Skip to contentOpensuse vulnerabilities
Newest
- gnu glibc, opensuse +1 moreThe posix_spawn_file_actions_addopen function in glibc before 2.20 does not copy its path...CVE-2014-4043Fix available7.5 High
- castor project castor, opensuse +1 moreImproper Restriction of XML External Entity Reference in CastorCVE-2014-3004Public exploitFix available4.3 Medium
- directfb, opensuse, suse linux enterprise desktop +3 more +5 moreThe Dispatch_Write function in proxy/dispatcher/idirectfbsurface_dispatcher.c in DirectFB 1.4.4...CVE-2014-297810.0 High
- directfb, opensuse, suse linux enterprise desktop +3 more +5 moreMultiple integer signedness errors in the Dispatch_Write function in proxy/dispatcher...CVE-2014-297710.0 High
- mozilla firefox, opensuse, oracle solaris +2 moreBuffer overflow in the Speex resampler in the Web Audio subsystem in Mozilla Firefox before 30.0...CVE-2014-1542Fix available6.8 Medium
- miniupnp project miniupnp, opensuse +1 moreThe getHTTPResponse function in miniwget.c in MiniUPnP 1.9 allows remote attackers to cause a...CVE-2014-3985Fix available5.0 Medium
- xen, opensuse +1 moreThe HVMOP_inject_msi function in Xen 4.2.x, 4.3.x, and 4.4.x allows local guest HVM...CVE-2014-3968Fix available5.5 Medium
- xen, opensuse +1 moreThe HVMOP_inject_msi function in Xen 4.2.x, 4.3.x, and 4.4.x does not properly check the return...CVE-2014-3967Fix available5.5 Medium
- openssl, fedoraproject fedora, mariadb +2 more +4 moreThe dtls1_reassemble_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0...CVE-2014-0195Public exploitFix availableEPSS 100.0%6.8 Medium
- kernel util-linux, fedoraproject fedora, opensuse +2 moreBlkid in util-linux before 2.26rc-1 allows local users to execute arbitrary code.CVE-2014-9114Fix available7.8 High
- redhat libvirt, opensuse, redhat enterprise linux +1 more +3 morelibvirt 0.7.5 through 1.2.x before 1.2.5 allows local users to cause a denial of service (read...CVE-2014-0179Fix available1.9 Low
- rxspencer project rxspencer, canonical ubuntu linux, debian linux +2 more +4 moreInteger overflow in the regcomp implementation in the Henry Spencer BSD regex library (aka...CVE-2015-2305Fix available6.8 Medium
- gnome gnome-terminal, opensuse, oracle solaris +2 moreThe "insert-blank-characters" capability in caps.c in gnome-terminal (vte) before 0.28.1 allows...CVE-2011-2198Fix available3.5 Low
- djangoproject django, canonical ubuntu linux, debian linux +1 more +3 moreDjango Allows Open RedirectsCVE-2014-3730Fix available4.3 Medium
- google android debug bridge, android sdk platform tools, opensuse +2 moreInteger signedness error in system/core/adb/adb_client.c in Android Debug Bridge (ADB) for...CVE-2014-1909Fix available7.5 High
- phppgadmin project phppgadmin, opensuse +1 moreMultiple cross-site scripting (XSS) vulnerabilities in functions.php in phpPgAdmin before 5.0.4...CVE-2012-1600Fix available4.3 Medium
- travis shirk eyed3, opensuse +1 moreeyeD3 is vulnerable to arbitrary file modification via symlink attackCVE-2014-1934Fix available3.3 Low
- qt, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreThe GIF decoder in QtGui in Qt before 5.3 allows remote attackers to cause a denial of service ...CVE-2014-0190Fix available4.3 Medium
- nagios remote plugin executor, opensuse +1 more** DISPUTED ** Incomplete blacklist vulnerability in nrpe.c in Nagios Remote Plugin Executor ...CVE-2014-2913Public exploitFix availableDisputedEPSS 15.3%7.5 High
- redhat libvirt, opensuse +1 moreThe qemuMigrationWaitForSpice function in qemu/qemu_migration.c in libvirt before 1.1.3 does not...CVE-2013-7336Fix available1.9 Low
- openssl, debian linux, fedoraproject fedora +6 more +8 moreThe do_ssl3_write function in s3_pkt.c in OpenSSL 1.x through 1.0.1g, when...CVE-2014-0198Fix availableEPSS 40.3%4.3 Medium
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreUse-after-free vulnerability in the nsHostResolver::ConditionallyRefreshRecord function in libxul...CVE-2014-1532Fix available9.8 Critical
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreUse-after-free vulnerability in the nsGenericHTMLElement::GetWidthHeightForImage function in...CVE-2014-1531Fix available8.8 High
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreThe docshell implementation in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5,...CVE-2014-1530Fix available6.1 Medium
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreThe Web Notification API in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5,...CVE-2014-1529Fix available8.8 High
- mozilla firefox, seamonkey, canonical ubuntu linux +3 more +5 moreThe sse2_composite_src_x888_8888 function in Pixman, as used in Cairo in Mozilla Firefox 28.0 and...CVE-2014-1528Fix available10.0 High
- mozilla firefox, seamonkey, canonical ubuntu linux +2 more +4 moreThe XrayWrapper implementation in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 allows...CVE-2014-1526Fix available6.8 Medium
- mozilla firefox, seamonkey, canonical ubuntu linux +2 more +4 moreThe mozilla::dom::TextTrack::AddCue function in Mozilla Firefox before 29.0 and SeaMonkey before...CVE-2014-1525Fix available9.3 High
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreThe nsXBLProtoImpl::InstallImplementation function in Mozilla Firefox before 29.0, Firefox ESR 24...CVE-2014-1524Fix available9.8 Critical
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreHeap-based buffer overflow in the read_u32 function in Mozilla Firefox before 29.0, Firefox ESR...CVE-2014-1523Fix available6.5 Medium
- mozilla firefox, seamonkey, canonical ubuntu linux +2 more +4 moreThe mozilla::dom::OscillatorNodeEngine::ComputeCustom function in the Web Audio subsystem in...CVE-2014-1522Fix available9.3 High
- mozilla firefox, seamonkey, canonical ubuntu linux +2 more +4 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 29.0 and...CVE-2014-1519Fix available9.3 High
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 29.0,...CVE-2014-1518Fix available8.8 High
- openstack neutron, canonical ubuntu linux, opensuse +2 moreThe openvswitch-agent process in OpenStack Neutron 2013.1 before 2013.2.4 and 2014.1 before 2014...CVE-2014-0187Fix available9.0 High
- llvm clang, opensuse +1 moreThe GetHTMLRunDir function in the scan-build utility in Clang 3.5 and earlier allows local users...CVE-2014-28931.9 Low
- otrs, opensuse +1 moreOTRS 3.1.x before 3.1.21, 3.2.x before 3.2.16, and 3.3.x before 3.3.6 allows remote attackers to...CVE-2014-2554Fix available4.3 Medium
- cacti, debian linux, fedoraproject fedora +1 more +3 morelib/graph_export.php in Cacti 0.8.7g, 0.8.8b, and earlier allows remote authenticated users to...CVE-2014-2328Fix available6.5 Medium
- cacti, debian linux, opensuse +2 moreCross-site request forgery (CSRF) vulnerability in Cacti 0.8.7g, 0.8.8b, and earlier allows...CVE-2014-2327Fix available6.8 Medium
- systemd project systemd, opensuse +1 moreThe session_link_x11_socket function in login/logind-session.c in systemd-logind in systemd,...CVE-2012-0871Fix available6.3 Medium
- uclouvain openjpeg, opensuse +1 moreHeap-based buffer overflow in the JPEG2000 image tile decoder in OpenJPEG before 1.5.2 allows...CVE-2014-0158Fix available8.8 High
- kbd-project kbd, opensuse +1 moreThe init script in kbd, possibly 1.14.1 and earlier, allows local users to overwrite arbitrary...CVE-2011-0460Fix available6.3 Medium
- haxx curl, libcurl, apple mac os x +5 more +7 morecURL and libcurl 7.10.6 through 7.41.0 do not properly re-use authenticated Negotiate connections...CVE-2015-3148Fix availableEPSS 14.1%5.0 Medium
- openstack horizon, opensuse +1 moreOpenStack Dashboard (aka Horizon) vulnerable to Cross-site ScriptingCVE-2014-0157Fix available4.3 Medium
- google chrome, debian linux, opensuse +2 moreCross-site scripting (XSS) vulnerability in the Runtime_SetPrototype function in runtime.cc in...CVE-2014-17167.5 High
- squid-cache squid, opensuse +1 moreSquid 3.1 before 3.3.12 and 3.4 before 3.4.4, when SSL-Bump is enabled, allows remote attackers...CVE-2014-0128Fix availableEPSS 32.6%5.0 Medium
- openssl, broadcom symantec messaging gateway, canonical ubuntu linux +25 more +27 moreThe (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle...CVE-2014-0160In KEVPublic exploitFix availableEPSS 100.0%7.5 High
- cacti, debian linux, fedoraproject fedora +1 more +3 moreCross-site scripting (XSS) vulnerability in cdef.php in Cacti 0.8.7g, 0.8.8b, and earlier allows...CVE-2014-2326Fix available4.3 Medium
- pyyaml libyaml, opensuse leap, opensuse +2 moreHeap-based buffer overflow in the yaml_parser_scan_uri_escapes function in LibYAML before 0.1.6...CVE-2014-2525Fix available6.8 Medium
- icinga, opensuse +1 moreMultiple off-by-one errors in Icinga, possibly 1.10.2 and earlier, allow remote attackers to...CVE-2014-23865.0 Medium
- f5 nginx, opensuse +1 moreHeap-based buffer overflow in the SPDY implementation in nginx 1.3.15 before 1.4.7 and 1.5.x...CVE-2014-0133Fix available7.5 High
- Show moreLoading…