Skip to contentSuse vulnerabilities
Products
Show 140 moreShow less
Newest
- google chrome, canonical ubuntu linux, debian linux +6 more +8 moreHeap-based buffer overflow in content/renderer/media/canvas_capture_handler.cc in Google Chrome...CVE-2016-1689Fix available6.5 Medium
- google chrome, v8, canonical ubuntu linux +7 more +9 moreThe regexp (aka regular expression) implementation in Google V8 before 5.0.71.40, as used in...CVE-2016-1688Fix available6.5 Medium
- google chrome, xmlsoft libxslt, canonical ubuntu linux +7 more +9 morenumbers.c in libxslt before 1.1.29, as used in Google Chrome before 51.0.2704.63, mishandles...CVE-2016-1683Fix available7.5 High
- google chrome, canonical ubuntu linux, debian linux +6 more +8 moreThe ServiceWorkerContainer::registerServiceWorkerImpl function in WebKit/Source/modules...CVE-2016-1682Fix available6.1 Medium
- google chrome, canonical ubuntu linux, debian linux +6 more +8 moreUse-after-free vulnerability in ports/SkFontHost_FreeType.cpp in Skia, as used in Google Chrome...CVE-2016-1680Fix available8.8 High
- google chrome, canonical ubuntu linux, debian linux +6 more +8 moreThe ToV8Value function in content/child/v8_value_converter_impl.cc in the V8 bindings in Google...CVE-2016-1679Fix available8.8 High
- google chrome, v8, canonical ubuntu linux +7 more +9 moreobjects.cc in Google V8 before 5.0.71.32, as used in Google Chrome before 51.0.2704.63, does not...CVE-2016-1678Fix available8.8 High
- google chrome, v8, canonical ubuntu linux +7 more +9 moreuri.js in Google V8 before 5.1.281.26, as used in Google Chrome before 51.0.2704.63, uses an...CVE-2016-1677Fix available6.5 Medium
- google chrome, canonical ubuntu linux, debian linux +6 more +8 moreBlink, as used in Google Chrome before 51.0.2704.63, allows remote attackers to bypass the Same...CVE-2016-1675Fix available8.8 High
- google chrome, canonical ubuntu linux, debian linux +6 more +8 moreBlink, as used in Google Chrome before 51.0.2704.63, allows remote attackers to bypass the Same...CVE-2016-1673Fix available8.8 High
- graphicsmagick, imagemagick, canonical ubuntu linux +10 more +12 moreThe OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote...CVE-2016-5118Fix availableEPSS 50.0%9.8 Critical
- graphicsmagick, debian linux, opensuse leap +4 more +6 moreGraphicsMagick 1.3.23 allows remote attackers to cause a denial of service (NULL pointer...CVE-2016-2318Fix available5.5 Medium
- graphicsmagick, debian linux, opensuse leap +4 more +6 moreMultiple buffer overflows in GraphicsMagick 1.3.23 allow remote attackers to cause a denial of...CVE-2016-2317Fix available5.5 Medium
- graphicsmagick, fedoraproject fedora, suse linux enterprise debuginfo +2 more +4 moreThe DecodeImage function in coders/gif.c in GraphicsMagick 1.3.18 allows remote attackers to...CVE-2015-8808Fix available5.5 Medium
- apple mac os x, canonical ubuntu linux, debian linux +11 more +13 moreExpat allows context-dependent attackers to cause a denial of service (crash) or possibly execute...CVE-2016-0718Fix availableEPSS 13.3%9.8 Critical
- ibm java sdk, redhat enterprise linux desktop, enterprise linux hpc node supplementary +9 more +11 moreBuffer overflow in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 6 before...CVE-2016-02645.6 Medium
- php, canonical ubuntu linux, opensuse leap +3 more +5 moreext/libxml/libxml.c in PHP before 5.5.22 and 5.6.x before 5.6.6, when PHP-FPM is used, does not...CVE-2015-8866Fix available9.6 Critical
- adobe flash player, opensuse evergreen, opensuse +6 more +8 moreAdobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via...CVE-2016-4117In KEVPublic exploitFix availableEPSS 94.3%9.8 Critical
- imagemagick, canonical ubuntu linux, opensuse leap +27 more +29 moreThe (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow...CVE-2016-3718In KEVPublic exploitFix availableEPSS 75.6%5.5 Medium
- imagemagick, canonical ubuntu linux, opensuse leap +27 more +29 moreThe EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers...CVE-2016-3715In KEVPublic exploitFix availableEPSS 75.3%5.5 Medium
- imagemagick, canonical ubuntu linux, debian linux +3 more +5 moreThe (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders...CVE-2016-3714In KEVPublic exploitFix availableEPSS 97.5%8.4 High
- linux kernel, canonical ubuntu linux, novell suse linux enterprise desktop +7 more +9 moreDouble free vulnerability in drivers/net/usb/cdc_ncm.c in the Linux kernel before 4.5 allows...CVE-2016-3951Fix available4.6 Medium
- linux kernel, novell suse linux enterprise desktop, suse linux enterprise server +5 more +7 moreThe tm_reclaim_thread function in arch/powerpc/kernel/process.c in the Linux kernel before 4.4.1...CVE-2015-8845Fix available5.5 Medium
- mozilla firefox, opensuse leap, opensuse +1 more +3 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 46.0,...CVE-2016-2807Fix available8.8 High
- mozilla firefox, debian linux, opensuse leap +2 more +4 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 46.0 and...CVE-2016-2806Fix available8.8 High
- suse yast2yast2-users before 3.1.47, as used in SUSE Linux Enterprise 12 SP1, does not properly set empty...CVE-2016-1601Fix available9.8 Critical
- oracle mysql, mariadb, opensuse leap +12 more +14 moreUnspecified vulnerability in Oracle MySQL 5.5.46 and earlier allows local users to affect...CVE-2016-0651Fix available5.5 Medium
- oracle jrockit, apache cassandra, canonical ubuntu linux +35 more +37 moreUnspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and...CVE-2016-3427In KEVFix availableEPSS 92.3%9.8 Critical
- mariadb, oracle mysql, canonical ubuntu linux +7 more +9 moreUnspecified vulnerability in Oracle MySQL 5.6.28 and earlier and 5.7.10 and earlier and MariaDB...CVE-2016-0668Fix available4.1 Medium
- oracle mysql, canonical ubuntu linux, debian linux +14 more +16 moreUnspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and...CVE-2016-0642Fix available4.7 Medium
- google chrome, opensuse leap, suse linux enterprise +2 moreThe download implementation in Google Chrome before 50.0.2661.75 on Android allows remote...CVE-2016-1656Fix available7.5 High
- google chrome, canonical ubuntu linux, debian linux +2 more +4 moreMultiple unspecified vulnerabilities in Google Chrome before 50.0.2661.75 allow attackers to...CVE-2016-1659Fix available9.8 Critical
- google chrome, canonical ubuntu linux, debian linux +2 more +4 moreGoogle Chrome before 50.0.2661.75 does not properly consider that frame removal may occur during...CVE-2016-1655Fix available8.8 High
- google chrome, canonical ubuntu linux, debian linux +2 more +4 moreThe media subsystem in Google Chrome before 50.0.2661.75 does not initialize an unspecified data...CVE-2016-1654Fix available6.5 Medium
- google chrome, canonical ubuntu linux, debian linux +2 more +4 moreThe LoadBuffer implementation in Google V8, as used in Google Chrome before 50.0.2661.75,...CVE-2016-1653Fix available8.8 High
- google chrome, debian linux, opensuse leap +1 more +3 moreCross-site scripting (XSS) vulnerability in the ModuleSystem::RequireForJsInner function in...CVE-2016-1652Fix available6.1 Medium
- google chrome, debian linux, opensuse leap +1 more +3 morefxcodec/codec/fx_codec_jpx_opj.cpp in PDFium, as used in Google Chrome before 50.0.2661.75, does...CVE-2016-1651Fix available8.1 High
- mercurial, debian linux, fedoraproject fedora +4 more +6 moreMercurial arbitrary code execution vulnerabilityCVE-2016-3630Fix available8.8 High
- mercurial, debian linux, fedoraproject fedora +11 more +13 moreMercurial vulnerable to arbitrary code execution via a crafted name when converting a Git repositoryCVE-2016-3069Fix available8.8 High
- mercurial, debian linux, fedoraproject fedora +11 more +13 moreMercurial arbitrary code execution via a crafted git ext:: URLCVE-2016-3068Fix available8.8 High
- google chrome, canonical ubuntu linux, debian linux +8 more +10 moreThe Array.prototype.concat implementation in builtins.cc in Google V8, as used in Google Chrome...CVE-2016-1646In KEVFix availableEPSS 48.1%8.8 High
- git-scm git, opensuse leap, opensuse +4 more +6 morerevision.c in git before 2.7.4 uses an incorrect integer data type, which allows remote attackers...CVE-2016-2315Fix availableEPSS 17.3%9.8 Critical
- git-scm git, opensuse leap, opensuse +4 more +6 moreInteger overflow in Git before 2.7.4 allows remote attackers to execute arbitrary code via a (1)...CVE-2016-2324Fix availableEPSS 18.1%9.8 Critical
- isc bind, canonical ubuntu linux, debian linux +11 more +13 morenamed in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 allows remote attackers to...CVE-2016-1286Fix availableEPSS 60.8%8.6 High
- isc bind, canonical ubuntu linux, debian linux +11 more +13 morenamed in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does not properly handle DNAME...CVE-2016-1285Fix availableEPSS 57.8%6.8 Medium
- mozilla firefox, thunderbird, opensuse leap +3 more +5 moreThe nsScannerString::AppendUnicodeTo function in Mozilla Firefox before 45.0 and Firefox ESR 38.x...CVE-2016-1974Fix available8.8 High
- mozilla firefox, thunderbird, opensuse leap +3 more +5 moreUse-after-free vulnerability in the AtomicBaseIncDec function in Mozilla Firefox before 45.0 and...CVE-2016-1964Fix available8.8 High
- mozilla firefox, thunderbird, opensuse leap +3 more +5 moreUse-after-free vulnerability in the nsHTMLDocument::SetBody function in dom/html/nsHTMLDocument...CVE-2016-1961Fix available8.8 High
- mozilla firefox, thunderbird, opensuse leap +3 more +5 moreInteger underflow in the nsHtml5TreeBuilder class in the HTML5 string parser in Mozilla Firefox...CVE-2016-1960Public exploitFix availableEPSS 30.9%8.8 High
- mozilla firefox, sil graphite2, opensuse leap +3 more +5 moreThe graphite2::TtfUtil::CmapSubtable4NextCodepoint function in Graphite 2 before 1.3.6, as used...CVE-2016-2802Fix available8.8 High
- Show moreLoading…