Opensuse

opensuse

Vendor: Opensuse • 1,454 CVEs

CVEs (1,454)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2014-8127 2Libtiff Opensuse 2Libtiff Opensuse May 13, 2026 Jun 26, 2017 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 LibTIFF 4.0.3 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted TIFF image to the (1) checkInkNamesString function in tif_dir.c in the thumbnail tool, (2) compresscontig fu...Show more LibTIFF 4.0.3 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted TIFF image to the (1) checkInkNamesString function in tif_dir.c in the thumbnail tool, (2) compresscontig function in tiff2bw.c in the tiff2bw tool, (3) putcontig8bitCIELab function in tif_getimage.c in the tiff2rgba tool, LZWPreDecode function in tif_lzw.c in the (4) tiff2ps or (5) tiffdither tool, (6) NeXTDecode function in tif_next.c in the tiffmedian tool, or (7) TIFFWriteDirectoryTagLongLong8Array function in tif_dirwrite.c in the tiffset tool.Show less
CVE-2016-9843 10Apple CanonicalDebian+7 more 24Active Iq Unified Manager Database ServerDebian Linux+21 more May 13, 2026 May 23, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation.
CVE-2016-9842 8Apple CanonicalDebian+5 more 19Database Server Debian LinuxEnterprise Linux Desktop+16 more Jul 14, 2026 May 23, 2017 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.
CVE-2016-9841 9Apple CanonicalDebian+6 more 39Active Iq Unified Manager Cloud BackupDatabase Server+36 more Jul 14, 2026 May 23, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.
CVE-2016-9840 9Apple BoostCanonical+6 more 20Boost Database ServerDebian Linux+17 more Jul 14, 2026 May 23, 2017 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.
CVE-2016-5178 5Debian FedoraprojectGoogle+2 more 7Chrome Debian LinuxEnterprise Linux Server Supplementary+4 more May 13, 2026 May 23, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Multiple unspecified vulnerabilities in Google Chrome before 53.0.2785.143 allow remote attackers to cause a denial of service or possibly have other impact via unknown vectors.
CVE-2016-5177 5Debian FedoraprojectGoogle+2 more 7Chrome Debian LinuxEnterprise Linux Server Supplementary+4 more May 13, 2026 May 23, 2017 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Use-after-free vulnerability in V8 in Google Chrome before 53.0.2785.143 allows remote attackers to cause a denial of service (crash) or possibly have unspecified other impact via unknown vectors.
CVE-2016-2347 3Debian Lhasa ProjectOpensuse 4Debian Linux LeapLhasa+1 more May 13, 2026 Apr 21, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Integer underflow in the decode_level3_header function in lib/lha_file_header.c in Lhasa before 0.3.1 allows remote attackers to execute arbitrary code via a crafted archive.
CVE-2015-8567 6Canonical DebianFedoraproject+3 more 10Debian Linux FedoraLeap+7 more May 13, 2026 Apr 13, 2017 N/A· v4 7.7 HIGH· v3 6.8 MEDIUM· v2 Memory leak in net/vmxnet3.c in QEMU allows remote attackers to cause a denial of service (memory consumption).
CVE-2016-4068 2Opensuse Roundcube 4Leap OpensuseRoundcube Webmail+1 more May 13, 2026 Apr 13, 2017 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 1.0.9 and 1.1.x before 1.1.5 allows remote attackers to inject arbitrary web script or HTML via a crafted SVG, a different vulnerability than CVE-2015-...Show more Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 1.0.9 and 1.1.x before 1.1.5 allows remote attackers to inject arbitrary web script or HTML via a crafted SVG, a different vulnerability than CVE-2015-8864.Show less
CVE-2015-8864 2Opensuse Roundcube 4Leap OpensuseRoundcube Webmail+1 more May 13, 2026 Apr 13, 2017 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 1.0.9 and 1.1.x before 1.1.5 allows remote attackers to inject arbitrary web script or HTML via a crafted SVG, a different vulnerability than CVE-2016-...Show more Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 1.0.9 and 1.1.x before 1.1.5 allows remote attackers to inject arbitrary web script or HTML via a crafted SVG, a different vulnerability than CVE-2016-4068.Show less
CVE-2016-9959 4Game Music Emu Project OpensuseOpensuse Project+1 more 9Game Music Emu LeapLeap+6 more May 13, 2026 Apr 12, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 game-music-emu before 0.6.1 allows remote attackers to generate out of bounds 8-bit values.
CVE-2016-9958 4Game Music Emu Project OpensuseOpensuse Project+1 more 9Game Music Emu LeapLeap+6 more May 13, 2026 Apr 12, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 game-music-emu before 0.6.1 allows remote attackers to write to arbitrary memory locations.
CVE-2016-9957 4Game Music Emu Project OpensuseOpensuse Project+1 more 9Game Music Emu LeapLeap+6 more May 13, 2026 Apr 12, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Stack-based buffer overflow in game-music-emu before 0.6.1.
CVE-2014-9114 3Fedoraproject KernelOpensuse 3Fedora OpensuseUtil Linux May 13, 2026 Mar 31, 2017 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 Blkid in util-linux before 2.26rc-1 allows local users to execute arbitrary code.
CVE-2014-9851 4Canonical ImagemagickOpensuse+1 more 9Imagemagick LeapOpensuse+6 more May 13, 2026 Mar 20, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (application crash).
CVE-2014-9850 4Canonical ImagemagickOpensuse+1 more 8Imagemagick LeapOpensuse+5 more May 13, 2026 Mar 20, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Logic error in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (resource consumption).
CVE-2014-9849 4Canonical ImagemagickOpensuse+1 more 9Imagemagick LeapOpensuse+6 more May 13, 2026 Mar 20, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The png coder in ImageMagick allows remote attackers to cause a denial of service (crash).
CVE-2014-9848 4Canonical ImagemagickOpensuse+1 more 10Imagemagick LeapLeap+7 more May 13, 2026 Mar 20, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Memory leak in ImageMagick allows remote attackers to cause a denial of service (memory consumption).
CVE-2014-9847 4Canonical ImagemagickOpensuse+1 more 10Imagemagick LeapOpensuse+7 more May 13, 2026 Mar 20, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 The jng decoder in ImageMagick 6.8.9.9 allows remote attackers to have an unspecified impact.

Previous 1 234 5...73 Next