Skip to contentOpensuse vulnerabilities
Newest
- opensuse libstorage, libstorage-ng, yast yast-storage +1 more +3 morelibstorage, libstorage-ng, and yast-storage improperly store passphrases for encrypted storage...CVE-2016-5746Fix available5.1 Medium
- libtiff, opensuse +1 moreThe _TIFFFax3fillruns function in libtiff before 4.0.6 allows remote attackers to cause a denial...CVE-2016-5323Fix available7.5 High
- libtiff, opensuse +1 moreThe DumpModeDecode function in libtiff 4.0.6 and earlier allows attackers to cause a denial of...CVE-2016-5321Fix available6.5 Medium
- libtiff, opensuse, opensuse project leap +2 moreBuffer overflow in the PixarLogDecode function in libtiff.so in the PixarLogDecode function in...CVE-2016-5317Fix available6.5 Medium
- libtiff, opensuse, opensuse project leap +2 moreOut-of-bounds read in the PixarLogCleanup function in tif_pixarlog.c in libtiff 4.0.6 and earlier...CVE-2016-5316Fix available6.5 Medium
- imagemagick, opensuse leap +1 moreUse-after-free vulnerability in the ReadPWPImage function in coders/pwp.c in ImageMagick 6.9.5-5...CVE-2016-10051Fix available7.8 High
- imagemagick, opensuse leap +1 moreHeap-based buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.9.4-8...CVE-2016-10050Fix available7.8 High
- gnome eye of gnome, canonical ubuntu linux, fedoraproject fedora +2 more +4 moreEye of GNOME (aka eog) 3.16.5, 3.17.x, 3.18.x before 3.18.3, 3.19.x, and 3.20.x before 3.20.4,...CVE-2016-6855Public exploitFix availableEPSS 18.4%7.5 High
- cracklib project cracklib, debian linux, opensuse leap +2 moreStack-based buffer overflow in the FascistGecosUser function in lib/fascist.c in cracklib allows...CVE-2016-6318Fix available7.8 High
- haxx libcurl, canonical ubuntu linux, debian linux +3 more +5 moreUse-after-free vulnerability in libcurl before 7.50.1 allows attackers to control which...CVE-2016-5421Fix available8.1 High
- haxx libcurl, debian linux, opensuse leap +2 morecurl and libcurl before 7.50.1 do not check the client certificate when choosing the TLS...CVE-2016-5420Fix availableEPSS 15.4%7.5 High
- haxx libcurl, debian linux, opensuse leap +2 morecurl and libcurl before 7.50.1 do not prevent TLS session resumption when the client certificate...CVE-2016-5419Fix availableEPSS 15.1%7.5 High
- gnome gdk-pixbuf, canonical ubuntu linux, opensuse leap +1 more +3 moreThe OneLine32 function in io-ico.c in gdk-pixbuf before 2.35.3 allows remote attackers to cause a...CVE-2016-6352Fix available7.5 High
- artifex mupdf, opensuse leap, opensuse +2 moreUse-after-free vulnerability in the pdf_load_xref function in pdf/pdf-xref.c in MuPDF allows...CVE-2016-6265Fix available5.5 Medium
- cronic project cronic, debian linux, opensuse leap +1 more +3 morecronic before 3 allows local users to write to arbitrary files via a symlink attack on a (1)...CVE-2016-3992Fix available6.2 Medium
- perl, apache spamassassin, debian linux +2 more +4 more(1) cpan/Archive-Tar/bin/ptar, (2) cpan/Archive-Tar/bin/ptardiff, (3) cpan/Archive-Tar/bin...CVE-2016-1238Fix available7.8 High
- google chrome, xmlsoft libxml2, apple iphone os +14 more +16 moreUse-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743...CVE-2016-5131Fix available8.8 High
- gnu libidn, canonical ubuntu linux, opensuse leap +1 more +3 moreidn in libidn before 1.33 might allow remote attackers to obtain sensitive memory information by...CVE-2016-6262Fix available7.5 High
- gnu libidn, canonical ubuntu linux, opensuse leap +2 moreThe idna_to_ascii_4i function in lib/idna.c in libidn before 1.33 allows context-dependent...CVE-2016-6261Fix available7.5 High
- libgd, debian linux, opensuse leap +1 more +3 moreInteger overflow in the _gdContributionsAlloc function in gd_interpolation.c in GD Graphics...CVE-2016-6207Fix available6.5 Medium
- apache mod fcgid, opensuse leap, opensuse +2 moreA security Bypass vulnerability exists in mod_fcgid through 2016-07-07 in the FcgidPassHeader Proxy.CVE-2016-1000104Fix available8.8 High
- apache http server, canonical ubuntu linux, debian linux +16 more +18 moreThe Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not...CVE-2016-5387Fix availableEPSS 55.7%8.1 High
- php, debian linux, drupal +9 more +11 moreHTTP Proxy header vulnerabilityCVE-2016-5385Fix availableEPSS 50.4%8.1 High
- libgd, opensuse leap, opensuse +2 moreThe read_image_tga function in gd_tga.c in the GD Graphics Library (aka libgd) before 2.2.3...CVE-2016-6905Fix available6.5 Medium
- libgd, debian linux, opensuse leap +2 moregd_tga.c in the GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a...CVE-2016-6214Fix available6.5 Medium
- imagemagick, opensuse leap, opensuse +4 more +6 moredistribute-cache.c in ImageMagick re-uses objects after they have been destroyed, which allows...CVE-2014-9852Fix available9.8 Critical
- imagemagick, canonical ubuntu linux, opensuse +6 more +8 moreMemory leak in the ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote...CVE-2014-9842Fix available7.5 High
- graphicsmagick, debian linux, opensuse leap +1 more +3 moremagick/render.c in GraphicsMagick before 1.3.24 allows remote attackers to cause a denial of...CVE-2016-5241Fix available5.5 Medium
- libgd, debian linux, opensuse leap +2 moreThe output function in gd_gif_out.c in the GD Graphics Library (aka libgd) allows remote...CVE-2016-6161Fix available6.5 Medium
- php, debian linux, opensuse leap +1 more +3 moreInteger overflow in the SplFileObject::fread function in spl_directory.c in the SPL extension in...CVE-2016-57709.8 Critical
- debian linux, es iperf3, novell suse package hub for suse linux enterprise +2 more +4 moreThe parse_string function in cjson.c in the cJSON library mishandles UTF8/16 strings, which...CVE-2016-4303Fix available9.8 Critical
- phpmyadmin, opensuse +1 moreDirectory traversal vulnerability in libraries/error_report.lib.php in phpMyAdmin before 4.6.2...CVE-2016-50985.3 Medium
- phpmyadmin, opensuse +1 morephpMyAdmin before 4.6.2 places tokens in query strings and does not arrange for them to be...CVE-2016-5097Fix available5.3 Medium
- sqlite, fedoraproject fedora, opensuse leap +2 moreos_unix.c in SQLite before 3.13.0 improperly implements the temporary directory search algorithm,...CVE-2016-6153Fix available5.9 Medium
- phpmyadmin, opensuse leap, opensuse +2 morephpMyAdmin vulnerable to Cross-Site Request ForgeryCVE-2016-5739Fix available7.5 High
- phpmyadmin, opensuse leap, opensuse +2 morephpMyAdmin vulnerable to Cross-site ScriptingCVE-2016-5733Fix available6.1 Medium
- phpmyadmin, opensuse leap, opensuse +2 morephpMyAdmin Cross-site scripting (XSS) vulnerabilityCVE-2016-5731Fix available6.1 Medium
- phpmyadmin, opensuse leap, opensuse +2 morephpMyAdmin full path disclosure vulnerabilityCVE-2016-5730Fix available5.3 Medium
- phpmyadmin, opensuse leap, opensuse +2 morephpMyAdmin Denial Of Service (DOS) attackCVE-2016-5706Fix available7.5 High
- phpmyadmin, opensuse leap, opensuse +2 morephpMyAdmin vulnerable to Cross-site ScriptingCVE-2016-5705Fix available6.1 Medium
- phpmyadmin, opensuse leap, opensuse +2 moreSQL injection vulnerability in libraries/central_columns.lib.php in phpMyAdmin 4.4.x before 4.4...CVE-2016-5703Fix available9.8 Critical
- phpmyadmin, opensuse leap, opensuse +2 morephpMyAdmin vulnerable to Cross-site ScriptingCVE-2016-5701Fix available6.1 Medium
- libgd, debian linux, opensuse leap +2 moreThe gdImageCreateFromTgaCtx function in the GD Graphics Library (aka libgd) before 2.2.3 allows...CVE-2016-6132Fix available6.5 Medium
- libgd, canonical ubuntu linux, debian linux +1 more +3 moreThe gdImageCropThreshold function in gd_crop.c in the GD Graphics Library (aka libgd) before 2.2...CVE-2016-6128Fix available7.5 High
- roundcube webmail, opensuse leap, opensuse +2 moreCross-site scripting (XSS) vulnerability in Roundcube Webmail before 1.0.9 and 1.1.x before 1.1.5...CVE-2016-4068Fix available6.1 Medium
- kde frameworks, opensuse leap, opensuse +2 morekinit in KDE Frameworks before 5.23.0 uses weak permissions (644) for /tmp/xauth-xxx-_y, which...CVE-2016-3100Fix available8.4 High
- php, debian linux, opensuse leap +4 more +6 moreDouble free vulnerability in the php_wddx_process_data function in wddx.c in the WDDX extension...CVE-2016-5772Fix available9.8 Critical
- php, debian linux, opensuse leap +1 more +3 morespl_array.c in the SPL extension in PHP before 5.5.37 and 5.6.x before 5.6.23 improperly...CVE-2016-5771Fix availableEPSS 15.5%9.8 Critical
- google chrome, canonical ubuntu linux, novell suse package hub for suse linux enterprise +5 more +7 moreMultiple unspecified vulnerabilities in Google Chrome before 51.0.2704.103 allow attackers to...CVE-2016-1704Fix available8.8 High
- adobe flash player, opensuse, redhat enterprise linux desktop +4 more +6 moreUnspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote attackers to...CVE-2016-4171In KEVFix availableEPSS 20.2%9.8 Critical
- Show moreLoading…