Opensuse Project vulnerabilities
54 vulnerabilities
Known vulnerabilities in Opensuse Project products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 9 products.
Products
9- Leap35 vulnerabilities
- Opensuse16 vulnerabilities
- Suse Linux Enterprise Desktop13 vulnerabilities
- Suse Linux Enterprise Software Development Kit13 vulnerabilities
- Suse Linux Enterprise Server12 vulnerabilities
- Suse Linux Enterprise Workstation Extension11 vulnerabilities
- Suse Linux Enterprise Debuginfo7 vulnerabilities
- Studio Onsite1 vulnerabilities
- Suse Linux Enterprise Server For Raspberry Pi1 vulnerabilities
CVE-2013-5611canonicalubuntu_linux+8
EPSS score2.14%
Mozilla Firefox before 26.0 does not properly remove the Application Installation doorhanger, which makes it easier for remote attackers to spoof a Web App installation site by controlling the timing of page navigation.CVE-2015-5203ubuntujasper+5EPSS score1.94%
Double free vulnerability in the jasper_image_stop_load function in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via a crafted JPEG 2000 image file.CVE-2015-5218debianutil-linux+23EPSS score0.61%
Buffer overflow in text-utils/colcrt.c in colcrt in util-linux before 2.27 allows local users to cause a denial of service (crash) via a crafted file, related to the page global variable.CVE-2015-5221ubuntujasper+5EPSS score2.19%
Use-after-free vulnerability in the mif_process_cmpt function in libjasper/mif/mif_cod.c in the JasPer JPEG-2000 library before 1.900.2 allows remote attackers to cause a denial of service (crash) via a crafted JPEG 2000 image file.CVE-2015-8010ubuntuicinga+3EPSS score1.49%
Cross-site scripting (XSS) vulnerability in the Classic-UI with the CSV export link and pagination feature in Icinga before 1.14 allows remote attackers to inject arbitrary web script or HTML via the query string to cgi-bin/status.cgi.CVE-2015-3405debianntp+14EPSS score5.29%
ntp-keygen in ntp 4.2.8px before 4.2.8p2-RC2 and 4.3.x before 4.3.12 does not generate MD5 keys with sufficient entropy on big endian machines when the lowest order byte of the temp variable is between 0x20 and 0x7f and not #, which might allow remote attackers to obtain the value of generated MD5 keys via a brute force attack with the 93 possible keys.CVE-2015-3138opensuse_projectleap+2EPSS score2.28%
print-wb.c in tcpdump before 4.7.4 allows remote attackers to cause a denial of service (segmentation fault and process crash).CVE-2016-1254debiantor+8EPSS score3.00%
Tor before 0.2.8.12 might allow remote attackers to cause a denial of service (client crash) via a crafted hidden service descriptor.CVE-2016-9435debianw3m+4EPSS score3.34%
The HTMLtagproc1 function in file.c in w3m before 0.5.3+git20161009 does not properly initialize values, which allows remote attackers to crash the application via a crafted html file, related to <dd> tags.CVE-2016-9556debianimagemagick+4EPSS score2.27%
The IsPixelGray function in MagickCore/pixel-accessor.h in ImageMagick 7.0.3-8 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted image file.CVE-2016-9957debiangame-music-emu+10EPSS score1.93%
Stack-based buffer overflow in game-music-emu before 0.6.1.CVE-2016-9436debianw3m+4EPSS score3.34%
parsetagx.c in w3m before 0.5.3+git20161009 does not properly initialize values, which allows remote attackers to crash the application via a crafted html file, related to a <i> tag.CVE-2016-9960debiangame-music-emu+8EPSS score0.53%
game-music-emu before 0.6.1 allows local users to cause a denial of service (divide by zero and process crash).CVE-2016-9961debiangame-music-emu+8EPSS score4.36%
game-music-emu before 0.6.1 mishandles unspecified integer values.CVE-2016-9958debiangame-music-emu+10EPSS score2.33%
game-music-emu before 0.6.1 allows remote attackers to write to arbitrary memory locations.CVE-2016-9959debiangame-music-emu+10EPSS score2.33%
game-music-emu before 0.6.1 allows remote attackers to generate out of bounds 8-bit values.CVE-2016-7797clusterlabspacemaker+18EPSS score3.25%
Pacemaker before 1.1.15, when using pacemaker remote, might allow remote attackers to cause a denial of service (node disconnection) via an unauthenticated connection.CVE-2016-5316alpinetiff+5EPSS score2.17%
Out-of-bounds read in the PixarLogCleanup function in tif_pixarlog.c in libtiff 4.0.6 and earlier allows remote attackers to crash the application by sending a crafted TIFF image to the rgb2ycbcr tool.CVE-2016-5317alpinetiff+5EPSS score1.95%
Buffer overflow in the PixarLogDecode function in libtiff.so in the PixarLogDecode function in libtiff 4.0.6 and earlier, as used in GNOME nautilus, allows attackers to cause a denial of service attack (crash) via a crafted TIFF file.CVE-2016-10048debianimagemagick+3EPSS score6.53%
Directory traversal vulnerability in magick/module.c in ImageMagick 6.9.4-7 allows remote attackers to load arbitrary modules via unspecified vectors.