MozillaThunderbird vulnerabilities (openSUSE)
2,131 vulnerabilities.
MozillaThunderbirdopenSUSEA vulnerability exists where if a user opens a locally saved HTML file, this file can use file:...6.5 MediumMozillaThunderbirdopenSUSEEmpty or malformed p256-ECDH public keys may trigger a segmentation fault due values being...7.5 HighMozillaThunderbirdopenSUSEThe HTTP Alternative Services header, Alt-Svc, can be used by a malicious site to scan all TCP...4.7 MediumMozillaThunderbirdopenSUSEA vulnerability exists where it possible to force Network Security Services (NSS) to sign...5.3 MediumMozillaThunderbirdopenSUSEWhen a user navigates to site marked as unsafe by the Safebrowsing API, warning messages are...6.5 MediumMozillaThunderbirdopenSUSEApplication permissions give additional remote troubleshooting permission to the site input...6.1 MediumMozillaThunderbirdopenSUSEA vulnerability exists during the installation of add-ons where the initial fetch ignored the...7.5 HighMozillaThunderbirdopenSUSEThe unicode latin 'kra' character can be used to spoof a standard 'k' character in the addressbar...6.5 MediumMozillaThunderbirdopenSUSESome unicode characters are incorrectly treated as whitespace during the parsing of web content...6.1 MediumMozillaThunderbirdopenSUSEWhen importing a curve25519 private key in PKCS#8format with leading 0x00 bytes, it is possible...7.5 HighMozillaThunderbirdopenSUSEA vulnerability exists where the caret ("^") character is improperly escaped constructing some...5.3 MediumMozillaThunderbirdopenSUSEUntil explicitly accessed by script, window.globalThis is not enumerable and, as a result, is not...8.3 HighMozillaThunderbirdopenSUSEDue to an error while parsing page content, it is possible for properly sanitized user input to...6.1 MediumMozillaThunderbirdopenSUSENecko can access a child on the wrong thread during UDP connections, resulting in a potentially...9.8 CriticalMozillaThunderbirdopenSUSEA use-after-free vulnerability can occur in HTTP/2 when a cached HTTP/2 stream is closed while...9.8 CriticalMozillaThunderbirdopenSUSEPOST requests made by NPAPI plugins, such as Flash, that receive a status 308 redirect response...8.8 HighMozillaThunderbirdopenSUSEWhen an inner window is reused, it does not consider the use of document.domain for cross-origin...8.8 HighMozillaThunderbirdopenSUSEMozilla developers and community members reported memory safety bugs present in Firefox 67. Some...9.8 CriticalMozillaThunderbirdopenSUSEMozilla developers and community members reported memory safety bugs present in Firefox 67 and...9.8 CriticalMozillaThunderbirdopenSUSEInsufficient vetting of parameters passed with the Prompt:Open IPC message between child and...10.0 CriticalMozillaThunderbirdopenSUSEA type confusion vulnerability can occur when manipulating JavaScript objects due to issues in...8.8 HighMozillaThunderbirdopenSUSEA flaw in Thunderbird's implementation of iCal causes a type confusion in...7.5 HighMozillaThunderbirdopenSUSEA flaw in Thunderbird's implementation of iCal causes a stack buffer overflow in...9.8 CriticalMozillaThunderbirdopenSUSEA flaw in Thunderbird's implementation of iCal causes a heap buffer overflow in...9.8 CriticalMozillaThunderbirdopenSUSEA flaw in Thunderbird's implementation of iCal causes a heap buffer overflow in...9.8 CriticalMozillaThunderbirdopenSUSEA race condition is present in the crash generation server used to generate data for the crash...8.3 HighMozillaThunderbirdopenSUSEIf hyperthreading is not disabled, a timing attack vulnerability exists, similar to previous...8.1 HighMozillaThunderbirdopenSUSEA vulnerability exists in the Windows sandbox where an uninitialized value in memory can be...7.5 HighMozillaThunderbirdopenSUSEA use-after-free vulnerability can occur in the chrome event handler when it is freed while still...9.8 CriticalMozillaThunderbirdopenSUSEA vulnerability where a JavaScript compartment mismatch can occur while working with the fetch...9.8 CriticalMozillaThunderbirdopenSUSEImages from a different domain can be read using a canvas object in some circumstances. This...5.3 MediumMozillaThunderbirdopenSUSEA possible vulnerability exists where type confusion can occur when manipulating JavaScript...5.9 MediumMozillaThunderbirdopenSUSEMozilla developers and community members reported memory safety bugs present in Firefox 66,...9.8 CriticalMozillaThunderbirdopenSUSEIf a crafted hyperlink is dragged and dropped to the bookmark bar or sidebar and the resulting...5.3 MediumMozillaThunderbirdopenSUSEThe bufferdata function in WebGL is vulnerable to a buffer overflow with specific graphics...9.8 CriticalMozillaThunderbirdopenSUSEA use-after-free vulnerability can occur when listeners are removed from the event listener...9.8 CriticalMozillaThunderbirdopenSUSEA use-after-free vulnerability can occur when working with XMLHttpRequest (XHR) in an event loop,...9.8 CriticalMozillaThunderbirdopenSUSEFirefox will accept any registered Program ID as an external protocol handler and offer to launch...5.3 MediumMozillaThunderbirdopenSUSEA vulnerability was discovered where specific command line arguments are not properly discarded...9.8 CriticalMozillaThunderbirdopenSUSEIncorrect handling of __proto__ mutations may lead to type confusion in IonMonkey JIT code and...8.8 HighMozillaThunderbirdopenSUSEIncorrect alias information in IonMonkey JIT compiler for Array.prototype.slice method may lead...8.8 HighMozillaThunderbirdopenSUSECross-origin images can be read in violation of the same-origin policy by exporting an image...5.3 MediumMozillaThunderbirdopenSUSEA use-after-free vulnerability can occur when the SMIL animation controller incorrectly registers...9.8 CriticalMozillaThunderbirdopenSUSEA vulnerability where type-confusion in the IonMonkey just-in-time (JIT) compiler could...9.8 CriticalMozillaThunderbirdopenSUSEA mechanism was discovered that removes some bounds checking for string, array, or typed array...5.9 MediumMozillaThunderbirdopenSUSEThe IonMonkey just-in-time (JIT) compiler can leak an internal JS_OPTIMIZED_OUT magic value to...9.8 CriticalMozillaThunderbirdopenSUSEThe type inference system allows the compilation of functions that can cause type confusions...9.8 CriticalMozillaThunderbirdopenSUSEA use-after-free vulnerability can occur when a raw pointer to a DOM element on a page is...9.8 CriticalMozillaThunderbirdopenSUSEMozilla developers and community members reported memory safety bugs present in Firefox 65,...9.8 CriticalMozillaThunderbirdopenSUSELack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote...6.5 Medium- Show moreLoading…