SO
Product
Studio Onsite
On CISA KEVExploited in the wild
22
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 2Medium 6Low 0
Watch
Add Studio Onsite to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2014-7169 In wildKEV | 9.8 | Sep 25 | GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Affected: 1.3 |
| CVE-2014-6271 In wildKEV | 9.8 | Sep 24 | GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Affected: 1.3 |
| CVE-2014-9846 | 9.8 | Mar 20 | Buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact Affected: 1.3 |
| CVE-2016-5118 | 9.8 | Jun 10 | The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote attackers to execute arbitrary code via a | (pipe) character at the start of a… Affected: 1.3 |
| CVE-2016-0718 | 9.8 | May 26 | Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed input document, which triggers a buffer overflow Affected: 1.3 |
| CVE-2011-0467 | 8.8 | Jun 7 | A vulnerability in the listing of available software of SUSE Studio Onsite, SUSE Studio Onsite 1.1 Appliance allows authenticated users to execute arbitrary SQL statements via SQL… Affected: before 1.0.3-0.18.1 |
| CVE-2017-14807 | 8.1 | Jan 27 | An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in susestudio-ui-server of SUSE Studio onsite allows remote attackers with… Affected: 1.3 |
| CVE-2017-14806 | 5.9 | Jan 27 | A Improper Certificate Validation vulnerability in susestudio-common of SUSE Studio onsite allows remote attackers to MITM connections to the repositories, which allows the… Affected: 1.3 |
| CVE-2014-9845 | 5.5 | Mar 20 | The ReadDIBImage function in coders/dib.c in ImageMagick allows remote attackers to cause a denial of service (crash) via a corrupted dib file Affected: 1.3 |
| CVE-2014-9844 | 5.5 | Mar 20 | The ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted image file Affected: 1.3 |
| CVE-2016-2318 | 5.5 | Feb 3 | GraphicsMagick 1.3.23 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted SVG file, related to the (1) DrawImage function in… Affected: 1.3 |
| CVE-2016-2317 | 5.5 | Feb 3 | Multiple buffer overflows in GraphicsMagick 1.3.23 allow remote attackers to cause a denial of service (crash) via a crafted SVG file, related to the (1) TracePoint function in… Affected: 1.3 |
| CVE-2015-8808 | 5.5 | Jul 13 | The DecodeImage function in coders/gif.c in GraphicsMagick 1.3.18 allows remote attackers to cause a denial of service (uninitialized memory access) via a crafted GIF file Affected: 1.3 |
| CVE-2015-1283 | – | Jul 23 | Multiple integer overflows in the XML_GetBuffer function in Expat through 2.1.0, as used in Google Chrome before 44.0.2403.89 and other products, allow remote attackers to cause a… Affected: 1.3 |
| CVE-2011-4195 | – | Apr 16 | kiwi before 4.98.05, as used in SUSE Studio Onsite 1.2 before 1.2.1 and SUSE Studio Extension for System z 1.2 before 1.2.1, allows attackers to execute arbitrary commands via… Affected: 1.2 |
| CVE-2011-4193 | – | Apr 16 | Cross-site scripting (XSS) vulnerability in the overlay files tab in SUSE Studio Onsite 1.2 before 1.2.1 and SUSE Studio Extension for System z 1.2 before 1.2.1 allows remote… Affected: 1.2 |
| CVE-2011-4192 | – | Apr 16 | kiwi before 4.85.1, as used in SUSE Studio Onsite 1.2 before 1.2.1 and SUSE Studio Extension for System z 1.2 before 1.2.1, allows attackers to execute arbitrary commands as… Affected: 1.2 |
| CVE-2011-3180 | – | Apr 16 | kiwi before 4.98.08, as used in SUSE Studio Onsite 1.2 before 1.2.1 and SUSE Studio Extension for System z 1.2 before 1.2.1, allows attackers to execute arbitrary commands via… Affected: 1.2 |
| CVE-2013-3712 | – | Feb 26 | SUSE Studio Onsite 1.3.x before 1.3.6 and SUSE Studio Extension for System z 1.3 uses "static" secret tokens, which has unspecified impact and vectors Affected: 1.3; 1.3.1; 1.3.2; 1.3.3; 1.3.4; 1.3.5 |
| CVE-2013-3709 | – | Dec 23 | WebYaST 1.3 uses weak permissions for config/initializers/secret_token.rb, which allows local users to gain privileges by reading the Rails secret token from this file Affected: 1.3 |
| CVE-2013-4547 | – | Nov 23 | nginx 0.8.41 through 1.4.3 and 1.5.x before 1.5.7 allows remote attackers to bypass intended restrictions via an unescaped space character in a URI Affected: 1.3 |
| CVE-2011-4315 | – | Dec 8 | Heap-based buffer overflow in compression-pointer processing in core/ngx_resolver.c in nginx before 1.0.10 allows remote resolvers to cause a denial of service (daemon crash) or… Affected: 1.2 |
Showing 22