Skip to contentOpensuse vulnerabilities
Newest
- redislabs redis, debian linux, opensuse leap +2 more +4 moreInteger overflow in the getnum function in lua_struct.c in Redis 2.8.x before 2.8.24 and 3.0.x...CVE-2015-8080Fix available7.5 High
- openssl, apple mac os x, canonical ubuntu linux +21 more +23 moreThe ASN1_TFLG_COMBINE implementation in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zh, 1.0.0...CVE-2015-3195Public exploitFix availableEPSS 38.7%5.3 Medium
- xmlsoft libxml2, apple iphone os, mac os x +12 more +14 moreHeap-based buffer overflow in nokogiriCVE-2015-7499Fix available5.0 Medium
- mega-nerd libsndfile, opensuse +1 moreHeap-based buffer overflow in libsndfile 1.0.25 allows remote attackers to have unspecified...CVE-2015-7805Public exploitFix availableEPSS 14.3%9.3 High
- libsndfile project libsndfile, canonical ubuntu linux, opensuse leap +1 more +3 moreThe psf_fwrite function in file_io.c in libsndfile allows attackers to cause a denial of service ...CVE-2014-9756Fix available5.0 Medium
- libpng, apple mac os x, canonical ubuntu linux +16 more +18 moreMultiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before...CVE-2015-8126Fix availableEPSS 10.3%7.5 High
- simon tatham putty, opensuse leap, opensuse +2 moreInteger overflow in the terminal emulator in PuTTY before 0.66 allows remote attackers to cause a...CVE-2015-5309Fix available4.3 Medium
- roundcube webmail, opensuse +1 moreCross-site scripting (XSS) vulnerability in program/js/app.js in Roundcube webmail before 1.0.7...CVE-2015-8105Fix available3.5 Low
- w1.fi hostapd, opensuse, w1.fi wpa supplicant +2 moreMultiple integer overflows in the NDEF record parser in hostapd before 2.5 and wpa_supplicant...CVE-2015-8041Fix available5.0 Medium
- bouncycastle bouncy castle crypto package, opensuse leap, opensuse +4 more +6 moreModerate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk15CVE-2015-7940Fix available5.0 Medium
- squid-cache squid, opensuse +1 moreSquid 3.4.4 through 3.4.11 and 3.5.0.1 through 3.5.1, when Digest authentication is used, allow...CVE-2014-9749EPSS 11.4%4.0 Medium
- kernel util-linux, opensuse, opensuse project leap +2 moreBuffer overflow in text-utils/colcrt.c in colcrt in util-linux before 2.27 allows local users to...CVE-2015-5218Fix available2.1 Low
- polarssl, trustedfirmware mbed tls, debian linux +2 more +4 moreHeap-based buffer overflow in ARM mbed TLS (formerly PolarSSL) 1.3.x before 1.3.14 and 2.x before...CVE-2015-80366.8 Medium
- mit kerberos 5, canonical ubuntu linux, debian linux +6 more +8 moreThe build_principal_va function in lib/krb5/krb/bld_princ.c in MIT Kerberos 5 (aka krb5) before 1...CVE-2015-2697Fix available4.0 Medium
- mit kerberos 5, canonical ubuntu linux, debian linux +5 more +7 morelib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an inappropriate...CVE-2015-2696Fix available7.1 High
- mit kerberos 5, canonical ubuntu linux, debian linux +6 more +8 morelib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an...CVE-2015-2695Fix available5.0 Medium
- ntp, canonical ubuntu linux, debian linux +16 more +18 moreThe panic_gate check in NTP before 4.2.8p5 is only re-enabled after the first change to the...CVE-2015-5300Fix available7.5 High
- polarssl, trustedfirmware mbed tls, debian linux +3 more +5 moreHeap-based buffer overflow in PolarSSL 1.x before 1.2.17 and ARM mbed TLS (formerly PolarSSL) 1.3...CVE-2015-5291Fix available6.8 Medium
- oracle java se, opensuse leap, opensuse +19 more +21 moreUnspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to...CVE-2015-4902In KEVEPSS 13.6%5.0 Medium
- oracle mysql, fedoraproject fedora, mariadb +3 more +5 moreUnspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier, when...CVE-2015-48073.5 Low
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows...CVE-2015-4913Fix available3.5 Low
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier,...CVE-2015-4870Public exploitFix availableEPSS 30.1%4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier,...CVE-2015-4861Fix available3.5 Low
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier,...CVE-2015-4858Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier,...CVE-2015-4836Fix available2.8 Low
- oracle mysql, canonical ubuntu linux, debian linux +14 more +16 moreUnspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows...CVE-2015-4830Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows...CVE-2015-4826Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows...CVE-2015-4815Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows...CVE-2015-4802Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows...CVE-2015-4792Fix available1.7 Low
- miniupnp project miniupnpc, canonical ubuntu linux, debian linux +2 more +4 moreBuffer overflow in the IGDstartelt function in igd_desc_parse.c in the MiniUPnP client (aka...CVE-2015-6031Fix available6.8 Medium
- adobe flash player, opensuse evergreen, opensuse +7 more +9 moreAdobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11...CVE-2015-7645In KEVPublic exploitFix availableEPSS 65.3%7.8 High
- docker cs docker engine, docker, docker engine +2 more +4 moreDocker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 does not properly validate and...CVE-2014-8179Fix available7.5 High
- docker cs docker engine, docker, docker engine +2 more +4 moreDocker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 do not use a globally unique...CVE-2014-8178Fix available5.5 Medium
- apple safari, opensuse leap +1 moreThe API in the WebKit Plug-ins component in Apple Safari before 9 does not provide notification...CVE-2015-58284.3 Medium
- libav, opensuse leap, ubuntu +2 moreThe ff_h263_decode_mba function in libavcodec/ituh263dec.c in Libav before 11.5 allows remote...CVE-2015-5479Fix available6.5 Medium
- gnome gdk-pixbuf, canonical ubuntu linux, opensuse +2 moreInteger overflow in the pixops_scale_nearest function in pixops/pixops.c in gdk-pixbuf before 2...CVE-2015-7674Fix available6.8 Medium
- gnome gdk-pixbuf, opensuse +1 moreio-tga.c in gdk-pixbuf before 2.32.0 uses heap memory after its allocation failed, which allows...CVE-2015-7673Fix available6.8 Medium
- standards based linux instrumentation sblim-sfcb, opensuse +1 moreThe lookupProviders function in providerMgr.c in sblim-sfcb 1.3.4 and 1.3.18 allows remote...CVE-2015-5185Fix available5.0 Medium
- ipython notebook, fedoraproject fedora, opensuse +2 moreImproper Neutralization of Input During Web Page Generation in Jupyter NotebookCVE-2015-6938Fix available4.3 Medium
- redhat icedtea, fedoraproject fedora, opensuse +4 more +6 moreIcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly determine the origin of...CVE-2015-5235Fix available4.3 Medium
- redhat icedtea, fedoraproject fedora, opensuse +4 more +6 moreIcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly sanitize applet URLs, which...CVE-2015-5234Fix available6.8 Medium
- freetype, canonical ubuntu linux, debian linux +1 more +3 moreThe parse_encoding function in type1/t1load.c in FreeType before 2.5.3 allows remote attackers to...CVE-2014-9745Fix available5.0 Medium
- ntp, canonical ubuntu linux, debian linux +13 more +15 moreThe ULOGTOD function in ntp.d in SNTP before 4.2.7p366 does not properly perform type conversions...CVE-2015-5219Fix available7.5 High
- polarssl, opensuse +1 moreMemory leak in PolarSSL before 1.3.9 allows remote attackers to cause a denial of service (memory...CVE-2014-97447.8 High
- mozilla firefox, opensuse, oracle solaris +2 moreMozilla Firefox before 40.0 allows man-in-the-middle attackers to bypass a mixed-content...CVE-2015-4483Fix available4.3 Medium
- mozilla firefox, opensuse, oracle solaris +2 moremar_read.c in the Updater in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows...CVE-2015-44824.6 Medium
- mozilla firefox, opensuse, oracle solaris +2 moreRace condition in the Mozilla Maintenance Service in Mozilla Firefox before 40.0 and Firefox ESR...CVE-2015-4481Public exploit3.3 Low
- adobe air, air sdk, flash player +2 more +4 moreUse-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and...CVE-2015-5134Public exploitFix availableEPSS 50.3%10.0 High
- adobe air, air sdk, flash player +2 more +4 moreBuffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202...CVE-2015-5133Public exploitFix availableEPSS 50.7%10.0 High
- Show moreLoading…