Skip to contentSuse vulnerabilities
Products
Show 140 moreShow less
Newest
- mozilla firefox, sil graphite2, opensuse leap +3 more +5 moreThe graphite2::TtfUtil::CmapSubtable12Lookup function in TtfUtil.cpp in Graphite 2 before 1.3.6,...CVE-2016-2801Fix available8.8 High
- mozilla firefox, sil graphite2, opensuse leap +3 more +5 moreThe graphite2::Slot::getAttr function in Slot.cpp in Graphite 2 before 1.3.6, as used in Mozilla...CVE-2016-2800Fix available8.8 High
- mozilla firefox, sil graphite2, opensuse leap +3 more +5 moreHeap-based buffer overflow in the graphite2::Slot::setAttr function in Graphite 2 before 1.3.6,...CVE-2016-2799Fix available8.8 High
- mozilla firefox, sil graphite2, opensuse leap +3 more +5 moreThe graphite2::GlyphCache::Loader::Loader function in Graphite 2 before 1.3.6, as used in Mozilla...CVE-2016-2798Fix available8.8 High
- mozilla firefox, sil graphite2, opensuse leap +3 more +5 moreThe graphite2::TtfUtil::CmapSubtable12Lookup function in Graphite 2 before 1.3.6, as used in...CVE-2016-2797Fix available8.8 High
- mozilla firefox, sil graphite2, opensuse leap +3 more +5 moreHeap-based buffer overflow in the graphite2::vm::Machine::Code::Code function in Graphite 2...CVE-2016-2796Fix available8.8 High
- mozilla firefox, sil graphite2, opensuse leap +3 more +5 moreThe graphite2::FileFace::get_table_fn function in Graphite 2 before 1.3.6, as used in Mozilla...CVE-2016-2795Fix available8.8 High
- mozilla firefox, sil graphite2, opensuse leap +3 more +5 moreThe graphite2::TtfUtil::CmapSubtable12NextCodepoint function in Graphite 2 before 1.3.6, as used...CVE-2016-2794Fix available8.8 High
- mozilla firefox, opensuse leap, opensuse +3 more +5 moreCachedCmap.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR...CVE-2016-2793Fix available8.8 High
- mozilla firefox, sil graphite2, opensuse leap +3 more +5 moreThe graphite2::Slot::getAttr function in Slot.cpp in Graphite 2 before 1.3.6, as used in Mozilla...CVE-2016-2792Fix available8.8 High
- mozilla firefox, sil graphite2, opensuse leap +3 more +5 moreThe graphite2::GlyphCache::glyph function in Graphite 2 before 1.3.6, as used in Mozilla Firefox...CVE-2016-2791Fix available8.8 High
- mozilla firefox, sil graphite2, opensuse leap +3 more +5 moreThe graphite2::TtfUtil::GetTableInfo function in Graphite 2 before 1.3.6, as used in Mozilla...CVE-2016-2790Fix available8.8 High
- mozilla firefox, opensuse leap, opensuse +3 more +5 moreThe Machine::Code::decoder::analysis::set_ref function in Graphite 2 before 1.3.6, as used in...CVE-2016-1977Fix available8.8 High
- linux kernel, novell suse linux enterprise debuginfo, suse linux enterprise desktop +8 more +10 moreThe hub_activate function in drivers/usb/core/hub.c in the Linux kernel before 4.3.5 does not...CVE-2015-8816Fix available6.8 Medium
- linux kernel, suse linux enterprise debuginfo, linux enterprise desktop +5 more +7 moreThe treo_attach function in drivers/usb/serial/visor.c in the Linux kernel before 4.5 allows...CVE-2016-2782Public exploitFix available4.6 Medium
- gnu glibc, canonical ubuntu linux, debian linux +26 more +28 moreMultiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the...CVE-2015-7547Public exploitFix availableEPSS 92.4%8.1 High
- ibm java sdk, websphere application server, redhat satellite +2 more +4 moreThe J9 JVM in IBM SDK, Java Technology Edition 6 before SR16 FP20, 6 R1 before SR8 FP20, 7 before...CVE-2015-50419.1 Critical
- gnu glibc, canonical ubuntu linux, debian linux +6 more +8 moreStack-based buffer overflow in the catopen function in the GNU C Library (aka glibc or libc6)...CVE-2015-8779Fix available9.8 Critical
- gnu glibc, canonical ubuntu linux, debian linux +6 more +8 moreInteger overflow in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent...CVE-2015-8778Fix available9.8 Critical
- gnu glibc, canonical ubuntu linux, debian linux +6 more +8 moreThe strftime function in the GNU C Library (aka glibc or libc6) before 2.23 allows context...CVE-2015-8776Fix available9.1 Critical
- gnu glibc, canonical ubuntu linux, fedoraproject fedora +5 more +7 moreMultiple stack-based buffer overflows in the GNU C Library (aka glibc or libc6) before 2.23 allow...CVE-2014-9761Fix available9.8 Critical
- opensuse leap, opensuse, suse linux enterprise desktop +3 more +5 moreThe mysql-systemd-helper script in the mysql-community-server package before 5.6.28-2.17.1 in...CVE-2015-59696.2 Medium
- rails ruby on rails, rubyonrails rails, debian linux +4 more +6 moreDirectory traversal vulnerability in Action View in Ruby on RailsCVE-2016-0752In KEVPublic exploitFix availableEPSS 95.5%7.5 High
- linux kernel, canonical ubuntu linux, suse linux enterprise real time extension +2 moreThe KEYS subsystem in the Linux kernel before 4.4 allows local users to gain privileges or cause...CVE-2015-8539Fix available7.8 High
- libarchive, canonical ubuntu linux, suse linux enterprise desktop +2 more +4 moreThe copy_from_lzss_window function in archive_read_support_format_rar.c in libarchive 3.2.0 and...CVE-2015-8934Fix available5.5 Medium
- libarchive, canonical ubuntu linux, suse linux enterprise desktop +2 more +4 moreInteger overflow in the archive_read_format_tar_skip function in archive_read_support_format_tar...CVE-2015-8933Fix available5.5 Medium
- libarchive, canonical ubuntu linux, debian linux +3 more +5 moreThe compress_bidder_init function in archive_read_support_filter_compress.c in libarchive before...CVE-2015-8932Fix available5.5 Medium
- libarchive, canonical ubuntu linux, debian linux +3 more +5 moreMultiple integer overflows in the (1) get_time_t_max and (2) get_time_t_min functions in...CVE-2015-8931Fix available7.8 High
- libarchive, canonical ubuntu linux, suse linux enterprise desktop +2 more +4 morebsdtar in libarchive before 3.2.0 allows remote attackers to cause a denial of service (infinite...CVE-2015-8930Fix available7.5 High
- libarchive, canonical ubuntu linux, suse linux enterprise desktop +2 more +4 moreThe process_add_entry function in archive_read_support_format_mtree.c in libarchive before 3.2.0...CVE-2015-8928Fix available5.5 Medium
- libarchive, canonical ubuntu linux, suse linux enterprise desktop +2 more +4 moreThe archive_read_format_rar_read_data function in archive_read_support_format_rar.c in libarchive...CVE-2015-8926Fix available5.5 Medium
- libarchive, canonical ubuntu linux, suse linux enterprise desktop +2 more +4 moreThe readline function in archive_read_support_format_mtree.c in libarchive before 3.2.0 allows...CVE-2015-8925Fix available5.5 Medium
- linux kernel, suse linux enterprise real time extension +1 moreThe fuse_fill_write_pages function in fs/fuse/file.c in the Linux kernel before 4.4 allows local...CVE-2015-8785Fix available6.2 Medium
- ntp, novell suse openstack cloud, opensuse leap +6 more +8 moreThe ntpq saveconfig command in NTP 4.1.2, 4.2.x before 4.2.8p6, 4.3, 4.3.25, 4.3.70, and 4.3.77...CVE-2015-7976Fix available4.3 Medium
- adobe air, air sdk, flash player +14 more +16 moreInteger overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on...CVE-2015-8651In KEVFix availableEPSS 67.7%8.8 High
- debian linux, linux kernel, opensuse +5 more +7 moreThe PCI backend driver in Xen, when running on an x86 system and using Linux 3.1.x through 4.3.x...CVE-2015-8551Fix available6.0 Medium
- qemu, canonical ubuntu linux, debian linux +7 more +9 moreMemory leak in net/vmxnet3.c in QEMU allows remote attackers to cause a denial of service (memory...CVE-2015-8567Fix available7.7 High
- openssl, apple mac os x, canonical ubuntu linux +21 more +23 moreThe ASN1_TFLG_COMBINE implementation in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zh, 1.0.0...CVE-2015-3195Public exploitFix availableEPSS 38.7%5.3 Medium
- ibm java 2 sdk, java sdk, redhat enterprise linux desktop +6 more +8 moreIBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR2, 7 R1 before SR3...CVE-2015-50062.1 Low
- libpng, apple mac os x, canonical ubuntu linux +16 more +18 moreMultiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before...CVE-2015-8126Fix availableEPSS 10.3%7.5 High
- mit kerberos 5, canonical ubuntu linux, debian linux +6 more +8 moreThe build_principal_va function in lib/krb5/krb/bld_princ.c in MIT Kerberos 5 (aka krb5) before 1...CVE-2015-2697Fix available4.0 Medium
- mit kerberos 5, canonical ubuntu linux, debian linux +5 more +7 morelib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an inappropriate...CVE-2015-2696Fix available7.1 High
- mit kerberos 5, canonical ubuntu linux, debian linux +6 more +8 morelib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an...CVE-2015-2695Fix available5.0 Medium
- ntp, canonical ubuntu linux, debian linux +16 more +18 moreThe panic_gate check in NTP before 4.2.8p5 is only re-enabled after the first change to the...CVE-2015-5300Fix available7.5 High
- oracle java se, opensuse leap, opensuse +19 more +21 moreUnspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to...CVE-2015-4902In KEVEPSS 13.6%5.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +14 more +16 moreUnspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows...CVE-2015-4830Fix available4.0 Medium
- adobe flash player, opensuse evergreen, opensuse +7 more +9 moreAdobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11...CVE-2015-7645In KEVPublic exploitFix availableEPSS 65.3%7.8 High
- qemu, arista eos, canonical ubuntu linux +4 more +6 morehw/ide/core.c in QEMU does not properly restrict the commands accepted by an ATAPI device, which...CVE-2015-6855Fix available7.5 High
- qemu, arista eos, canonical ubuntu linux +5 more +7 moreInteger overflow in the VNC display driver in QEMU before 2.1.0 allows attachers to cause a...CVE-2015-5239Fix available6.5 Medium
- gnome networkmanager, canonical ubuntu linux, oracle linux +6 more +8 moreGNOME NetworkManager allows remote attackers to cause a denial of service (IPv6 traffic...CVE-2015-0272Fix available5.0 Medium
- Show moreLoading…