OP
Product
Opensuse
On CISA KEVExploited in the wildRansomware-linked
1,456
CVEs
45
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 86High 271Medium 142Low 1
Watch
Add Opensuse to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2014-9847 | 9.8 | Mar 20 | The jng decoder in ImageMagick 6.8.9.9 allows remote attackers to have an unspecified impact Affected: 13.2 |
| CVE-2014-9846 | 9.8 | Mar 20 | Buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact Affected: 13.2 |
| CVE-2014-9843 | 9.8 | Mar 20 | The DecodePSDPixels function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors Affected: 13.2 |
| CVE-2014-9841 | 9.8 | Mar 20 | The ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors, related to "throwing of exceptions." Affected: 13.2 |
| CVE-2014-9852 | 9.8 | Mar 17 | distribute-cache.c in ImageMagick re-uses objects after they have been destroyed, which allows remote attackers to have unspecified impact via unspecified vectors Affected: 13.2 |
| CVE-2016-7447 | 9.8 | Feb 6 | Heap-based buffer overflow in the EscapeParenthesis function in GraphicsMagick before 1.3.25 allows remote attackers to have unspecified impact via unknown vectors Affected: 13.2 |
| CVE-2016-7446 | 9.8 | Feb 6 | Buffer overflow in the MVG and SVG rendering code in GraphicsMagick 1.3.24 allows remote attackers to have unspecified impact via unknown vectors Affected: 13.2 |
| CVE-2016-9427 | 9.8 | Dec 12 | Integer overflow vulnerability in bdwgc before 2016-09-27 allows attackers to cause client of bdwgc denial of service (heap buffer overflow crash) and possibly execute arbitrary… Affected: 13.2 |
| CVE-2016-4303 | 9.8 | Sep 26 | The parse_string function in cjson.c in the cJSON library mishandles UTF8/16 strings, which allows remote attackers to cause a denial of service (crash) or execute arbitrary code… Affected: 13.2 |
| CVE-2016-5772 | 9.8 | Aug 7 | Double free vulnerability in the php_wddx_process_data function in wddx.c in the WDDX extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 allows remote… Affected: 13.2 |
| CVE-2016-5771 | 9.8 | Aug 7 | spl_array.c in the SPL extension in PHP before 5.5.37 and 5.6.x before 5.6.23 improperly interacts with the unserialize implementation and garbage collection, which allows remote… Affected: 13.2 |
| CVE-2016-5770 | 9.8 | Aug 7 | Integer overflow in the SplFileObject::fread function in spl_directory.c in the SPL extension in PHP before 5.5.37 and 5.6.x before 5.6.23 allows remote attackers to cause a… Affected: 13.2 |
| CVE-2016-5703 | 9.8 | Jul 3 | SQL injection vulnerability in libraries/central_columns.lib.php in phpMyAdmin 4.4.x before 4.4.15.7 and 4.6.x before 4.6.3 allows remote attackers to execute arbitrary SQL… Affected: 13.1; 13.2 |
| CVE-2016-4138 | 9.8 | Jun 16 | Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has… Affected: 13.1; 13.2 |
| CVE-2016-5118 | 9.8 | Jun 10 | The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote attackers to execute arbitrary code via a | (pipe) character at the start of a… Affected: 13.2 |
| CVE-2016-0749 | 9.8 | Jun 9 | The smartcard interaction in SPICE allows remote attackers to cause a denial of service (QEMU-KVM process crash) or possibly execute arbitrary code via vectors related to… Affected: 13.2 |
| CVE-2016-0718 | 9.8 | May 26 | Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed input document, which triggers a buffer overflow Affected: 13.1; 13.2 |
| CVE-2016-4544 | 9.8 | May 22 | The exif_process_TIFF_in_JPEG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 does not validate TIFF start data, which allows remote… Affected: 13.2 |
| CVE-2016-4346 | 9.8 | May 22 | Integer overflow in the str_pad function in ext/standard/string.c in PHP before 7.0.4 allows remote attackers to cause a denial of service or possibly have unspecified other… Affected: 13.2 |
| CVE-2016-1666 | 9.8 | May 14 | Multiple unspecified vulnerabilities in Google Chrome before 50.0.2661.94 allow attackers to cause a denial of service or possibly have other impact via unknown vectors Affected: 13.1 |
| CVE-2016-1662 | 9.8 | May 14 | extensions/renderer/gc_callback.cc in Google Chrome before 50.0.2661.94 does not prevent fallback execution once the Garbage Collection callback has started, which allows remote… Affected: 13.1 |
| CVE-2016-4024 | 9.8 | May 13 | Integer overflow in imlib2 before 1.4.9 on 32-bit platforms allows remote attackers to execute arbitrary code via large dimensions in an image, which triggers an out-of-bounds… Affected: 13.2 |
| CVE-2016-2099 | 9.8 | May 13 | Use-after-free vulnerability in validators/DTD/DTDScanner.cpp in Apache Xerces C++ 3.1.3 and earlier allows context-dependent attackers to have unspecified impact via an invalid… Affected: 13.2 |
| CVE-2015-8863 | 9.8 | May 6 | Off-by-one error in the tokenadd function in jv_parse.c in jq allows remote attackers to cause a denial of service (crash) via a long JSON-encoded number, which triggers a… Affected: 13.2 |
| CVE-2016-3074 | 9.8 | Apr 26 | Integer signedness error in GD Graphics Library 2.1.1 (aka libgd or libgd2) allows remote attackers to cause a denial of service (crash) or potentially execute arbitrary code via… Affected: 13.2 |
| CVE-2015-8779 | 9.8 | Apr 19 | Stack-based buffer overflow in the catopen function in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service… Affected: 13.2 |
| CVE-2015-8778 | 9.8 | Apr 19 | Integer overflow in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute… Affected: 13.2 |
| CVE-2014-9761 | 9.8 | Apr 19 | Multiple stack-based buffer overflows in the GNU C Library (aka glibc or libc6) before 2.23 allow context-dependent attackers to cause a denial of service (application crash) or… Affected: 13.2 |
| CVE-2015-7545 | 9.8 | Apr 13 | The (1) git-remote-ext and (2) unspecified other remote helper programs in Git before 2.3.10, 2.4.x before 2.4.10, 2.5.x before 2.5.4, and 2.6.x before 2.6.1 do not properly… Affected: 13.1; 13.2 |
| CVE-2016-4007 | 9.8 | Apr 13 | Multiple unspecified vulnerabilities in the obs-service-extract_file package before 0.3-5.1 in openSUSE Leap 42.1 and before 0.3-3.1 in openSUSE 13.2 allow attackers to execute… Affected: 13.2 |
| CVE-2016-2324 | 9.8 | Apr 8 | Integer overflow in Git before 2.7.4 allows remote attackers to execute arbitrary code via a (1) long filename or (2) many nested trees, which triggers a heap-based buffer… Affected: 13.2 |
| CVE-2016-2315 | 9.8 | Apr 8 | revision.c in git before 2.7.4 uses an incorrect integer data type, which allows remote attackers to execute arbitrary code via a (1) long filename or (2) many nested trees,… Affected: 13.2 |
| CVE-2016-2851 | 9.8 | Apr 7 | Integer overflow in proto.c in libotr before 4.1.1 on 64-bit platforms allows remote attackers to cause a denial of service (memory corruption and application crash) or execute… Affected: 13.2 |
| CVE-2016-1962 | 9.8 | Mar 13 | Use-after-free vulnerability in the mozilla::DataChannelConnection::Close function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to… Affected: 13.1 |
| CVE-2015-8805 | 9.8 | Feb 23 | The ecc_256_modq function in ecc-256.c in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its implementation of the P-256 NIST… Affected: 13.1; 13.2 |
| CVE-2015-8804 | 9.8 | Feb 23 | x86_64/ecc-384-modp.asm in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its implementation of the P-384 NIST elliptic curve, which… Affected: 13.1; 13.2 |
| CVE-2015-8803 | 9.8 | Feb 23 | The ecc_256_modp function in ecc-256.c in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its implementation of the P-256 NIST… Affected: 13.1; 13.2 |
| CVE-2016-1629 | 9.8 | Feb 21 | Google Chrome before 48.0.2564.116 allows remote attackers to bypass the Blink Same Origin Policy and a sandbox protection mechanism via unspecified vectors Affected: 13.1; 13.2 |
| CVE-2016-1946 | 9.8 | Jan 31 | The MoofParser::Metadata function in binding/MoofParser.cpp in libstagefright in Mozilla Firefox before 44.0 does not limit the size of read operations, which might allow remote… Affected: 13.1; 13.2 |
| CVE-2016-1944 | 9.8 | Jan 31 | The Buffer11::NativeBuffer11::map function in ANGLE, as used in Mozilla Firefox before 44.0, might allow remote attackers to cause a denial of service (memory corruption) or… Affected: 13.1; 13.2 |
| CVE-2016-1930 | 9.8 | Jan 31 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 44.0 and Firefox ESR 38.x before 38.6 allow remote attackers to cause a denial of service… Affected: 13.1; 13.2 |
| CVE-2015-1276 | 9.8 | Jul 23 | Use-after-free vulnerability in content/browser/indexed_db/indexed_db_backing_store.cc in the IndexedDB implementation in Google Chrome before 44.0.2403.89 allows remote attackers… Affected: 13.1; 13.2 |
| CVE-2014-1532 | 9.8 | Apr 30 | Use-after-free vulnerability in the nsHostResolver::ConditionallyRefreshRecord function in libxul.so in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird… Affected: 11.4; 12.3; 13.1 |
| CVE-2014-1524 | 9.8 | Apr 30 | The nsXBLProtoImpl::InstallImplementation function in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 does not… Affected: 11.4; 12.3; 13.1 |
| CVE-2014-1514 | 9.8 | Mar 19 | vmtypedarrayobject.cpp in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 does not validate the length of the… Affected: 11.4; 12.3; 13.1 |
| CVE-2014-1511 | 9.8 | Mar 19 | Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allow remote attackers to bypass the popup blocker via unspecified… Affected: 11.4; 12.3; 13.1 |
| CVE-2014-1510 | 9.8 | Mar 19 | The Web IDL implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to execute… Affected: 11.4; 12.3; 13.1 |
| CVE-2014-1493 | 9.8 | Mar 19 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allow… Affected: 11.4; 12.3; 13.1 |
| CVE-2014-2323 | 9.8 | Mar 14 | SQL injection vulnerability in mod_mysql_vhost.c in lighttpd before 1.4.35 allows remote attackers to execute arbitrary SQL commands via the host name, related to… Affected: 11.4; 12.3; 13.1 |
| CVE-2014-1486 | 9.8 | Feb 6 | Use-after-free vulnerability in the imgRequestProxy function in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24… Affected: 11.4; 12.3; 13.1 |
The 500 most important CVEs for this product (exploited first, then by severity)