Opensuse Project vulnerabilities, page 2
54 vulnerabilities
Known vulnerabilities in Opensuse Project products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 9 products.
CVE-2016-10069debianimagemagick+3
EPSS score1.96%
coders/mat.c in ImageMagick before 6.9.4-5 allows remote attackers to cause a denial of service (application crash) via a mat file with an invalid number of frames.CVE-2016-10068debianimagemagick+4EPSS score1.97%
The MSL interpreter in ImageMagick before 6.9.6-4 allows remote attackers to cause a denial of service (segmentation fault and application crash) via a crafted XML file.CVE-2014-1500mozillafirefox+7EPSS score3.64%
Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to cause a denial of service (resource consumption and application hang) via onbeforeunload events that trigger background JavaScript execution.CVE-2014-1484mozillafirefox+6EPSS score1.56%
Mozilla Firefox before 27.0 on Android 4.2 and earlier creates system-log entries containing profile paths, which allows attackers to obtain sensitive information via a crafted application.CVE-2014-1489canonicalubuntu_linux+7EPSS score1.93%
Mozilla Firefox before 27.0 does not properly restrict access to about:home buttons by script on other pages, which allows user-assisted remote attackers to cause a denial of service (session restore) via a crafted web site.CVE-2014-1528canonicalubuntu_linux+7EPSS score5.60%
The sse2_composite_src_x888_8888 function in Pixman, as used in Cairo in Mozilla Firefox 28.0 and SeaMonkey 2.25 on Windows, allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds write and application crash) by painting on a CANVAS element.CVE-2014-1499mozillafirefox+7EPSS score1.95%
Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to spoof the domain name in the WebRTC (1) camera or (2) microphone permission prompt by triggering navigation at a certain time during generation of this prompt.CVE-2014-1494mozillafirefox+7EPSS score5.10%
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.CVE-2014-1502mozillafirefox+7EPSS score1.15%
The (1) WebGL.compressedTexImage2D and (2) WebGL.compressedTexSubImage2D functions in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to bypass the Same Origin Policy and render content in a different domain via unspecified vectors.CVE-2014-1542ubuntufirefox+4EPSS score5.30%
Buffer overflow in the Speex resampler in the Web Audio subsystem in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrary code via vectors related to a crafted AudioBuffer channel count and sample rate.CVE-2014-1498mozillafirefox+7EPSS score1.83%
The crypto.generateCRMFRequest method in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 does not properly validate a certain key type, which allows remote attackers to cause a denial of service (application crash) via vectors that trigger generation of a key that supports the Elliptic Curve ec-dual-use algorithm.CVE-2014-0081debianrails+8EPSS score4.03%
Multiple cross-site scripting (XSS) vulnerabilities in actionview/lib/action_view/helpers/number_helper.rb in Ruby on Rails before 3.2.17, 4.0.x before 4.0.3, and 4.1.x before 4.1.0.beta2 allow remote attackers to inject arbitrary web script or HTML via the (1) format, (2) negative_format, or (3) units parameter to the (a) number_to_currency, (b) number_to_percentage, or (c) number_to_human helper.CVE-2014-0481debianpython-django+6EPSS score2.47%
The default configuration for the file upload handling system in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3 uses a sequential file name generation process when a file with a conflicting name is uploaded, which allows remote attackers to cause a denial of service (CPU consumption) by unloading a multiple files with the same name.CVE-2014-9847canonicalubuntu_linux+11EPSS score4.58%
The jng decoder in ImageMagick 6.8.9.9 allows remote attackers to have an unspecified impact.CVE-2014-9842canonicalubuntu_linux+10EPSS score3.62%
Memory leak in the ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors.CVE-2014-9853canonicalubuntu_linux+12EPSS score1.81%
Memory leak in coders/rle.c in ImageMagick allows remote attackers to cause a denial of service (memory consumption) via a crafted rle file.CVE-2014-9844canonicalubuntu_linux+11EPSS score2.05%
The ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted image file.CVE-2014-9846canonicalubuntu_linux+12EPSS score4.85%
Buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact.CVE-2014-9841canonicalubuntu_linux+9EPSS score3.93%
The ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors, related to "throwing of exceptions."CVE-2014-9850canonicalubuntu_linux+9EPSS score3.62%
Logic error in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (resource consumption).