← Back

Opensuse

opensuse

Vendor: Opensuse • 1,454 CVEs

CVEs (1,454)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
3Canonical
GnomeOpensuse
3Gdk Pixbuf
OpensuseUbuntu Linux
May 6, 2026
Oct 26, 2015
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Integer overflow in the pixops_scale_nearest function in pixops/pixops.c in gdk-pixbuf before 2.32.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a craf...Show more
Integer overflow in the pixops_scale_nearest function in pixops/pixops.c in gdk-pixbuf before 2.32.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted GIF image file, which triggers a heap-based buffer overflow.Show less
2Gnome
Opensuse
2Gdk Pixbuf
Opensuse
May 6, 2026
Oct 26, 2015
N/A· v4
N/A· v3
6.8 MEDIUM· v2
io-tga.c in gdk-pixbuf before 2.32.0 uses heap memory after its allocation failed, which allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) and possibly execute arbitr...Show more
io-tga.c in gdk-pixbuf before 2.32.0 uses heap memory after its allocation failed, which allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) and possibly execute arbitrary code via a crafted Truevision TGA (TARGA) file.Show less
7Canonical
DebianFedoraproject+4 more
15Debian Linux
Enterprise Linux DesktopEnterprise Linux Eus+12 more
May 6, 2026
Oct 22, 2015
N/A· v4
N/A· v3
3.5 LOW· v2
Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via vectors related to Server : DML, a different vulnerability than CVE-...Show more
Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via vectors related to Server : DML, a different vulnerability than CVE-2015-4858.Show less
4Opensuse
OracleRedhat+1 more
21Enterprise Linux Desktop
Enterprise Linux EusEnterprise Linux Eus Compute Node+18 more
Apr 22, 2026
Oct 22, 2015
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to affect integrity via unknown vectors related to Deployment.
7Canonical
DebianFedoraproject+4 more
15Debian Linux
Enterprise Linux DesktopEnterprise Linux Eus+12 more
May 6, 2026
Oct 21, 2015
N/A· v4
N/A· v3
4.0 MEDIUM· v2
Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : Parser.
7Canonical
DebianFedoraproject+4 more
15Debian Linux
Enterprise Linux DesktopEnterprise Linux Eus+12 more
May 6, 2026
Oct 21, 2015
N/A· v4
N/A· v3
3.5 LOW· v2
Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : InnoDB.
7Canonical
DebianFedoraproject+4 more
15Debian Linux
Enterprise Linux DesktopEnterprise Linux Eus+12 more
May 6, 2026
Oct 21, 2015
N/A· v4
N/A· v3
4.0 MEDIUM· v2
Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticated users to affect availability via vectors related to DML, a different vulnerability than CVE-2015-49...Show more
Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticated users to affect availability via vectors related to DML, a different vulnerability than CVE-2015-4913.Show less
7Canonical
DebianFedoraproject+4 more
15Debian Linux
Enterprise Linux DesktopEnterprise Linux Eus+12 more
May 6, 2026
Oct 21, 2015
N/A· v4
N/A· v3
2.8 LOW· v2
Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : SP.
8Canonical
DebianFedoraproject+5 more
17Debian Linux
Enterprise Linux DesktopEnterprise Linux Eus+14 more
May 6, 2026
Oct 21, 2015
N/A· v4
N/A· v3
4.0 MEDIUM· v2
Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect integrity via unknown vectors related to Server : Security : Privileges.
7Canonical
DebianFedoraproject+4 more
14Debian Linux
Enterprise Linux DesktopEnterprise Linux Eus+11 more
May 6, 2026
Oct 21, 2015
N/A· v4
N/A· v3
4.0 MEDIUM· v2
Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect confidentiality via unknown vectors related to Server : Types.
7Canonical
DebianFedoraproject+4 more
15Debian Linux
Enterprise Linux DesktopEnterprise Linux Eus+12 more
May 6, 2026
Oct 21, 2015
N/A· v4
N/A· v3
4.0 MEDIUM· v2
Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via vectors related to Server : DDL.
4Fedoraproject
MariadbOpensuse+1 more
6Fedora
LeapMariadb+3 more
May 6, 2026
Oct 21, 2015
N/A· v4
N/A· v3
3.5 LOW· v2
Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier, when running on Windows, allows remote authenticated users to affect availability via unknown vectors related to Server : Query...Show more
Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier, when running on Windows, allows remote authenticated users to affect availability via unknown vectors related to Server : Query Cache.Show less
7Canonical
DebianFedoraproject+4 more
15Debian Linux
Enterprise Linux DesktopEnterprise Linux Eus+12 more
May 6, 2026
Oct 21, 2015
N/A· v4
N/A· v3
4.0 MEDIUM· v2
Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Partition, a different vulnerabi...Show more
Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Partition, a different vulnerability than CVE-2015-4792.Show less
7Canonical
DebianFedoraproject+4 more
15Debian Linux
Enterprise Linux DesktopEnterprise Linux Eus+12 more
May 6, 2026
Oct 21, 2015
N/A· v4
N/A· v3
1.7 LOW· v2
Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Partition, a different vulnerabi...Show more
Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Partition, a different vulnerability than CVE-2015-4802.Show less
4Adobe
OpensuseRedhat+1 more
10Enterprise Linux Desktop
Enterprise Linux EusEnterprise Linux Server+7 more
Apr 22, 2026
Oct 15, 2015
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
Adobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11.x through 11.2.202.535 on Linux allows remote attackers to execute arbitrary code via a crafted SWF file, as exploited in...Show more
Adobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11.x through 11.2.202.535 on Linux allows remote attackers to execute arbitrary code via a crafted SWF file, as exploited in the wild in October 2015.Show less
3Fedoraproject
OpensuseRedhat
7Enterprise Linux Desktop
Enterprise Linux Hpc NodeEnterprise Linux Server+4 more
May 6, 2026
Oct 9, 2015
N/A· v4
N/A· v3
4.3 MEDIUM· v2
IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly determine the origin of unsigned applets, which allows remote attackers to bypass the approval process or trick users into approving applet execution via...Show more
IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly determine the origin of unsigned applets, which allows remote attackers to bypass the approval process or trick users into approving applet execution via a crafted web page.Show less
3Fedoraproject
OpensuseRedhat
7Enterprise Linux Desktop
Enterprise Linux Hpc NodeEnterprise Linux Server+4 more
May 6, 2026
Oct 9, 2015
N/A· v4
N/A· v3
6.8 MEDIUM· v2
IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly sanitize applet URLs, which allows remote attackers to inject applets into the .appletTrustSettings configuration file and bypass user approval to execute...Show more
IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly sanitize applet URLs, which allows remote attackers to inject applets into the .appletTrustSettings configuration file and bypass user approval to execute the applet via a crafted web page, possibly related to line breaks.Show less
2Opensuse
Roaring Penguin
2Opensuse
Remind
May 6, 2026
Sep 28, 2015
N/A· v4
N/A· v3
10.0 HIGH· v2
Buffer overflow in the DumpSysVar function in var.c in Remind before 3.1.15 allows attackers to have unspecified impact via a long name.
2Opensuse
Standards Based Linux Instrumentation
2Opensuse
Sblim Sfcb
May 6, 2026
Sep 28, 2015
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The lookupProviders function in providerMgr.c in sblim-sfcb 1.3.4 and 1.3.18 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an empty className in a packet.
4Fedoraproject
IpythonJupyter+1 more
4Fedora
NotebookNotebook+1 more
May 6, 2026
Sep 21, 2015
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in the file browser in notebook/notebookapp.py in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to inject arbitrary web script or H...Show more
Cross-site scripting (XSS) vulnerability in the file browser in notebook/notebookapp.py in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to inject arbitrary web script or HTML via a folder name. NOTE: this was originally reported as a cross-site request forgery (CSRF) vulnerability, but this may be inaccurate.Show less