OP
Product
Opensuse
16
CVEs
0
On KEV
5.9
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 1Low 0
Watch
Add Opensuse to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2014-4616 | 5.9 | Aug 24 | Array index error in the scanstring function in the _json module in Python 2.7 through 3.5 and simplejson before 2.6.1 allows context-dependent attackers to read arbitrary process… Affected: 12.3 |
| CVE-2014-0481 | – | Aug 26 | The default configuration for the file upload handling system in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3 uses a sequential… Affected: 12.3 |
| CVE-2014-3004 | – | Jun 11 | The default configuration for the Xerces SAX Parser in Castor before 1.3.3 allows context-dependent attackers to conduct XML External Entity (XXE) attacks via a crafted XML… Affected: 12.3 |
| CVE-2014-1542 | – | Jun 11 | Buffer overflow in the Speex resampler in the Web Audio subsystem in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrary code via vectors related to a crafted… Affected: 12.3 |
| CVE-2014-1528 | – | Apr 30 | The sse2_composite_src_x888_8888 function in Pixman, as used in Cairo in Mozilla Firefox 28.0 and SeaMonkey 2.25 on Windows, allows remote attackers to execute arbitrary code or… Affected: 12.3 |
| CVE-2014-1502 | – | Mar 19 | The (1) WebGL.compressedTexImage2D and (2) WebGL.compressedTexSubImage2D functions in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to bypass the… Affected: 11.4; 12.3 |
| CVE-2014-1500 | – | Mar 19 | Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to cause a denial of service (resource consumption and application hang) via onbeforeunload events… Affected: 11.4; 12.3 |
| CVE-2014-1499 | – | Mar 19 | Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to spoof the domain name in the WebRTC (1) camera or (2) microphone permission prompt by triggering… Affected: 11.4; 12.3 |
| CVE-2014-1498 | – | Mar 19 | The crypto.generateCRMFRequest method in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 does not properly validate a certain key type, which allows remote attackers to… Affected: 11.4; 12.3 |
| CVE-2014-1494 | – | Mar 19 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to cause a denial of service (memory… Affected: 11.4; 12.3 |
| CVE-2014-0081 | – | Feb 20 | Multiple cross-site scripting (XSS) vulnerabilities in actionview/lib/action_view/helpers/number_helper.rb in Ruby on Rails before 3.2.17, 4.0.x before 4.0.3, and 4.1.x before… Affected: 12.3 |
| CVE-2011-4093 | – | Feb 10 | Integer overflow in inc/server.hpp in libnet6 (aka net6) before 1.3.14 might allow remote attackers to hijack connections and gain privileges as other users by making a large… Affected: 11.4 |
| CVE-2014-1489 | – | Feb 6 | Mozilla Firefox before 27.0 does not properly restrict access to about:home buttons by script on other pages, which allows user-assisted remote attackers to cause a denial of… Affected: 12.3 |
| CVE-2014-1484 | – | Feb 6 | Mozilla Firefox before 27.0 on Android 4.2 and earlier creates system-log entries containing profile paths, which allows attackers to obtain sensitive information via a crafted… Affected: 12.3 |
| CVE-2013-5611 | – | Dec 11 | Mozilla Firefox before 26.0 does not properly remove the Application Installation doorhanger, which makes it easier for remote attackers to spoof a Web App installation site by… Affected: 11.4; 12.3 |
| CVE-2012-0867 | – | Jul 18 | PostgreSQL 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 truncates the common name to only 32 characters when verifying SSL certificates, which allows remote… Affected: 12.2 |
Showing 16