Skip to contentSuse vulnerabilities
Products
Show 140 moreShow less
Newest
- oracle mysql, mariadb, suse linux enterprise desktop +3 more +5 moreUnspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows...CVE-2014-6464Fix available4.0 Medium
- oracle mysql, mariadb, oracle solaris +4 more +6 moreUnspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows...CVE-2014-6463Fix available3.3 Low
- oracle mysql, mariadb, suse linux enterprise desktop +3 more +5 moreUnspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows...CVE-2014-4287Fix available4.0 Medium
- ntp, debian linux, fedoraproject fedora +10 more +12 morentp-keygen in ntp 4.2.8px before 4.2.8p2-RC2 and 4.3.x before 4.3.12 does not generate MD5 keys...CVE-2015-3405Fix available7.5 High
- oracle mysql, mariadb, oracle solaris +3 more +5 moreUnspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.35 and earlier and 5...CVE-2014-4243Fix available2.8 Low
- oracle mysql, suse linux enterprise desktop, linux enterprise server +2 moreUnspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.17 and earlier allows...CVE-2014-4214Fix available3.3 Low
- oracle mysql, suse linux enterprise desktop, linux enterprise server +2 moreUnspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.17 and earlier allows...CVE-2014-2484Fix available6.5 Medium
- oracle mysql, debian linux, mariadb +5 more +7 moreUnspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier, and 5...CVE-2014-4260Fix available5.5 Medium
- oracle mysql, debian linux, mariadb +9 more +11 moreUnspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier and 5...CVE-2014-4258Fix available6.5 Medium
- oracle mysql, debian linux, mariadb +4 more +6 moreUnspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier allows...CVE-2014-4207Fix available4.0 Medium
- oracle mysql, debian linux, mariadb +4 more +6 moreUnspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier allows...CVE-2014-2494Fix available4.0 Medium
- linux kernel, canonical ubuntu linux, f5 big-ip access policy manager +23 more +25 moreThe rd_build_device_space function in drivers/target/target_core_rd.c in the Linux kernel before...CVE-2014-4027Fix available2.3 Low
- ppc64-diag project ppc64-diag, redhat enterprise linux server, suse linux enterprise server +2 moreppc64-diag 2.6.1 uses 0775 permissions for /tmp/diagSEsnap and does not properly restrict...CVE-2014-4039Fix available2.1 Low
- ppc64-diag project ppc64-diag, redhat enterprise linux server, suse linux enterprise server +2 moreppc64-diag 2.6.1 allows local users to overwrite arbitrary files via a symlink attack related to ...CVE-2014-4038Fix available4.4 Medium
- openstack keystone, suse cloud +1 moreOpenStack Identity Keystone is vulnerable to Block delegation escalation of privilegeCVE-2014-3476Fix available6.0 Medium
- directfb, opensuse, suse linux enterprise desktop +3 more +5 moreThe Dispatch_Write function in proxy/dispatcher/idirectfbsurface_dispatcher.c in DirectFB 1.4.4...CVE-2014-297810.0 High
- directfb, opensuse, suse linux enterprise desktop +3 more +5 moreMultiple integer signedness errors in the Dispatch_Write function in proxy/dispatcher...CVE-2014-297710.0 High
- gnu libtasn1, debian linux, gnu gnutls +11 more +13 moreThe (1) asn1_read_value_type and (2) asn1_read_value functions in GNU Libtasn1 before 3.6 allows...CVE-2014-3469Fix available5.0 Medium
- gnu libtasn1, debian linux, f5 arx firmware +12 more +14 moreThe asn1_get_bit_der function in GNU Libtasn1 before 3.6 does not properly report an error when a...CVE-2014-3468Fix available7.5 High
- gnu gnutls, libtasn1, debian linux +12 more +14 moreMultiple unspecified vulnerabilities in the DER decoder in GNU Libtasn1 before 3.6, as used in...CVE-2014-3467Fix available5.0 Medium
- ekiga, opalvoip portable tool library, suse linux enterprise desktop +1 more +3 moreThe Portable Tool Library (aka PTLib) before 2.10.10, as used in Ekiga before 4.0.1, does not...CVE-2013-18644.3 Medium
- openssl, debian linux, fedoraproject fedora +6 more +8 moreThe do_ssl3_write function in s3_pkt.c in OpenSSL 1.x through 1.0.1g, when...CVE-2014-0198Fix availableEPSS 40.3%4.3 Medium
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreUse-after-free vulnerability in the nsHostResolver::ConditionallyRefreshRecord function in libxul...CVE-2014-1532Fix available9.8 Critical
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreUse-after-free vulnerability in the nsGenericHTMLElement::GetWidthHeightForImage function in...CVE-2014-1531Fix available8.8 High
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreThe docshell implementation in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5,...CVE-2014-1530Fix available6.1 Medium
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreThe Web Notification API in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5,...CVE-2014-1529Fix available8.8 High
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreThe nsXBLProtoImpl::InstallImplementation function in Mozilla Firefox before 29.0, Firefox ESR 24...CVE-2014-1524Fix available9.8 Critical
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreHeap-based buffer overflow in the read_u32 function in Mozilla Firefox before 29.0, Firefox ESR...CVE-2014-1523Fix available6.5 Medium
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 29.0,...CVE-2014-1518Fix available8.8 High
- suse kiwi, studio extension for system z, studio onsite +2 morekiwi before 4.98.05, as used in SUSE Studio Onsite 1.2 before 1.2.1 and SUSE Studio Extension for...CVE-2011-41957.5 High
- suse studio extension for system z, studio onsite +1 moreCross-site scripting (XSS) vulnerability in the overlay files tab in SUSE Studio Onsite 1.2...CVE-2011-41934.3 Medium
- suse kiwi, studio extension for system z, studio onsite +2 morekiwi before 4.85.1, as used in SUSE Studio Onsite 1.2 before 1.2.1 and SUSE Studio Extension for...CVE-2011-41927.5 High
- suse kiwi, studio extension for system z, studio onsite +2 morekiwi before 4.98.08, as used in SUSE Studio Onsite 1.2 before 1.2.1 and SUSE Studio Extension for...CVE-2011-31807.5 High
- openssl, fedoraproject fedora, mariadb +4 more +6 moreRace condition in the ssl3_read_bytes function in s3_pkt.c in OpenSSL through 1.0.1g, when...CVE-2010-5298Fix availableEPSS 34.1%4.0 Medium
- imagemagick, suse linux enterprise desktop, linux enterprise server +1 more +3 moreStack-based buffer overflow in the WritePSDImage function in coders/psd.c in ImageMagick 6.5.4...CVE-2014-1947Public exploitFix available7.8 High
- php, canonical ubuntu linux, debian linux +9 more +11 moreThe gdImageCreateFromXpm function in gdxpm.c in libgd, as used in PHP 5.4.26 and earlier, allows...CVE-2014-2497Fix availableEPSS 20.3%4.3 Medium
- mozilla firefox, seamonkey, opensuse +4 more +6 moreThe session-restore feature in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 does not...CVE-2014-15042.6 Low
- mozilla firefox, seamonkey, opensuse +4 more +6 moreThe (1) WebGL.compressedTexImage2D and (2) WebGL.compressedTexSubImage2D functions in Mozilla...CVE-2014-15026.8 Medium
- mozilla firefox, oracle solaris, suse linux enterprise desktop +2 more +4 moreMozilla Firefox before 28.0 on Android allows remote attackers to bypass the Same Origin Policy...CVE-2014-15015.8 Medium
- mozilla firefox, seamonkey, opensuse +4 more +6 moreMozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to cause a denial of...CVE-2014-15005.0 Medium
- mozilla firefox, seamonkey, opensuse +4 more +6 moreMozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to spoof the domain...CVE-2014-14994.3 Medium
- mozilla firefox, seamonkey, opensuse +4 more +6 moreThe crypto.generateCRMFRequest method in Mozilla Firefox before 28.0 and SeaMonkey before 2.25...CVE-2014-14985.0 Medium
- mozilla firefox, seamonkey, thunderbird +3 more +5 moreMozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey...CVE-2014-14965.5 Medium
- mozilla firefox, seamonkey, opensuse +4 more +6 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 28.0 and...CVE-2014-14949.3 High
- mozilla firefox, seamonkey, thunderbird +13 more +15 morevmtypedarrayobject.cpp in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird...CVE-2014-15149.8 Critical
- mozilla firefox, seamonkey, thunderbird +13 more +15 moreTypedArrayObject.cpp in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird...CVE-2014-15138.8 High
- mozilla firefox, seamonkey, thunderbird +13 more +15 moreUse-after-free vulnerability in the TypeObject class in the JavaScript engine in Mozilla Firefox...CVE-2014-1512EPSS 29.1%10.0 High
- mozilla firefox, seamonkey, thunderbird +13 more +15 moreMozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey...CVE-2014-1511Public exploitEPSS 83.5%9.8 Critical
- mozilla firefox, seamonkey, thunderbird +13 more +15 moreThe Web IDL implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4,...CVE-2014-1510Public exploitEPSS 82.2%9.8 Critical
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreBuffer overflow in the _cairo_truetype_index_to_ucs4 function in cairo, as used in Mozilla...CVE-2014-15098.8 High
- Show moreLoading…