OP
Product
Opensuse
On CISA KEVExploited in the wildRansomware-linked
1,456
CVEs
45
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 86High 271Medium 142Low 1
Watch
Add Opensuse to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2015-5300 | 7.5 | Jul 21 | The panic_gate check in NTP before 4.2.8p5 is only re-enabled after the first change to the system clock that was greater than 128 milliseconds by default, which allows remote… Affected: 13.2 |
| CVE-2014-9851 | 7.5 | Mar 20 | ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (application crash) Affected: 13.2 |
| CVE-2014-9850 | 7.5 | Mar 20 | Logic error in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (resource consumption) Affected: 13.2 |
| CVE-2014-9849 | 7.5 | Mar 20 | The png coder in ImageMagick allows remote attackers to cause a denial of service (crash) Affected: 13.2 |
| CVE-2014-9848 | 7.5 | Mar 20 | Memory leak in ImageMagick allows remote attackers to cause a denial of service (memory consumption) Affected: 13.2 |
| CVE-2014-9842 | 7.5 | Mar 20 | Memory leak in the ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors Affected: 13.2 |
| CVE-2014-9854 | 7.5 | Mar 17 | coders/tiff.c in ImageMagick allows remote attackers to cause a denial of service (application crash) via vectors related to the "identification of image." Affected: 13.2 |
| CVE-2016-7972 | 7.5 | Mar 3 | The check_allocations function in libass/ass_shaper.c in libass before 0.13.4 allows remote attackers to cause a denial of service (memory allocation failure) via unspecified… Affected: 13.2 |
| CVE-2016-7969 | 7.5 | Mar 3 | The wrap_lines_smart function in ass_render.c in libass before 0.13.4 allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors, related to… Affected: 13.2 |
| CVE-2016-8682 | 7.5 | Feb 15 | The ReadSCTImage function in coders/sct.c in GraphicsMagick 1.3.25 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted SCT header Affected: 13.2 |
| CVE-2016-7800 | 7.5 | Feb 6 | Integer underflow in the parse8BIM function in coders/meta.c in GraphicsMagick 1.3.25 and earlier allows remote attackers to cause a denial of service (application crash) via a… Affected: 13.2 |
| CVE-2016-7449 | 7.5 | Feb 6 | The TIFFGetField function in coders/tiff.c in GraphicsMagick 1.3.24 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a file containing an… Affected: 13.2 |
| CVE-2016-7448 | 7.5 | Feb 6 | The Utah RLE reader in GraphicsMagick before 1.3.25 allows remote attackers to cause a denial of service (CPU consumption or large memory allocations) via vectors involving the… Affected: 13.2 |
| CVE-2016-9448 | 7.5 | Jan 27 | The TIFFFetchNormalTag function in LibTiff 4.0.6 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) by setting the tags TIFF_SETGET_C16ASCII… Affected: 13.2 |
| CVE-2016-5323 | 7.5 | Jan 20 | The _TIFFFax3fillruns function in libtiff before 4.0.6 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted Tiff image Affected: 13.2 |
| CVE-2016-6323 | 7.5 | Oct 7 | The makecontext function in the GNU C Library (aka glibc or libc6) before 2.25 creates execution contexts incompatible with the unwinder on ARM EABI (32-bit) platforms, which… Affected: 13.2 |
| CVE-2013-4118 | 7.5 | Oct 3 | FreeRDP before 1.1.0-beta1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via unspecified vectors Affected: 13.2 |
| CVE-2016-6352 | 7.5 | Oct 3 | The OneLine32 function in io-ico.c in gdk-pixbuf before 2.35.3 allows remote attackers to cause a denial of service (out-of-bounds write and crash) via crafted dimensions in an… Affected: 13.2 |
| CVE-2016-3623 | 7.5 | Oct 3 | The rgb2ycbcr tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (divide-by-zero) by setting the (1) v or (2) h parameter to 0 Affected: 13.2 |
| CVE-2016-6262 | 7.5 | Sep 7 | idn in libidn before 1.33 might allow remote attackers to obtain sensitive memory information by reading a zero byte as input, which triggers an out-of-bounds read, a different… Affected: 13.2 |
| CVE-2015-8948 | 7.5 | Sep 7 | idn in GNU libidn before 1.33 might allow remote attackers to obtain sensitive memory information by reading a zero byte as input, which triggers an out-of-bounds read Affected: 13.2 |
| CVE-2016-6855 | 7.5 | Sep 7 | Eye of GNOME (aka eog) 3.16.5, 3.17.x, 3.18.x before 3.18.3, 3.19.x, and 3.20.x before 3.20.4, when used with glib before 2.44.1, allow remote attackers to cause a denial of… Affected: 13.2 |
| CVE-2016-4957 | 7.5 | Jul 5 | ntpd in NTP before 4.2.8p8 allows remote attackers to cause a denial of service (daemon crash) via a crypto-NAK packet Affected: 13.2 |
| CVE-2016-4954 | 7.5 | Jul 5 | The process_packet function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (peer-variable modification) by sending spoofed… Affected: 13.2 |
| CVE-2016-4953 | 7.5 | Jul 5 | ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (ephemeral-association demobilization) by sending a spoofed crypto-NAK packet with incorrect… Affected: 13.2 |
| CVE-2016-5739 | 7.5 | Jul 3 | The Transformation implementation in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 does not use the no-referrer Content Security Policy (CSP)… Affected: 13.1; 13.2 |
| CVE-2016-5706 | 7.5 | Jul 3 | js/get_scripts.js.php in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 allows remote attackers to cause a denial of service via a large array in… Affected: 13.1; 13.2 |
| CVE-2016-5301 | 7.5 | Jun 30 | The parse_chunk_header function in libtorrent before 1.1.1 allows remote attackers to cause a denial of service (crash) via a crafted (1) HTTP response or possibly a (2) UPnP… Affected: 13.2 |
| CVE-2016-4574 | 7.5 | Jun 13 | Off-by-one error in the append_utf8_value function in the DN decoder (dn.c) in Libksba before 1.3.4 allows remote attackers to cause a denial of service (out-of-bounds read) via… Affected: 13.2 |
| CVE-2016-4478 | 7.5 | Jun 13 | Buffer overflow in the xmlrpc_char_encode function in modules/transport/xmlrpc/xmlrpclib.c in Atheme before 7.2.7 allows remote attackers to cause a denial of service via vectors… Affected: 13.2 |
| CVE-2016-4414 | 7.5 | Jun 13 | The onReadyRead function in core/coreauthhandler.cpp in Quassel before 0.12.4 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via invalid… Affected: 13.2 |
| CVE-2014-9773 | 7.5 | Jun 13 | modules/chanserv/flags.c in Atheme before 7.2.7 allows remote attackers to modify the Anope FLAGS behavior by registering and dropping the (1) LIST, (2) CLEAR, or (3) MODIFY… Affected: 13.2 |
| CVE-2016-2821 | 7.5 | Jun 13 | Use-after-free vulnerability in the mozilla::dom::Element class in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2, when contenteditable mode is enabled, allows… Affected: 13.1; 13.2 |
| CVE-2016-3706 | 7.5 | Jun 10 | Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in the GNU C Library (aka glibc or libc6) allows remote attackers to cause a denial of… Affected: 13.2 |
| CVE-2016-1700 | 7.5 | Jun 5 | extensions/renderer/runtime_custom_bindings.cc in Google Chrome before 51.0.2704.79 does not consider side effects during creation of an array of extension views, which allows… Affected: 13.2 |
| CVE-2016-1691 | 7.5 | Jun 5 | Skia, as used in Google Chrome before 51.0.2704.63, mishandles coincidence runs, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or… Affected: 13.2 |
| CVE-2016-1690 | 7.5 | Jun 5 | The Autofill implementation in Google Chrome before 51.0.2704.63 mishandles the interaction between field updates and JavaScript code that triggers a frame deletion, which allows… Affected: 13.2 |
| CVE-2016-1683 | 7.5 | Jun 5 | numbers.c in libxslt before 1.1.29, as used in Google Chrome before 51.0.2704.63, mishandles namespace nodes, which allows remote attackers to cause a denial of service… Affected: 13.2 |
| CVE-2016-3075 | 7.5 | Jun 1 | Stack-based buffer overflow in the nss_dns implementation of the getnetbyname function in GNU C Library (aka glibc) before 2.24 allows context-dependent attackers to cause a… Affected: 13.2 |
| CVE-2016-1234 | 7.5 | Jun 1 | Stack-based buffer overflow in the glob implementation in GNU C Library (aka glibc) before 2.24, when GLOB_ALTDIRFUNC is used, allows context-dependent attackers to cause a denial… Affected: 13.2 |
| CVE-2016-4049 | 7.5 | May 23 | The bgp_dump_routes_func function in bgpd/bgp_dump.c in Quagga does not perform size checks when dumping data, which might allow remote attackers to cause a denial of service… Affected: 13.2 |
| CVE-2016-4348 | 7.5 | May 20 | The _rsvg_css_normalize_font_size function in librsvg 2.40.2 allows context-dependent attackers to cause a denial of service (stack consumption and application crash) via circular… Affected: 13.2 |
| CVE-2016-2105 | 7.5 | May 5 | Integer overflow in the EVP_EncodeUpdate function in crypto/evp/encode.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service… Affected: 13.2 |
| CVE-2016-3190 | 7.5 | Apr 21 | The fill_xrgb32_lerp_opaque_spans function in cairo-image-compositor.c in cairo before 1.14.2 allows remote attackers to cause a denial of service (out-of-bounds read and… Affected: 13.2 |
| CVE-2015-8080 | 7.5 | Apr 13 | Integer overflow in the getnum function in lua_struct.c in Redis 2.8.x before 2.8.24 and 3.0.x before 3.0.6 allows context-dependent attackers with permission to run Lua code in a… Affected: 13.2 |
| CVE-2016-2381 | 7.5 | Apr 8 | Perl might allow context-dependent attackers to bypass the taint protection mechanism in a child process via duplicate environment variables in envp Affected: 13.2 |
| CVE-2016-3125 | 7.5 | Apr 5 | The mod_tls module in ProFTPD before 1.3.5b and 1.3.6 before 1.3.6rc2 does not properly handle the TLSDHParamFile directive, which might cause a weaker than intended… Affected: 13.1 |
| CVE-2016-2041 | 7.5 | Feb 20 | libraries/common.inc.php in phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 does not use a constant-time algorithm for comparing CSRF tokens,… Affected: 13.1; 13.2 |
| CVE-2015-8547 | 7.5 | Jan 8 | The CoreUserInputHandler::doMode function in core/coreuserinputhandler.cpp in Quassel 0.10.0 allows remote attackers to cause a denial of service (application crash) via the "/op… Affected: 13.1; 13.2 |
| CVE-2014-1505 | 7.5 | Mar 19 | The SVG filter implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to obtain… Affected: 11.4; 12.3; 13.1 |
The 500 most important CVEs for this product (exploited first, then by severity)