Skip to contentOpensuse vulnerabilities
Newest
- gluster glusterfs, debian linux, opensuse leap +2 more +4 moreIt was found that the "mknod" call derived from mknod(2) can create files pointing to devices on...CVE-2018-10923Fix available7.6 High
- gluster glusterfs, debian linux, opensuse leap +2 more +4 moreIt was found that an attacker could issue a xattr request via glusterfs FUSE to cause gluster...CVE-2018-10914Fix available5.5 Medium
- gluster glusterfs, debian linux, opensuse leap +2 more +4 moreAn information disclosure vulnerability was discovered in glusterfs server. An attacker could...CVE-2018-10913Fix available3.5 Low
- gluster glusterfs, debian linux, opensuse leap +5 more +7 moreA flaw was found in the way dic_unserialize function of glusterfs does not handle negative key...CVE-2018-10911Fix available6.5 Medium
- gluster glusterfs, debian linux, opensuse leap +2 more +4 moreIt was found that glusterfs server is vulnerable to multiple stack based buffer overflows due to...CVE-2018-10907Fix available8.8 High
- gluster glusterfs, debian linux, opensuse leap +2 more +4 moreIt was found that glusterfs server does not properly sanitize file paths in the "trusted.io-stats...CVE-2018-10904Fix available8.8 High
- imagemagick, opensuse leap +1 moreImageMagick 7.0.8-11 Q16 has a heap-based buffer over-read in the coders/psd.c...CVE-2018-16412Fix available8.8 High
- elfutils project elfutils, canonical ubuntu linux, debian linux +4 more +6 morelibelf/elf_end.c in elfutils 0.173 allows remote attackers to cause a denial of service (double...CVE-2018-16402Fix available9.8 Critical
- opensuse libzypplibzypp does not reevaluate malicious rpms once downloadedCVE-2018-7685Fix available7.8 High
- elfutils project elfutils, canonical ubuntu linux, debian linux +4 more +6 moredwarf_getaranges in dwarf_getaranges.c in libdw in elfutils before 2018-08-18 allows remote...CVE-2018-16062Fix available5.5 Medium
- isc bind, bind 9, canonical ubuntu linux +9 more +11 moreA flaw in the "deny-answer-aliases" feature can cause an assertion failure in namedCVE-2018-5740Public exploitFix availableEPSS 60.2%7.5 High
- linuxcontainers lxc, canonical ubuntu linux, opensuse leap +3 more +5 moreThe lxc-user-nic component of LXC allows unprivileged users to open arbitrary filesCVE-2018-6556Fix available3.3 Low
- opensuse openbuildservice, open build service +1 moredelete package via link exploit in open buildserviceCVE-2018-12467Fix available6.0 Medium
- opensuse openbuildservice, open build service +1 moreopenbuildservice allowed deleting packages via project linksCVE-2018-12466Fix available4.4 Medium
- [unknown] lftp, canonical ubuntu linux, opensuse leap +2 moreIt has been discovered that lftp up to and including version 4.8.3 does not properly sanitize...CVE-2018-10916Fix available5.3 Medium
- aubio, opensuse leap, suse linux enterprise +2 moreAubio is vulnerable to out of bound read when samplerate > 50kHzCVE-2018-14523Fix available8.8 High
- aubio, opensuse leap, suse linux enterprise +2 moreAubio is vulnerable to denial of service via aubio_pitch_set_unit functionCVE-2018-14522Fix available8.8 High
- ceph, debian linux, opensuse leap +7 more +9 moreA flaw was found in the way signature calculation was handled by cephx authentication protocol....CVE-2018-1129Fix available6.5 Medium
- ceph, debian linux, opensuse leap +7 more +9 moreIt was found that cephx authentication protocol did not verify ceph clients correctly and was...CVE-2018-1128Fix available7.5 High
- ceph, redhat ceph storage, debian linux +6 more +8 moreA flaw was found in the way ceph mon handles user requests. Any authenticated ceph user having...CVE-2018-10861Fix available8.1 High
- bouncycastle bc-java, netapp oncommand workflow automation, opensuse leap +21 more +23 moreDeserialization of Untrusted Data in Bouncy castleCVE-2018-1000613Fix available9.8 Critical
- [unknown] docker, mobyproject moby, opensuse leap +3 more +5 moreThe default OCI linux spec in oci/defaults{_linux}.go in Docker/Moby from 1.11 to current does...CVE-2018-10892Fix available6.3 Medium
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreAn issue was discovered in fs/f2fs/inline.c in the Linux kernel through 4.4. A denial of service ...CVE-2018-13099Fix available5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreAn issue was discovered in fs/f2fs/super.c in the Linux kernel through 4.14. A denial of service ...CVE-2018-13096Fix available5.5 Medium
- gnome libsoup, canonical ubuntu linux, debian linux +6 more +8 moreThe get_cookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have...CVE-2018-12910Fix available9.8 Critical
- opensuse open build serviceopen build service allows anyone to upload rpmsCVE-2011-41836.5 Medium
- opensuse sysconfigshell code injection via ESSID because of missing escaping of a variableCVE-2011-41827.3 High
- opensuse open build serviceopen build service information leak via unauthorized source accessCVE-2011-41814.3 Medium
- file project file, canonical ubuntu linux, opensuse leap +2 moreThe do_core_note function in readelf.c in libmagic.a in file 5.33 allows remote attackers to...CVE-2018-10360Fix available6.5 Medium
- liblouis, canonical ubuntu linux, opensuse leap +2 moreLiblouis 3.6.0 has a stack-based Buffer Overflow in the function parseChars in...CVE-2018-12085Fix available8.8 High
- mdadm project mdadm, opensuse +1 moreThe mdcheck script of the mdadm package for openSUSE 13.2 prior to version 3.3.1-5.14.1 does not...CVE-2014-5220Fix available7.8 High
- opensuse open build serviceCSRF protection incorrectly disabledCVE-2014-05948.8 High
- opensuse open build service, obs-service-set version +1 moresed command injectionCVE-2014-0593Fix available7.8 High
- opensuse open build serviceNo write permission check in change_role commandCVE-2013-37038.8 High
- opensuse open build serviceOpen Build Service arbitrary package modificationCVE-2018-7689Fix available7.1 High
- opensuse open build serviceOpen Build Service accepts arbitrary reviewsCVE-2018-7688Fix available7.1 High
- liblouis, canonical ubuntu linux, opensuse leap +2 moreLiblouis 3.5.0 has a stack-based Buffer Overflow in the function compileHyphenation in...CVE-2018-11685Fix available8.8 High
- liblouis, canonical ubuntu linux, opensuse leap +2 moreLiblouis 3.5.0 has a stack-based Buffer Overflow in the function includeFile in...CVE-2018-11684Fix available8.8 High
- liblouis, canonical ubuntu linux, opensuse leap +2 moreLiblouis 3.5.0 has a stack-based Buffer Overflow in the function parseChars in...CVE-2018-11683Fix available8.8 High
- liblouis, canonical ubuntu linux, opensuse leap +2 moreLiblouis 3.5.0 has a Segmentation fault in lou_logPrint in logging.c.CVE-2018-11577Fix available8.8 High
- liblouis, canonical ubuntu linux, opensuse leap +2 moreLiblouis 3.5.0 has a stack-based Buffer Overflow in the function parseChars in...CVE-2018-11440Fix available8.8 High
- debian linux, procps-ng project procps-ng, [unknown] procps-ng, procps +2 more +4 moreprocps-ng before version 3.3.15 is vulnerable to a stack buffer overflow in pgrep. This...CVE-2018-1125Fix available4.4 Medium
- [unknown] procps-ng, canonical ubuntu linux, debian linux +6 more +8 moreprocps-ng before version 3.3.15 is vulnerable to multiple integer overflows leading to a heap...CVE-2018-1124Public exploitFix available7.3 High
- ijg libjpeg, canonical ubuntu linux, debian linux +10 more +12 moreAn issue was discovered in libjpeg 9a and 9d. The alloc_sarray function in jmemmgr.c allows...CVE-2018-11212Fix available6.5 Medium
- postgresql, opensuse leap +1 morepostgresql before versions 10.4, 9.6.9 is vulnerable in the adminpack extension, the pg_catalog...CVE-2018-1115Fix available4.2 Medium
- debian linux, kde plasma, opensuse leap +2 morekwallet-pam in KDE KWallet before 5.12.6 allows local users to obtain ownership of arbitrary...CVE-2018-10380Fix available7.8 High
- gnome libgxps, opensuse leap, redhat ansible tower +3 more +5 moreThere is a heap-based buffer over-read in the function ft_font_face_hash of gxps-fonts.c in...CVE-2018-10733Fix available6.5 Medium
- redhat gluster storage, debian linux, opensuse leap +4 more +6 moreA privilege escalation flaw was found in gluster 3.x snapshot scheduler. Any gluster client...CVE-2018-1088Public exploitFix available8.1 High
- opensuse openbuildservice, open build service +1 moreopenbuildservice webui code injectionCVE-2011-31788.1 High
- qemu, canonical ubuntu linux, opensuse leap +6 more +8 moreQuick Emulator (aka QEMU), when built with the Cirrus CLGD 54xx VGA Emulator support, allows...CVE-2018-7858Fix available5.5 Medium
- Show moreLoading…