firefox-esr vulnerabilities (openSUSE)
2,858 vulnerabilities.
firefox-esropenSUSEMozilla Firefox before 48.0 does not properly set the LINKABLE and URI_SAFE_FOR_UNTRUSTED_CONTENT...4.3 Mediumfirefox-esropenSUSEMozilla Firefox before 48.0 does not properly restrict drag-and-drop (aka dataTransfer) actions...8.1 Highfirefox-esropenSUSEMozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allow user-assisted remote attackers...5.5 Mediumfirefox-esropenSUSEUse-after-free vulnerability in the nsNodeUtils::NativeAnonymousChildListChange function in...8.8 Highfirefox-esropenSUSEThe nsDisplayList::HitTest function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45...8.8 Highfirefox-esropenSUSEMozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 process JavaScript event-handler...6.1 Mediumfirefox-esropenSUSEInteger overflow in the WebSocketChannel class in the WebSockets subsystem in Mozilla Firefox...8.8 Highfirefox-esropenSUSEMozilla Firefox before 48.0 mishandles changes from 'INPUT type="password"' to 'INPUT type="text"...6.5 Mediumfirefox-esropenSUSEUse-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox...8.8 Highfirefox-esropenSUSEUse-after-free vulnerability in the WebRTC socket thread in Mozilla Firefox before 48.0 and...8.8 Highfirefox-esropenSUSEUse-after-free vulnerability in the js::PreliminaryObjectArray::sweep function in Mozilla Firefox...8.8 Highfirefox-esropenSUSEUse-after-free vulnerability in the nsXULPopupManager::KeyDown function in Mozilla Firefox before...9.8 Criticalfirefox-esropenSUSEStack-based buffer underflow in the mozilla::gfx::BasePoint4d function in Mozilla Firefox before...8.8 Highfirefox-esropenSUSEMozilla Firefox before 48.0 allows remote attackers to spoof the location bar via crafted...4.3 Mediumfirefox-esropenSUSEMozilla Firefox before 48.0, Firefox ESR < 45.4 and Thunderbird < 45.4 allow remote attackers to...4.3 Mediumfirefox-esropenSUSEMozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 on Linux make cairo...6.5 Mediumfirefox-esropenSUSEHeap-based buffer overflow in the nsBidi::BracketData::AddOpening function in Mozilla Firefox...8.8 Highfirefox-esropenSUSEHeap-based buffer overflow in the ClearKey Content Decryption Module (CDM) in the Encrypted Media...6.3 Mediumfirefox-esropenSUSEMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 48.0 allow...8.8 Highfirefox-esropenSUSEMozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 preserve the network connection used...4.3 Mediumfirefox-esropenSUSEThe TSymbolTableLevel class in ANGLE, as used in Mozilla Firefox before 47.0 and Firefox ESR 45.x...8.8 Highfirefox-esropenSUSEMozilla Network Security Services (NSS) before 3.23, as used in Mozilla Firefox before 47.0,...8.8 Highfirefox-esropenSUSEMozilla Firefox before 47.0 ignores Content Security Policy (CSP) directives for cross-domain...6.1 Mediumfirefox-esropenSUSEMozilla Firefox before 47.0 allows remote attackers to discover the list of disabled plugins via...4.3 Mediumfirefox-esropenSUSEMozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 do not ensure that the user approves...8.8 Highfirefox-esropenSUSEMozilla Firefox before 47.0 allows remote attackers to spoof permission notifications via a...6.5 Mediumfirefox-esropenSUSEUse-after-free vulnerability in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2...8.8 Highfirefox-esropenSUSEMozilla Firefox before 47.0 allows remote attackers to bypass the Same Origin Policy and modify...6.5 Mediumfirefox-esropenSUSEMozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allow remote attackers to spoof the...6.5 Mediumfirefox-esropenSUSEUse-after-free vulnerability in the mozilla::dom::Element class in Mozilla Firefox before 47.0...7.5 Highfirefox-esropenSUSEHeap-based buffer overflow in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allows...8.8 Highfirefox-esropenSUSEMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 allow...8.8 Highfirefox-esropenSUSEExpat allows context-dependent attackers to cause a denial of service (crash) or possibly execute...9.8 Criticalfirefox-esropenSUSEMozilla Firefox before 46.0 on Android does not properly restrict JavaScript access to...6.5 Mediumfirefox-esropenSUSEMozilla Firefox before 46.0 on Android before 5.0 allows attackers to bypass intended Signature...5.0 Mediumfirefox-esropenSUSEThe Mozilla Maintenance Service updater in Mozilla Firefox before 46.0 on Windows allows user...5.5 Mediumfirefox-esropenSUSEThe Firefox Health Reports (aka FHR or about:healthreport) feature in Mozilla Firefox before 46.0...4.3 Mediumfirefox-esropenSUSEThe WebExtension sandbox feature in browser/components/extensions/ext-tabs.js in Mozilla Firefox...5.4 Mediumfirefox-esropenSUSEMozilla Firefox before 46.0 allows remote attackers to bypass the Content Security Policy (CSP)...6.5 Mediumfirefox-esropenSUSEHeap-based buffer overflow in the stagefright::SampleTable::parseSampleCencInfo function in...8.8 Highfirefox-esropenSUSEUse-after-free vulnerability in the ServiceWorkerInfo class in the Service Worker subsystem in...8.8 Highfirefox-esropenSUSEThe watch implementation in the JavaScript engine in Mozilla Firefox before 46.0, Firefox ESR 38...7.5 Highfirefox-esropenSUSEMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 46.0 allow...8.8 Highfirefox-esropenSUSEUse-after-free vulnerability in the DesktopDisplayDevice class in the WebRTC implementation in...5.5 Mediumfirefox-esropenSUSEInteger underflow in the srtp_unprotect function in the WebRTC implementation in Mozilla Firefox...8.8 Highfirefox-esropenSUSEUse-after-free vulnerability in the PK11_ImportDERPrivateKeyInfoAndReturnKey function in Mozilla...8.8 Highfirefox-esropenSUSEThe nsScannerString::AppendUnicodeTo function in Mozilla Firefox before 45.0 and Firefox ESR 38.x...8.8 Highfirefox-esropenSUSERace condition in the GetStaticInstance function in the WebRTC implementation in Mozilla Firefox...8.8 Highfirefox-esropenSUSEInteger underflow in Brotli, as used in Mozilla Firefox before 45.0, allows remote attackers to...8.8 Highfirefox-esropenSUSEMozilla Firefox before 45.0 does not properly restrict the availability of IFRAME Resource Timing...6.5 Medium- Show moreLoading…