OP
Product
Opensuse
On CISA KEVExploited in the wildRansomware-linked
1,456
CVEs
45
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 86High 271Medium 142Low 1
Watch
Add Opensuse to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2014-1487 | 7.5 | Feb 6 | The Web workers implementation in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 allows remote attackers to bypass… Affected: 11.4; 12.3; 13.1 |
| CVE-2014-1481 | 7.5 | Feb 6 | Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 allow remote attackers to bypass intended restrictions on window… Affected: 11.4; 12.3; 13.1 |
| CVE-2014-1479 | 7.5 | Feb 6 | The System Only Wrapper (SOW) implementation in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 does not prevent… Affected: 11.4; 12.3; 13.1 |
| CVE-2013-4508 | 7.5 | Nov 8 | lighttpd before 1.4.34, when SNI is enabled, configures weak SSL ciphers, which makes it easier for remote attackers to hijack sessions by inserting packets into the client-server… Affected: 12.2; 12.3; 13.1 |
| CVE-2012-1610 | 7.5 | Jun 5 | Integer overflow in the GetEXIFProperty function in magick/property.c in ImageMagick before 6.7.6-4 allows remote attackers to cause a denial of service (out-of-bounds read) via a… Affected: 11.4; 12.1 |
| CVE-2010-0013 | 7.5 | Jan 9 | Directory traversal vulnerability in slp.c in the MSN protocol plugin in libpurple in Pidgin 2.6.4 and Adium 1.3.8 allows remote attackers to read arbitrary files via a Affected: 11.0 through 11.2 |
| CVE-2009-1699 | 7.5 | Jun 10 | The XSL stylesheet implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle XML… Affected: 11.2; 11.3 |
| CVE-2009-0949 | 7.5 | Jun 9 | The ippReadIO function in cups/ipp.c in cupsd in CUPS before 1.3.10 does not properly initialize memory for IPP request packets, which allows remote attackers to cause a denial of… Affected: 10.3 |
| CVE-2008-5183 | 7.5 | Nov 21 | cupsd in CUPS 1.3.9 and earlier allows local users, and possibly remote attackers, to cause a denial of service (daemon crash) by adding a large number of RSS Subscriptions, which… Affected: 11.0 |
| CVE-2008-4577 | 7.5 | Oct 15 | The ACL plugin in Dovecot before 1.1.4 treats negative access rights as if they are positive access rights, which allows attackers to bypass intended access restrictions Affected: 10.3-11.1 |
| CVE-2008-3188 | 7.5 | Jul 22 | libxcrypt in SUSE openSUSE 11.0 uses the DES algorithm when the configuration specifies the MD5 algorithm, which makes it easier for attackers to conduct brute-force attacks… Affected: 11.0 |
| CVE-2008-0063 | 7.5 | Mar 19 | The Kerberos 4 support in KDC in MIT Kerberos 5 (krb5kdc) does not properly clear the unused portion of a buffer when generating an error message, which might allow remote… Affected: 10.2; 10.3 |
| CVE-2016-1942 | 7.4 | Jan 31 | Mozilla Firefox before 44.0 allows user-assisted remote attackers to spoof a trailing substring in the address bar by leveraging a user's paste of a (1) wyciwyg: URI or (2)… Affected: 13.1; 13.2 |
| CVE-2014-0224 | 7.4 | Jun 5 | OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages, which allows man-in-the-middle attackers… Affected: 13.1; 13.2 |
| CVE-2015-8614 | 7.3 | Apr 11 | Multiple stack-based buffer overflows in the (1) conv_jistoeuc, (2) conv_euctojis, and (3) conv_sjistoeuc functions in codeconv.c in Claws Mail before 3.13.1 allow remote… Affected: 13.1; 13.2 |
| CVE-2014-4608 | 7.3 | Jul 3 | Multiple integer overflows in the lzo1x_decompress_safe function in lib/lzo/lzo1x_decompress_safe.c in the LZO decompressor in the Linux kernel before 3.15.2 allow… Affected: 11.4 |
| CVE-2010-4226 | 7.2 | Feb 6 | cpio, as used in build 2007.05.10, 2010.07.28, and possibly other versions, allows remote attackers to overwrite arbitrary files via a symlink within an RPM package archive Affected: 2007.05.10; 2010.07.28 |
| CVE-2016-2150 | 7.1 | Jun 9 | SPICE allows local guest OS users to read from or write to arbitrary host memory locations via crafted primary surface parameters, a similar issue to CVE-2015-5261 Affected: 13.2 |
| CVE-2009-3939 | 7.1 | Nov 16 | The poll_mode_io file for the megaraid_sas driver in the Linux kernel 2.6.31.6 and earlier has world-writable permissions, which allows local users to change the I/O mode of the… Affected: 11.0; 11.1; 11.2 |
| CVE-2010-1437 | 7.0 | May 7 | Race condition in the find_keyring_by_name function in security/keys/keyring.c in the Linux kernel 2.6.34-rc5 and earlier allows local users to cause a denial of service (memory… Affected: 11.1 |
| CVE-2009-3547 | 7.0 | Nov 4 | Multiple race conditions in fs/pipe.c in the Linux kernel before 2.6.32-rc6 allow local users to cause a denial of service (NULL pointer dereference and system crash) or gain… Affected: 11.0; 11.2 |
The 500 most important CVEs for this product (exploited first, then by severity)