OP
Product
Opensuse
On CISA KEVExploited in the wildRansomware-linked
1,456
CVEs
45
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 86High 271Medium 142Low 1
Watch
Add Opensuse to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-4133 | 8.8 | Jun 16 | Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has… Affected: 13.1; 13.2 |
| CVE-2016-4132 | 8.8 | Jun 16 | Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has… Affected: 13.1; 13.2 |
| CVE-2016-4131 | 8.8 | Jun 16 | Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has… Affected: 13.1; 13.2 |
| CVE-2016-4130 | 8.8 | Jun 16 | Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has… Affected: 13.1; 13.2 |
| CVE-2016-4129 | 8.8 | Jun 16 | Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has… Affected: 13.1; 13.2 |
| CVE-2016-4128 | 8.8 | Jun 16 | Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has… Affected: 13.1; 13.2 |
| CVE-2016-4127 | 8.8 | Jun 16 | Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has… Affected: 13.1; 13.2 |
| CVE-2016-4125 | 8.8 | Jun 16 | Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has… Affected: 13.1; 13.2 |
| CVE-2016-4124 | 8.8 | Jun 16 | Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has… Affected: 13.1; 13.2 |
| CVE-2016-4123 | 8.8 | Jun 16 | Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has… Affected: 13.1; 13.2 |
| CVE-2016-4122 | 8.8 | Jun 16 | Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has… Affected: 13.1; 13.2 |
| CVE-2016-2834 | 8.8 | Jun 13 | Mozilla Network Security Services (NSS) before 3.23, as used in Mozilla Firefox before 47.0, allows remote attackers to cause a denial of service (memory corruption and… Affected: 13.1; 13.2 |
| CVE-2016-2831 | 8.8 | Jun 13 | Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 do not ensure that the user approves the fullscreen and pointerlock settings, which allows remote attackers to cause a… Affected: 13.1; 13.2 |
| CVE-2016-2828 | 8.8 | Jun 13 | Use-after-free vulnerability in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allows remote attackers to execute arbitrary code via WebGL content that triggers… Affected: 13.1; 13.2 |
| CVE-2016-2824 | 8.8 | Jun 13 | The TSymbolTableLevel class in ANGLE, as used in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 on Windows, allows remote attackers to cause a denial of service… Affected: 13.1; 13.2 |
| CVE-2016-2819 | 8.8 | Jun 13 | Heap-based buffer overflow in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allows remote attackers to execute arbitrary code via foreign-context HTML5 fragments,… Affected: 13.1; 13.2 |
| CVE-2016-2818 | 8.8 | Jun 13 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allow remote attackers to cause a denial of service… Affected: 13.1; 13.2 |
| CVE-2016-2815 | 8.8 | Jun 13 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 allow remote attackers to cause a denial of service (memory corruption and application… Affected: 13.1; 13.2 |
| CVE-2016-2335 | 8.8 | Jun 7 | The CInArchive::ReadFileItem method in Archive/Udf/UdfIn.cpp in 7zip 9.20 and 15.05 beta and p7zip allows remote attackers to cause a denial of service (out-of-bounds read) or… Affected: 13.2 |
| CVE-2016-1703 | 8.8 | Jun 5 | Multiple unspecified vulnerabilities in Google Chrome before 51.0.2704.79 allow attackers to cause a denial of service or possibly have other impact via unknown vectors Affected: 13.2 |
| CVE-2016-1701 | 8.8 | Jun 5 | The Autofill implementation in Google Chrome before 51.0.2704.79 mishandles the interaction between field updates and JavaScript code that triggers a frame deletion, which allows… Affected: 13.2 |
| CVE-2016-1697 | 8.8 | Jun 5 | The FrameLoader::startLoad function in WebKit/Source/core/loader/FrameLoader.cpp in Blink, as used in Google Chrome before 51.0.2704.79, does not prevent frame navigations during… Affected: 13.2 |
| CVE-2016-1696 | 8.8 | Jun 5 | The extensions subsystem in Google Chrome before 51.0.2704.79 does not properly restrict bindings access, which allows remote attackers to bypass the Same Origin Policy via… Affected: 13.2 |
| CVE-2016-1695 | 8.8 | Jun 5 | Multiple unspecified vulnerabilities in Google Chrome before 51.0.2704.63 allow attackers to cause a denial of service or possibly have other impact via unknown vectors Affected: 13.2 |
| CVE-2016-1681 | 8.8 | Jun 5 | Heap-based buffer overflow in the opj_j2k_read_SPCod_SPCoc function in j2k.c in OpenJPEG, as used in PDFium in Google Chrome before 51.0.2704.63, allows remote attackers to cause… Affected: 13.2 |
| CVE-2016-1680 | 8.8 | Jun 5 | Use-after-free vulnerability in ports/SkFontHost_FreeType.cpp in Skia, as used in Google Chrome before 51.0.2704.63, allows remote attackers to cause a denial of service (heap… Affected: 13.2 |
| CVE-2016-1679 | 8.8 | Jun 5 | The ToV8Value function in content/child/v8_value_converter_impl.cc in the V8 bindings in Google Chrome before 51.0.2704.63 does not properly restrict use of getters and setters,… Affected: 13.2 |
| CVE-2016-1678 | 8.8 | Jun 5 | objects.cc in Google V8 before 5.0.71.32, as used in Google Chrome before 51.0.2704.63, does not properly restrict lazy deoptimization, which allows remote attackers to cause a… Affected: 13.2 |
| CVE-2016-1676 | 8.8 | Jun 5 | extensions/renderer/resources/binding.js in the extension bindings in Google Chrome before 51.0.2704.63 does not properly use prototypes, which allows remote attackers to bypass… Affected: 13.2 |
| CVE-2016-1675 | 8.8 | Jun 5 | Blink, as used in Google Chrome before 51.0.2704.63, allows remote attackers to bypass the Same Origin Policy by leveraging the mishandling of Document reattachment during… Affected: 13.2 |
| CVE-2016-1674 | 8.8 | Jun 5 | The extensions subsystem in Google Chrome before 51.0.2704.63 allows remote attackers to bypass the Same Origin Policy via unspecified vectors Affected: 13.2 |
| CVE-2016-1673 | 8.8 | Jun 5 | Blink, as used in Google Chrome before 51.0.2704.63, allows remote attackers to bypass the Same Origin Policy via unspecified vectors Affected: 13.2 |
| CVE-2016-1672 | 8.8 | Jun 5 | The ModuleSystem::RequireForJsInner function in extensions/renderer/module_system.cc in the extension bindings in Google Chrome before 51.0.2704.63 mishandles properties, which… Affected: 13.2 |
| CVE-2016-4343 | 8.8 | May 22 | The phar_make_dirstream function in ext/phar/dirstream.c in PHP before 5.6.18 and 7.x before 7.0.3 mishandles zero-size ././@LongLink files, which allows remote attackers to cause… Affected: 13.2 |
| CVE-2016-1669 | 8.8 | May 14 | The Zone::New function in zone.cc in Google V8 before 5.0.71.47, as used in Google Chrome before 50.0.2661.102, does not properly determine when to expand certain memory… Affected: 13.1 |
| CVE-2016-1668 | 8.8 | May 14 | The forEachForBinding function in WebKit/Source/bindings/core/v8/Iterable.h in the V8 bindings in Blink, as used in Google Chrome before 50.0.2661.102, uses an improper creation… Affected: 13.1 |
| CVE-2016-1667 | 8.8 | May 14 | The TreeScope::adoptIfNeeded function in WebKit/Source/core/dom/TreeScope.cpp in the DOM implementation in Blink, as used in Google Chrome before 50.0.2661.102, does not prevent… Affected: 13.1 |
| CVE-2016-1663 | 8.8 | May 14 | The SerializedScriptValue::transferArrayBuffers function in WebKit/Source/bindings/core/v8/SerializedScriptValue.cpp in the V8 bindings in Blink, as used in Google Chrome before… Affected: 13.1 |
| CVE-2016-1660 | 8.8 | May 14 | Blink, as used in Google Chrome before 50.0.2661.94, mishandles assertions in the WTF::BitArray and WTF::double_conversion::Vector classes, which allows remote attackers to cause… Affected: 13.1 |
| CVE-2016-2807 | 8.8 | Apr 30 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 46.0, Firefox ESR 38.x before 38.8, and Firefox ESR 45.x before 45.1 allow remote attackers to… Affected: 13.1; 13.2 |
| CVE-2016-2806 | 8.8 | Apr 30 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 46.0 and Firefox ESR 45.x before 45.1 allow remote attackers to cause a denial of service… Affected: 13.1; 13.2 |
| CVE-2014-9765 | 8.8 | Apr 19 | Buffer overflow in the main_get_appheader function in xdelta3-main.h in xdelta3 before 3.0.9 allows remote attackers to execute arbitrary code via a crafted input file Affected: 13.1; 13.2 |
| CVE-2016-2313 | 8.8 | Apr 13 | auth_login.php in Cacti before 0.8.8g allows remote authenticated users who use web authentication to bypass intended access restrictions by logging in as a user not in the cacti… Affected: 13.1; 13.2 |
| CVE-2016-3982 | 8.8 | Apr 13 | Off-by-one error in the bmp_rle4_fread function in pngxrbmp.c in OptiPNG before 0.7.6 allows remote attackers to cause a denial of service (out-of-bounds read or write access and… Affected: 13.2 |
| CVE-2016-3630 | 8.8 | Apr 13 | The binary delta decoder in Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a (1) clone, (2) push, or (3) pull command, related to (a) a list sizing… Affected: 13.2 |
| CVE-2016-3069 | 8.8 | Apr 13 | Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a crafted name when converting a Git repository Affected: 13.2 |
| CVE-2016-3068 | 8.8 | Apr 13 | Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a crafted git ext:: URL when cloning a subrepository Affected: 13.2 |
| CVE-2016-3679 | 8.8 | Mar 29 | Multiple unspecified vulnerabilities in Google V8 before 4.9.385.33, as used in Google Chrome before 49.0.2623.108, allow attackers to cause a denial of service or possibly have… Affected: 13.1 |
| CVE-2016-1650 | 8.8 | Mar 29 | The PageCaptureSaveAsMHTMLFunction::ReturnFailure function in browser/extensions/api/page_capture/page_capture_api.cc in Google Chrome before 49.0.2623.108 allows attackers to… Affected: 13.1 |
| CVE-2016-1649 | 8.8 | Mar 29 | The Program::getUniformInternal function in Program.cpp in libANGLE, as used in Google Chrome before 49.0.2623.108, does not properly handle a certain data-type mismatch, which… Affected: 13.1 |
The 500 most important CVEs for this product (exploited first, then by severity)