Skip to contentOpensuse vulnerabilities
Newest
- opensuse, oracle jdk, jre +2 moreUnspecified vulnerability in Oracle Java SE 8u40 allows remote attackers to affect...CVE-2015-04865.0 Medium
- gnu less, opensuse +1 moreThe is_utf8_well_formed function in GNU less before 475 allows remote attackers to have...CVE-2014-9488Fix available10.0 High
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreThe HTTP Alternative Services feature in Mozilla Firefox before 37.0.1 allows man-in-the-middle...CVE-2015-0799Fix available4.3 Medium
- apache subversion, opensuse +1 moreThe mod_dav_svn server in Subversion 1.8.0 through 1.8.11 allows remote attackers to cause a...CVE-2015-0202Fix available7.8 High
- pcre, mariadb, opensuse +1 more +3 moreThe pcre_compile2 function in PCRE before 8.37 allows context-dependent attackers to compile...CVE-2015-2326Fix available5.5 Medium
- pcre, mariadb, opensuse +1 more +3 moreThe compile_branch function in PCRE before 8.37 allows context-dependent attackers to compile...CVE-2015-2325Fix available7.8 High
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreMozilla Firefox before 37.0 does not require an HTTPS session for lightweight theme add-on...CVE-2015-0812Fix available4.3 Medium
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreThe QCMS implementation in Mozilla Firefox before 37.0 allows remote attackers to obtain...CVE-2015-0811Fix available6.4 Medium
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreThe webrtc::VPMContentAnalysis::Release function in the WebRTC implementation in Mozilla Firefox...CVE-2015-0808Fix available5.0 Medium
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreThe Off Main Thread Compositing (OMTC) implementation in Mozilla Firefox before 37.0 attempts to...CVE-2015-0806Fix available7.5 High
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreThe Off Main Thread Compositing (OMTC) implementation in Mozilla Firefox before 37.0 makes an...CVE-2015-0805Fix available7.5 High
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreThe HTMLSourceElement::BindToTree function in Mozilla Firefox before 37.0 does not properly...CVE-2015-0804Fix available7.5 High
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreThe HTMLSourceElement::AfterSetAttr function in Mozilla Firefox before 37.0 does not properly...CVE-2015-0803Fix available7.5 High
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreMozilla Firefox before 37.0 relies on docshell type information instead of page principal...CVE-2015-0802Public exploitFix availableEPSS 65.0%5.0 Medium
- gluster glusterfs, opensuse +1 moreThe __socket_proto_state_machine function in GlusterFS 3.5 allows remote attackers to cause a...CVE-2014-3619Fix available5.0 Medium
- mercurial, opensuse +1 moreMercurial vulnerable to arbitrary command execution via a crafted repository name in a clone commandCVE-2014-9462Fix available7.5 High
- php, apple mac os x, opensuse +6 more +8 moreThe move_uploaded_file implementation in ext/standard/basic_functions.c in PHP before 5.4.39, 5.5...CVE-2015-2348Fix available5.0 Medium
- nih libzip, php, debian linux +2 more +4 moreInteger overflow in the _zip_cdir_new function in zip_dirent.c in libzip 0.11.2 and earlier, as...CVE-2015-2331Fix availableEPSS 27.4%7.5 High
- tcpdump, debian linux, fedoraproject fedora +2 more +4 moreThe force printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service ...CVE-2015-2155Fix available7.5 High
- fedoraproject fedora, opensuse, suse opensuse osc +2 moreosc before 0.151.0 allows remote attackers to execute arbitrary commands via shell metacharacters...CVE-2015-0778Fix available7.5 High
- digia qt, fedoraproject fedora, opensuse +2 moreThe BMP decoder in QtGui in QT before 5.5 does not properly calculate the masks used to extract...CVE-2015-0295Fix available5.0 Medium
- wireshark, opensuse +1 moreInteger overflow in the dissect_osd2_cdb_continuation function in epan/dissectors/packet-scsi-osd...CVE-2015-2192Fix available5.0 Medium
- wireshark, opensuse, oracle solaris +2 moreepan/proto.c in Wireshark 1.12.x before 1.12.4 does not properly handle integer data types...CVE-2015-2190Fix available5.0 Medium
- wireshark, opensuse +1 moreThe dissect_atn_cpdlc_heur function in asn1/atn-cpdlc/packet-atn-cpdlc-template.c in the ATN...CVE-2015-2187Fix available5.0 Medium
- putty, debian linux, fedoraproject fedora +1 more +3 moreThe (1) ssh2_load_userkey and (2) ssh2_save_userkey functions in PuTTY 0.51 through 0.63 do not...CVE-2015-2157Fix available2.1 Low
- apache http server, apple mac os x, mac os x server +2 more +4 moreThe lua_websocket_read function in lua_request.c in the mod_lua module in the Apache HTTP Server...CVE-2015-0228Fix availableEPSS 16.9%5.0 Medium
- libarchive, canonical ubuntu linux, opensuse +2 moreAbsolute path traversal vulnerability in bsdcpio in libarchive 3.1.2 and earlier allows remote...CVE-2015-2304Fix available6.4 Medium
- automount project automount, opensuse, redhat enterprise linux desktop +3 more +5 moreautomount 5.0.8, when a program map uses certain interpreted languages, uses the calling user's...CVE-2014-8169Fix available4.4 Medium
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreMultiple untrusted search path vulnerabilities in updater.exe in Mozilla Firefox before 36.0,...CVE-2015-08336.9 Medium
- mozilla firefox, opensuse, oracle solaris +2 moreDouble free vulnerability in the nsXMLHttpRequest::GetResponse function in Mozilla Firefox before...CVE-2015-08286.8 Medium
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreThe WebRTC subsystem in Mozilla Firefox before 36.0 recognizes turns: and stuns: URIs but...CVE-2015-0834Fix available4.3 Medium
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreMozilla Firefox before 36.0 does not properly recognize the equivalence of domain names with and...CVE-2015-0832Fix available5.0 Medium
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreThe WebGL implementation in Mozilla Firefox before 36.0 does not properly allocate memory for...CVE-2015-0830Fix available5.0 Medium
- mozilla firefox, canonical ubuntu linux, opensuse +1 more +3 moreBuffer overflow in libstagefright in Mozilla Firefox before 36.0 allows remote attackers to...CVE-2015-0829Fix available6.8 Medium
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreThe nsTransformedTextRun::SetCapitalization function in Mozilla Firefox before 36.0 allows remote...CVE-2015-0826Fix available6.8 Medium
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreStack-based buffer underflow in the mozilla::MP3FrameParser::ParseBuffer function in Mozilla...CVE-2015-0825Fix available4.3 Medium
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreThe mozilla::layers::BufferTextureClient::AllocateForSurface function in Mozilla Firefox before...CVE-2015-0824Fix available5.0 Medium
- mozilla firefox, opentype sanitiser project sanitiser, canonical ubuntu linux +1 more +3 moreMultiple use-after-free vulnerabilities in OpenType Sanitiser, as used in Mozilla Firefox before...CVE-2015-0823Fix available7.5 High
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreMozilla Firefox before 36.0 allows user-assisted remote attackers to read arbitrary files or...CVE-2015-0821Fix available6.8 Medium
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreMozilla Firefox before 36.0 does not properly restrict transitions of JavaScript objects from a...CVE-2015-0820Fix available2.6 Low
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreThe UITour::onPageEvent function in Mozilla Firefox before 36.0 does not ensure that an API call...CVE-2015-0819Fix available4.3 Medium
- jython project jython, opensuse +1 moreJython Improper Access Restrictions vulnerabilityCVE-2013-2027Fix available4.6 Medium
- openldap, apple mac os x, opensuse +2 moreDouble free vulnerability in the get_vrFilter function in servers/slapd/filter.c in OpenLDAP 2.4...CVE-2015-1546Fix available5.0 Medium
- gnu grep, opensuse +1 moreThe bmexec_trans function in kwset.c in grep 2.19 through 2.21 allows local users to cause a...CVE-2015-1345Fix available2.1 Low
- samba rsync, opensuse, oracle solaris +2 morersync 3.1.1 allows remote attackers to write to arbitrary files via a symlink attack on a file in...CVE-2014-9512Fix available6.4 Medium
- freedesktop dbus, opensuse +1 moreD-Bus 1.4.x through 1.6.x before 1.6.30, 1.8.x before 1.8.16, and 1.9.x before 1.9.10 does not...CVE-2015-0245Fix available1.9 Low
- freetype, canonical ubuntu linux, debian linux +8 more +10 morebdf/bdflib.c in FreeType before 2.5.4 identifies property names by only verifying that an initial...CVE-2014-9675Fix available5.0 Medium
- freetype, canonical ubuntu linux, fedoraproject fedora +8 more +10 moreThe Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.5.4 proceeds with...CVE-2014-9674Fix available7.5 High
- freetype, canonical ubuntu linux, debian linux +7 more +9 moreInteger signedness error in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType...CVE-2014-9673Fix available6.8 Medium
- freetype, canonical ubuntu linux, debian linux +2 more +4 moreArray index error in the parse_fond function in base/ftmac.c in FreeType before 2.5.4 allows...CVE-2014-9672Fix available5.8 Medium
- Show moreLoading…