Skip to contentSuse Linux Enterprise vulnerabilities
- mit kerberos 5, canonical ubuntu linux, debian linux +4 more +6 moreThe kg_accept_krb5 function in krb5/accept_sec_context.c in the GSS-API library in MIT Kerberos 5...CVE-2010-1321Fix available6.8 Medium
- php, opensuse, suse linux enterprise +2 moreThe dechunk filter in PHP 5.3 through 5.3.2, when decoding an HTTP chunked encoding stream,...CVE-2010-1866Public exploit9.8 Critical
- debian linux, linux kernel, opensuse +3 more +5 moreRace condition in the find_keyring_by_name function in security/keys/keyring.c in the Linux...CVE-2010-1437Public exploit7.0 High
- mit kerberos 5, canonical ubuntu linux, fedoraproject fedora +2 more +4 moreUse-after-free vulnerability in kadmin/server/server_stubs.c in kadmind in MIT Kerberos 5 (aka...CVE-2010-0629Fix available6.5 Medium
- libpng, apple mac os x, canonical ubuntu linux +4 more +6 moreThe png_decompress_chunk function in pngrutil.c in libpng 1.0.x before 1.0.53, 1.2.x before 1.2...CVE-2010-02054.3 Medium
- adobe acrobat, acrobat and reader, opensuse +2 more +4 moreThe U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and...CVE-2009-3953In KEVPublic exploitEPSS 83.2%8.8 High
- adium, pidgin, fedoraproject fedora +4 more +6 moreDirectory traversal vulnerability in slp.c in the MSN protocol plugin in libpurple in Pidgin 2.6...CVE-2010-0013Public exploitFix availableEPSS 12.5%7.5 High
- adobe acrobat, acrobat and reader, acrobat reader +3 more +5 moreUse-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader...CVE-2009-4324In KEVPublic exploitEPSS 81.9%7.8 High
- debian linux, linux kernel, canonical ubuntu linux +10 more +12 moreArray index error in the gdth_read_event function in drivers/scsi/gdth.c in the Linux kernel...CVE-2009-30807.2 High
- debian linux, linux kernel, avaya aura application enablement services +15 more +17 moreThe poll_mode_io file for the megaraid_sas driver in the Linux kernel 2.6.31.6 and earlier has...CVE-2009-39397.1 High
- linux kernel, canonical ubuntu linux, fedoraproject fedora +11 more +13 moreMultiple race conditions in fs/pipe.c in the Linux kernel before 2.6.32-rc6 allow local users to...CVE-2009-3547Public exploitFix available7.0 High
- linux kernel, canonical ubuntu linux, fedoraproject fedora +5 more +7 morenet/unix/af_unix.c in the Linux kernel 2.6.31.4 and earlier allows local users to cause a denial...CVE-2009-3621Public exploit5.5 Medium
- linux kernel, canonical ubuntu linux, fedoraproject fedora +5 more +7 moreThe ATI Rage 128 (aka r128) driver in the Linux kernel before 2.6.31-git11 does not properly...CVE-2009-36207.8 High
- linux kernel, canonical ubuntu linux, fedoraproject fedora +10 more +12 morearch/x86/ia32/ia32entry.S in the Linux kernel before 2.6.31.4 on the x86_64 platform does not...CVE-2009-29102.1 Low
- linux kernel, canonical ubuntu linux, fedoraproject fedora +4 more +6 moreThe tcf_fill_node function in net/sched/cls_api.c in the netlink subsystem in the Linux kernel 2...CVE-2009-36122.1 Low
- gnome glib, opensuse, suse linux enterprise server +2 moreThe g_file_copy function in glib 2.0 sets the permissions of a target file to the permissions of...CVE-2009-3289Fix available7.8 High
- linux kernel, canonical ubuntu linux, opensuse +2 more +4 moreThe get_random_int function in drivers/char/random.c in the Linux kernel before 2.6.30 produces...CVE-2009-32385.5 Medium
- postgresql, canonical ubuntu linux, fedoraproject fedora +3 more +5 moreThe core server component in PostgreSQL 8.3 before 8.3.8 and 8.2 before 8.2.14, when using LDAP...CVE-2009-32316.8 Medium
- linux kernel, canonical ubuntu linux, suse linux enterprise debuginfo +3 more +5 moreMemory leak in the appletalk subsystem in the Linux kernel 2.4.x through 2.4.37.6 and 2.6.x...CVE-2009-29037.1 High
- apache http server, apple mac os x, debian linux +4 more +6 moreThe mod_proxy_ftp module in the Apache HTTP Server allows remote attackers to bypass intended...CVE-2009-3095Fix availableEPSS 13.5%5.0 Medium
- linux kernel, canonical ubuntu linux, fedoraproject fedora +9 more +11 moreThe udp_sendmsg function in the UDP implementation in (1) net/ipv4/udp.c and (2) net/ipv6/udp.c...CVE-2009-2698Public exploit7.8 High
- linux kernel, canonical ubuntu linux, fedoraproject fedora +9 more +11 moreThe execve function in the Linux kernel, possibly 2.6.30-rc6 and earlier, does not properly clear...CVE-2009-28485.9 Medium
- debian linux, linux kernel, redhat enterprise linux desktop +5 more +7 moreThe Linux kernel 2.6.0 through 2.6.30.4, and 2.4.4 through 2.4.37.4, does not initialize all...CVE-2009-2692Public exploitFix availableEPSS 14.6%7.8 High
- xmlsoft libxml, libxml2, apple iphone os +16 more +18 moreMultiple use-after-free vulnerabilities in libxml2 2.5.10, 2.6.16, 2.6.26, 2.6.27, and 2.6.32,...CVE-2009-2416Fix available6.5 Medium
- apache xerces2 java, oracle jdk, canonical ubuntu linux +6 more +8 moreDenial of service in Apache Xerces2CVE-2009-2625Fix availableEPSS 30.4%5.0 Medium
- mozilla firefox, network security services, seamonkey +6 more +8 moreMozilla Network Security Services (NSS) before 3.12.3, Firefox before 3.0.13, Thunderbird before...CVE-2009-2408Fix available5.9 Medium
- mozilla firefox, fedoraproject fedora, opensuse +3 more +5 moreMozilla Firefox before 3.0.12 does not always use XPCCrossOriginWrapper when required during...CVE-2009-24724.3 Medium
- debian linux, linux kernel, canonical ubuntu linux +4 more +6 moreThe inode double locking code in fs/ocfs2/file.c in the Linux kernel 2.6.30 before 2.6.30-rc3, 2...CVE-2009-1961Public exploit4.7 Medium
- apache apr-util, http server, apple mac os x +4 more +6 moreThe expat XML parser in the apr_xml_* interface in xml/apr_xml.c in Apache APR-util before 1.3.7,...CVE-2009-1955Public exploitFix availableEPSS 53.0%7.5 High
- apple cups, mac os x, mac os x server +4 more +6 moreThe ippReadIO function in cups/ipp.c in cupsd in CUPS before 1.3.10 does not properly initialize...CVE-2009-0949Public exploitFix availableEPSS 19.6%7.5 High
- freetype, apple iphone os, mac os x +6 more +8 moreMultiple integer overflows in FreeType 2.3.9 and earlier allow remote attackers to execute...CVE-2009-0946Fix available7.5 High
- udev project udev, canonical ubuntu linux, debian linux +5 more +7 moreBuffer overflow in the util_path_encode function in udev/lib/libudev-util.c in udev before 1.4.1...CVE-2009-11862.1 Low
- udev project udev, canonical ubuntu linux, debian linux +6 more +8 moreudev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, which...CVE-2009-1185Public exploitFix availableEPSS 80.5%7.2 High
- christophe.varoqui multipath-tools, debian linux, fedoraproject fedora +8 more +10 moreThe Device Mapper multipathing driver (aka multipath-tools or device-mapper-multipath) 0.4.8, as...CVE-2009-0115Fix available7.8 High
- debian linux, linux kernel, canonical ubuntu linux +8 more +10 morenfsd in the Linux kernel before 2.6.28.9 does not drop the CAP_MKNOD capability before handling a...CVE-2009-10724.9 Medium
- debian linux, linux kernel, canonical ubuntu linux +9 more +11 moreThe audit_syscall_entry function in the Linux kernel 2.6.28.7 and earlier on the x86_64 platform...CVE-2009-08343.6 Low
- optipng project optipng, opensuse, suse linux enterprise +2 moreUse-after-free vulnerability in the GIFReadNextExtension function in lib/pngxtern/gif/gifread.c...CVE-2009-0749Fix available7.8 High
- libpng, apple iphone os, mac os x +6 more +8 moreThe PNG reference library (aka libpng) before 1.0.43, and 1.2.x before 1.2.35, as used in...CVE-2009-0040Fix available6.8 Medium
- net-snmp, opensuse, redhat enterprise linux +1 more +3 moreThe netsnmp_udp_fmtaddr function (snmplib/snmpUDPDomain.c) in net-snmp 5.0.9 through 5.4.2.1,...CVE-2008-6123Fix available5.0 Medium
- mozilla firefox, seamonkey, thunderbird +10 more +12 morensFrameManager in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2...CVE-2008-50219.3 High
- gnu gnutls, canonical ubuntu linux, debian linux +4 more +6 moreThe _gnutls_x509_verify_certificate function in lib/x509/verify.c in libgnutls in GnuTLS before 2...CVE-2008-4989Fix available5.9 Medium
- debian linux, linux kernel, canonical ubuntu linux +4 more +6 morefs/direct-io.c in the dio subsystem in the Linux kernel before 2.6.23 does not properly zero out...CVE-2007-67165.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 more +4 moreThe (1) real_lookup and (2) __lookup_hash functions in fs/namei.c in the vfs implementation in...CVE-2008-32755.5 Medium
- qemu, canonical ubuntu linux, debian linux +6 more +8 moreQEMU 0.9.0 does not properly handle changes to removable media, which allows guest OS users to...CVE-2008-1945Fix available2.1 Low
- debian linux, linux kernel, avaya communication manager +12 more +14 moreThe Linux kernel before 2.6.25.10 does not properly perform tty operations, which allows local...CVE-2008-28127.8 High
- debian linux, linux kernel, canonical ubuntu linux +5 more +7 moreRace condition in the directory notification subsystem (dnotify) in Linux kernel 2.6.x before 2.6...CVE-2008-13756.9 Medium
- mit kerberos 5, apple mac os x, mac os x server +7 more +9 moreThe Kerberos 4 support in KDC in MIT Kerberos 5 (krb5kdc) does not properly clear the unused...CVE-2008-0063Fix available7.5 High
- apple mac os x, canonical ubuntu linux, debian linux +7 more +9 moreThe XInput extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute...CVE-2007-6427Fix available9.3 High
- apache http server, canonical ubuntu linux, fedoraproject fedora +3 more +5 moreCross-site scripting (XSS) vulnerability in the (1) mod_imap module in the Apache HTTP Server 1.3...CVE-2007-5000Fix availableEPSS 46.6%4.3 Medium
- debian linux, linux kernel, canonical ubuntu linux +9 more +11 moreThe do_coredump function in fs/exec.c in Linux kernel 2.4.x and 2.6.x up to 2.6.24-rc3, and...CVE-2007-62062.1 Low
- Show moreLoading…