Skip to contentOpensuse vulnerabilities
Newest
- freetype, canonical ubuntu linux, debian linux +8 more +10 moreOff-by-one error in the pcf_get_properties function in pcf/pcfread.c in FreeType before 2.5.4...CVE-2014-9671Fix available4.3 Medium
- freetype, canonical ubuntu linux, debian linux +9 more +11 moreMultiple integer signedness errors in the pcf_get_encodings function in pcf/pcfread.c in FreeType...CVE-2014-9670Fix available4.3 Medium
- freetype, canonical ubuntu linux, debian linux +9 more +11 moreMultiple integer overflows in sfnt/ttcmap.c in FreeType before 2.5.4 allow remote attackers to...CVE-2014-9669Fix available6.8 Medium
- freetype, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreThe woff_open_font function in sfnt/sfobjs.c in FreeType before 2.5.4 proceeds with offset+length...CVE-2014-9668Fix available7.5 High
- freetype, canonical ubuntu linux, debian linux +8 more +10 moresfnt/ttload.c in FreeType before 2.5.4 proceeds with offset+length calculations without...CVE-2014-9667Fix available6.8 Medium
- freetype, canonical ubuntu linux, debian linux +9 more +11 moreThe tt_sbit_decoder_init function in sfnt/ttsbit.c in FreeType before 2.5.4 proceeds with a count...CVE-2014-9666Fix available6.8 Medium
- freetype, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreThe Load_SBit_Png function in sfnt/pngshim.c in FreeType before 2.5.4 does not restrict the rows...CVE-2014-9665Fix available7.5 High
- freetype, canonical ubuntu linux, debian linux +9 more +11 moreFreeType before 2.5.4 does not check for the end of the data during certain parsing actions,...CVE-2014-9664Fix available6.8 Medium
- freetype, canonical ubuntu linux, debian linux +9 more +11 moreThe tt_cmap4_validate function in sfnt/ttcmap.c in FreeType before 2.5.4 validates a certain...CVE-2014-9663Fix available7.5 High
- freetype, canonical ubuntu linux, debian linux +2 more +4 morecff/cf2ft.c in FreeType before 2.5.4 does not validate the return values of point-allocation...CVE-2014-9662Fix available7.5 High
- freetype, canonical ubuntu linux, debian linux +8 more +10 moretype42/t42parse.c in FreeType before 2.5.4 does not consider that scanning can be incomplete...CVE-2014-9661Fix available7.5 High
- freetype, canonical ubuntu linux, debian linux +9 more +11 moreThe _bdf_parse_glyphs function in bdf/bdflib.c in FreeType before 2.5.4 does not properly handle...CVE-2014-9660Fix available7.5 High
- freetype, canonical ubuntu linux, fedoraproject fedora +2 more +4 morecff/cf2intrp.c in the CFF CharString interpreter in FreeType before 2.5.4 proceeds with...CVE-2014-9659Fix available7.5 High
- freetype, canonical ubuntu linux, debian linux +9 more +11 moreThe tt_face_load_kern function in sfnt/ttkern.c in FreeType before 2.5.4 enforces an incorrect...CVE-2014-9658Fix available7.5 High
- freetype, canonical ubuntu linux, debian linux +9 more +11 moreThe tt_face_load_hdmx function in truetype/ttpload.c in FreeType before 2.5.4 does not establish...CVE-2014-9657Fix available7.5 High
- freetype, canonical ubuntu linux, debian linux +2 more +4 moreThe tt_sbit_decoder_load_image function in sfnt/ttsbit.c in FreeType before 2.5.4 does not...CVE-2014-9656Fix available7.5 High
- google chrome, canonical ubuntu linux, opensuse +5 more +7 moreMultiple unspecified vulnerabilities in Google Chrome before 40.0.2214.111 on Windows, OS X, and...CVE-2015-1212Fix available7.5 High
- google chrome, canonical ubuntu linux, opensuse +5 more +7 moreThe OriginCanAccessServiceWorkers function in content/browser/service_worker...CVE-2015-1211Fix available7.5 High
- google chrome, canonical ubuntu linux, opensuse +5 more +7 moreThe V8ThrowException::createDOMException function in bindings/core/v8/V8ThrowException.cpp in the...CVE-2015-1210Fix available5.0 Medium
- google chrome, canonical ubuntu linux, opensuse +5 more +7 moreUse-after-free vulnerability in the VisibleSelection::nonBoundaryShadowTreeRootNode function in...CVE-2015-1209Fix available7.5 High
- privoxy, opensuse, oracle solaris +2 morejcc.c in Privoxy before 3.0.23 allows remote attackers to cause a denial of service (abort) via a...CVE-2015-1380Fix available5.0 Medium
- privoxy, debian linux, opensuse +2 moreparsers.c in Privoxy before 3.0.23 allows remote attackers to cause a denial of service (invalid...CVE-2015-1382Fix available5.0 Medium
- privoxy, debian linux, opensuse +2 moreMultiple unspecified vulnerabilities in pcrs.c in Privoxy before 3.0.23 allow remote attackers to...CVE-2015-1381Fix available5.0 Medium
- vsftpd project vsftpd, opensuse +1 moreUnspecified vulnerability in vsftpd 3.0.2 and earlier allows remote attackers to bypass access...CVE-2015-1419Fix available5.0 Medium
- gnome vala, opensuse +1 moreThe Gst.MapInfo function in Vala 0.26.0 and 0.26.1 uses an incorrect buffer length declaration...CVE-2014-81547.5 High
- midgard-project midgard2, opensuse +1 moreThe default D-Bus access control rule in Midgard2 10.05.7.1 allows local users to send arbitrary...CVE-2014-81487.2 High
- polarssl, opensuse +1 moreThe asn1_get_sequence_of function in library/asn1parse.c in PolarSSL 1.0 through 1.2.12 and 1.3.x...CVE-2015-1182Fix available7.5 High
- xiph vorbis-tools, opensuse +1 moreoggenc/oggenc.c in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (out...CVE-2014-9640Fix available5.0 Medium
- xiph vorbis-tools, fedoraproject fedora, opensuse +2 moreInteger overflow in oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of...CVE-2014-9639Fix available5.0 Medium
- xiph vorbis-tools, fedoraproject fedora, opensuse +2 moreoggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (divide-by-zero...CVE-2014-9638Fix available5.0 Medium
- google chrome, chromium, opensuse +4 more +6 moreThe SelectionOwner::ProcessTarget function in ui/base/x/selection_owner.cc in the UI...CVE-2014-7941Fix available5.0 Medium
- google chrome, chromium, opensuse +4 more +6 moreGoogle Chrome before 40.0.2214.91, when the Harmony proxy in Google V8 is enabled, allows remote...CVE-2014-7939Fix available4.3 Medium
- jasper project jasper, debian linux, opensuse +1 more +3 moreMultiple stack-based buffer overflows in jpc_qmfb.c in JasPer 1.900.1 and earlier allow remote...CVE-2014-8158Fix availableEPSS 14.4%6.8 Medium
- jasper project jasper, debian linux, opensuse +1 more +3 moreOff-by-one error in the jpc_dec_process_sot function in JasPer 1.900.1 and earlier allows remote...CVE-2014-8157Fix availableEPSS 16.9%7.5 High
- google chrome, canonical ubuntu linux, chromium +5 more +7 moreSkia, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of...CVE-2014-7943Fix available5.0 Medium
- google chrome, canonical ubuntu linux, chromium +5 more +7 moreThe Fonts implementation in Google Chrome before 40.0.2214.91 does not initialize memory for a...CVE-2014-7942Fix available7.5 High
- google chrome, icu-project international components for unicode, canonical ubuntu linux +6 more +8 moreThe Regular Expressions package in International Components for Unicode (ICU) 52 before SVN...CVE-2014-7926Fix available7.5 High
- google chrome, icu-project international components for unicode, canonical ubuntu linux +6 more +8 moreThe Regular Expressions package in International Components for Unicode (ICU) 52 before SVN...CVE-2014-7923Fix available7.5 High
- oracle vm virtualbox, opensuse +1 moreUnspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization...CVE-2015-0427Fix available3.2 Low
- oracle vm virtualbox, debian linux, opensuse +2 moreUnspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization...CVE-2015-04182.1 Low
- oracle vm virtualbox, debian linux, opensuse +2 moreUnspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization...CVE-2015-03774.4 Medium
- oracle vm virtualbox, opensuse +1 moreUnspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization...CVE-2014-6595Fix available3.2 Low
- oracle vm virtualbox, opensuse +1 moreUnspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization...CVE-2014-6590Fix available3.2 Low
- oracle vm virtualbox, opensuse +1 moreUnspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization...CVE-2014-6589Fix available3.2 Low
- oracle vm virtualbox, opensuse +1 moreUnspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization...CVE-2014-6588Fix available3.2 Low
- gnu patch, opensuse, oracle solaris +2 moreGNU patch 2.7.1 allows remote attackers to write to arbitrary files via a symlink attack in a...CVE-2015-1196Fix available4.3 Medium
- python pillow, fedoraproject fedora, opensuse +1 more +3 morePillow denial of service via PNG bombCVE-2014-9601Fix available5.0 Medium
- mozilla firefox, opensuse +1 moreMozilla Firefox before 35.0 on Windows allows remote attackers to bypass the Gecko Media Plugin ...CVE-2014-86437.1 High
- mozilla firefox, seamonkey, opensuse +2 moreMozilla Firefox before 35.0 and SeaMonkey before 2.32 do not consider the id-pkix-ocsp-nocheck...CVE-2014-8642Fix available4.3 Medium
- mozilla firefox, seamonkey, opensuse +2 moreThe mozilla::dom::AudioParamTimeline::AudioNodeInputValue function in the Web Audio API...CVE-2014-8640Fix available5.0 Medium
- Show moreLoading…