Skip to contentOpensuse vulnerabilities
Newest
- openssl, apple mac os x, debian linux +17 more +19 moreThe SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic...CVE-2014-3566Public exploitFix availableEPSS 100.0%3.4 Low
- openssl, fedoraproject fedora, mariadb +8 more +10 moreThe ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1...CVE-2014-3470Fix availableEPSS 85.8%4.3 Medium
- openssl, fedoraproject fedora, filezilla-project filezilla server +13 more +15 moreOpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict...CVE-2014-0224Public exploitFix availableEPSS 95.3%7.4 High
- mozilla firefox, seamonkey, canonical ubuntu linux +9 more +11 moreMozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, and SeaMonkey before 2.12 do not...CVE-2012-39764.3 Medium
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreThe format-number functionality in the XSLT implementation in Mozilla Firefox before 15.0,...CVE-2012-39725.0 Medium
- mozilla firefox, seamonkey, thunderbird +11 more +13 moreUse-after-free vulnerability in the WebGL implementation in Mozilla Firefox before 15.0, Firefox...CVE-2012-396810.0 High
- mozilla firefox, seamonkey, thunderbird +10 more +12 moreThe WebGL implementation in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7,...CVE-2012-39679.3 High
- mozilla firefox, seamonkey, thunderbird +11 more +13 moreUse-after-free vulnerability in the js::gc::MapAllocToTraceKind function in Mozilla Firefox...CVE-2012-396310.0 High
- mozilla firefox, seamonkey, thunderbird +11 more +13 moreUse-after-free vulnerability in the RangeData implementation in Mozilla Firefox before 15.0,...CVE-2012-396110.0 High
- mozilla firefox, seamonkey, thunderbird +11 more +13 moreUse-after-free vulnerability in the mozSpellChecker::SetCurrentDictionary function in Mozilla...CVE-2012-396010.0 High
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreUse-after-free vulnerability in the nsRangeUpdater::SelAdjDeleteNode function in Mozilla Firefox...CVE-2012-395910.0 High
- mozilla firefox, seamonkey, thunderbird +11 more +13 moreHeap-based buffer overflow in the nsBlockFrame::MarkLineDirty function in Mozilla Firefox before...CVE-2012-395710.0 High
- mozilla firefox, seamonkey, thunderbird +11 more +13 moreUse-after-free vulnerability in the MediaStreamGraphThreadRunnable::Run function in Mozilla...CVE-2012-395610.0 High
- mozilla firefox, seamonkey, thunderbird +11 more +13 moreUse-after-free vulnerability in the nsHTMLSelectElement::SubmitNamesValues function in Mozilla...CVE-2012-197610.0 High
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreUse-after-free vulnerability in the PresShell::CompleteMove function in Mozilla Firefox before 15...CVE-2012-197510.0 High
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreUse-after-free vulnerability in the gfxTextRun::CanBreakLineBefore function in Mozilla Firefox...CVE-2012-197410.0 High
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreUse-after-free vulnerability in the nsObjectLoadingContent::LoadObject function in Mozilla...CVE-2012-197310.0 High
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreUse-after-free vulnerability in the nsHTMLEditor::CollapseAdjacentTextNodes function in Mozilla...CVE-2012-197210.0 High
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 15.0,...CVE-2012-197010.0 High
- postgresql, apple mac os x server, canonical ubuntu linux +6 more +8 moreThe xml_parse function in the libxml2 support in the core server component in PostgreSQL 8.3...CVE-2012-34896.5 Medium
- wireshark, opensuse, sun sunos +2 moreBuffer overflow in epan/dissectors/packet-rtps2.c in the RTPS2 dissector in Wireshark 1.4.x...CVE-2012-4296Fix available3.3 Low
- wireshark, opensuse, sun sunos +2 moreplugins/ethercat/packet-ecatmb.c in the EtherCAT Mailbox dissector in Wireshark 1.4.x before 1.4...CVE-2012-4293Fix available3.3 Low
- wireshark, opensuse, sun sunos +2 moreThe dissect_stun_message function in epan/dissectors/packet-stun.c in the STUN dissector in...CVE-2012-4292Fix available3.3 Low
- wireshark, opensuse, redhat enterprise linux +1 more +3 moreThe CIP dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2...CVE-2012-4291Fix available3.3 Low
- wireshark, opensuse, redhat enterprise linux +1 more +3 moreThe CTDB dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2...CVE-2012-4290Fix available3.3 Low
- wireshark, opensuse, redhat enterprise linux +1 more +3 moreepan/dissectors/packet-afp.c in the AFP dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before...CVE-2012-4289Fix available3.3 Low
- wireshark, opensuse, sun sunos +2 moreInteger overflow in the dissect_xtp_ecntl function in epan/dissectors/packet-xtp.c in the XTP...CVE-2012-4288Fix available3.3 Low
- wireshark, opensuse, redhat enterprise linux +1 more +3 moreThe dissect_pft function in epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in...CVE-2012-4285Fix available3.3 Low
- adobe flash player, opensuse, redhat enterprise linux desktop +3 more +5 moreUnspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS X and...CVE-2012-1535In KEVPublic exploitEPSS 70.4%7.8 High
- libpng, canonical ubuntu linux, debian linux +1 more +3 moreThe png_push_read_zTXt function in pngpread.c in libpng 1.0.x before 1.0.58, 1.2.x before 1.2.48,...CVE-2012-3425Fix available4.3 Medium
- wireshark, opensuse +1 moreepan/dissectors/packet-nfs.c in the NFS dissector in Wireshark 1.4.x before 1.4.14, 1.6.x before...CVE-2012-4049Fix available2.9 Low
- trustwave modsecurity, opensuse +1 moreModSecurity before 2.5.11 treats request parameter values containing single quotes as files,...CVE-2009-50314.3 Medium
- puppet, puppet enterprise, canonical ubuntu linux +4 more +6 morePupper does not properly restrict characters in Common Name field of Certificate Signing RequestCVE-2012-3867Fix available4.3 Medium
- trustwave modsecurity, debian linux, opensuse +1 more +3 moreModSecurity before 2.6.6, when used with PHP, does not properly handle single quotes not at the...CVE-2012-2751Fix available4.3 Medium
- gnome pango, qt, canonical ubuntu linux +5 more +7 moreHeap-based buffer overflow in the Lookup_MarkMarkPos function in the HarfBuzz module (harfbuzz...CVE-2011-3193Fix available9.3 High
- adobe air, flash player, opensuse +1 more +3 moreUntrusted search path vulnerability in the installer in Adobe Flash Player before 10.3.183.20 and...CVE-2012-20409.3 High
- adobe air, flash player, opensuse +6 more +8 moreAdobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X;...CVE-2012-20399.3 High
- adobe air, flash player, opensuse +6 more +8 moreAdobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X;...CVE-2012-20384.3 Medium
- adobe air, flash player, opensuse +6 more +8 moreAdobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X;...CVE-2012-20379.3 High
- adobe air, flash player, opensuse +6 more +8 moreInteger overflow in Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows...CVE-2012-20369.3 High
- adobe air, flash player, opensuse +6 more +8 moreStack-based buffer overflow in Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257...CVE-2012-20359.3 High
- adobe air, flash player, opensuse +6 more +8 moreAdobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X;...CVE-2012-2034In KEV7.5 High
- mozilla firefox, seamonkey, thunderbird +10 more +12 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 13.0,...CVE-2012-19389.3 High
- google chrome, opensuse +1 moreGoogle Chrome before 19.0.1084.46 on Windows uses an incorrect search path for the Windows Media...CVE-2011-30987.2 High
- php, apple mac os x, debian linux +14 more +16 moresapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script ...CVE-2012-1823In KEVPublic exploitFix availableEPSS 100.0%7.5 High
- google chrome, mozilla firefox, seamonkey +2 more +4 moreThe Inter-process Communication (IPC) implementation in Google Chrome before 18.0.1025.168, as...CVE-2011-307910.0 High
- imagemagick, debian linux, opensuse +7 more +9 moreThe TIFFGetEXIFProperties function in coders/tiff.c in ImageMagick before 6.7.6-3 allows remote...CVE-2012-1798Fix available6.5 Medium
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreInteger overflow in the GetEXIFProperty function in magick/property.c in ImageMagick before 6.7.6...CVE-2012-1610Fix available7.5 High
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreInteger overflow in the SyncImageProfiles function in profile.c in ImageMagick 6.7.5-8 and...CVE-2012-1186Fix available5.5 Medium
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreMultiple integer overflows in (1) magick/profile.c or (2) magick/property.c in ImageMagick 6.7.5...CVE-2012-1185Fix availableEPSS 27.9%7.8 High
- Show moreLoading…