firefox-esr vulnerabilities (openSUSE)
2,858 vulnerabilities.
firefox-esropenSUSEIf a document's Referrer Policy attribute is set to "no-referrer" sometimes two network requests...5.3 Mediumfirefox-esropenSUSEJavaScript can be injected into an exported bookmarks file by placing JavaScript code into user...6.1 Mediumfirefox-esropenSUSEControl characters prepended before "javascript:" URLs pasted in the addressbar can cause the...6.1 Mediumfirefox-esropenSUSEPunycode format text will be displayed for entire qualified international domain names in some...5.3 Mediumfirefox-esropenSUSESVG loaded through "<img>" tags can use "<meta>" tags within the SVG data to set cookies for that...5.3 Mediumfirefox-esropenSUSEMixed content blocking of insecure (HTTP) sub-resources in a secure (HTTPS) document was not...7.3 Highfirefox-esropenSUSEA "data:" URL loaded in a new tab did not inherit the Content Security Policy (CSP) of the...6.1 Mediumfirefox-esropenSUSESome Arabic and Indic vowel marker characters can be combined with Latin characters in a domain...5.3 Mediumfirefox-esropenSUSEThe combined, single character, version of the letter 'i' with any of the potential accents in...5.3 Mediumfirefox-esropenSUSEA vulnerability where the security wrapper does not deny access to some exposed properties using...5.3 Mediumfirefox-esropenSUSEThe Resource Timing API incorrectly revealed navigations in cross-origin iframes. This is a same...6.5 Mediumfirefox-esropenSUSEA use-after-free vulnerability can occur when flushing and resizing layout because the ...9.8 Criticalfirefox-esropenSUSEMemory safety bugs were reported in Firefox 56. Some of these bugs showed evidence of memory...9.8 Criticalfirefox-esropenSUSEMemory safety bugs were reported in Firefox 56 and Firefox ESR 52.4. Some of these bugs showed...9.8 Criticalfirefox-esropenSUSETor Browser before 7.0.9 on macOS and Linux allows remote attackers to bypass the intended...6.5 Mediumfirefox-esropenSUSESeveral fonts on OS X display some Tibetan and Arabic characters as whitespace. When used in the...5.3 Mediumfirefox-esropenSUSEThe AES-GCM implementation in WebCrypto API accepts 0-length IV when it should require a length...5.3 Mediumfirefox-esropenSUSEA vulnerability where WebExtensions can download and attempt to open a file of some non...9.8 Criticalfirefox-esropenSUSEThe "instanceof" operator can bypass the Xray wrapper mechanism. When called on web content from...5.3 Mediumfirefox-esropenSUSEWebExtensions could use popups and panels in the extension UI to load an "about:" privileged URL,...5.3 Mediumfirefox-esropenSUSEOn pages containing an iframe, the "data:" protocol can be used to create a modal dialog through...5.3 Mediumfirefox-esropenSUSEInside the JavaScript parser, a cast of an integer to a narrower type can result in data read...8.2 Highfirefox-esropenSUSEIf web content on a page is dragged onto portions of the browser UI, such as the tab bar, links...5.3 Mediumfirefox-esropenSUSEMemory safety bugs were reported in Firefox 55. Some of these bugs showed evidence of memory...9.8 Criticalfirefox-esropenSUSEA buffer overflow occurs when drawing and validating elements with the ANGLE graphics library,...9.8 Criticalfirefox-esropenSUSEThe content security policy (CSP) "sandbox" directive did not create a unique origin for the...5.4 Mediumfirefox-esropenSUSEA use-after-free vulnerability can occur in design mode when image objects are resized if objects...9.8 Criticalfirefox-esropenSUSEA use-after-free vulnerability can occur when manipulating arrays of Accessible Rich Internet...9.8 Criticalfirefox-esropenSUSEFile downloads encoded with "blob:" and "data:" URL elements bypassed normal file download checks...7.8 Highfirefox-esropenSUSEMemory safety bugs were reported in Firefox 55 and Firefox ESR 52.3. Some of these bugs showed...9.8 Criticalfirefox-esropenSUSEDuring TLS 1.2 exchanges, handshake hashes are generated which point to a message buffer. This...7.5 Highfirefox-esropenSUSEA use-after-free vulnerability can occur in the Fetch API when the worker or the associated...9.8 Criticalfirefox-esropenSUSEThe destructor function for the "WindowsDllDetourPatcher" class can be re-purposed by malicious...7.5 Highfirefox-esropenSUSEAn error in the "WindowsDllDetourPatcher" where a RWX ("Read/Write/Execute") 4k block is...5.3 Mediumfirefox-esropenSUSEA use-after-free vulnerability can occur when an editor DOM node is deleted prematurely during...9.8 Criticalfirefox-esropenSUSEA content security policy (CSP) "frame-ancestors" directive containing origins with paths allows...5.3 Mediumfirefox-esropenSUSEA mechanism that uses AppCache to hijack a URL in a domain using fallback by serving the files...8.1 Highfirefox-esropenSUSEA use-after-free vulnerability can occur when the layer manager is freed too early when rendering...7.5 Highfirefox-esropenSUSEWhen a page's content security policy (CSP) header contains a "sandbox" directive, other...7.5 Highfirefox-esropenSUSEA use-after-free vulnerability can occur when manipulating the DOM during the resize event of an...9.8 Criticalfirefox-esropenSUSEA use-after-free vulnerability can occur while re-computing layout for a "marquee" element during...9.8 Criticalfirefox-esropenSUSEA use-after-free vulnerability can occur in WebSockets when the object holding the connection is...9.8 Criticalfirefox-esropenSUSEJavaScript in the "about:webrtc" page is not sanitized properly being assigned to "innerHTML"....6.1 Mediumfirefox-esropenSUSEThe Developer Tools feature suffers from a XUL injection vulnerability due to improper...8.8 Highfirefox-esropenSUSEResponse header name interning does not have same-origin protections and these headers are stored...7.5 Highfirefox-esropenSUSEOn Linux systems, if the content process is compromised, the sandbox broker will allow files to...7.8 Highfirefox-esropenSUSEA buffer overflow will occur when viewing a certificate in the certificate manager if the...9.8 Criticalfirefox-esropenSUSEOn pages containing an iframe, the "data:" protocol can be used to create a modal alert that will...5.3 Mediumfirefox-esropenSUSEWhen an "iframe" has a "sandbox" attribute and its content is specified using "srcdoc", that...9.8 Criticalfirefox-esropenSUSESame-origin policy protections can be bypassed on pages with embedded iframes during page reloads...7.5 High- Show moreLoading…