MozillaFirefox vulnerabilities (openSUSE)
3,079 vulnerabilities.
MozillaFirefoxopenSUSEIf upgrade-insecure-requests was specified in the Content Security Policy, and a link was dragged...4.3 MediumMozillaFirefoxopenSUSEA Content-Security-Policy that blocks in-line scripts could be bypassed using an object tag to...6.1 MediumMozillaFirefoxopenSUSEAn object tag with a data URI did not correctly inherit the document's Content Security Policy....6.1 MediumMozillaFirefoxopenSUSEA compromised content process could send a message to the parent process that would cause the ...6.5 MediumMozillaFirefoxopenSUSEMozilla developers and community members reported memory safety bugs present in Firefox 69 and...8.8 HighMozillaFirefoxopenSUSEFailure to correctly handle null bytes when processing HTML entities resulted in Firefox...6.1 MediumMozillaFirefoxopenSUSEIf two same-origin documents set document.domain differently to become cross-origin, it was...6.1 MediumMozillaFirefoxopenSUSEBy using a form with a data URI it was possible to gain access to the privileged JSONView object...5.4 MediumMozillaFirefoxopenSUSEA fixed-size stack buffer could overflow in nrappkit when doing WebRTC signaling. This resulted...8.8 HighMozillaFirefoxopenSUSEAn attacker could have caused 4 bytes of HMAC output to be written past the end of a buffer...8.8 HighMozillaFirefoxopenSUSEWhen following the value's prototype chain, it was possible to retain a reference to a locale,...8.8 HighMozillaFirefoxopenSUSEWhen the pointer lock is enabled by a website though requestPointerLock(), no user notification...4.3 MediumMozillaFirefoxopenSUSEThe Firefox installer allows Firefox to be installed to a custom user writable location, leaving...7.8 HighMozillaFirefoxopenSUSELogging-related command line parameters are not properly sanitized when Firefox is launched by...8.8 HighMozillaFirefoxopenSUSEThe Mozilla Maintenance Service does not guard against files being hardlinked to another file in...7.0 HighMozillaFirefoxopenSUSEGiven a compromised sandboxed content process due to a separate vulnerability, it is possible to...9.3 CriticalMozillaFirefoxopenSUSEIn libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing...7.5 HighMozillaFirefoxopenSUSEIt is possible to delete an IndexedDB key value and subsequently try to extract it during...8.8 HighMozillaFirefoxopenSUSEA type confusion vulnerability exists in Spidermonkey, which results in a non-exploitable crash....6.5 MediumMozillaFirefoxopenSUSEA vulnerability exists in WebRTC where malicious web content can use probing techniques on the...4.3 MediumMozillaFirefoxopenSUSEWebRTC in Firefox will honor persisted permissions given to sites for access to microphone and...6.5 MediumMozillaFirefoxopenSUSEThe "Forget about this site" feature in the History pane is intended to remove all saved user...6.5 MediumMozillaFirefoxopenSUSEA use-after-free vulnerability can occur while manipulating video elements if the body is freed...8.8 HighMozillaFirefoxopenSUSESome HTML elements, such as <title> and <textarea>, can contain literal angle...6.1 MediumMozillaFirefoxopenSUSENavigation events were not fully adhering to the W3C's "Navigation-Timing Level 2" draft...3.7 LowMozillaFirefoxopenSUSEA same-origin policy violation occurs allowing the theft of cross-origin images through a...6.5 MediumMozillaFirefoxopenSUSEA compromised sandboxed content process can perform a Universal Cross-site Scripting (UXSS)...6.1 MediumMozillaFirefoxopenSUSEMozilla developers and community members reported memory safety bugs present in Firefox 68,...8.8 HighMozillaFirefoxopenSUSEIf a Content Security Policy (CSP) directive is defined that uses a hash-based source that takes...6.3 MediumMozillaFirefoxopenSUSEIf a wildcard ('*') is specified for the host in Content Security Policy (CSP) directives, any...5.3 MediumMozillaFirefoxopenSUSEMozilla developers and community members reported memory safety bugs present in Firefox 68 and...8.8 HighMozillaFirefoxopenSUSEMozilla developers and community members reported memory safety bugs present in Firefox 68. Some...9.8 CriticalMozillaFirefoxopenSUSEWhen a master password is set, it is required to be entered again before stored passwords can be...9.8 CriticalMozillaFirefoxopenSUSEOut of bounds read in Skia in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to...8.1 HighMozillaFirefoxopenSUSEA hyperlink using the res: protocol can be used to open local files at a known location in...6.5 MediumMozillaFirefoxopenSUSEAs part of a winning Pwn2Own entry, a researcher demonstrated a sandbox escape by installing a...8.3 HighMozillaFirefoxopenSUSEA vulnerability exists where if a user opens a locally saved HTML file, this file can use file:...6.5 MediumMozillaFirefoxopenSUSEEmpty or malformed p256-ECDH public keys may trigger a segmentation fault due values being...7.5 HighMozillaFirefoxopenSUSEThe HTTP Alternative Services header, Alt-Svc, can be used by a malicious site to scan all TCP...4.7 MediumMozillaFirefoxopenSUSEA vulnerability exists where it possible to force Network Security Services (NSS) to sign...5.3 MediumMozillaFirefoxopenSUSEWhen a user navigates to site marked as unsafe by the Safebrowsing API, warning messages are...6.5 MediumMozillaFirefoxopenSUSEApplication permissions give additional remote troubleshooting permission to the site input...6.1 MediumMozillaFirefoxopenSUSEA vulnerability exists during the installation of add-ons where the initial fetch ignored the...7.5 HighMozillaFirefoxopenSUSEThe unicode latin 'kra' character can be used to spoof a standard 'k' character in the addressbar...6.5 MediumMozillaFirefoxopenSUSESome unicode characters are incorrectly treated as whitespace during the parsing of web content...6.1 MediumMozillaFirefoxopenSUSEWhen importing a curve25519 private key in PKCS#8format with leading 0x00 bytes, it is possible...7.5 HighMozillaFirefoxopenSUSEActivity Stream can display content from sent from the Snippet Service website. This content is...5.3 MediumMozillaFirefoxopenSUSEA vulnerability exists where the caret ("^") character is improperly escaped constructing some...5.3 MediumMozillaFirefoxopenSUSEUntil explicitly accessed by script, window.globalThis is not enumerable and, as a result, is not...8.3 HighMozillaFirefoxopenSUSEDue to an error while parsing page content, it is possible for properly sanitized user input to...6.1 Medium- Show moreLoading…