Skip to contentOpensuse vulnerabilities
Newest
- adobe air, air sdk, flash player +2 more +4 moreBuffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202...CVE-2015-5132Public exploitFix availableEPSS 50.7%10.0 High
- adobe air, air sdk, flash player +2 more +4 moreBuffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202...CVE-2015-5131Public exploitFix availableEPSS 50.7%10.0 High
- adobe air, air sdk, flash player +2 more +4 moreUse-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and...CVE-2015-5130Public exploitFix availableEPSS 50.3%10.0 High
- adobe air, air sdk, flash player +2 more +4 moreHeap-based buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before...CVE-2015-5129Fix availableEPSS 10.3%10.0 High
- adobe air, air sdk, flash player +2 more +4 moreUse-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and...CVE-2015-5127Public exploitFix availableEPSS 50.3%10.0 High
- adobe air, air sdk, flash player +2 more +4 moreAdobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe...CVE-2015-5125Fix available10.0 High
- mozilla firefox, canonical ubuntu linux, opensuse +1 more +3 moreHeap-based buffer overflow in the stagefright::ESDS::parseESDescriptor function in libstagefright...CVE-2015-4493Fix available9.3 High
- mozilla firefox, canonical ubuntu linux, opensuse +1 more +3 moreUse-after-free vulnerability in the XMLHttpRequest::Open implementation in Mozilla Firefox before...CVE-2015-4492Fix available7.5 High
- gnome gdk-pixbuf, canonical ubuntu linux, fedoraproject fedora +2 more +4 moreInteger overflow in the make_filter_table function in pixops/pixops.c in gdk-pixbuf before 2.31.5...CVE-2015-4491Fix available6.8 Medium
- mozilla firefox, canonical ubuntu linux, opensuse +1 more +3 moreThe nsCSPHostSrc::permits function in dom/security/nsCSPUtils.cpp in Mozilla Firefox before 40.0...CVE-2015-4490Fix available4.3 Medium
- mozilla firefox, firefox os, canonical ubuntu linux +2 more +4 moreThe nsTArray_Impl class in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox...CVE-2015-4489Fix available7.5 High
- mozilla firefox, firefox os, canonical ubuntu linux +2 more +4 moreUse-after-free vulnerability in the StyleAnimationValue class in Mozilla Firefox before 40.0,...CVE-2015-4488Fix available7.5 High
- mozilla firefox, firefox os, canonical ubuntu linux +2 more +4 moreThe nsTSubstring::ReplacePrep function in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38...CVE-2015-4487Fix available7.5 High
- mozilla firefox, canonical ubuntu linux, opensuse +1 more +3 moreThe decrease_ref_count function in libvpx in Mozilla Firefox before 40.0 and Firefox ESR 38.x...CVE-2015-4486Fix available10.0 High
- mozilla firefox, canonical ubuntu linux, opensuse +1 more +3 moreHeap-based buffer overflow in the resize_context_buffers function in libvpx in Mozilla Firefox...CVE-2015-4485Fix available10.0 High
- mozilla firefox, canonical ubuntu linux, opensuse +1 more +3 moreThe js::jit::AssemblerX86Shared::lock_addl function in the JavaScript implementation in Mozilla...CVE-2015-4484Fix available5.0 Medium
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreInteger overflow in the stagefright::SampleTable::isValid function in libstagefright in Mozilla...CVE-2015-4480Fix available9.3 High
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreMultiple integer overflows in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x...CVE-2015-4479Fix available10.0 High
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreMozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 do not impose certain ECMAScript 6...CVE-2015-4478Fix available5.0 Medium
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreUse-after-free vulnerability in the MediaStream playback feature in Mozilla Firefox before 40.0...CVE-2015-4477Fix available10.0 High
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreThe mozilla::AudioSink function in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2...CVE-2015-4475Fix available7.5 High
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 40.0 allow...CVE-2015-4474Fix available10.0 High
- mozilla firefox, canonical ubuntu linux, debian linux +1 more +3 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 40.0 and...CVE-2015-4473Fix available10.0 High
- mozilla firefox, firefox os, canonical ubuntu linux +12 more +14 moreThe PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS...CVE-2015-4495In KEVPublic exploitFix availableEPSS 68.6%8.8 High
- roaring penguin remind, opensuse +1 moreBuffer overflow in the DumpSysVar function in var.c in Remind before 3.1.15 allows attackers to...CVE-2015-5957Fix available10.0 High
- isc bind, apple os x server, canonical ubuntu linux +18 more +20 morenamed in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to...CVE-2015-5477In KEVPublic exploitFix availableEPSS 99.6%7.8 High
- rubyonrails rails, opensuse +1 moreactivesupport vulnerable to Denial of Service via large XML document depthCVE-2015-3227Fix available5.0 Medium
- rubyonrails jquery-rails, jquery-ujs, fedoraproject fedora +1 more +3 morejquery-rails and jquery-ujs subject to Exposure of Sensitive InformationCVE-2015-1840Fix available5.0 Medium
- libuser project libuser, opensuse, redhat enterprise linux +2 morelibuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the...CVE-2015-3246In KEVPublic exploitFix available7.2 High
- google chrome, debian linux, opensuse +4 more +6 moreThe Spellcheck API implementation in Google Chrome before 44.0.2403.89 does not use an HTTPS...CVE-2015-1288Fix available6.8 Medium
- google chrome, debian linux, opensuse +4 more +6 moreCross-site scripting (XSS) vulnerability in the V8ContextNativeHandler::GetModuleSystem function...CVE-2015-1286Fix available4.3 Medium
- google chrome, debian linux, opensuse +4 more +6 moreMultiple use-after-free vulnerabilities in fpdfsdk/src/javascript/Document.cpp in PDFium, as used...CVE-2015-1282Fix available6.8 Medium
- google chrome, debian linux, opensuse +4 more +6 moreInteger overflow in the CJBig2_Image::expand function in fxcodec/jbig2/JBig2_Image.cpp in PDFium,...CVE-2015-1279Fix available7.5 High
- google chrome, debian linux, opensuse +4 more +6 morecontent/browser/web_contents/web_contents_impl.cc in Google Chrome before 44.0.2403.89 does not...CVE-2015-1278Fix available4.3 Medium
- google chrome, opensuse +1 moreCross-site scripting (XSS) vulnerability in org/chromium/chrome/browser/UrlUtilities.java in...CVE-2015-12754.3 Medium
- google chrome, debian linux, opensuse +3 more +5 moreGoogle Chrome before 44.0.2403.89 does not ensure that the auto-open list omits all dangerous...CVE-2015-1274Fix available6.8 Medium
- google chrome, debian linux, opensuse +4 more +6 moreHeap-based buffer overflow in j2k.c in OpenJPEG before r3002, as used in PDFium in Google Chrome...CVE-2015-1273Fix available6.8 Medium
- google chrome, debian linux, opensuse +4 more +6 morePDFium, as used in Google Chrome before 44.0.2403.89, does not properly handle certain out-of...CVE-2015-1271Fix available6.8 Medium
- google chrome, opensuse +1 moreThe regular-expression implementation in Google V8, as used in Google Chrome before 44.0.2403.89,...CVE-2015-5605Fix available5.0 Medium
- google chrome, debian linux, opensuse +4 more +6 moreMultiple unspecified vulnerabilities in Google Chrome before 44.0.2403.89 allow attackers to...CVE-2015-1289Fix available7.5 High
- google chrome, debian linux, opensuse +4 more +6 moreBlink, as used in Google Chrome before 44.0.2403.89, enables a quirks-mode exception that limits...CVE-2015-1287Fix available4.3 Medium
- google chrome, debian linux, opensuse +4 more +6 moreThe XSSAuditor::canonicalize function in core/html/parser/XSSAuditor.cpp in the XSS auditor in...CVE-2015-1285Fix available5.0 Medium
- google chrome, opensuse, redhat enterprise linux desktop supplementary +2 more +4 moreThe LocalFrame::isURLAllowed function in core/frame/LocalFrame.cpp in Blink, as used in Google...CVE-2015-1284Fix available7.5 High
- google chrome, canonical ubuntu linux, debian linux +10 more +12 moreMultiple integer overflows in the XML_GetBuffer function in Expat through 2.1.0, as used in...CVE-2015-1283Fix availableEPSS 18.3%6.8 Medium
- google chrome, debian linux, opensuse +4 more +6 morecore/loader/ImageLoader.cpp in Blink, as used in Google Chrome before 44.0.2403.89, does not...CVE-2015-1281Fix available4.3 Medium
- google chrome, debian linux, opensuse +4 more +6 moreSkPictureShader.cpp in Skia, as used in Google Chrome before 44.0.2403.89, allows remote...CVE-2015-1280Fix available7.5 High
- google chrome, debian linux, opensuse +4 more +6 moreUse-after-free vulnerability in the accessibility implementation in Google Chrome before 44.0...CVE-2015-1277Fix available7.5 High
- google chrome, debian linux, opensuse +4 more +6 moreUse-after-free vulnerability in content/browser/indexed_db/indexed_db_backing_store.cc in the...CVE-2015-1276Fix available9.8 Critical
- google chrome, debian linux, opensuse +4 more +6 moreUse-after-free vulnerability in the GPU process implementation in Google Chrome before 44.0.2403...CVE-2015-1272Fix available7.5 High
- google chrome, debian linux, opensuse +5 more +7 moreThe ucnv_io_getConverterName function in common/ucnv_io.cpp in International Components for...CVE-2015-1270Fix available6.8 Medium
- Show moreLoading…