firefox-esr vulnerabilities (openSUSE)
2,858 vulnerabilities.
firefox-esropenSUSEA "javascript:" url loaded by a malicious page can obfuscate its location by blanking the URL...6.5 Mediumfirefox-esropenSUSEIf a malicious site repeatedly triggers a modal authentication prompt, eventually the browser UI...7.5 Highfirefox-esropenSUSEAn out of bounds read error occurs when parsing some HTTP digest authorization responses,...5.3 Mediumfirefox-esropenSUSEWhen dragging content from the primary browser pane to the addressbar on a malicious site, it is...5.3 Mediumfirefox-esropenSUSEIn certain circumstances a networking event listener can be prematurely released. This appears to...7.5 Highfirefox-esropenSUSEAn attack can use a blob URL and script to spoof an arbitrary addressbar URL prefaced by "blob:"...5.3 Mediumfirefox-esropenSUSEThe file picker dialog can choose and display the wrong local default directory when instantiated...5.5 Mediumfirefox-esropenSUSEA segmentation fault can occur during some bidirectional layout operations. This vulnerability...9.8 Criticalfirefox-esropenSUSEA buffer overflow read during SVG filter color value operations, resulting in data exposure. This...7.5 Highfirefox-esropenSUSEMemory corruption resulting in a potentially exploitable crash during garbage collection of...9.8 Criticalfirefox-esropenSUSEVideo files loaded video captions cross-origin without checking for the presence of CORS headers...5.3 Mediumfirefox-esropenSUSEUsing SVG filters that don't use the fixed point math implementation on a target iframe, a...6.5 Mediumfirefox-esropenSUSEA segmentation fault can occur in the Skia graphics library during some canvas operations due to...7.5 Highfirefox-esropenSUSECertain response codes in FTP connections can result in the use of uninitialized values for ports...5.3 Mediumfirefox-esropenSUSEA use-after-free error can occur when manipulating ranges in selections with one node inside a...9.8 Criticalfirefox-esropenSUSEWhen adding a range to an object in the DOM, it is possible to use "addRange" to add the range to...9.8 Criticalfirefox-esropenSUSEA use-after-free can occur when events are fired for a "FontFace" object after the object has...9.8 Criticalfirefox-esropenSUSEA crash triggerable by web content in which an "ErrorResult" references unassigned memory due to...9.8 Criticalfirefox-esropenSUSEJIT-spray targeting asm.js combined with a heap spray allows for a bypass of ASLR and DEP...9.8 Criticalfirefox-esropenSUSEMemory safety bugs were reported in Firefox 51. Some of these bugs showed evidence of memory...9.8 Criticalfirefox-esropenSUSEMemory safety bugs were reported in Thunderbird 45.7. Some of these bugs showed evidence of...9.8 Criticalfirefox-esropenSUSEA use-after-free vulnerability in the Media Decoder when working with media files when some...9.8 Criticalfirefox-esropenSUSEThe "mozAddonManager" allows for the installation of extensions from the CDN for addons.mozilla...6.1 Mediumfirefox-esropenSUSESpecial "about:" pages used by web content, such as RSS feeds, can load privileged "about:" pages...9.8 Criticalfirefox-esropenSUSEThe JSON viewer in the Developer Tools uses insecure methods to create a communication channel...9.8 Criticalfirefox-esropenSUSEWebExtensions could use the "mozAddonManager" API by modifying the CSP headers on sites with the...6.1 Mediumfirefox-esropenSUSEA STUN server in conjunction with a large number of "webkitRTCPeerConnection" objects can be used...7.5 Highfirefox-esropenSUSEThe existence of a specifically requested local file can be found due to the double firing of the...3.3 Lowfirefox-esropenSUSEWebExtension scripts can use the "data:" protocol to affect pages loaded by other web extensions...7.3 Highfirefox-esropenSUSEData sent with in multipart channels, such as the multipart/x-mixed-replace MIME type, will...7.5 Highfirefox-esropenSUSEProxy Auto-Config (PAC) files can specify a JavaScript function called for all URL requests with...5.9 Mediumfirefox-esropenSUSEURLs containing certain unicode glyphs for alternative hyphens and quotes do not properly trigger...5.3 Mediumfirefox-esropenSUSEFeed preview for RSS feeds can be used to capture errors and exceptions generated by privileged...7.5 Highfirefox-esropenSUSEThe "export" function in the Certificate Viewer can force local filesystem navigation when the ...7.5 Highfirefox-esropenSUSEA potential use-after-free found through fuzzing during DOM manipulation of SVG content. This...9.8 Criticalfirefox-esropenSUSEUse-after-free vulnerability in Web Animations when interacting with cycle collection found...7.5 Highfirefox-esropenSUSEHashed codes of JavaScript objects are shared between pages. This allows for pointer leaks...7.5 Highfirefox-esropenSUSEA memory corruption vulnerability in Skia that can occur when using transforms to make gradients,...9.8 Criticalfirefox-esropenSUSEUse-after-free while manipulating XSL in XSLT documents. This vulnerability affects Thunderbird <...9.8 Criticalfirefox-esropenSUSEJIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential...9.8 Criticalfirefox-esropenSUSEMemory safety bugs were reported in Firefox 50.1. Some of these bugs showed evidence of memory...9.8 Criticalfirefox-esropenSUSEMemory safety bugs were reported in Firefox 50.1 and Firefox ESR 45.6. Some of these bugs showed...9.8 Criticalfirefox-esropenSUSEAn attacker could use a JavaScript Map/Set timing attack to determine whether an atom is used by...7.5 Highfirefox-esropenSUSEMozilla's add-ons SDK had a world-accessible resource with an HTML injection vulnerability. If an...6.1 Mediumfirefox-esropenSUSEThe Pocket toolbar button, once activated, listens for events fired from it's own pages but does...7.5 Highfirefox-esropenSUSEHTML tags received from the Pocket server will be processed without sanitization and any...9.8 Criticalfirefox-esropenSUSEExternal resources that should be blocked when loaded by SVG images can bypass security...7.5 Highfirefox-esropenSUSEUse-after-free while manipulating DOM events and removing audio elements due to errors in the...9.8 Criticalfirefox-esropenSUSEUse-after-free resulting in potentially exploitable crash when manipulating DOM subtrees in the...9.8 Criticalfirefox-esropenSUSEMemory corruption resulting in a potentially exploitable crash during WebGL functions using a...7.5 High- Show moreLoading…