MozillaFirefox vulnerabilities (openSUSE)
3,079 vulnerabilities.
MozillaFirefoxopenSUSENecko can access a child on the wrong thread during UDP connections, resulting in a potentially...9.8 CriticalMozillaFirefoxopenSUSEA use-after-free vulnerability can occur in HTTP/2 when a cached HTTP/2 stream is closed while...9.8 CriticalMozillaFirefoxopenSUSEPOST requests made by NPAPI plugins, such as Flash, that receive a status 308 redirect response...8.8 HighMozillaFirefoxopenSUSEWhen an inner window is reused, it does not consider the use of document.domain for cross-origin...8.8 HighMozillaFirefoxopenSUSEMozilla developers and community members reported memory safety bugs present in Firefox 67. Some...9.8 CriticalMozillaFirefoxopenSUSEMozilla developers and community members reported memory safety bugs present in Firefox 67 and...9.8 CriticalMozillaFirefoxopenSUSEInsufficient vetting of parameters passed with the Prompt:Open IPC message between child and...10.0 CriticalMozillaFirefoxopenSUSEA type confusion vulnerability can occur when manipulating JavaScript objects due to issues in...8.8 HighMozillaFirefoxopenSUSEA race condition is present in the crash generation server used to generate data for the crash...8.3 HighMozillaFirefoxopenSUSEIf hyperthreading is not disabled, a timing attack vulnerability exists, similar to previous...8.1 HighMozillaFirefoxopenSUSEA vulnerability exists in the Windows sandbox where an uninitialized value in memory can be...7.5 HighMozillaFirefoxopenSUSEA use-after-free vulnerability can occur in AssertWorkerThread due to a race condition with...8.1 HighMozillaFirefoxopenSUSEA use-after-free vulnerability can occur in the chrome event handler when it is freed while still...9.8 CriticalMozillaFirefoxopenSUSEA vulnerability where a JavaScript compartment mismatch can occur while working with the fetch...9.8 CriticalMozillaFirefoxopenSUSEImages from a different domain can be read using a canvas object in some circumstances. This...5.3 MediumMozillaFirefoxopenSUSEA possible vulnerability exists where type confusion can occur when manipulating JavaScript...5.9 MediumMozillaFirefoxopenSUSEMozilla developers and community members reported memory safety bugs present in Firefox 66. Some...9.8 CriticalMozillaFirefoxopenSUSEMozilla developers and community members reported memory safety bugs present in Firefox 66,...9.8 CriticalMozillaFirefoxopenSUSEThe default webcal: protocol handler will load a web site vulnerable to cross-site scripting (XSS...6.1 MediumMozillaFirefoxopenSUSEA malicious page can briefly cause the wrong name to be highlighted as the domain name in the...6.5 MediumMozillaFirefoxopenSUSEIf a crafted hyperlink is dragged and dropped to the bookmark bar or sidebar and the resulting...5.3 MediumMozillaFirefoxopenSUSEIf the ALT and "a" keys are pressed when users receive an extension installation prompt, the...6.5 MediumMozillaFirefoxopenSUSEFiles with the .JNLP extension used for "Java web start" applications are not treated as...7.8 HighMozillaFirefoxopenSUSEA custom cursor defined by scripting on a site can position itself over the addressbar to spoof...4.3 MediumMozillaFirefoxopenSUSEThe bufferdata function in WebGL is vulnerable to a buffer overflow with specific graphics...9.8 CriticalMozillaFirefoxopenSUSEA use-after-free vulnerability can occur when listeners are removed from the event listener...9.8 CriticalMozillaFirefoxopenSUSEA use-after-free vulnerability can occur when working with XMLHttpRequest (XHR) in an event loop,...9.8 CriticalMozillaFirefoxopenSUSEIn Firefox Developer Tools it is possible that pasting the result of the 'Copy as cURL' command...9.8 CriticalMozillaFirefoxopenSUSEOn Android systems, Firefox can load a library from APITRACE_LIB, which is writable by all users...7.4 HighMozillaFirefoxopenSUSEFirefox will accept any registered Program ID as an external protocol handler and offer to launch...5.3 MediumMozillaFirefoxopenSUSEA vulnerability was discovered where specific command line arguments are not properly discarded...9.8 CriticalMozillaFirefoxopenSUSEIncorrect handling of __proto__ mutations may lead to type confusion in IonMonkey JIT code and...8.8 HighMozillaFirefoxopenSUSEIncorrect alias information in IonMonkey JIT compiler for Array.prototype.slice method may lead...8.8 HighMozillaFirefoxopenSUSEIf the source for resources on a page is through an FTP connection, it is possible to trigger a...7.5 HighMozillaFirefoxopenSUSEIf WebRTC permission is requested from documents with data: or blob: URLs, the permission...5.3 MediumMozillaFirefoxopenSUSEWhen arbitrary text is sent over an FTP connection and a page reload is initiated, it is possible...4.3 MediumMozillaFirefoxopenSUSEA vulnerability exists during authorization prompting for FTP transaction where successive modal...7.5 HighMozillaFirefoxopenSUSEA latent vulnerability exists in the Prio library where data may be read from uninitialized...9.8 CriticalMozillaFirefoxopenSUSEThe Upgrade-Insecure-Requests (UIR) specification states that if UIR is enabled through Content...7.4 HighMozillaFirefoxopenSUSEIf a Sandbox content process is compromised, it can initiate an FTP download which will then use...7.5 HighMozillaFirefoxopenSUSEInsufficient bounds checking of data during inter-process communication might allow a compromised...7.5 HighMozillaFirefoxopenSUSECross-origin images can be read in violation of the same-origin policy by exporting an image...5.3 MediumMozillaFirefoxopenSUSEA use-after-free vulnerability can occur when the SMIL animation controller incorrectly registers...9.8 CriticalMozillaFirefoxopenSUSEA vulnerability where type-confusion in the IonMonkey just-in-time (JIT) compiler could...9.8 CriticalMozillaFirefoxopenSUSEA mechanism was discovered that removes some bounds checking for string, array, or typed array...5.9 MediumMozillaFirefoxopenSUSEThe IonMonkey just-in-time (JIT) compiler can leak an internal JS_OPTIMIZED_OUT magic value to...9.8 CriticalMozillaFirefoxopenSUSEThe type inference system allows the compilation of functions that can cause type confusions...9.8 CriticalMozillaFirefoxopenSUSEA use-after-free vulnerability can occur when a raw pointer to a DOM element on a page is...9.8 CriticalMozillaFirefoxopenSUSEMozilla developers and community members reported memory safety bugs present in Firefox 65. Some...9.8 CriticalMozillaFirefoxopenSUSEMozilla developers and community members reported memory safety bugs present in Firefox 65,...9.8 Critical- Show moreLoading…