firefox-esr vulnerabilities (openSUSE)
2,858 vulnerabilities.
firefox-esropenSUSEBuffer overflow in the rx::TextureStorage11 class in ANGLE, as used in Mozilla Firefox before 42...7.5 Highfirefox-esropenSUSEMozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 improperly control the ability of a...5.0 Mediumfirefox-esropenSUSEMozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4, when a Java plugin is enabled,...6.8 Mediumfirefox-esropenSUSEThe URL parsing implementation in Mozilla Firefox before 42.0 improperly recognizes escaped...5.0 Mediumfirefox-esropenSUSEBuffer underflow in libjar in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allows...7.5 Highfirefox-esropenSUSEMozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 improperly follow the CORS cross...7.5 Highfirefox-esropenSUSERace condition in the JPEGEncoder function in Mozilla Firefox before 42.0 and Firefox ESR 38.x...6.8 Mediumfirefox-esropenSUSEMozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allow remote attackers to bypass the...7.5 Highfirefox-esropenSUSEThe Add-on SDK in Mozilla Firefox before 42.0 misinterprets a "script: false" panel setting,...4.3 Mediumfirefox-esropenSUSEThe sec_asn1d_parse_leaf function in Mozilla Network Security Services (NSS) before 3.19.2.1 and...7.5 Highfirefox-esropenSUSEThe Reader View implementation in Mozilla Firefox before 42.0 has an improper whitelist, which...4.3 Mediumfirefox-esropenSUSEMozilla Firefox before 42.0, when NTLM v1 is enabled for HTTP authentication, allows remote...4.3 Mediumfirefox-esropenSUSEMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 42.0 and...7.5 Highfirefox-esropenSUSEThe fetch API implementation in Mozilla Firefox before 41.0.2 does not restrict access to the...6.8 Mediumfirefox-esropenSUSEThe ProgramBinary::linkAttributes function in libGLES in ANGLE, as used in Mozilla Firefox before...7.5 Highfirefox-esropenSUSEupdater.exe in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 on Windows allows...6.6 Mediumfirefox-esropenSUSEThe TCP Socket API implementation in Mozilla Firefox before 41.0 mishandles array boundaries that...5.0 Mediumfirefox-esropenSUSEMozilla Firefox before 41.0 on Android allows user-assisted remote attackers to spoof address-bar...4.3 Mediumfirefox-esropenSUSEHeap-based buffer overflow in the nestegg_track_codec_data function in Mozilla Firefox before 41...6.8 Mediumfirefox-esropenSUSEThe ReadbackResultWriterD3D11::Run function in Mozilla Firefox before 41.0 and Firefox ESR 38.x...7.5 Highfirefox-esropenSUSEThe nsAttrAndChildArray::GrowBy function in Mozilla Firefox before 41.0 and Firefox ESR 38.x...7.5 Highfirefox-esropenSUSEMozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allow remote attackers to bypass...6.4 Mediumfirefox-esropenSUSEMozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allow user-assisted remote attackers...4.3 Mediumfirefox-esropenSUSENetworkUtils.cpp in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow...7.5 Highfirefox-esropenSUSEMozilla Firefox before 41.0 allows remote attackers to bypass certain ECMAScript 5 (aka ES5) API...9.3 Highfirefox-esropenSUSEgfx/2d/DataSurfaceHelpers.cpp in Mozilla Firefox before 41.0 on Linux improperly attempts to use...6.4 Mediumfirefox-esropenSUSERace condition in the WorkerPrivate::NotifyFeatures function in Mozilla Firefox before 41.0...6.8 Mediumfirefox-esropenSUSEUse-after-free vulnerability in the HTMLVideoElement interface in Mozilla Firefox before 41.0 and...7.5 Highfirefox-esropenSUSEMozilla Firefox before 41.0, when reader mode is enabled, allows remote attackers to spoof the...2.6 Lowfirefox-esropenSUSEThe SavedStacks class in the JavaScript implementation in Mozilla Firefox before 41.0, when the...5.1 Mediumfirefox-esropenSUSEBuffer overflow in the vp9_init_context_buffers function in libvpx, as used in Mozilla Firefox...6.8 Mediumfirefox-esropenSUSEThe lut_inverse_interp16 function in the QCMS library in Mozilla Firefox before 41.0 allows...6.4 Mediumfirefox-esropenSUSEjs/src/proxy/Proxy.cpp in Mozilla Firefox before 41.0 mishandles certain receiver arguments,...4.3 Mediumfirefox-esropenSUSEMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 41.0 and...7.5 Highfirefox-esropenSUSEThe add-on installation feature in Mozilla Firefox before 40.0.3 and Firefox ESR 38.x before 38.2...7.5 Highfirefox-esropenSUSEUse-after-free vulnerability in the CanvasRenderingContext2D implementation in Mozilla Firefox...10.0 Highfirefox-esropenSUSEMozilla Firefox before 40.0 allows man-in-the-middle attackers to bypass a mixed-content...4.3 Mediumfirefox-esropenSUSEmar_read.c in the Updater in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows...4.6 Mediumfirefox-esropenSUSERace condition in the Mozilla Maintenance Service in Mozilla Firefox before 40.0 and Firefox ESR...3.3 Lowfirefox-esropenSUSEUse-after-free vulnerability in the XMLHttpRequest::Open implementation in Mozilla Firefox before...7.5 Highfirefox-esropenSUSEInteger overflow in the make_filter_table function in pixops/pixops.c in gdk-pixbuf before 2.31.5...6.8 Mediumfirefox-esropenSUSEThe nsCSPHostSrc::permits function in dom/security/nsCSPUtils.cpp in Mozilla Firefox before 40.0...4.3 Mediumfirefox-esropenSUSEThe nsTSubstring::ReplacePrep function in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38...7.5 Highfirefox-esropenSUSEHeap-based buffer overflow in the resize_context_buffers function in libvpx in Mozilla Firefox...10.0 Highfirefox-esropenSUSEThe js::jit::AssemblerX86Shared::lock_addl function in the JavaScript implementation in Mozilla...5.0 Mediumfirefox-esropenSUSEMultiple integer overflows in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x...10.0 Highfirefox-esropenSUSEMozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 do not impose certain ECMAScript 6...5.0 Mediumfirefox-esropenSUSEUse-after-free vulnerability in the MediaStream playback feature in Mozilla Firefox before 40.0...10.0 Highfirefox-esropenSUSEThe mozilla::AudioSink function in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2...7.5 Highfirefox-esropenSUSEMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 40.0 and...10.0 High- Show moreLoading…