Suse Studio vulnerabilities

• suse studio onsite, susestudio-ui-server +1 more SQL injection in ui-server/app/models/diary_entry.rb in SUSE Studio onsite CVE-2017-14807 8.1 HighJanuary 27, 2020
• suse studio onsite, susestudio-ui-server +1 more Insecure handling of repodata and packages in SUSE Studio onlite CVE-2017-14806 3.7 LowJanuary 27, 2020
• suse studio onsite, studio onsite 1.1 appliance, studio onsite appliance +2 more SQL injection in SUSE studio via select parameter CVE-2011-0467 8.8 HighJune 7, 2018
• graphicsmagick, imagemagick, canonical ubuntu linux +10 more +12 more The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote... CVE-2016-5118 Fix available EPSS 50.0% 9.8 CriticalMay 30, 2016
• graphicsmagick, debian linux, opensuse leap +4 more +6 more GraphicsMagick 1.3.23 allows remote attackers to cause a denial of service (NULL pointer... CVE-2016-2318 Fix available 5.5 MediumMay 21, 2016
• graphicsmagick, debian linux, opensuse leap +4 more +6 more Multiple buffer overflows in GraphicsMagick 1.3.23 allow remote attackers to cause a denial of... CVE-2016-2317 Fix available 5.5 MediumMay 21, 2016
• graphicsmagick, fedoraproject fedora, suse linux enterprise debuginfo +2 more +4 more The DecodeImage function in coders/gif.c in GraphicsMagick 1.3.18 allows remote attackers to... CVE-2015-8808 Fix available 5.5 MediumMay 21, 2016
• apple mac os x, canonical ubuntu linux, debian linux +11 more +13 more Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute... CVE-2016-0718 Fix available EPSS 13.3% 9.8 CriticalMay 17, 2016
• google chrome, canonical ubuntu linux, debian linux +10 more +12 more Multiple integer overflows in the XML_GetBuffer function in Expat through 2.1.0, as used in... CVE-2015-1283 Fix available EPSS 18.3% 6.8 MediumJuly 22, 2015
• imagemagick, canonical ubuntu linux, opensuse leap +7 more +9 more Buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote... CVE-2014-9846 Fix available 9.8 CriticalDecember 31, 2014
• imagemagick, canonical ubuntu linux, opensuse leap +7 more +9 more The ReadDIBImage function in coders/dib.c in ImageMagick allows remote attackers to cause a... CVE-2014-9845 Fix available 5.5 MediumDecember 31, 2014
• imagemagick, canonical ubuntu linux, opensuse +7 more +9 more The ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to cause... CVE-2014-9844 Fix available 5.5 MediumDecember 31, 2014
• gnu bash, apple mac os x, arista eos +71 more +73 more GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function... CVE-2014-7169 In KEVPublic exploitFix available EPSS 99.9% 9.8 CriticalSeptember 25, 2014
• gnu bash, apple mac os x, arista eos +71 more +73 more GNU Bash through 4.3 processes trailing strings after function definitions in the values of... CVE-2014-6271 In KEVPublic exploitFix available EPSS 100.0% 9.8 CriticalSeptember 24, 2014
• suse kiwi, studio extension for system z, studio onsite +2 more kiwi before 4.98.05, as used in SUSE Studio Onsite 1.2 before 1.2.1 and SUSE Studio Extension for... CVE-2011-4195 7.5 HighApril 16, 2014
• suse studio extension for system z, studio onsite +1 more Cross-site scripting (XSS) vulnerability in the overlay files tab in SUSE Studio Onsite 1.2... CVE-2011-4193 4.3 MediumApril 16, 2014
• suse kiwi, studio extension for system z, studio onsite +2 more kiwi before 4.85.1, as used in SUSE Studio Onsite 1.2 before 1.2.1 and SUSE Studio Extension for... CVE-2011-4192 7.5 HighApril 16, 2014
• suse kiwi, studio extension for system z, studio onsite +2 more kiwi before 4.98.08, as used in SUSE Studio Onsite 1.2 before 1.2.1 and SUSE Studio Extension for... CVE-2011-3180 7.5 HighApril 16, 2014
• suse studio extension for system z, studio onsite +1 more SUSE Studio Onsite 1.3.x before 1.3.6 and SUSE Studio Extension for System z 1.3 uses "static"... CVE-2013-3712 10.0 HighFebruary 26, 2014
• suse webyast, novell suse lifecycle management server, suse studio onsite +2 more WebYaST 1.3 uses weak permissions for config/initializers/secret_token.rb, which allows local... CVE-2013-3709 7.2 HighDecember 2, 2013
• f5 nginx, opensuse, suse lifecycle management server +2 more +4 more nginx 0.8.41 through 1.4.3 and 1.5.x before 1.5.7 allows remote attackers to bypass intended... CVE-2013-4547 Public exploitFix available EPSS 67.7% 7.5 HighNovember 21, 2013
• f5 nginx, fedoraproject fedora, suse studio +2 more +4 more Heap-based buffer overflow in compression-pointer processing in core/ngx_resolver.c in nginx... CVE-2011-4315 Fix available 6.8 MediumDecember 8, 2011