Login Request a demo
OP
Vendor
Opensuse Project
9 products with CVEs on record
109
CVEs
0
On KEV
0
New 30D
Products
LE
Leap
Opensuse Project
9.8
35 CVEs0 on KEV0 new
OP
Opensuse
Opensuse Project
5.9
16 CVEs0 on KEV0 new
SL
Suse Linux Enterprise Desktop
Opensuse Project
9.8
13 CVEs0 on KEV0 new
SL
Suse Linux Enterprise Software Development Kit
Opensuse Project
9.8
13 CVEs0 on KEV0 new
SL
Suse Linux Enterprise Server
Opensuse Project
9.8
12 CVEs0 on KEV0 new
SL
Suse Linux Enterprise Workstation Extension
Opensuse Project
9.8
11 CVEs0 on KEV0 new
SL
Suse Linux Enterprise Debuginfo
Opensuse Project
9.8
7 CVEs0 on KEV0 new
SO
Studio Onsite
Opensuse Project
9.8
1 CVEs0 on KEV0 new
SL
Suse Linux Enterprise Server For Raspberry PI
Opensuse Project
7.5
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2017-17806
LE
Leap
Opensuse Project
7.8
1%
Dec 20The HMAC implementation (crypto/hmac.c) in the Linux kernel before 4.14.8 does not validate that the underlying cryptographic hash algorithm is unkeyed, allowing a local attacker…
CVE-2017-17805
LE
Leap
Opensuse Project
7.8
0%
Dec 20The Salsa20 encryption algorithm in the Linux kernel before 4.14.8 does not correctly handle zero-length inputs, allowing a local attacker able to use the AF_ALG-based skcipher…
CVE-2016-1254
LE
Leap
Opensuse Project
7.5
3%
Dec 5Tor before 0.2.8.12 might allow remote attackers to cause a denial of service (client crash) via a crafted hidden service descriptor
CVE-2015-3138
LE
Leap
Opensuse Project
7.5
2%
Sep 28print-wb.c in tcpdump before 4.7.4 allows remote attackers to cause a denial of service (segmentation fault and process crash)
CVE-2014-4616
OP
Opensuse
Opensuse Project
5.9
8%
Aug 24Array index error in the scanstring function in the _json module in Python 2.7 through 3.5 and simplejson before 2.6.1 allows context-dependent attackers to read arbitrary process…
CVE-2015-3405
SL
Suse Linux Enterprise Desktop
Opensuse Project
7.5
5%
Aug 9ntp-keygen in ntp 4.2.8px before 4.2.8p2-RC2 and 4.3.x before 4.3.12 does not generate MD5 keys with sufficient entropy on big endian machines when the lowest order byte of the…
CVE-2015-5203
LE
Leap
Opensuse Project
5.5
2%
Aug 2Double free vulnerability in the jasper_image_stop_load function in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via a crafted JPEG 2000 image file
CVE-2015-5221
LE
Leap
Opensuse Project
5.5
2%
Jul 25Use-after-free vulnerability in the mif_process_cmpt function in libjasper/mif/mif_cod.c in the JasPer JPEG-2000 library before 1.900.2 allows remote attackers to cause a denial…
CVE-2016-9961
LE
Leap
Opensuse Project
9.8
4%
Jun 6game-music-emu before 0.6.1 mishandles unspecified integer values
CVE-2016-9960
LE
Leap
Opensuse Project
5.5
1%
Jun 6game-music-emu before 0.6.1 allows local users to cause a denial of service (divide by zero and process crash)
CVE-2016-9959
LE
Leap
Opensuse Project
7.8
2%
Apr 12game-music-emu before 0.6.1 allows remote attackers to generate out of bounds 8-bit values
CVE-2016-9958
LE
Leap
Opensuse Project
7.8
2%
Apr 12game-music-emu before 0.6.1 allows remote attackers to write to arbitrary memory locations
CVE-2016-9957
LE
Leap
Opensuse Project
7.8
2%
Apr 12Stack-based buffer overflow in game-music-emu before 0.6.1
CVE-2017-6542
LE
Leap
Opensuse Project
9.8
22%
Mar 27The ssh_agent_channel_data function in PuTTY before 0.68 allows remote attackers to have unspecified impact via a large length value in an agent protocol message and leveraging…
CVE-2015-8010
LE
Leap
Opensuse Project
6.1
1%
Mar 27Cross-site scripting (XSS) vulnerability in the Classic-UI with the CSV export link and pagination feature in Icinga before 1.14 allows remote attackers to inject arbitrary web…
CVE-2016-7797
LE
Leap
Opensuse Project
7.5
3%
Mar 24Pacemaker before 1.1.15, when using pacemaker remote, might allow remote attackers to cause a denial of service (node disconnection) via an unauthenticated connection
CVE-2016-9556
LE
Leap
Opensuse Project
5.5
2%
Mar 23The IsPixelGray function in MagickCore/pixel-accessor.h in ImageMagick 7.0.3-8 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted image…
CVE-2016-10048
LE
Leap
Opensuse Project
7.5
7%
Mar 23Directory traversal vulnerability in magick/module.c in ImageMagick 6.9.4-7 allows remote attackers to load arbitrary modules via unspecified vectors
CVE-2014-9851
LE
Leap
Opensuse Project
7.5
4%
Mar 20ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (application crash)
CVE-2014-9850
LE
Leap
Opensuse Project
7.5
4%
Mar 20Logic error in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (resource consumption)
CVE-2014-9849
LE
Leap
Opensuse Project
7.5
4%
Mar 20The png coder in ImageMagick allows remote attackers to cause a denial of service (crash)
CVE-2014-9848
LE
Leap
Opensuse Project
7.5
4%
Mar 20Memory leak in ImageMagick allows remote attackers to cause a denial of service (memory consumption)
CVE-2014-9847
SO
Studio Onsite
Opensuse Project
9.8
5%
Mar 20The jng decoder in ImageMagick 6.8.9.9 allows remote attackers to have an unspecified impact
CVE-2014-9846
LE
Leap
Opensuse Project
9.8
5%
Mar 20Buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact
CVE-2014-9845
SL
Suse Linux Enterprise Workstation Extension
Opensuse Project
5.5
2%
Mar 20The ReadDIBImage function in coders/dib.c in ImageMagick allows remote attackers to cause a denial of service (crash) via a corrupted dib file
CVE-2014-9844
SL
Suse Linux Enterprise Desktop
Opensuse Project
5.5
2%
Mar 20The ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted image file
CVE-2014-9843
LE
Leap
Opensuse Project
9.8
4%
Mar 20The DecodePSDPixels function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors
CVE-2014-9842
SL
Suse Linux Enterprise Server
Opensuse Project
7.5
4%
Mar 20Memory leak in the ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors
CVE-2014-9841
LE
Leap
Opensuse Project
9.8
4%
Mar 20The ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors, related to "throwing of exceptions."
CVE-2014-9853
SL
Suse Linux Enterprise Software Development Kit
Opensuse Project
5.5
2%
Mar 17Memory leak in coders/rle.c in ImageMagick allows remote attackers to cause a denial of service (memory consumption) via a crafted rle file
CVE-2017-5938
LE
Leap
Opensuse Project
6.1
1%
Mar 15Cross-site scripting (XSS) vulnerability in the nav_path function in lib/viewvc.py in ViewVC before 1.0.14 and 1.1.x before 1.1.26 allows remote attackers to inject arbitrary web…
CVE-2016-10069
LE
Leap
Opensuse Project
5.5
2%
Mar 2coders/mat.c in ImageMagick before 6.9.4-5 allows remote attackers to cause a denial of service (application crash) via a mat file with an invalid number of frames
CVE-2016-10068
LE
Leap
Opensuse Project
5.5
2%
Mar 2The MSL interpreter in ImageMagick before 6.9.6-4 allows remote attackers to cause a denial of service (segmentation fault and application crash) via a crafted XML file
CVE-2016-9436
LE
Leap
Opensuse Project
6.5
3%
Jan 20parsetagx.c in w3m before 0.5.3+git20161009 does not properly initialize values, which allows remote attackers to crash the application via a crafted html file, related to a <i>…
CVE-2016-9435
LE
Leap
Opensuse Project
6.5
3%
Jan 20The HTMLtagproc1 function in file.c in w3m before 0.5.3+git20161009 does not properly initialize values, which allows remote attackers to crash the application via a crafted html…
CVE-2016-5317
LE
Leap
Opensuse Project
6.5
2%
Jan 20Buffer overflow in the PixarLogDecode function in libtiff.so in the PixarLogDecode function in libtiff 4.0.6 and earlier, as used in GNOME nautilus, allows attackers to cause a…
CVE-2016-5316
LE
Leap
Opensuse Project
6.5
2%
Jan 20Out-of-bounds read in the PixarLogCleanup function in tif_pixarlog.c in libtiff 4.0.6 and earlier allows remote attackers to crash the application by sending a crafted TIFF image…
CVE-2015-5218
LE
Leap
Opensuse Project
–
1%
Nov 9Buffer overflow in text-utils/colcrt.c in colcrt in util-linux before 2.27 allows local users to cause a denial of service (crash) via a crafted file, related to the page global…
CVE-2014-0481
OP
Opensuse
Opensuse Project
–
2%
Aug 26The default configuration for the file upload handling system in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3 uses a sequential…
CVE-2014-4258
SL
Suse Linux Enterprise Desktop
Opensuse Project
–
4%
Jul 17Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier and 5.6.17 and earlier allows remote authenticated users to affect confidentiality,…
CVE-2014-3004
OP
Opensuse
Opensuse Project
–
9%
Jun 11The default configuration for the Xerces SAX Parser in Castor before 1.3.3 allows context-dependent attackers to conduct XML External Entity (XXE) attacks via a crafted XML…
CVE-2014-1542
OP
Opensuse
Opensuse Project
–
5%
Jun 11Buffer overflow in the Speex resampler in the Web Audio subsystem in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrary code via vectors related to a crafted…
CVE-2014-1528
OP
Opensuse
Opensuse Project
–
6%
Apr 30The sse2_composite_src_x888_8888 function in Pixman, as used in Cairo in Mozilla Firefox 28.0 and SeaMonkey 2.25 on Windows, allows remote attackers to execute arbitrary code or…
CVE-2014-1502
OP
Opensuse
Opensuse Project
–
1%
Mar 19The (1) WebGL.compressedTexImage2D and (2) WebGL.compressedTexSubImage2D functions in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to bypass the…
CVE-2014-1500
OP
Opensuse
Opensuse Project
–
4%
Mar 19Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to cause a denial of service (resource consumption and application hang) via onbeforeunload events…
CVE-2014-1499
OP
Opensuse
Opensuse Project
–
2%
Mar 19Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to spoof the domain name in the WebRTC (1) camera or (2) microphone permission prompt by triggering…
CVE-2014-1498
OP
Opensuse
Opensuse Project
–
2%
Mar 19The crypto.generateCRMFRequest method in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 does not properly validate a certain key type, which allows remote attackers to…
CVE-2014-1494
OP
Opensuse
Opensuse Project
–
5%
Mar 19Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to cause a denial of service (memory…
CVE-2014-0081
OP
Opensuse
Opensuse Project
–
4%
Feb 20Multiple cross-site scripting (XSS) vulnerabilities in actionview/lib/action_view/helpers/number_helper.rb in Ruby on Rails before 3.2.17, 4.0.x before 4.0.3, and 4.1.x before…
CVE-2011-4093
OP
Opensuse
Opensuse Project
–
2%
Feb 10Integer overflow in inc/server.hpp in libnet6 (aka net6) before 1.3.14 might allow remote attackers to hijack connections and gain privileges as other users by making a large…
CVE-2014-1489
OP
Opensuse
Opensuse Project
–
2%
Feb 6Mozilla Firefox before 27.0 does not properly restrict access to about:home buttons by script on other pages, which allows user-assisted remote attackers to cause a denial of…
CVE-2014-1484
OP
Opensuse
Opensuse Project
–
2%
Feb 6Mozilla Firefox before 27.0 on Android 4.2 and earlier creates system-log entries containing profile paths, which allows attackers to obtain sensitive information via a crafted…
CVE-2013-5611
OP
Opensuse
Opensuse Project
–
2%
Dec 11Mozilla Firefox before 26.0 does not properly remove the Application Installation doorhanger, which makes it easier for remote attackers to spoof a Web App installation site by…
CVE-2012-0867
OP
Opensuse
Opensuse Project
–
2%
Jul 18PostgreSQL 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 truncates the common name to only 32 characters when verifying SSL certificates, which allows remote…