Skip to contentOpensuse vulnerabilities
Newest
- atheme, debian linux, opensuse leap +1 more +3 moreBuffer overflow in the xmlrpc_char_encode function in modules/transport/xmlrpc/xmlrpclib.c in...CVE-2016-4478Fix available7.5 High
- php, opensuse leap, opensuse +2 moreInteger overflow in the str_pad function in ext/standard/string.c in PHP before 7.0.4 allows...CVE-2016-43469.8 Critical
- 7-zip, debian linux, opensuse +2 moreThe CInArchive::ReadFileItem method in Archive/Udf/UdfIn.cpp in 7zip 9.20 and 15.05 beta and...CVE-2016-2335Fix available8.8 High
- graphicsmagick, debian linux, opensuse leap +4 more +6 moreGraphicsMagick 1.3.23 allows remote attackers to cause a denial of service (NULL pointer...CVE-2016-2318Fix available5.5 Medium
- graphicsmagick, debian linux, opensuse leap +4 more +6 moreMultiple buffer overflows in GraphicsMagick 1.3.23 allow remote attackers to cause a denial of...CVE-2016-2317Fix available5.5 Medium
- apple mac os x, canonical ubuntu linux, debian linux +11 more +13 moreExpat allows context-dependent attackers to cause a denial of service (crash) or possibly execute...CVE-2016-0718Fix availableEPSS 13.3%9.8 Critical
- xmlsoft libxml2, canonical ubuntu linux, debian linux +3 more +5 moreThe (1) xmlParserEntityCheck and (2) xmlParseAttValueComplex functions in parser.c in libxml2 2.9...CVE-2016-3705Fix available7.5 High
- gnome librsvg, debian linux, opensuse leap +1 more +3 moreThe _rsvg_css_normalize_font_size function in librsvg 2.40.2 allows context-dependent attackers...CVE-2016-4348Fix available7.5 High
- php, opensuse leap +1 moreStack consumption vulnerability in GD in PHP before 5.6.12 allows remote attackers to cause a...CVE-2015-8874Fix available7.5 High
- php, opensuse leap +1 moreStack consumption vulnerability in Zend/zend_exceptions.c in PHP before 5.4.44, 5.5.x before 5.5...CVE-2015-8873Fix available7.5 High
- php, opensuse leap +1 moreUse-after-free vulnerability in the spl_ptr_heap_insert function in ext/spl/spl_heap.c in PHP...CVE-2015-4116Fix available9.8 Critical
- dosfstools project dosfstools, canonical ubuntu linux, opensuse leap +1 more +3 moreThe read_boot function in boot.c in dosfstools before 4.0 allows attackers to cause a denial of...CVE-2016-4804Fix available6.2 Medium
- gnupg libksba, canonical ubuntu linux, opensuse leap +2 moreLibksba before 1.3.4 allows remote attackers to cause a denial of service (out-of-bounds read and...CVE-2016-4579Fix available7.5 High
- gnupg libksba, canonical ubuntu linux, opensuse leap +1 more +3 moreOff-by-one error in the append_utf8_value function in the DN decoder (dn.c) in Libksba before 1.3...CVE-2016-4574Fix available7.5 High
- google chrome, debian linux, opensuse +2 moreRace condition in the ResourceDispatcherHostImpl::BeginRequest function in content/browser/loader...CVE-2016-1670Fix available5.3 Medium
- google chrome, v8, canonical ubuntu linux +3 more +5 moreThe Zone::New function in zone.cc in Google V8 before 5.0.71.47, as used in Google Chrome before...CVE-2016-1669Fix available8.8 High
- google chrome, debian linux, opensuse +2 moreThe forEachForBinding function in WebKit/Source/bindings/core/v8/Iterable.h in the V8 bindings in...CVE-2016-1668Fix available8.8 High
- google chrome, debian linux, opensuse +2 moreThe TreeScope::adoptIfNeeded function in WebKit/Source/core/dom/TreeScope.cpp in the DOM...CVE-2016-1667Fix available8.8 High
- apache xerces-c\+\+, opensuse +1 moreUse-after-free vulnerability in validators/DTD/DTDScanner.cpp in Apache Xerces C++ 3.1.3 and...CVE-2016-2099Fix available9.8 Critical
- aquamaniac gwenhywfar, libgwenhywfar, debian linux +1 more +3 moreAn issue exists in libgwenhywfar through 4.12.0 due to the usage of outdated bundled CA...CVE-2015-7542Fix available5.3 Medium
- php, canonical ubuntu linux, opensuse leap +3 more +5 moreext/libxml/libxml.c in PHP before 5.5.22 and 5.6.x before 5.6.6, when PHP-FPM is used, does not...CVE-2015-8866Fix available9.6 Critical
- adobe flash player, opensuse evergreen, opensuse +6 more +8 moreAdobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via...CVE-2016-4117In KEVPublic exploitFix availableEPSS 94.3%9.8 Critical
- jq project jq, opensuse leap, opensuse +2 moreOff-by-one error in the tokenadd function in jv_parse.c in jq allows remote attackers to cause a...CVE-2015-8863Fix available9.8 Critical
- php, debian linux, fedoraproject fedora +2 more +4 moreThe exif_process_TIFF_in_JPEG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6...CVE-2016-4544Fix available9.8 Critical
- php, fedoraproject fedora, hp system management homepage +1 more +3 moreThe exif_process_IFD_in_JPEG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6...CVE-2016-4543Fix availableEPSS 11.9%9.8 Critical
- php, fedoraproject fedora, opensuse leap +2 moreThe exif_process_IFD_TAG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21,...CVE-2016-4542Fix available9.8 Critical
- php, fedoraproject fedora, opensuse leap +2 moreThe grapheme_strpos function in ext/intl/grapheme/grapheme_string.c in PHP before 5.5.35, 5.6.x...CVE-2016-4541Fix available9.8 Critical
- php, fedoraproject fedora, opensuse leap +2 moreThe grapheme_stripos function in ext/intl/grapheme/grapheme_string.c in PHP before 5.5.35, 5.6.x...CVE-2016-4540Fix available9.8 Critical
- php, fedoraproject fedora, opensuse leap +2 moreThe xml_parse_into_struct function in ext/xml/xml.c in PHP before 5.5.35, 5.6.x before 5.6.21,...CVE-2016-4539Fix available9.8 Critical
- php, fedoraproject fedora, opensuse leap +2 moreThe bcpowmod function in ext/bcmath/bcmath.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x...CVE-2016-4538Fix available9.8 Critical
- php, fedoraproject fedora, opensuse leap +2 moreThe bcpowmod function in ext/bcmath/bcmath.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x...CVE-2016-4537Fix available9.8 Critical
- quassel-irc quassel, fedoraproject fedora, opensuse leap +1 more +3 moreThe onReadyRead function in core/coreauthhandler.cpp in Quassel before 0.12.4 allows remote...CVE-2016-4414Fix available7.5 High
- quagga, opensuse leap, opensuse +2 moreThe bgp_dump_routes_func function in bgpd/bgp_dump.c in Quagga does not perform size checks when...CVE-2016-4049Fix available7.5 High
- imagemagick, canonical ubuntu linux, opensuse leap +27 more +29 moreThe (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow...CVE-2016-3718In KEVPublic exploitFix availableEPSS 75.6%5.5 Medium
- imagemagick, canonical ubuntu linux, opensuse leap +27 more +29 moreThe EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers...CVE-2016-3715In KEVPublic exploitFix availableEPSS 75.3%5.5 Medium
- imagemagick, canonical ubuntu linux, debian linux +3 more +5 moreThe (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders...CVE-2016-3714In KEVPublic exploitFix availableEPSS 97.5%8.4 High
- xmlsoft libxml2, canonical ubuntu linux, debian linux +11 more +13 moreThe xmlStringGetNodeList function in tree.c in libxml2 2.9.3 and earlier, when used in recovery...CVE-2016-3627Public exploitFix available7.5 High
- openssl, canonical ubuntu linux, debian linux +12 more +14 moreThe AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider...CVE-2016-2107Public exploitFix availableEPSS 89.1%5.9 Medium
- openssl, apple mac os x, canonical ubuntu linux +12 more +14 moreInteger overflow in the EVP_EncodeUpdate function in crypto/evp/encode.c in OpenSSL before 1.0.1t...CVE-2016-2105Fix availableEPSS 39.6%7.5 High
- roundcube webmail, opensuse leap +1 moreCross-site request forgery (CSRF) vulnerability in Roundcube Webmail before 1.1.5 allows remote...CVE-2016-4069Fix available8.8 High
- google chrome, opensuse, redhat enterprise linux desktop supplementary +3 more +5 moreThe HistoryController::UpdateForCommit function in content/renderer/history_controller.cc in...CVE-2016-1664Fix available4.3 Medium
- google chrome, opensuse, redhat enterprise linux desktop supplementary +3 more +5 moreextensions/renderer/gc_callback.cc in Google Chrome before 50.0.2661.94 does not prevent fallback...CVE-2016-1662Fix available9.8 Critical
- roundcube webmail, opensuse leap, opensuse +2 moreCross-site scripting (XSS) vulnerability in Roundcube Webmail before 1.0.9 and 1.1.x before 1.1.5...CVE-2015-8864Fix available6.1 Medium
- ocaml, fedoraproject fedora, opensuse +2 moreOCaml before 4.03.0 does not properly handle sign extensions, which allows remote attackers to...CVE-2015-8869Fix available9.1 Critical
- php, opensuse +1 moreThe phar_make_dirstream function in ext/phar/dirstream.c in PHP before 5.6.18 and 7.x before 7.0...CVE-2016-4343Fix available8.8 High
- php, opensuse leap +1 moreext/phar/phar_object.c in PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x before 7.0.3 mishandles...CVE-2016-4342Fix available8.8 High
- google chrome, opensuse, redhat enterprise linux desktop supplementary +3 more +5 moreMultiple unspecified vulnerabilities in Google Chrome before 50.0.2661.94 allow attackers to...CVE-2016-1666Fix available9.8 Critical
- google chrome, opensuse, redhat enterprise linux desktop supplementary +3 more +5 moreThe JSGenericLowering class in compiler/js-generic-lowering.cc in Google V8, as used in Google...CVE-2016-1665Fix available6.5 Medium
- google chrome, opensuse, redhat enterprise linux desktop supplementary +3 more +5 moreThe SerializedScriptValue::transferArrayBuffers function in WebKit/Source/bindings/core/v8...CVE-2016-1663Fix available8.8 High
- google chrome, opensuse, redhat enterprise linux desktop supplementary +3 more +5 moreBlink, as used in Google Chrome before 50.0.2661.94, does not ensure that frames satisfy a check...CVE-2016-1661Fix available8.0 High
- Show moreLoading…