Skip to contentOpensuse vulnerabilities
Newest
- ibus project ibus, opensuse +1 moreThe default configuration of IBUS 1.5.4, and possibly 1.5.2 and earlier, when IBus.InputPurpose...CVE-2013-4509Fix available1.9 Low
- opensuse, redhat enterprise linux +1 moreThe SUSE coreutils-i18n.patch for GNU coreutils allows context-dependent attackers to cause a...CVE-2013-02231.9 Low
- opensuse, redhat enterprise linux +1 moreThe SUSE coreutils-i18n.patch for GNU coreutils allows context-dependent attackers to cause a...CVE-2013-02222.1 Low
- opensuse, redhat enterprise linux +1 moreThe SUSE coreutils-i18n.patch for GNU coreutils allows context-dependent attackers to cause a...CVE-2013-0221Public exploit4.3 Medium
- openstack horizon, canonical ubuntu linux, opensuse +2 moreMultiple cross-site scripting (XSS) vulnerabilities in OpenStack Dashboard (Horizon) 2013.2 and...CVE-2013-6858Fix available4.3 Medium
- xen, opensuse +1 moreXen 4.2.x and 4.3.x, when using Intel VT-d for PCI passthrough, does not properly flush the TLB...CVE-2013-6375Fix available7.9 High
- f5 nginx, opensuse, suse lifecycle management server +2 more +4 morenginx 0.8.41 through 1.4.3 and 1.5.x before 1.5.7 allows remote attackers to bypass intended...CVE-2013-4547Public exploitFix availableEPSS 68.5%7.5 High
- gnu gnutls, opensuse +1 moreOff-by-one error in the dane_raw_tlsa in the DANE library (libdane) in GnuTLS 3.1.x before 3.1.16...CVE-2013-44875.0 Medium
- mit kerberos 5, debian linux, opensuse +2 moreThe setup_server_realm function in main.c in the Key Distribution Center (KDC) in MIT Kerberos 5 ...CVE-2013-1418Fix available4.3 Medium
- openvpn, opensuse, openvpn access server +2 moreThe openvpn_decrypt function in crypto.c in OpenVPN 2.3.0 and earlier, when running in UDP mode,...CVE-2013-2061Fix available2.6 Low
- canonical ubuntu linux, debian linux, fujitsu sparc enterprise m3000 firmware +58 more +60 moreThe RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state...CVE-2015-2808Fix availableEPSS 73.9%5.0 Medium
- opensuse, oracle javafx, jdk +2 more +4 moreUnspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and Java FX 2.2.76,...CVE-2015-049110.0 High
- oracle javafx, novell suse linux enterprise desktop, opensuse +2 more +4 moreUnspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JavaFX 2.2.76,...CVE-2015-045910.0 High
- novell suse linux enterprise desktop, opensuse, oracle jdk +1 more +3 moreUnspecified vulnerability in in Oracle Java SE 6u91, 7u76, and 8u40 allows remote attackers to...CVE-2015-04587.6 High
- google chrome, libjpeg-turbo, artifex gpl ghostscript +8 more +10 moreThe get_sos function in jdmarker.c in (1) libjpeg 6b and (2) libjpeg-turbo through 1.3.0, as used...CVE-2013-6629Fix available5.0 Medium
- google chrome, debian linux, opensuse +2 moreUse-after-free vulnerability in Google Chrome before 31.0.1650.48 allows remote attackers to...CVE-2013-66217.5 High
- lighttpd, debian linux, opensuse +2 moreUse-after-free vulnerability in lighttpd before 1.4.33 allows remote attackers to cause a denial...CVE-2013-4560Fix available5.0 Medium
- lighttpd, debian linux, opensuse +2 morelighttpd before 1.4.33 does not check the return value of the (1) setuid, (2) setgid, or (3)...CVE-2013-4559Fix availableEPSS 10.7%7.6 High
- lighttpd, debian linux, opensuse +2 morelighttpd before 1.4.34, when SNI is enabled, configures weak SSL ciphers, which makes it easier...CVE-2013-4508Fix available7.5 High
- ruby-lang ruby, opensuse +1 more(1) DL and (2) Fiddle in Ruby 1.9 before 1.9.3 patchlevel 426, and 2.0 before 2.0.0 patchlevel...CVE-2013-20656.4 Medium
- kth snack sound toolkit, wavesurfer, opensuse +2 moreHeap-based buffer overflow in the GetWavHeader function in generic/jkSoundFile.c in the Snack...CVE-2012-6303Public exploitFix availableEPSS 10.2%6.8 Medium
- clutter project clutter, opensuse +1 moreThe translate_hierarchy_event function in x11/clutter-device-manager-xi2.c in Clutter, when...CVE-2013-2190Fix available2.1 Low
- nmap, opensuse +1 moreThe http-domino-enum-passwords.nse script in NMap before 6.40, when domino-enum-passwords.idpath...CVE-2013-4885Public exploitFix available6.8 Medium
- rubyonrails rails, debian linux, opensuse +2 moreactionmailer email address processing causes Denial of serviceCVE-2013-4389Fix available4.3 Medium
- google chrome, debian linux, opensuse +2 moreUse-after-free vulnerability in the HTMLFormElement::prepareForSubmission function in core/html...CVE-2013-29276.8 Medium
- apache mod fcgid, debian linux, opensuse +2 more +4 moreHeap-based buffer overflow in the fcgid_header_bucket_read function in fcgid_bucket.c in the...CVE-2013-4365Fix availableEPSS 13.5%7.5 High
- qemu, canonical ubuntu linux, opensuse +4 more +6 moreBuffer overflow in the SCSI implementation in QEMU, as used in Xen, when a SCSI controller has...CVE-2013-4344Fix available7.2 High
- polkit project polkit, canonical ubuntu linux, opensuse +1 more +3 moreRace condition in PolicyKit (aka polkit) allows local users to bypass intended PolicyKit...CVE-2013-4288Fix available7.2 High
- google chrome, debian linux, opensuse +2 moreGoogle V8, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a...CVE-2013-29197.5 High
- gnu glibc, canonical ubuntu linux, opensuse +2 moreThe nss_dns implementation of getnetbyname in GNU C Library (aka glibc) before 2.21, when the DNS...CVE-2014-9402Fix available7.8 High
- gnu glibc, canonical ubuntu linux, debian linux +1 more +3 moreThe wordexp function in GNU C Library (aka glibc) 2.21 does not enforce the WRDE_NOCMD flag,...CVE-2014-7817Fix available4.6 Medium
- gnu glibc, canonical ubuntu linux, opensuse +1 more +3 moreThe send_dg function in resolv/res_send.c in GNU C Library (aka glibc or libc6) before 2.20 does...CVE-2013-7423Fix available5.0 Medium
- kde kde-workspace, sc, opensuse +2 moreKDE-Workspace 4.10.5 and earlier does not properly handle the return value of the glibc 2.17...CVE-2013-41325.0 Medium
- cacti, debian linux, opensuse +2 moreSQL injection vulnerability in cacti/host.php in Cacti 0.8.8b and earlier allows remote attackers...CVE-2013-5589Fix available7.5 High
- cacti, opensuse +1 moreMultiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.8b and earlier allow remote...CVE-2013-5588Fix available4.3 Medium
- strongswan, opensuse +1 moreThe is_asn1 function in strongSwan 4.1.11 through 5.0.4 does not properly validate the return...CVE-2013-50184.3 Medium
- openstack python glanceclient, opensuse +1 morepython-glanceclient vulnerable to SSL server spoofing due to unverified X.509 certificateCVE-2013-4111Fix available5.8 Medium
- freedesktop poppler, opensuse, redhat enterprise linux +1 more +3 moreThe error function in Error.cc in poppler before 0.21.4 allows remote attackers to execute...CVE-2012-2142Fix available7.8 High
- phpmyadmin, opensuse +1 morephpMyAdmin 3.5.x and 4.0.x before 4.0.5 allows remote attackers to bypass the clickjacking...CVE-2013-5029Fix available4.3 Medium
- python, canonical ubuntu linux, opensuse +2 moreThe ssl.match_hostname function in the SSL module in Python 2.6 through 3.4 does not properly...CVE-2013-4238Fix available4.3 Medium
- openstack folsom, grizzly, havana +1 more +3 moreOpenStack Swift Unchecked user input in XML responsesCVE-2013-2161Fix available7.5 High
- putty, winscp, debian linux +1 more +3 moreInteger overflow in PuTTY 0.62 and earlier, WinSCP before 5.1.6, and other products that use...CVE-2013-4852Fix available6.8 Medium
- videolan vlc media player, opensuse +1 moreMultiple cross-site scripting (XSS) vulnerabilities in the HTTP Interface in VideoLAN VLC Media...CVE-2013-3565Fix available6.1 Medium
- samba, canonical ubuntu linux, fedoraproject fedora +2 more +4 moreInteger overflow in the read_nttrans_ea_list function in nttrans.c in smbd in Samba 3.x before 3...CVE-2013-4124Public exploitFix availableEPSS 69.0%5.0 Medium
- apache subversion, opensuse +1 morecontrib/hook-scripts/svn-keyword-check.pl in Subversion before 1.6.23 allows remote authenticated...CVE-2013-2088Public exploitFix availableEPSS 31.5%7.1 High
- gnupg, gnupg libgcrypt, canonical ubuntu linux +2 more +4 moreGnuPG before 1.4.14, and Libgcrypt before 1.5.3 as used in GnuPG 2.0.x and possibly other...CVE-2013-4242Fix available1.9 Low
- isc bind, dnsco bind, fedoraproject fedora +9 more +11 moreThe RFC 5011 implementation in rdata.c in ISC BIND 9.7.x and 9.8.x before 9.8.5-P2, 9.8.6b1, 9.9...CVE-2013-4854Fix availableEPSS 34.2%7.8 High
- apache xerces2 java, ibm java, oracle jre +12 more +14 moreMissing XML Validation in Apache Xerces2CVE-2013-4002Public exploitFix availableEPSS 24.7%7.1 High
- squid-cache squid, opensuse +1 moreclient_side_request.cc in Squid 3.2.x before 3.2.13 and 3.3.x before 3.3.8 allows remote...CVE-2013-4123Public exploitEPSS 80.5%5.0 Medium
- squid-cache squid, opensuse +1 moreBuffer overflow in the idnsALookup function in dns_internal.cc in Squid 3.2 through 3.2.11 and 3...CVE-2013-4115Fix availableEPSS 43.9%7.5 High
- Show moreLoading…