Suse

Linux Enterprise Desktop

460 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5

CVE-2014-1484

  • EPSS 0.63%
  • Published 06.02.2014 05:44:24
  • Last modified 11.04.2025 00:51:21

Mozilla Firefox before 27.0 on Android 4.2 and earlier creates system-log entries containing profile paths, which allows attackers to obtain sensitive information via a crafted application.

7.5

CVE-2014-1485

  • EPSS 0.96%
  • Published 06.02.2014 05:44:24
  • Last modified 11.04.2025 00:51:21

The Content Security Policy (CSP) implementation in Mozilla Firefox before 27.0 and SeaMonkey before 2.24 operates on XSLT stylesheets according to style-src directives instead of script-src directives, which might allow remote attackers to execute a...

10

CVE-2014-0497

Warning
  • EPSS 93.02%
  • Published 05.02.2014 05:15:29
  • Last modified 11.04.2025 00:51:21

Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 11.2.202.336 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors.

7.5

CVE-2013-5619

  • EPSS 1.73%
  • Published 11.12.2013 15:55:13
  • Last modified 11.04.2025 00:51:21

Multiple integer overflows in the binary-search implementation in SpiderMonkey in Mozilla Firefox before 26.0 and SeaMonkey before 2.23 might allow remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecifie...

4.3

CVE-2013-6672

  • EPSS 0.93%
  • Published 11.12.2013 15:55:13
  • Last modified 11.04.2025 00:51:21

Mozilla Firefox before 26.0 and SeaMonkey before 2.23 on Linux allow user-assisted remote attackers to read clipboard data by leveraging certain middle-click paste operations.

5.9

CVE-2013-6673

Exploit
  • EPSS 0.55%
  • Published 11.12.2013 15:55:13
  • Last modified 11.04.2025 00:51:21

Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 do not recognize a user's removal of trust from an EV X.509 certificate, which makes it easier for man-in-the-middle attackers to spoof SSL ...

5.8

CVE-2013-5611

  • EPSS 0.88%
  • Published 11.12.2013 15:55:12
  • Last modified 11.04.2025 00:51:21

Mozilla Firefox before 26.0 does not properly remove the Application Installation doorhanger, which makes it easier for remote attackers to spoof a Web App installation site by controlling the timing of page navigation.

4.3

CVE-2013-5612

  • EPSS 0.74%
  • Published 11.12.2013 15:55:12
  • Last modified 11.04.2025 00:51:21

Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 26.0 and SeaMonkey before 2.23 makes it easier for remote attackers to inject arbitrary web script or HTML by leveraging a Same Origin Policy violation triggered by lack of a charset ...

4.3

CVE-2013-5614

  • EPSS 0.28%
  • Published 11.12.2013 15:55:12
  • Last modified 11.04.2025 00:51:21

Mozilla Firefox before 26.0 and SeaMonkey before 2.23 do not properly consider the sandbox attribute of an IFRAME element during processing of a contained OBJECT element, which allows remote attackers to bypass intended sandbox restrictions via a cra...

10

CVE-2013-5610

  • EPSS 0.88%
  • Published 11.12.2013 15:55:07
  • Last modified 11.04.2025 00:51:21

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 26.0 and SeaMonkey before 2.23 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via u...