Skip to contentOpensuse Leap vulnerabilities
- php, fedoraproject fedora, hp system management homepage +1 more +3 moreThe exif_process_IFD_in_JPEG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6...CVE-2016-4543Fix availableEPSS 11.9%9.8 Critical
- php, fedoraproject fedora, opensuse leap +2 moreThe exif_process_IFD_TAG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21,...CVE-2016-4542Fix available9.8 Critical
- php, fedoraproject fedora, opensuse leap +2 moreThe grapheme_strpos function in ext/intl/grapheme/grapheme_string.c in PHP before 5.5.35, 5.6.x...CVE-2016-4541Fix available9.8 Critical
- php, fedoraproject fedora, opensuse leap +2 moreThe grapheme_stripos function in ext/intl/grapheme/grapheme_string.c in PHP before 5.5.35, 5.6.x...CVE-2016-4540Fix available9.8 Critical
- php, fedoraproject fedora, opensuse leap +2 moreThe xml_parse_into_struct function in ext/xml/xml.c in PHP before 5.5.35, 5.6.x before 5.6.21,...CVE-2016-4539Fix available9.8 Critical
- php, fedoraproject fedora, opensuse leap +2 moreThe bcpowmod function in ext/bcmath/bcmath.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x...CVE-2016-4538Fix available9.8 Critical
- php, fedoraproject fedora, opensuse leap +2 moreThe bcpowmod function in ext/bcmath/bcmath.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x...CVE-2016-4537Fix available9.8 Critical
- quassel-irc quassel, fedoraproject fedora, opensuse leap +1 more +3 moreThe onReadyRead function in core/coreauthhandler.cpp in Quassel before 0.12.4 allows remote...CVE-2016-4414Fix available7.5 High
- quagga, opensuse leap, opensuse +2 moreThe bgp_dump_routes_func function in bgpd/bgp_dump.c in Quagga does not perform size checks when...CVE-2016-4049Fix available7.5 High
- imagemagick, canonical ubuntu linux, opensuse leap +27 more +29 moreThe (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow...CVE-2016-3718In KEVPublic exploitFix availableEPSS 75.6%5.5 Medium
- imagemagick, canonical ubuntu linux, opensuse leap +27 more +29 moreThe EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers...CVE-2016-3715In KEVPublic exploitFix availableEPSS 75.3%5.5 Medium
- imagemagick, canonical ubuntu linux, debian linux +3 more +5 moreThe (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders...CVE-2016-3714In KEVPublic exploitFix availableEPSS 97.5%8.4 High
- xmlsoft libxml2, canonical ubuntu linux, debian linux +11 more +13 moreThe xmlStringGetNodeList function in tree.c in libxml2 2.9.3 and earlier, when used in recovery...CVE-2016-3627Public exploitFix available7.5 High
- openssl, canonical ubuntu linux, debian linux +12 more +14 moreThe AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider...CVE-2016-2107Public exploitFix availableEPSS 89.1%5.9 Medium
- openssl, apple mac os x, canonical ubuntu linux +12 more +14 moreInteger overflow in the EVP_EncodeUpdate function in crypto/evp/encode.c in OpenSSL before 1.0.1t...CVE-2016-2105Fix availableEPSS 39.6%7.5 High
- roundcube webmail, opensuse leap +1 moreCross-site request forgery (CSRF) vulnerability in Roundcube Webmail before 1.1.5 allows remote...CVE-2016-4069Fix available8.8 High
- roundcube webmail, opensuse leap, opensuse +2 moreCross-site scripting (XSS) vulnerability in Roundcube Webmail before 1.0.9 and 1.1.x before 1.1.5...CVE-2015-8864Fix available6.1 Medium
- php, opensuse leap +1 moreext/phar/phar_object.c in PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x before 7.0.3 mishandles...CVE-2016-4342Fix available8.8 High
- mozilla firefox, opensuse leap, opensuse +1 more +3 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 46.0,...CVE-2016-2807Fix available8.8 High
- mozilla firefox, debian linux, opensuse leap +2 more +4 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 46.0 and...CVE-2016-2806Fix available8.8 High
- oracle mysql, mariadb, opensuse leap +12 more +14 moreUnspecified vulnerability in Oracle MySQL 5.5.46 and earlier allows local users to affect...CVE-2016-0651Fix available5.5 Medium
- oracle jrockit, apache cassandra, canonical ubuntu linux +35 more +37 moreUnspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and...CVE-2016-3427In KEVFix availableEPSS 92.3%9.8 Critical
- mariadb, oracle mysql, canonical ubuntu linux +7 more +9 moreUnspecified vulnerability in Oracle MySQL 5.6.28 and earlier and 5.7.10 and earlier and MariaDB...CVE-2016-0668Fix available4.1 Medium
- mariadb, oracle mysql, debian linux +3 more +5 moreUnspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and...CVE-2016-0666Fix available5.5 Medium
- mariadb, oracle mysql, debian linux +2 more +4 moreUnspecified vulnerability in Oracle MySQL 5.6.29 and earlier and 5.7.11 and earlier and MariaDB...CVE-2016-0655Fix available4.7 Medium
- mariadb, oracle mysql, debian linux +3 more +5 moreUnspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and...CVE-2016-0650Fix available5.5 Medium
- mariadb, oracle mysql, debian linux +3 more +5 moreUnspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and...CVE-2016-0649Fix available5.5 Medium
- mariadb, oracle mysql, debian linux +3 more +5 moreUnspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and...CVE-2016-0648Fix available5.5 Medium
- mariadb, oracle mysql, debian linux +3 more +5 moreUnspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and...CVE-2016-0647Fix available5.5 Medium
- mariadb, oracle mysql, debian linux +3 more +5 moreUnspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and...CVE-2016-0646Fix available5.5 Medium
- mariadb, oracle mysql, debian linux +3 more +5 moreUnspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and...CVE-2016-0644Fix available5.5 Medium
- mariadb, oracle mysql, debian linux +3 more +5 moreUnspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and...CVE-2016-0643Fix available3.3 Low
- oracle mysql, canonical ubuntu linux, debian linux +14 more +16 moreUnspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and...CVE-2016-0642Fix available4.7 Medium
- mariadb, oracle mysql, debian linux +3 more +5 moreUnspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and...CVE-2016-0641Fix available5.1 Medium
- mariadb, oracle mysql, debian linux +3 more +5 moreUnspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and...CVE-2016-0640Fix available6.1 Medium
- google chrome, opensuse leap, suse linux enterprise +2 moreThe download implementation in Google Chrome before 50.0.2661.75 on Android allows remote...CVE-2016-1656Fix available7.5 High
- opensuse, opensuse leap +1 moreThe quagga package before 0.99.23-2.6.1 in openSUSE and SUSE Linux Enterprise Server 11 SP 1 uses...CVE-2016-4036Fix available5.5 Medium
- google chrome, canonical ubuntu linux, debian linux +2 more +4 moreMultiple unspecified vulnerabilities in Google Chrome before 50.0.2661.75 allow attackers to...CVE-2016-1659Fix available9.8 Critical
- google chrome, debian linux, novell suse package hub for suse linux enterprise +1 more +3 moreThe Extensions subsystem in Google Chrome before 50.0.2661.75 incorrectly relies on GetOrigin...CVE-2016-1658Fix available4.3 Medium
- google chrome, debian linux, novell suse package hub for suse linux enterprise +1 more +3 moreThe WebContentsImpl::FocusLocationBarByDefault function in content/browser/web_contents...CVE-2016-1657Fix available4.3 Medium
- google chrome, canonical ubuntu linux, debian linux +2 more +4 moreGoogle Chrome before 50.0.2661.75 does not properly consider that frame removal may occur during...CVE-2016-1655Fix available8.8 High
- google chrome, canonical ubuntu linux, debian linux +2 more +4 moreThe media subsystem in Google Chrome before 50.0.2661.75 does not initialize an unspecified data...CVE-2016-1654Fix available6.5 Medium
- google chrome, canonical ubuntu linux, debian linux +2 more +4 moreThe LoadBuffer implementation in Google V8, as used in Google Chrome before 50.0.2661.75,...CVE-2016-1653Fix available8.8 High
- google chrome, debian linux, opensuse leap +1 more +3 moreCross-site scripting (XSS) vulnerability in the ModuleSystem::RequireForJsInner function in...CVE-2016-1652Fix available6.1 Medium
- google chrome, debian linux, opensuse leap +1 more +3 morefxcodec/codec/fx_codec_jpx_opj.cpp in PDFium, as used in Google Chrome before 50.0.2661.75, does...CVE-2016-1651Fix available8.1 High
- opensuse leap, opensuse +1 moreMultiple unspecified vulnerabilities in the obs-service-extract_file package before 0.3-5.1 in...CVE-2016-4007Fix available9.8 Critical
- saltstack salt, opensuse leap +1 moreSalt Improper Access ControlCVE-2016-1866Fix available8.1 High
- optipng project optipng, canonical ubuntu linux, debian linux +2 more +4 moreOff-by-one error in the bmp_rle4_fread function in pngxrbmp.c in OptiPNG before 0.7.6 allows...CVE-2016-3982Fix available8.8 High
- optipng, canonical ubuntu linux, debian linux +2 more +4 moreThe bmp_read_rows function in pngxtern/pngxrbmp.c in OptiPNG before 0.7.6 allows remote attackers...CVE-2016-2191Fix available6.5 Medium
- mercurial, debian linux, fedoraproject fedora +4 more +6 moreMercurial arbitrary code execution vulnerabilityCVE-2016-3630Fix available8.8 High
- Show moreLoading…