Skip to contentOpensuse vulnerabilities
Newest
- adobe air, air sdk, flash player +2 more +4 moreAdobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X...CVE-2015-5124Fix available10.0 High
- fedoraproject fedora, gnu libidn, opensuse +2 moreThe stringprep_utf8_to_ucs4 function in libin before 1.31, as used in jabberd2, allows context...CVE-2015-2059Fix available7.5 High
- oracle mysql, canonical ubuntu linux, debian linux +8 more +10 moreUnspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier and 5.6.23 and earlier allows...CVE-2015-4757Fix available3.5 Low
- oracle mysql, canonical ubuntu linux, debian linux +9 more +11 moreUnspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows...CVE-2015-4752Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +9 more +11 moreUnspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows...CVE-2015-2648Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +9 more +11 moreUnspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows...CVE-2015-2643Fix available4.0 Medium
- oracle java se, canonical ubuntu linux, debian linux +19 more +21 moreUnspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and...CVE-2015-2590In KEVFix availableEPSS 25.5%9.8 Critical
- adobe flash player, flash player desktop runtime, opensuse evergreen +6 more +8 moreUse-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation...CVE-2015-5123In KEVFix availableEPSS 18.8%9.8 Critical
- adobe flash player, flash player desktop runtime, opensuse evergreen +6 more +8 moreUse-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3)...CVE-2015-5122In KEVPublic exploitFix availableEPSS 87.0%9.8 Critical
- adobe flash player, opensuse evergreen, opensuse +8 more +10 moreUse-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in...CVE-2015-5119In KEVPublic exploitFix availableEPSS 98.6%9.8 Critical
- polkit project polkit, fedoraproject fedora, opensuse +2 moreInteger overflow in the authentication_agent_new_cookie function in PolicyKit (aka polkit) before...CVE-2015-4625Fix available4.6 Medium
- polkit project polkit, opensuse +1 morePolicyKit (aka polkit) before 0.113 allows local users to cause a denial of service (memory...CVE-2015-3256Public exploitFix available4.6 Medium
- haproxy, canonical ubuntu linux, debian linux +9 more +11 moreThe buffer_slow_realign function in HAProxy 1.5.x before 1.5.14 and 1.6-dev does not properly...CVE-2015-3281Fix available5.0 Medium
- xmlsoft libxml, apple iphone os, mac os x +8 more +10 moreNokogiri vulnerable to libxml XML Entity ExpansionCVE-2015-1819Fix available5.0 Medium
- opensuse, x.org x server, xorg-server +2 moreThe authentication setup in XWayland 1.16.x and 1.17.x before 1.17.2 starts the server in non...CVE-2015-3164Fix available3.6 Low
- cryptopp crypto\+\+ library, opensuse +1 moreThe InvertibleRWFunction::CalculateInverse function in rw.cpp in libcrypt++ 5.6.2 does not...CVE-2015-2141Fix available5.0 Medium
- wvware libwmf, fedoraproject fedora, opensuse +2 moreHeap-based buffer overflow in the DecodeImage function in libwmf 0.2.8.4 allows remote attackers...CVE-2015-4588Fix available6.8 Medium
- rack project rack, debian linux, opensuse +2 moreRack vulnerable to Denial of Service via large parameter depth requestCVE-2015-3225Fix available5.0 Medium
- wvware libwmf, fedoraproject fedora, opensuse +2 moreHeap-based buffer overflow in libwmf 0.2.8.4 allows remote attackers to cause a denial of service...CVE-2015-0848Fix available6.8 Medium
- linux kernel, canonical ubuntu linux, opensuse +2 moredrivers/staging/ozwpan/ozusbsvc1.c in the OZWPAN driver in the Linux kernel through 4.0.5 does...CVE-2015-4002Fix available9.0 High
- gnu parallel, opensuse +1 moreGNU Parallel before 20150522 (Nepal), when using (1) --cat or (2) --fifo with --sshlogin, allows...CVE-2015-4156Fix available3.6 Low
- w1.fi hostapd, opensuse, w1.fi wpa supplicant +2 moreThe EAP-pwd peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 does not clear the...CVE-2015-4146Fix available5.0 Medium
- w1.fi hostapd, opensuse, w1.fi wpa supplicant +2 moreThe EAP-pwd server and peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 does not...CVE-2015-4145Fix available5.0 Medium
- w1.fi hostapd, opensuse, w1.fi wpa supplicant +2 moreThe EAP-pwd server and peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 does not...CVE-2015-4144Fix available5.0 Medium
- w1.fi hostapd, opensuse, w1.fi wpa supplicant +2 moreThe EAP-pwd server and peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 allows...CVE-2015-4143Fix available5.0 Medium
- w1.fi hostapd, opensuse, redhat enterprise linux desktop +4 more +6 moreInteger underflow in the WMM Action frame parser in hostapd 0.5.5 through 2.4 and wpa_supplicant...CVE-2015-4142Fix available4.3 Medium
- w1.fi hostapd, opensuse, w1.fi wpa supplicant +2 moreThe WPS UPnP function in hostapd, when using WPS AP, and wpa_supplicant, when using WPS external...CVE-2015-4141Fix available4.3 Medium
- docker libcontainer, opensuse +1 moreArbitrary File Write in LibcontainerCVE-2015-3629Fix available7.8 High
- proftpd, debian linux, fedoraproject fedora +2 more +4 moreThe mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files...CVE-2015-3306In KEVPublic exploitFix availableEPSS 99.5%10.0 High
- mozilla firefox, opensuse +1 moreThe WebChannel.jsm module in Mozilla Firefox before 38.0 allows remote attackers to bypass the...CVE-2015-2718Fix available4.3 Medium
- mozilla firefox, opensuse +1 moreInteger overflow in libstagefright in Mozilla Firefox before 38.0 allows remote attackers to...CVE-2015-2717Fix available6.8 Medium
- mozilla firefox, firefox esr, thunderbird +5 more +7 moreBuffer overflow in the XML parser in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7,...CVE-2015-2716Fix available7.5 High
- mozilla firefox, opensuse +1 moreRace condition in the nsThreadManager::RegisterCurrentThread function in Mozilla Firefox before...CVE-2015-2715Fix available6.8 Medium
- mozilla firefox, firefox esr, thunderbird +4 more +6 moreUse-after-free vulnerability in the SetBreaks function in Mozilla Firefox before 38.0, Firefox...CVE-2015-2713Fix available6.8 Medium
- mozilla firefox, opensuse +1 moreThe asm.js implementation in Mozilla Firefox before 38.0 does not properly determine heap lengths...CVE-2015-2712Fix available7.5 High
- mozilla firefox, opensuse +1 moreMozilla Firefox before 38.0 does not recognize a referrer policy delivered by a referrer META...CVE-2015-2711Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +4 more +6 moreHeap-based buffer overflow in the SVGTextFrame class in Mozilla Firefox before 38.0, Firefox ESR...CVE-2015-2710Fix available6.8 Medium
- mozilla firefox, novell suse linux enterprise desktop, suse linux enterprise server +2 more +4 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 38.0 allow...CVE-2015-2709Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +4 more +6 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 38.0,...CVE-2015-2708Fix available7.5 High
- erlang erlang\/otp, opensuse, oracle solaris +2 moreErlang/OTP before 18.0-rc1 does not properly check CBC padding bytes when terminating connections...CVE-2015-2774Fix available5.9 Medium
- gnu libtasn1, fedoraproject fedora, opensuse +2 moreThe _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.5 allows remote...CVE-2015-3622Fix availableEPSS 32.9%4.3 Medium
- canonical ubuntu linux, debian linux, fedoraproject fedora +2 more +4 moreThe _clone function in XML::LibXML before 2.0119 does not properly set the expand_entities option...CVE-2015-3451Fix available5.0 Medium
- xiph icecast, debian linux, opensuse +2 moreIcecast before 2.4.2, when a stream_auth handler is defined for URL authentication, allows remote...CVE-2015-3026Fix available5.0 Medium
- python pillow, opensuse +1 morePillow is vulnerable to Denial of Service (DOS) in the Jpeg2KImagePluginCVE-2014-3598Fix available5.0 Medium
- haxx curl, libcurl, apple mac os x +6 more +8 moreThe sanitize_cookie_path function in cURL and libcurl 7.31.0 through 7.41.0 does not properly...CVE-2015-3145Fix availableEPSS 30.5%7.5 High
- canonical ubuntu linux, debian linux, opensuse +7 more +9 moreHeap-based buffer overflow in wpa_supplicant 1.0 through 2.4 allows remote attackers to cause a...CVE-2015-1863Fix available5.8 Medium
- google chrome, debian linux, opensuse +2 moreGoogle Chrome before 42.0.2311.90 does not always ask the user before proceeding with...CVE-2015-3336Fix available4.3 Medium
- google chrome, opensuse +1 moreThe NaClSandbox::InitializeLayerTwoSandbox function in components/nacl/loader/sandbox_linux...CVE-2015-33357.5 High
- google chrome, debian linux, opensuse +2 morebrowser/ui/website_settings/website_settings.cc in Google Chrome before 42.0.2311.90 does not...CVE-2015-3334Fix available4.3 Medium
- google chrome, canonical ubuntu linux, debian linux +8 more +10 moreGoogle Chrome before 42.0.2311.90 does not properly consider the interaction of page navigation...CVE-2015-1241Fix available4.3 Medium
- Show moreLoading…