Skip to contentOpensuse vulnerabilities
Newest
- google chrome, canonical ubuntu linux, debian linux +1 more +3 moreThe Program::getUniformInternal function in Program.cpp in libANGLE, as used in Google Chrome...CVE-2016-1649Fix available8.8 High
- google chrome, debian linux, opensuse +2 moreUse-after-free vulnerability in the GetLoadTimes function in renderer...CVE-2016-1648Fix available8.8 High
- google chrome, canonical ubuntu linux, debian linux +1 more +3 moreUse-after-free vulnerability in the RenderWidgetHostImpl::Destroy function in content/browser...CVE-2016-1647Fix available8.8 High
- google chrome, canonical ubuntu linux, debian linux +8 more +10 moreThe Array.prototype.concat implementation in builtins.cc in Google V8, as used in Google Chrome...CVE-2016-1646In KEVFix availableEPSS 48.1%8.8 High
- git-scm git, opensuse leap, opensuse +4 more +6 morerevision.c in git before 2.7.4 uses an incorrect integer data type, which allows remote attackers...CVE-2016-2315Fix availableEPSS 17.3%9.8 Critical
- git-scm git, opensuse leap, opensuse +4 more +6 moreInteger overflow in Git before 2.7.4 allows remote attackers to execute arbitrary code via a (1)...CVE-2016-2324Fix availableEPSS 18.1%9.8 Critical
- google chrome, debian linux, opensuse leap +2 more +4 moreMultiple integer signedness errors in the opj_j2k_update_image_data function in j2k.c in OpenJPEG...CVE-2016-1645Fix available8.8 High
- cypherpunks libotr, debian linux, opensuse leap +1 more +3 moreInteger overflow in proto.c in libotr before 4.1.1 on 64-bit platforms allows remote attackers to...CVE-2016-2851Public exploitFix availableEPSS 24.3%9.8 Critical
- isc bind, canonical ubuntu linux, debian linux +11 more +13 morenamed in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 allows remote attackers to...CVE-2016-1286Fix availableEPSS 60.8%8.6 High
- isc bind, canonical ubuntu linux, debian linux +11 more +13 morenamed in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does not properly handle DNAME...CVE-2016-1285Fix availableEPSS 57.8%6.8 Medium
- mozilla firefox, thunderbird, opensuse leap +3 more +5 moreThe nsScannerString::AppendUnicodeTo function in Mozilla Firefox before 45.0 and Firefox ESR 38.x...CVE-2016-1974Fix available8.8 High
- mozilla firefox, thunderbird, opensuse +1 more +3 moreThe nsNPObjWrapper::GetNewOrUsed function in dom/plugins/base/nsJSNPRuntime.cpp in Mozilla...CVE-2016-1966Fix available8.8 High
- mozilla firefox, opensuse, oracle linux +2 moreMozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 mishandle a navigation sequence that...CVE-2016-1965Fix available4.3 Medium
- mozilla firefox, thunderbird, opensuse leap +3 more +5 moreUse-after-free vulnerability in the AtomicBaseIncDec function in Mozilla Firefox before 45.0 and...CVE-2016-1964Fix available8.8 High
- mozilla firefox, opensuse, oracle linux +2 moreUse-after-free vulnerability in the mozilla::DataChannelConnection::Close function in Mozilla...CVE-2016-1962Fix available9.8 Critical
- mozilla firefox, thunderbird, opensuse leap +3 more +5 moreUse-after-free vulnerability in the nsHTMLDocument::SetBody function in dom/html/nsHTMLDocument...CVE-2016-1961Fix available8.8 High
- mozilla firefox, thunderbird, opensuse leap +3 more +5 moreInteger underflow in the nsHtml5TreeBuilder class in the HTML5 string parser in Mozilla Firefox...CVE-2016-1960Public exploitFix availableEPSS 30.9%8.8 High
- mozilla firefox, opensuse, oracle linux +2 morebrowser/base/content/browser.js in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7...CVE-2016-1958Fix available4.3 Medium
- mozilla firefox, thunderbird, novell suse package hub for suse linux enterprise +3 more +5 moreMemory leak in libstagefright in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7...CVE-2016-1957Fix available4.3 Medium
- mozilla firefox, novell suse package hub for suse linux enterprise, opensuse leap +1 more +3 moreMozilla Firefox before 45.0 on Linux, when an Intel video driver is used, allows remote attackers...CVE-2016-1956Fix available6.5 Medium
- mozilla firefox, novell suse package hub for suse linux enterprise, opensuse leap +1 more +3 moreMozilla Firefox before 45.0 allows remote attackers to bypass the Same Origin Policy and obtain...CVE-2016-1955Fix available4.3 Medium
- mozilla firefox, thunderbird, novell suse package hub for suse linux enterprise +3 more +5 moreThe nsCSPContext::SendReports function in dom/security/nsCSPContext.cpp in Mozilla Firefox before...CVE-2016-1954Fix available8.8 High
- mozilla firefox, thunderbird, novell suse package hub for suse linux enterprise +2 more +4 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 45.0 allow...CVE-2016-1953Fix available8.8 High
- mozilla firefox, thunderbird, novell suse package hub for suse linux enterprise +3 more +5 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 45.0 and...CVE-2016-1952Fix available8.8 High
- mozilla firefox, network security services, apple iphone os +9 more +11 moreHeap-based buffer overflow in Mozilla Network Security Services (NSS) before 3.19.2.3 and 3.20.x...CVE-2016-1950Fix available8.8 High
- mozilla firefox, sil graphite2, opensuse leap +3 more +5 moreThe graphite2::TtfUtil::CmapSubtable4NextCodepoint function in Graphite 2 before 1.3.6, as used...CVE-2016-2802Fix available8.8 High
- mozilla firefox, sil graphite2, opensuse leap +3 more +5 moreThe graphite2::TtfUtil::CmapSubtable12Lookup function in TtfUtil.cpp in Graphite 2 before 1.3.6,...CVE-2016-2801Fix available8.8 High
- mozilla firefox, sil graphite2, opensuse leap +3 more +5 moreThe graphite2::Slot::getAttr function in Slot.cpp in Graphite 2 before 1.3.6, as used in Mozilla...CVE-2016-2800Fix available8.8 High
- mozilla firefox, sil graphite2, opensuse leap +3 more +5 moreHeap-based buffer overflow in the graphite2::Slot::setAttr function in Graphite 2 before 1.3.6,...CVE-2016-2799Fix available8.8 High
- mozilla firefox, sil graphite2, opensuse leap +3 more +5 moreThe graphite2::GlyphCache::Loader::Loader function in Graphite 2 before 1.3.6, as used in Mozilla...CVE-2016-2798Fix available8.8 High
- mozilla firefox, sil graphite2, opensuse leap +3 more +5 moreThe graphite2::TtfUtil::CmapSubtable12Lookup function in Graphite 2 before 1.3.6, as used in...CVE-2016-2797Fix available8.8 High
- mozilla firefox, sil graphite2, opensuse leap +3 more +5 moreHeap-based buffer overflow in the graphite2::vm::Machine::Code::Code function in Graphite 2...CVE-2016-2796Fix available8.8 High
- mozilla firefox, sil graphite2, opensuse leap +3 more +5 moreThe graphite2::FileFace::get_table_fn function in Graphite 2 before 1.3.6, as used in Mozilla...CVE-2016-2795Fix available8.8 High
- mozilla firefox, sil graphite2, opensuse leap +3 more +5 moreThe graphite2::TtfUtil::CmapSubtable12NextCodepoint function in Graphite 2 before 1.3.6, as used...CVE-2016-2794Fix available8.8 High
- mozilla firefox, opensuse leap, opensuse +3 more +5 moreCachedCmap.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR...CVE-2016-2793Fix available8.8 High
- mozilla firefox, sil graphite2, opensuse leap +3 more +5 moreThe graphite2::Slot::getAttr function in Slot.cpp in Graphite 2 before 1.3.6, as used in Mozilla...CVE-2016-2792Fix available8.8 High
- mozilla firefox, sil graphite2, opensuse leap +3 more +5 moreThe graphite2::GlyphCache::glyph function in Graphite 2 before 1.3.6, as used in Mozilla Firefox...CVE-2016-2791Fix available8.8 High
- mozilla firefox, sil graphite2, opensuse leap +3 more +5 moreThe graphite2::TtfUtil::GetTableInfo function in Graphite 2 before 1.3.6, as used in Mozilla...CVE-2016-2790Fix available8.8 High
- mozilla firefox, opensuse leap, opensuse +3 more +5 moreThe Machine::Code::decoder::analysis::set_ref function in Graphite 2 before 1.3.6, as used in...CVE-2016-1977Fix available8.8 High
- perl, canonical ubuntu linux, debian linux +7 more +9 morePerl might allow context-dependent attackers to bypass the taint protection mechanism in a child...CVE-2016-2381Fix available7.5 High
- libssh2, debian linux, fedoraproject fedora +1 more +3 moreThe diffie_hellman_sha256 function in kex.c in libssh2 before 1.7.0 improperly truncates secrets...CVE-2016-0787Fix available5.9 Medium
- google chrome, debian linux, novell suse package hub for suse linux enterprise +2 more +4 moreGoogle Chrome before 48.0.2564.116 allows remote attackers to bypass the Blink Same Origin Policy...CVE-2016-1629Fix available9.8 Critical
- phpmyadmin, fedoraproject fedora, opensuse leap +1 more +3 moreCross-site scripting (XSS) vulnerability in the goToFinish1NF function in js/normalization.js in...CVE-2016-2043Fix available5.4 Medium
- phpmyadmin, fedoraproject fedora, opensuse leap +1 more +3 morephpMyAdmin 4.4.x before 4.4.15.3 and 4.5.x before 4.5.4 allows remote attackers to obtain...CVE-2016-2042Fix available5.3 Medium
- cacti, opensuse leap, opensuse +2 moreauth_login.php in Cacti before 0.8.8g allows remote authenticated users who use web...CVE-2016-2313Fix available8.8 High
- gnu glibc, canonical ubuntu linux, debian linux +26 more +28 moreMultiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the...CVE-2015-7547Public exploitFix availableEPSS 92.4%8.1 High
- linux kernel, canonical ubuntu linux, opensuse leap +2 moreThe adjust_branches function in kernel/bpf/verifier.c in the Linux kernel before 4.5 does not...CVE-2016-2383Fix available5.5 Medium
- google chrome, debian linux, opensuse +2 moreThe Developer Tools (aka DevTools) subsystem in Google Chrome before 48.0.2564.109 does not...CVE-2016-1627Fix available8.8 High
- google chrome, debian linux, opensuse +2 moreThe opj_pi_update_decode_poc function in pi.c in OpenJPEG, as used in PDFium in Google Chrome...CVE-2016-1626Fix available4.3 Medium
- google chrome, debian linux, opensuse +2 moreThe Chrome Instant feature in Google Chrome before 48.0.2564.109 does not ensure that a New Tab...CVE-2016-1625Fix available4.3 Medium
- Show moreLoading…