Skip to contentOpensuse vulnerabilities
Newest
- mozilla firefox, network security services, seamonkey +6 more +8 moreMozilla Network Security Services (NSS) before 3.12.3, Firefox before 3.0.13, Thunderbird before...CVE-2009-2408Fix available5.9 Medium
- openexr, apple mac os x, canonical ubuntu linux +3 more +5 moreThe decompression implementation in the Imf::hufUncompress function in OpenEXR 1.2.2 and 1.6.1...CVE-2009-1721Fix available6.8 Medium
- mozilla firefox, fedoraproject fedora, opensuse +3 more +5 moreMozilla Firefox before 3.0.12 does not always use XPCCrossOriginWrapper when required during...CVE-2009-24724.3 Medium
- apple iphone os, safari, canonical ubuntu linux +1 more +3 moreThe XSL stylesheet implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2...CVE-2009-1699Public exploitEPSS 32.8%7.5 High
- debian linux, linux kernel, canonical ubuntu linux +4 more +6 moreThe inode double locking code in fs/ocfs2/file.c in the Linux kernel 2.6.30 before 2.6.30-rc3, 2...CVE-2009-1961Public exploit4.7 Medium
- apple cups, mac os x, mac os x server +4 more +6 moreThe ippReadIO function in cups/ipp.c in cupsd in CUPS before 1.3.10 does not properly initialize...CVE-2009-0949Public exploitFix availableEPSS 19.6%7.5 High
- debian linux, linux kernel, canonical ubuntu linux +2 more +4 moreThe nfs_permission function in fs/nfs/dir.c in the NFS client implementation in the Linux kernel...CVE-2009-16304.4 Medium
- francis james franklin libwmf, opensuse +1 moreUse-after-free vulnerability in the embedded GD library in libwmf 0.2.8.4 allows context...CVE-2009-1364Fix available7.5 High
- freetype, apple iphone os, mac os x +6 more +8 moreMultiple integer overflows in FreeType 2.3.9 and earlier allow remote attackers to execute...CVE-2009-0946Fix available7.5 High
- udev project udev, canonical ubuntu linux, debian linux +5 more +7 moreBuffer overflow in the util_path_encode function in udev/lib/libudev-util.c in udev before 1.4.1...CVE-2009-11862.1 Low
- udev project udev, canonical ubuntu linux, debian linux +6 more +8 moreudev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, which...CVE-2009-1185Public exploitFix availableEPSS 80.5%7.2 High
- debian linux, linux kernel, canonical ubuntu linux +2 more +4 moreThe vmx_set_msr function in arch/x86/kvm/vmx.c in the VMX implementation in the KVM subsystem in...CVE-2009-12424.9 Medium
- christophe.varoqui multipath-tools, debian linux, fedoraproject fedora +8 more +10 moreThe Device Mapper multipathing driver (aka multipath-tools or device-mapper-multipath) 0.4.8, as...CVE-2009-0115Fix available7.8 High
- debian linux, linux kernel, canonical ubuntu linux +8 more +10 morenfsd in the Linux kernel before 2.6.28.9 does not drop the CAP_MKNOD capability before handling a...CVE-2009-10724.9 Medium
- opensuseUntrusted search path vulnerability in GTK2 in OpenSUSE 11.0 and 11.1 allows local users to...CVE-2009-08484.4 Medium
- debian linux, linux kernel, canonical ubuntu linux +9 more +11 moreThe audit_syscall_entry function in the Linux kernel 2.6.28.7 and earlier on the x86_64 platform...CVE-2009-08343.6 Low
- optipng project optipng, opensuse, suse linux enterprise +2 moreUse-after-free vulnerability in the GIFReadNextExtension function in lib/pngxtern/gif/gifread.c...CVE-2009-0749Fix available7.8 High
- libpng, apple iphone os, mac os x +6 more +8 moreThe PNG reference library (aka libpng) before 1.0.43, and 1.2.x before 1.2.35, as used in...CVE-2009-0040Fix available6.8 Medium
- opensuseBuffer overflow in SUSE blinux (aka sbl) in SUSE openSUSE 10.3 through 11.0 has unknown impact...CVE-2009-03107.2 High
- net-snmp, opensuse, redhat enterprise linux +1 more +3 moreThe netsnmp_udp_fmtaddr function (snmplib/snmpUDPDomain.c) in net-snmp 5.0.9 through 5.4.2.1,...CVE-2008-6123Fix available5.0 Medium
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 morefs/ecryptfs/inode.c in the eCryptfs subsystem in the Linux kernel before 2.6.28.1 allows local...CVE-2009-02694.9 Medium
- apple cups, mac os x, mac os x server +2 more +4 morecupsd in CUPS 1.3.9 and earlier allows local users, and possibly remote attackers, to cause a...CVE-2008-5183Public exploitFix available7.5 High
- mozilla firefox, seamonkey, thunderbird +10 more +12 morensFrameManager in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2...CVE-2008-50219.3 High
- gnu gnutls, canonical ubuntu linux, debian linux +4 more +6 moreThe _gnutls_x509_verify_certificate function in lib/x509/verify.c in libgnutls in GnuTLS before 2...CVE-2008-4989Fix available5.9 Medium
- dovecot, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreThe ACL plugin in Dovecot before 1.1.4 treats negative access rights as if they are positive...CVE-2008-4577Fix available7.5 High
- debian linux, linux kernel, canonical ubuntu linux +4 more +6 morefs/direct-io.c in the dio subsystem in the Linux kernel before 2.6.23 does not properly zero out...CVE-2007-67165.5 Medium
- qemu, canonical ubuntu linux, debian linux +6 more +8 moreQEMU 0.9.0 does not properly handle changes to removable media, which allows guest OS users to...CVE-2008-1945Fix available2.1 Low
- apache http server, apple mac os x, canonical ubuntu linux +1 more +3 moreCross-site scripting (XSS) vulnerability in proxy_ftp.c in the mod_proxy_ftp module in Apache 2.0...CVE-2008-2939Fix availableEPSS 39.0%4.3 Medium
- opensuselibxcrypt in SUSE openSUSE 11.0 uses the DES algorithm when the configuration specifies the MD5...CVE-2008-31887.5 High
- opensuse zypperzypp-refresh-patches in zypper in SUSE openSUSE 10.2, 10.3, and 11.0 does not ask the user before...CVE-2008-31875.0 Medium
- debian linux, linux kernel, canonical ubuntu linux +3 more +5 moreThe do_change_type function in fs/namespace.c in the Linux kernel before 2.6.22 does not verify...CVE-2008-29317.8 High
- debian linux, linux kernel, avaya communication manager +12 more +14 moreThe Linux kernel before 2.6.25.10 does not properly perform tty operations, which allows local...CVE-2008-28127.8 High
- pcre, canonical ubuntu linux, debian linux +3 more +5 moreHeap-based buffer overflow in pcre_compile.c in the Perl-Compatible Regular Expression (PCRE)...CVE-2008-2371Fix available7.5 High
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreInteger overflow in the sctp_getsockopt_local_addrs_old function in net/sctp/socket.c in the...CVE-2008-28264.9 Medium
- opensuseopensuse-updater in openSUSE 10.2 allows local users to access arbitrary files via a symlink attack.CVE-2008-23894.9 Medium
- opensuseMultiple off-by-one errors in opensuse-updater in openSUSE 10.2 have unspecified impact and...CVE-2008-238810.0 High
- debian linux, linux kernel, canonical ubuntu linux +5 more +7 moreRace condition in the directory notification subsystem (dnotify) in Linux kernel 2.6.x before 2.6...CVE-2008-13756.9 Medium
- phpmyadmin, debian linux, fedoraproject fedora +1 more +3 morephpMyAdmin before 2.11.5.1 stores the MySQL (1) username and (2) password, and the (3) Blowfish...CVE-2008-1567Fix available5.5 Medium
- mit kerberos 5, apple mac os x, mac os x server +7 more +9 moreThe Kerberos 4 support in KDC in MIT Kerberos 5 (krb5kdc) does not properly clear the unused...CVE-2008-0063Fix available7.5 High
- apple mac os x, canonical ubuntu linux, debian linux +7 more +9 moreThe XInput extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute...CVE-2007-6427Fix available9.3 High
- apache http server, canonical ubuntu linux, fedoraproject fedora +3 more +5 moreCross-site scripting (XSS) vulnerability in the (1) mod_imap module in the Apache HTTP Server 1.3...CVE-2007-5000Fix availableEPSS 46.6%4.3 Medium
- debian linux, linux kernel, canonical ubuntu linux +9 more +11 moreThe do_coredump function in fs/exec.c in Linux kernel 2.4.x and 2.6.x up to 2.6.24-rc3, and...CVE-2007-62062.1 Low
- opensusehugin, as used on various operating systems including SUSE openSUSE 10.2 and 10.3, allows local...CVE-2007-5200Fix available3.3 Low
- qemu, debian linux, opensuse +2 moreThe NE2000 emulator in QEMU 0.8.2 allows local users to execute arbitrary code by writing...CVE-2007-5729Fix available7.2 High
- qemu, debian linux, fedoraproject fedora +2 more +4 moreMultiple heap-based buffer overflows in the cirrus_invalidate_region function in the Cirrus VGA...CVE-2007-1320Fix available7.2 High