Skip to contentOpensuse vulnerabilities
Newest
- google chrome, debian linux, opensuse +2 moreThe Extensions subsystem in Google Chrome before 48.0.2564.109 does not prevent use of the Object...CVE-2016-1622Fix available8.8 High
- google chrome, debian linux, opensuse +2 moreInteger underflow in the ProcessCommandsInternal function in dec/decode.c in Brotli, as used in...CVE-2016-1624Fix available8.8 High
- google chrome, debian linux, opensuse +2 moreThe DOM implementation in Google Chrome before 48.0.2564.109 does not properly restrict frame...CVE-2016-1623Fix available8.8 High
- ffmpeg, opensuse leap +1 morelibavcodec/tiff.c in FFmpeg before 2.8.6 does not properly validate RowsPerStrip values and YCbCr...CVE-2016-2329Fix available8.8 High
- phpmyadmin, fedoraproject fedora, opensuse leap +1 more +3 morephpMyAdmin XSS VulnerabilityCVE-2016-2040Fix available5.4 Medium
- phpmyadmin, fedoraproject fedora, opensuse leap +1 more +3 morephpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 allows remote...CVE-2016-2038Fix available5.3 Medium
- gnu glibc, canonical ubuntu linux, debian linux +6 more +8 moreStack-based buffer overflow in the catopen function in the GNU C Library (aka glibc or libc6)...CVE-2015-8779Fix available9.8 Critical
- gnu glibc, canonical ubuntu linux, debian linux +6 more +8 moreInteger overflow in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent...CVE-2015-8778Fix available9.8 Critical
- gnu glibc, canonical ubuntu linux, debian linux +6 more +8 moreThe strftime function in the GNU C Library (aka glibc or libc6) before 2.23 allows context...CVE-2015-8776Fix available9.1 Critical
- gnu glibc, canonical ubuntu linux, fedoraproject fedora +5 more +7 moreMultiple stack-based buffer overflows in the GNU C Library (aka glibc or libc6) before 2.23 allow...CVE-2014-9761Fix available9.8 Critical
- mit kerberos 5, debian linux, opensuse leap +7 more +9 moreMultiple memory leaks in kadmin/server/server_stubs.c in kadmind in MIT Kerberos 5 (aka krb5)...CVE-2015-8631Fix available6.5 Medium
- mit kerberos 5, debian linux, opensuse leap +8 more +10 moreThe xdr_nullstring function in lib/kadm5/kadm_rpc_xdr.c in kadmind in MIT Kerberos 5 (aka krb5)...CVE-2015-8629Fix available5.3 Medium
- opensuse leap, opensuse, suse linux enterprise desktop +3 more +5 moreThe mysql-systemd-helper script in the mysql-community-server package before 5.6.28-2.17.1 in...CVE-2015-59696.2 Medium
- google android, mozilla firefox, opensuse leap +1 more +3 moreMozilla Firefox before 44.0 on Android allows remote attackers to spoof the address bar via the...CVE-2016-19434.7 Medium
- rubyonrails rails, debian linux, fedoraproject fedora +1 more +3 moreactivemodel contains Improper Input ValidationCVE-2016-0753Fix available5.3 Medium
- rails ruby on rails, rubyonrails rails, debian linux +4 more +6 moreDirectory traversal vulnerability in Action View in Ruby on RailsCVE-2016-0752In KEVPublic exploitFix availableEPSS 95.5%7.5 High
- phpmyadmin, fedoraproject fedora, opensuse leap +1 more +3 morephpMyAdmin Unsafe comparison of XSRF/CSRF tokenCVE-2016-2041Fix available7.5 High
- phpmyadmin, fedoraproject fedora, opensuse leap +1 more +3 morelibraries/session.inc.php in phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x...CVE-2016-2039Fix available5.3 Medium
- matroska libmatroska, opensuse leap, opensuse +2 moreThe KaxInternalBlock::ReadData function in libMatroska before 1.4.4 allows context-dependent...CVE-2015-8792Fix available5.3 Medium
- golang go, opensuse leap +1 moreThe Int.Exp Montgomery code in the math/big library in Go 1.5.x before 1.5.3 mishandles carry...CVE-2015-8618Fix available7.5 High
- mozilla firefox, canonical ubuntu linux, opensuse leap +1 more +3 moreMozilla Firefox 43.x mishandles attempts to connect to the Application Reputation service, which...CVE-2016-1947Fix available4.7 Medium
- mozilla firefox, opensuse leap, opensuse +2 moreThe MoofParser::Metadata function in binding/MoofParser.cpp in libstagefright in Mozilla Firefox...CVE-2016-1946Fix available9.8 Critical
- mozilla firefox, opensuse leap, opensuse +2 moreThe nsZipArchive function in Mozilla Firefox before 44.0 might allow remote attackers to cause a...CVE-2016-1945Fix available8.8 High
- mozilla firefox, opensuse leap, opensuse +2 moreThe Buffer11::NativeBuffer11::map function in ANGLE, as used in Mozilla Firefox before 44.0,...CVE-2016-1944Fix available9.8 Critical
- mozilla firefox, opensuse leap, opensuse +2 moreMozilla Firefox before 44.0 allows user-assisted remote attackers to spoof a trailing substring...CVE-2016-1942Fix available7.4 High
- mozilla firefox, opensuse leap, opensuse +2 moreMozilla Firefox before 44.0 stores cookies with names containing vertical tab characters, which...CVE-2016-1939Fix available5.3 Medium
- mozilla firefox, nss, opensuse leap +1 more +3 moreThe s_mp_div function in lib/freebl/mpi/mpi.c in Mozilla Network Security Services (NSS) before 3...CVE-2016-1938Fix available6.5 Medium
- mozilla firefox, opensuse leap, opensuse +2 moreThe protocol-handler dialog in Mozilla Firefox before 44.0 allows remote attackers to conduct...CVE-2016-1937Fix available6.1 Medium
- mozilla firefox, opensuse leap, opensuse +1 more +3 moreBuffer overflow in the BufferSubData function in Mozilla Firefox before 44.0 and Firefox ESR 38.x...CVE-2016-1935Fix available8.8 High
- mozilla firefox, opensuse leap, opensuse +2 moreInteger overflow in the image-deinterlacing functionality in Mozilla Firefox before 44.0 allows...CVE-2016-1933Fix available6.5 Medium
- mozilla firefox, opensuse leap, opensuse +2 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 44.0 allow...CVE-2016-1931Fix available10.0 Critical
- mozilla firefox, opensuse leap, opensuse +1 more +3 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 44.0 and...CVE-2016-1930Fix available9.8 Critical
- f5 nginx, apple xcode, canonical ubuntu linux +2 more +4 moreThe resolver in nginx before 1.8.1 and 1.9.x before 1.9.10 does not properly limit CNAME...CVE-2016-0747Fix available5.3 Medium
- f5 nginx, apple xcode, canonical ubuntu linux +2 more +4 moreUse-after-free vulnerability in the resolver in nginx 0.6.18 through 1.8.0 and 1.9.x before 1.9...CVE-2016-0746Fix available9.8 Critical
- f5 nginx, apple xcode, canonical ubuntu linux +3 more +5 moreThe resolver in nginx before 1.8.1 and 1.9.x before 1.9.10 allows remote attackers to cause a...CVE-2016-0742Fix availableEPSS 82.4%7.5 High
- opensuseHeap-based buffer overflow in the gdk_pixbuf_flip function in gdk-pixbuf-scale.c in gdk-pixbuf 2...CVE-2015-7552Fix available7.8 High
- mariadb, oracle mysql, canonical ubuntu linux +3 more +5 moreThe ssl_verify_server_cert function in sql-common/client.c in MariaDB before 5.5.47, 10.0.x...CVE-2016-2047Fix available5.9 Medium
- wolfssl, mariadb, opensuse leap +1 more +3 morewolfSSL (formerly CyaSSL) before 3.6.8 does not properly handle faults associated with the...CVE-2015-7744Fix available5.9 Medium
- oracle mysql, opensuse leap, opensuse +1 more +3 moreUnspecified vulnerability in Oracle MySQL 5.6.26 and earlier allows remote authenticated users to...CVE-2016-0605Fix available2.1 Low
- oracle mysql, opensuse leap, opensuse +2 moreUnspecified vulnerability in Oracle MySQL 5.6.21 and earlier allows remote authenticated users to...CVE-2016-0594Fix available4.3 Medium
- oracle mysql, mariadb, opensuse leap +1 more +3 moreUnspecified vulnerability in Oracle MySQL 5.5.31 and earlier and 5.6.11 and earlier allows remote...CVE-2016-05026.5 Medium
- encfs project encfs, opensuse leap, opensuse +2 moreThe ".encfs6.xml" configuration file in encfs before 1.7.5 allows remote attackers to access...CVE-2014-3462Fix available7.5 High
- ecryptfs ecryptfs-utils, canonical ubuntu linux, debian linux +3 more +5 moremount.ecryptfs_private.c in eCryptfs-utils does not validate mount destination filesystem types,...CVE-2016-1572Fix available8.4 High
- mariadb, oracle mysql, canonical ubuntu linux +10 more +12 moreUnspecified vulnerability in Oracle MySQL 5.5.46 and earlier and MariaDB before 5.5.47, 10.0.x...CVE-2016-0616Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, opensuse leap +2 more +4 moreUnspecified vulnerability in Oracle MySQL 5.6.27 and earlier and 5.7.9 allows remote...CVE-2016-0611Fix available4.0 Medium
- mariadb, oracle mysql, canonical ubuntu linux +4 more +6 moreUnspecified vulnerability in Oracle MySQL 5.6.27 and earlier and MariaDB before 10.0.22 and 10.1...CVE-2016-0610Fix available3.5 Low
- mariadb, oracle mysql, canonical ubuntu linux +12 more +14 moreUnspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and...CVE-2016-0609Fix available1.7 Low
- mariadb, oracle mysql, canonical ubuntu linux +12 more +14 moreUnspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and...CVE-2016-0608Fix available3.5 Low
- oracle mysql, canonical ubuntu linux, opensuse leap +2 more +4 moreUnspecified vulnerability in Oracle MySQL 5.6.27 and earlier and 5.7.9 allows remote...CVE-2016-0607Fix available2.8 Low
- mariadb, oracle mysql, canonical ubuntu linux +12 more +14 moreUnspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and...CVE-2016-0606Fix available3.5 Low
- Show moreLoading…