Skip to contentOpensuse Leap vulnerabilities
- imagemagick, opensuse leap, opensuse +4 more +6 moredistribute-cache.c in ImageMagick re-uses objects after they have been destroyed, which allows...CVE-2014-9852Fix available9.8 Critical
- graphicsmagick, debian linux, opensuse leap +1 more +3 moremagick/render.c in GraphicsMagick before 1.3.24 allows remote attackers to cause a denial of...CVE-2016-5241Fix available5.5 Medium
- libgd, debian linux, opensuse leap +2 moreThe output function in gd_gif_out.c in the GD Graphics Library (aka libgd) allows remote...CVE-2016-6161Fix available6.5 Medium
- php, debian linux, opensuse leap +1 more +3 moreInteger overflow in the SplFileObject::fread function in spl_directory.c in the SPL extension in...CVE-2016-57709.8 Critical
- debian linux, es iperf3, novell suse package hub for suse linux enterprise +2 more +4 moreThe parse_string function in cjson.c in the cJSON library mishandles UTF8/16 strings, which...CVE-2016-4303Fix available9.8 Critical
- sqlite, fedoraproject fedora, opensuse leap +2 moreos_unix.c in SQLite before 3.13.0 improperly implements the temporary directory search algorithm,...CVE-2016-6153Fix available5.9 Medium
- phpmyadmin, opensuse leap, opensuse +2 morephpMyAdmin vulnerable to Cross-Site Request ForgeryCVE-2016-5739Fix available7.5 High
- phpmyadmin, opensuse leap, opensuse +2 morephpMyAdmin vulnerable to Cross-site ScriptingCVE-2016-5733Fix available6.1 Medium
- phpmyadmin, opensuse leap, opensuse +2 morephpMyAdmin Cross-site scripting (XSS) vulnerabilityCVE-2016-5731Fix available6.1 Medium
- phpmyadmin, opensuse leap, opensuse +2 morephpMyAdmin full path disclosure vulnerabilityCVE-2016-5730Fix available5.3 Medium
- phpmyadmin, opensuse leap, opensuse +2 morephpMyAdmin Denial Of Service (DOS) attackCVE-2016-5706Fix available7.5 High
- phpmyadmin, opensuse leap, opensuse +2 morephpMyAdmin vulnerable to Cross-site ScriptingCVE-2016-5705Fix available6.1 Medium
- phpmyadmin, opensuse leap, opensuse +2 moreSQL injection vulnerability in libraries/central_columns.lib.php in phpMyAdmin 4.4.x before 4.4...CVE-2016-5703Fix available9.8 Critical
- phpmyadmin, opensuse leap, opensuse +2 morephpMyAdmin vulnerable to Cross-site ScriptingCVE-2016-5701Fix available6.1 Medium
- libgd, debian linux, opensuse leap +2 moreThe gdImageCreateFromTgaCtx function in the GD Graphics Library (aka libgd) before 2.2.3 allows...CVE-2016-6132Fix available6.5 Medium
- libgd, canonical ubuntu linux, debian linux +1 more +3 moreThe gdImageCropThreshold function in gd_crop.c in the GD Graphics Library (aka libgd) before 2.2...CVE-2016-6128Fix available7.5 High
- roundcube webmail, opensuse leap, opensuse +2 moreCross-site scripting (XSS) vulnerability in Roundcube Webmail before 1.0.9 and 1.1.x before 1.1.5...CVE-2016-4068Fix available6.1 Medium
- kde frameworks, opensuse leap, opensuse +2 morekinit in KDE Frameworks before 5.23.0 uses weak permissions (644) for /tmp/xauth-xxx-_y, which...CVE-2016-3100Fix available8.4 High
- php, debian linux, opensuse leap +4 more +6 moreDouble free vulnerability in the php_wddx_process_data function in wddx.c in the WDDX extension...CVE-2016-5772Fix available9.8 Critical
- php, debian linux, opensuse leap +1 more +3 morespl_array.c in the SPL extension in PHP before 5.5.37 and 5.6.x before 5.6.23 improperly...CVE-2016-5771Fix availableEPSS 15.5%9.8 Critical
- google chrome, canonical ubuntu linux, novell suse package hub for suse linux enterprise +5 more +7 moreMultiple unspecified vulnerabilities in Google Chrome before 51.0.2704.103 allow attackers to...CVE-2016-1704Fix available8.8 High
- libtiff, debian linux, opensuse leap +2 more +4 moreBuffer overflow in the PixarLogDecode function in tif_pixarlog.c in LibTIFF 4.0.6 and earlier...CVE-2016-5314Fix available8.8 High
- ffmpeg, libav, debian linux +1 more +3 moreThe mov_read_dref function in libavformat/mov.c in Libav before 11.7 and FFmpeg before 0.11...CVE-2016-3062Fix available8.8 High
- atheme, opensuse leap, opensuse +2 moremodules/chanserv/flags.c in Atheme before 7.2.7 allows remote attackers to modify the Anope FLAGS...CVE-2014-9773Fix available7.5 High
- ntp, novell suse manager, opensuse leap +6 more +8 morentpd in NTP before 4.2.8p8 allows remote attackers to cause a denial of service (daemon crash)...CVE-2016-4957Fix availableEPSS 44.9%7.5 High
- ntp, opensuse leap, opensuse +9 more +11 morentpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (ephemeral...CVE-2016-4953Fix availableEPSS 17.2%7.5 High
- mozilla firefox, opensuse leap, opensuse +2 moreThe TSymbolTableLevel class in ANGLE, as used in Mozilla Firefox before 47.0 and Firefox ESR 45.x...CVE-2016-28248.8 High
- libimobiledevice, libimobiledevice libusbmuxd, canonical ubuntu linux +2 more +4 moreThe socket_create function in common/socket.c in libimobiledevice and libusbmuxd allows remote...CVE-2016-5104Fix available5.3 Medium
- arvidn libtorrent, opensuse leap, opensuse +2 moreThe parse_chunk_header function in libtorrent before 1.1.1 allows remote attackers to cause a...CVE-2016-5301Fix available7.5 High
- gnu glibc, canonical ubuntu linux, opensuse leap +1 more +3 moreStack-based buffer overflow in the clntudp_call function in sunrpc/clnt_udp.c in the GNU C...CVE-2016-4429Fix available5.9 Medium
- mozilla firefox, network security services, canonical ubuntu linux +5 more +7 moreMozilla Network Security Services (NSS) before 3.23, as used in Mozilla Firefox before 47.0,...CVE-2016-2834Fix available8.8 High
- mozilla firefox, canonical ubuntu linux, opensuse leap +1 more +3 moreMozilla Firefox before 47.0 ignores Content Security Policy (CSP) directives for cross-domain...CVE-2016-2833Fix available6.1 Medium
- mozilla firefox, canonical ubuntu linux, opensuse leap +1 more +3 moreMozilla Firefox before 47.0 allows remote attackers to discover the list of disabled plugins via...CVE-2016-2832Fix available4.3 Medium
- mozilla firefox, canonical ubuntu linux, debian linux +2 more +4 moreMozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 do not ensure that the user approves...CVE-2016-2831Fix available8.8 High
- mozilla firefox, canonical ubuntu linux, opensuse leap +1 more +3 moreMozilla Firefox before 47.0 allows remote attackers to spoof permission notifications via a...CVE-2016-2829Fix available6.5 Medium
- mozilla firefox, canonical ubuntu linux, debian linux +2 more +4 moreUse-after-free vulnerability in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2...CVE-2016-2828Fix available8.8 High
- mozilla firefox, canonical ubuntu linux, opensuse leap +1 more +3 moreMozilla Firefox before 47.0 allows remote attackers to bypass the Same Origin Policy and modify...CVE-2016-2825Fix available6.5 Medium
- mozilla firefox, canonical ubuntu linux, debian linux +2 more +4 moreMozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allow remote attackers to spoof the...CVE-2016-2822Fix available6.5 Medium
- mozilla firefox, canonical ubuntu linux, debian linux +2 more +4 moreUse-after-free vulnerability in the mozilla::dom::Element class in Mozilla Firefox before 47.0...CVE-2016-2821Fix available7.5 High
- mozilla firefox, canonical ubuntu linux, debian linux +2 more +4 moreHeap-based buffer overflow in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allows...CVE-2016-2819Public exploitFix availableEPSS 24.0%8.8 High
- mozilla firefox, canonical ubuntu linux, debian linux +18 more +20 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 and...CVE-2016-2818Fix available8.8 High
- mozilla firefox, canonical ubuntu linux, novell suse linux enterprise desktop +4 more +6 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 allow...CVE-2016-2815Fix available8.8 High
- ntp, novell suse manager, opensuse leap +7 more +9 morentpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (interleaved...CVE-2016-4956Fix availableEPSS 16.4%5.3 Medium
- ntp, novell suse manager, opensuse leap +7 more +9 morentpd in NTP 4.x before 4.2.8p8, when autokey is enabled, allows remote attackers to cause a...CVE-2016-4955Fix available5.9 Medium
- ntp, opensuse leap, opensuse +9 more +11 moreThe process_packet function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p8 allows remote...CVE-2016-4954Fix availableEPSS 13.3%7.5 High
- spice project spice, debian linux, opensuse leap +8 more +10 moreSPICE allows local guest OS users to read from or write to arbitrary host memory locations via...CVE-2016-2150Fix available7.1 High
- spice project spice, debian linux, opensuse leap +8 more +10 moreThe smartcard interaction in SPICE allows remote attackers to cause a denial of service (QEMU-KVM...CVE-2016-0749Fix available9.8 Critical
- google chrome, canonical ubuntu linux, debian linux +6 more +8 moreMultiple unspecified vulnerabilities in Google Chrome before 51.0.2704.79 allow attackers to...CVE-2016-1703Fix available8.8 High
- google chrome, canonical ubuntu linux, debian linux +6 more +8 moreThe SkRegion::readFromMemory function in core/SkRegion.cpp in Skia, as used in Google Chrome...CVE-2016-1702Fix available6.5 Medium
- google chrome, debian linux, opensuse leap +5 more +7 moreThe Autofill implementation in Google Chrome before 51.0.2704.79 mishandles the interaction...CVE-2016-1701Fix available8.8 High
- Show moreLoading…