur when viewing a certificate in the certificate manager if the...9.8 CriticalMozillaFirefoxopenSUSEOn pages containing an iframe, the "data:" protocol can be used to create a modal alert that will...5.3 MediumMozillaFirefoxopenSUSEWhen an "iframe" has a "sandbox" attribute and its content is specified using "srcdoc", that...9.8 CriticalMozillaFirefoxopenSUSESame-origin policy protections can be bypassed on pages with embedded iframes during page reloads...7.5 HighMozillaFirefoxopenSUSEA buffer overflow can occur when the image renderer attempts to paint non-displayable SVG...9.8 CriticalMozillaFirefoxopenSUSEA buffer overflow can occur when manipulating Accessible Rich Internet Applications (ARIA)...9.8 CriticalMozillaFirefoxopenSUSEA use-after-free vulnerability can occur when reading an image observer during frame...9.8 CriticalMozillaFirefoxopenSUSEIf a long user name is used in a username/password combination in a site URL (such as " http:/...7.5 HighMozillaFirefoxopenSUSEAn error occurs in the elliptic curve point addition algorithm that uses mixed Jacobian-affine...5.9 MediumMozillaFirefoxopenSUSEMemory safety bugs were reported in Firefox 54. Some of these bugs showed evidence of memory...9.8 CriticalMozillaFirefoxopenSUSEMemory safety bugs were reported in Firefox 54, Firefox ESR 52.2, and Thunderbird 52.2. Some of...9.8 CriticalMozillaFirefoxopenSUSEAn out-of-bounds read occurs when applying style rules to pseudo-elements, such as ::first-line,...9.1 CriticalMozillaFirefoxopenSUSEIf a server sends two Strict-Transport-Security (STS) headers for a single connection, they will...5.3 MediumMozillaFirefoxopenSUSEFixed potential buffer overflows in generated Firefox code due to CVE-2016-6354 issue in Flex....9.8 CriticalMozillaFirefoxopenSUSEAn issue with incorrect ownership model of "privateBrowsing" information exposed through...9.1 CriticalMozillaFirefoxopenSUSEA potential memory corruption and crash when using Skia content when drawing content outside of...7.5 HighMozillaFirefoxopenSUSEIf a page is loaded from an original site through a hyperlink and contains a redirect to a "data...6.1 MediumMozillaFirefoxopenSUSEAn out-of-bounds read while processing SVG content in "ConvolvePixel". This results in a crash...9.1 CriticalMozillaFirefoxopenSUSEDuring DOM manipulations of the accessibility tree through script, the DOM tree can become out of...9.8 CriticalMozillaFirefoxopenSUSEA flaw in DRBG number generation within the Network Security Services (NSS) library where the...5.3 MediumMozillaFirefoxopenSUSEMozilla Network Security Services (NSS) before 3.21.4, 3.22.x through 3.28.x before 3.28.4, 3.29...9.8 CriticalMozillaFirefoxopenSUSEA use-after-free vulnerability in frame selection triggered by a combination of malicious script...9.8 CriticalMozillaFirefoxopenSUSEA buffer overflow in WebGL triggerable by web content, resulting in a potentially exploitable...9.8 CriticalMozillaFirefoxopenSUSEWhen a "javascript:" URL is drag and dropped by a user into the addressbar, the URL will be...6.1 MediumMozillaFirefoxopenSUSEA mechanism to bypass file system access protections in the sandbox using the file system request...9.8 CriticalMozillaFirefoxopenSUSEThe internal feed reader APIs that crossed the sandbox barrier allowed for a sandbox escape and...7.5 HighMozillaFirefoxopenSUSEA mechanism to bypass file system access protections in the sandbox to use the file picker to...7.5 HighMozillaFirefoxopenSUSEA mechanism to inject static HTML into the RSS reader preview page due to a failure to escape...4.3 MediumMozillaFirefoxopenSUSEA mechanism to spoof the addressbar through the user interaction on the addressbar and the ...4.3 MediumMozillaFirefoxopenSUSEA possibly exploitable crash triggered during layout and manipulation of bidirectional unicode...7.5 HighMozillaFirefoxopenSUSEAn out-of-bounds write in "ClearKeyDecryptor" while decrypting some Clearkey-encrypted media...8.6 HighMozillaFirefoxopenSUSEAn out-of-bounds read during the processing of glyph widths during text layout. This results in a...9.1 CriticalMozillaFirefoxopenSUSEAn out-of-bounds read when an HTTP/2 connection to a servers sends "DATA" frames with incorrect...9.8 CriticalMozillaFirefoxopenSUSEA vulnerability while parsing "application/http-index-format" format content where uninitialized...7.5 HighMozillaFirefoxopenSUSEA buffer overflow vulnerability while parsing "application/http-index-format" format content when...7.5 HighMozillaFirefoxopenSUSEAn out-of-bounds write vulnerability while decoding improperly formed BinHex format archives....9.8 CriticalMozillaFirefoxopenSUSEA use-after-free vulnerability during changes in style when manipulating DOM elements. This...9.8 CriticalMozillaFirefoxopenSUSEA use-after-free vulnerability when holding a selection during scroll events. This results in a...9.8 CriticalMozillaFirefoxopenSUSEA use-after-free vulnerability during XSLT processing due to a failure to propagate error...9.8 CriticalMozillaFirefoxopenSUSEA use-after-free vulnerability during XSLT processing due to poor handling of template parameters...9.8 Critical- Show moreLoading…