Skip to contentOpensuse vulnerabilities
Newest
- djangoproject django, canonical ubuntu linux, debian linux +3 more +5 moreDjango cross-site scripting (XSS) attack via user-supplied redirect URLsCVE-2015-2317Fix available4.3 Medium
- djangoproject django, canonical ubuntu linux, fedoraproject fedora +2 more +4 moreDjango Denial-of-service possibility with strip_tagsCVE-2015-2316Fix available5.0 Medium
- mozilla firefox, thunderbird, opensuse evergreen +1 more +3 moreMozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 do...CVE-2014-1564Public exploitFix available4.3 Medium
- mozilla firefox, thunderbird, opensuse evergreen +2 more +4 moreUse-after-free vulnerability in the mozilla::DOMSVGLength::GetTearOff function in Mozilla Firefox...CVE-2014-1563Fix available10.0 High
- mozilla firefox, thunderbird, opensuse evergreen +1 more +3 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 32.0,...CVE-2014-1553Fix available10.0 High
- openstack horizon, fedoraproject fedora, opensuse +1 more +3 moreOpenStack Dashboard (Horizon) before 2014.1.3 and 2014.2.x before 2014.2.1 does not properly...CVE-2014-8124Fix available5.0 Medium
- lua, canonical ubuntu linux, debian linux +2 more +4 moreBuffer overflow in the vararg functions in ldo.c in Lua 5.1 through 5.2.x before 5.2.3 allows...CVE-2014-5461Fix availableEPSS 12.0%5.0 Medium
- kdirstat project kdirstat, opensuse +1 morekcleanup.cpp in KDirStat 2.7.3 does not properly quote strings when deleting a directory, which...CVE-2014-2528Fix available6.8 Medium
- kdirstat project kdirstat, opensuse +1 morekcleanup.cpp in KDirStat 2.7.0 does not properly quote strings when deleting a directory, which...CVE-2014-25276.8 Medium
- google chrome, debian linux, opensuse +2 moreUse-after-free vulnerability in core/dom/ContainerNode.cpp in the DOM implementation in Blink, as...CVE-2014-3169Fix available7.5 High
- google chrome, debian linux, opensuse +2 moreUse-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before...CVE-2014-3168Fix available7.5 High
- xen, opensuse +1 moreCertain MMU virtualization operations in Xen 4.2.x through 4.4.x, when using shadow pagetables,...CVE-2014-5149Fix available4.7 Medium
- xen, opensuse +1 moreCertain MMU virtualization operations in Xen 4.2.x through 4.4.x before the xsa97-hap patch, when...CVE-2014-5146Fix available4.7 Medium
- djangoproject django, opensuse +1 moreDjango data leakage via querystring manipulation in adminCVE-2014-0483Fix available3.5 Low
- djangoproject django, opensuse +1 moreDjango Middleware Enables Session HijackingCVE-2014-0482Fix available6.0 Medium
- djangoproject django, debian linux, opensuse +2 moreDjango denial of service via file upload namingCVE-2014-0481Fix available4.3 Medium
- djangoproject django, opensuse +1 moreDjango Incorrectly Validates URLsCVE-2014-0480Fix available5.8 Medium
- phpmyadmin, opensuse +1 morephpMyAdmin cross-site scripting vulnerability in crafted view nameCVE-2014-5274Fix available3.5 Low
- python pillow, debian python-imaging, opensuse +2 morePillow denial of service via Crafted Block SizeCVE-2014-3589Fix available5.0 Medium
- cacti, debian linux, opensuse +2 moreMultiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.8b allow remote authenticated...CVE-2014-5026Fix available3.5 Low
- cacti, debian linux, opensuse +2 moreCross-site scripting (XSS) vulnerability in data_sources.php in Cacti 0.8.8b allows remote...CVE-2014-5025Fix available3.5 Low
- apache subversion, apple xcode, opensuse +6 more +8 moreThe mod_dav_svn server in Subversion 1.5.0 through 1.7.19 and 1.8.0 through 1.8.11 allows remote...CVE-2015-0251Fix available4.0 Medium
- apache subversion, apple xcode, opensuse +6 more +8 moreThe (1) mod_dav_svn and (2) svnserve servers in Subversion 1.6.0 through 1.7.19 and 1.8.0 through...CVE-2015-0248Fix availableEPSS 12.8%5.0 Medium
- openstack horizon, opensuse +1 moreOpenStack Dashboard (Horizon) Cross-site scripting (XSS) vulnerability in the Host Aggregates interfaceCVE-2014-3594Fix available3.5 Low
- apache subversion, apple xcode, canonical ubuntu linux +1 more +3 moreThe Serf RA layer in Apache Subversion 1.4.0 through 1.7.x before 1.7.18 and 1.8.x before 1.8.10...CVE-2014-3522Fix available4.0 Medium
- ipython notebook, mageia, opensuse +2 moreIPython Notebook vulnerable to improper validation of the origin of websocket requestsCVE-2014-3429Fix available6.8 Medium
- gnu readline, fedoraproject fedora, mageia +1 more +3 moreThe _rl_tropen function in util.c in GNU readline before 6.3 patch 3 allows local users to create...CVE-2014-2524Fix available3.3 Low
- apache subversion, apple xcode, canonical ubuntu linux +6 more +8 moreApache Subversion 1.0.0 through 1.7.x before 1.7.17 and 1.8.x before 1.8.10 uses an MD5 hash of...CVE-2014-3528Fix available4.0 Medium
- redhat libvirt, opensuse, redhat enterprise linux +1 more +3 morelibvirt 1.0.0 through 1.2.x before 1.2.5, when fine grained access control is enabled, allows...CVE-2014-5177Fix available1.2 Low
- ntp, debian linux, fedoraproject fedora +10 more +12 morentp-keygen in ntp 4.2.8px before 4.2.8p2-RC2 and 4.3.x before 4.3.12 does not generate MD5 keys...CVE-2015-3405Fix available7.5 High
- phpmyadmin, opensuse +1 moreserver_user_groups.php in phpMyAdmin 4.1.x before 4.1.14.2 and 4.2.x before 4.2.6 allows remote...CVE-2014-4987Fix available4.0 Medium
- openstack horizon, opensuse +1 moreCross-site scripting (XSS) vulnerability in the Users panel (admin/users/) in OpenStack Dashboard...CVE-2014-3475Fix available3.5 Low
- openstack horizon, opensuse +1 moreOpenStack Horizon Cross-site scripting (XSS) vulnerabilityCVE-2014-3474Fix available3.5 Low
- openstack horizon, opensuse +1 moreHorizon-Orchestration Cross-site scripting (XSS) vulnerability through resource nameCVE-2014-3473Fix available4.3 Medium
- freerdp, opensuse +1 moreMultiple integer overflows in client/X11/xf_graphics.c in FreeRDP allow remote attackers to have...CVE-2014-0250Fix available7.5 High
- christos zoulas file, php, debian linux +1 more +3 moreThe cdf_read_short_sector function in cdf.c in file before 5.19, as used in the Fileinfo...CVE-2014-0207Fix availableEPSS 16.9%4.3 Medium
- file project file, php, debian linux +1 more +3 moreThe cdf_read_property_info function in file before 5.19, as used in the Fileinfo component in PHP...CVE-2014-3487Fix availableEPSS 14.9%4.3 Medium
- file project file, php, debian linux +1 more +3 moreThe cdf_count_chain function in cdf.c in file before 5.19, as used in the Fileinfo component in...CVE-2014-3480Fix availableEPSS 11.5%4.3 Medium
- file project file, php, debian linux +1 more +3 moreThe cdf_check_stream_offset function in cdf.c in file before 5.19, as used in the Fileinfo...CVE-2014-3479Fix availableEPSS 14.9%4.3 Medium
- freedesktop dbus, debian linux, mageia project mageia +1 more +3 moredbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6 allows local users to cause a denial of service ...CVE-2014-3533Fix available2.1 Low
- debian linux, freedesktop dbus, mageia +2 more +4 moredbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6, when running on Linux 2.6.37-rc4 or later,...CVE-2014-3532Fix available2.1 Low
- kde kdelibs, opensuse +1 morekio/usernotificationhandler.cpp in the POP3 kioslave in kdelibs 4.10.95 before 4.13.3 does not...CVE-2014-3494Fix available4.3 Medium
- cacti, opensuse +1 moreMultiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.8b allow remote attackers to...CVE-2014-4002Fix available4.3 Medium
- ctdb project ctdb, opensuse, mageia +2 morectdb before 2.3 in OpenSUSE 12.3 and 13.1 does not create temporary files securely, which has...CVE-2013-4159Fix available7.5 High
- opensuse, x.org x server +1 moreX.Org Server (aka xserver and xorg-server) before 1.16.3 and 1.17.x before 1.17.1 allows remote...CVE-2015-0255Fix available6.4 Medium
- python, simplejson project simplejson, opensuse +2 moresimplejson before 2.6.1 vulnerable to array index errorCVE-2014-4616Fix available5.9 Medium
- gnupg, debian linux, opensuse +2 moreThe do_uncompress function in g10/compress.c in GnuPG 1.x before 1.4.17 and 2.x before 2.0.24...CVE-2014-4617Fix available5.0 Medium
- libreoffice, canonical ubuntu linux, fedoraproject fedora +4 more +6 moreLibreOffice 4.2.4 executes unspecified VBA macros automatically, which has unspecified impact and...CVE-2014-0247Fix available10.0 High
- ntop, opensuse +1 moreCross-site scripting (XSS) vulnerability in ntop allows remote attackers to inject arbitrary web...CVE-2014-4165Fix available4.3 Medium
- php, debian linux, opensuse +2 moreHeap-based buffer overflow in the php_parserr function in ext/standard/dns.c in PHP 5.6.0beta4...CVE-2014-4049Fix availableEPSS 10.9%5.1 Medium
- Show moreLoading…