Opensuse Evergreen vulnerabilities

• adobe flash player, opensuse evergreen, opensuse +6 more +8 more Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via... CVE-2016-4117 In KEVPublic exploitFix available EPSS 94.3% 9.8 CriticalMay 11, 2016
• adobe air, air sdk, flash player +14 more +16 more Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on... CVE-2015-8651 In KEVFix available EPSS 67.7% 8.8 HighDecember 28, 2015
• adobe flash player, opensuse evergreen, opensuse +7 more +9 more Adobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11... CVE-2015-7645 In KEVPublic exploitFix available EPSS 65.3% 7.8 HighOctober 15, 2015
• adobe air, air sdk, flash player +2 more +4 more Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and... CVE-2015-5134 Public exploitFix available EPSS 50.3% 10.0 HighAugust 11, 2015
• adobe air, air sdk, flash player +2 more +4 more Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202... CVE-2015-5133 Public exploitFix available EPSS 50.7% 10.0 HighAugust 11, 2015
• adobe air, air sdk, flash player +2 more +4 more Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202... CVE-2015-5132 Public exploitFix available EPSS 50.7% 10.0 HighAugust 11, 2015
• adobe air, air sdk, flash player +2 more +4 more Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202... CVE-2015-5131 Public exploitFix available EPSS 50.7% 10.0 HighAugust 11, 2015
• adobe air, air sdk, flash player +2 more +4 more Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and... CVE-2015-5130 Public exploitFix available EPSS 50.3% 10.0 HighAugust 11, 2015
• adobe air, air sdk, flash player +2 more +4 more Heap-based buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before... CVE-2015-5129 Fix available EPSS 10.3% 10.0 HighAugust 11, 2015
• adobe air, air sdk, flash player +2 more +4 more Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and... CVE-2015-5127 Public exploitFix available EPSS 50.3% 10.0 HighAugust 11, 2015
• adobe air, air sdk, flash player +2 more +4 more Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe... CVE-2015-5125 Fix available 10.0 HighAugust 11, 2015
• isc bind, apple os x server, canonical ubuntu linux +18 more +20 more named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to... CVE-2015-5477 In KEVPublic exploitFix available EPSS 99.6% 7.8 HighJuly 28, 2015
• adobe air, air sdk, flash player +2 more +4 more Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X... CVE-2015-5124 Fix available 10.0 HighJuly 20, 2015
• adobe flash player, flash player desktop runtime, opensuse evergreen +6 more +8 more Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation... CVE-2015-5123 In KEVFix available EPSS 18.8% 9.8 CriticalJuly 14, 2015
• adobe flash player, flash player desktop runtime, opensuse evergreen +6 more +8 more Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3)... CVE-2015-5122 In KEVPublic exploitFix available EPSS 87.0% 9.8 CriticalJuly 14, 2015
• adobe flash player, opensuse evergreen, opensuse +8 more +10 more Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in... CVE-2015-5119 In KEVPublic exploitFix available EPSS 98.6% 9.8 CriticalJuly 8, 2015
• mozilla firefox, firefox esr, thunderbird +2 more +4 more Multiple untrusted search path vulnerabilities in updater.exe in Mozilla Firefox before 36.0,... CVE-2015-0833 6.9 MediumFebruary 25, 2015
• firebirdsql firebird, canonical ubuntu linux, debian linux +1 more +3 more The xdr_status_vector function in Firebird before 2.1.7 and 2.5.x before 2.5.3 SU1 allows remote... CVE-2014-9323 Fix available 5.0 MediumDecember 16, 2014
• adobe flash player, hp insight orchestration, system management homepage +12 more +14 more Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before... CVE-2015-3113 In KEVPublic exploitFix available EPSS 99.8% 9.8 CriticalNovember 14, 2014
• adobe air, air sdk, flash player +3 more +5 more Use-after-free vulnerability in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before... CVE-2015-3107 Public exploitFix available EPSS 32.4% 10.0 HighNovember 14, 2014
• adobe flash player, novell suse linux enterprise desktop, suse linux enterprise workstation extension +8 more +10 more Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X... CVE-2015-3043 In KEVPublic exploitFix available EPSS 73.9% 9.8 CriticalNovember 14, 2014
• adobe flash player, microsoft edge, internet explorer +4 more +6 more Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before... CVE-2015-0313 In KEVPublic exploitFix available EPSS 95.3% 9.8 CriticalNovember 14, 2014
• adobe air sdk, flash player, air desktop runtime +4 more +6 more Integer overflow in Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on... CVE-2014-0569 Public exploitFix available EPSS 91.3% 9.3 HighOctober 15, 2014
• adobe air sdk, flash player, air desktop runtime +4 more +6 more Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and... CVE-2014-0564 Fix available 10.0 HighOctober 15, 2014
• php, opensuse evergreen, opensuse +1 more +3 more The PEAR_REST class in REST.php in PEAR in PHP through 5.6.0 allows local users to write to... CVE-2014-5459 3.6 LowSeptember 27, 2014
• mozilla firefox, thunderbird, opensuse evergreen +1 more +3 more Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 do... CVE-2014-1564 Public exploitFix available 4.3 MediumSeptember 2, 2014
• mozilla firefox, thunderbird, opensuse evergreen +2 more +4 more Use-after-free vulnerability in the mozilla::DOMSVGLength::GetTearOff function in Mozilla Firefox... CVE-2014-1563 Fix available 10.0 HighSeptember 2, 2014
• mozilla firefox, thunderbird, opensuse evergreen +1 more +3 more Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 32.0,... CVE-2014-1553 Fix available 10.0 HighSeptember 2, 2014
• linux kernel, oracle linux, canonical ubuntu linux +8 more +10 more The d_walk function in fs/dcache.c in the Linux kernel through 3.17.2 does not properly maintain... CVE-2014-8559 Fix available 5.5 MediumFebruary 5, 2014
• debian linux, linux kernel, opensuse evergreen +2 more +4 more The kvm_iommu_map_pages function in virt/kvm/iommu.c in the Linux kernel through 3.17.2... CVE-2014-8369 Fix available 7.8 HighFebruary 5, 2014
• linux kernel, oracle linux, canonical ubuntu linux +3 more +5 more The paravirt_ops_setup function in arch/x86/kernel/kvm.c in the Linux kernel through 3.18 uses an... CVE-2014-8134 Fix available 3.3 LowFebruary 5, 2014
• linux kernel, opensuse evergreen, suse linux enterprise server +2 more kernel/trace/trace_syscalls.c in the Linux kernel through 3.17.2 does not properly handle private... CVE-2014-7826 Fix available 7.8 HighFebruary 5, 2014
• debian linux, linux kernel, canonical ubuntu linux +7 more +9 more arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 3.17.2 on Intel processors... CVE-2014-3690 Fix available 5.5 MediumFebruary 5, 2014
• debian linux, linux kernel, canonical ubuntu linux +3 more +5 more arch/x86/kvm/emulate.c in the KVM subsystem in the Linux kernel through 3.17.2 does not properly... CVE-2014-3647 Fix available 5.5 MediumFebruary 5, 2014
• debian linux, linux kernel, canonical ubuntu linux +3 more +5 more arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel through 3.17.2 does not have an exit... CVE-2014-3646 Fix available 5.5 MediumFebruary 5, 2014
• debian linux, linux kernel, canonical ubuntu linux +2 more +4 more The WRMSR processing functionality in the KVM subsystem in the Linux kernel through 3.17.2 does... CVE-2014-3610 Fix available 5.5 MediumFebruary 5, 2014
• linux kernel, canonical ubuntu linux, opensuse evergreen +2 more +4 more The kvm_iommu_map_pages function in virt/kvm/iommu.c in the Linux kernel through 3.16.1... CVE-2014-3601 Fix available 4.3 MediumFebruary 5, 2014
• linux kernel, opensuse evergreen, suse linux enterprise server +2 more Use-after-free vulnerability in the skb_segment function in net/core/skbuff.c in the Linux kernel... CVE-2014-0131 Fix available 2.9 LowFebruary 5, 2014
• debian linux, linux kernel, canonical ubuntu linux +16 more +18 more The vdso_addr function in arch/x86/vdso/vma.c in the Linux kernel through 3.18.2 does not... CVE-2014-9585 Fix available 2.1 LowApril 24, 2012
• debian linux, linux kernel, canonical ubuntu linux +15 more +17 more The parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel before 3.18.2... CVE-2014-9584 Fix available 2.1 LowApril 24, 2012
• linux kernel, canonical ubuntu linux, google android +3 more +5 more arch/x86/kernel/entry_64.S in the Linux kernel before 3.17.5 does not properly handle faults... CVE-2014-9322 Public exploitFix available 7.8 HighApril 24, 2012
• debian linux, linux kernel, canonical ubuntu linux +8 more +10 more The sctp_assoc_lookup_asconf_ack function in net/sctp/associola.c in the SCTP implementation in... CVE-2014-3687 Fix available 7.5 HighApril 24, 2012
• debian linux, linux kernel, canonical ubuntu linux +6 more +8 more The SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a... CVE-2014-3673 Fix available 7.5 HighApril 24, 2012
• linux kernel, opensuse evergreen, redhat enterprise linux desktop +3 more +5 more The Netlink implementation in the Linux kernel through 3.14.1 does not provide a mechanism for... CVE-2014-0181 Fix available 2.1 LowApril 24, 2012