Skip to content
Noroxi

opensuse project records

54 published records for vendor opensuse project.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
3
With a fix record
79.6%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

54 records
  • CVE-2017-6542
    46Plan

    The ssh_agent_channel_data function in PuTTY before 0.68 allows remote attackers to have unspecified impact via a large length value in an a

    CriticalCVSS 9.8Proof of conceptEPSS 22%

    putty · puttyMar 27, 2017

  • CVE-2014-1528
    42Plan

    The sse2_composite_src_x888_8888 function in Pixman, as used in Cairo in Mozilla Firefox 28.0 and SeaMonkey 2.25 on Windows, allows remote a

    CriticalCVSS 10.0No exploitEPSS 6%

    mozilla · firefoxApr 30, 2014

  • CVE-2014-9846
    40Plan

    Buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact.

    CriticalCVSS 9.8No exploitEPSS 5%

    imagemagick · imagemagickMar 20, 2017

  • CVE-2014-9847
    40Plan

    The jng decoder in ImageMagick 6.8.9.9 allows remote attackers to have an unspecified impact.

    CriticalCVSS 9.8No exploitEPSS 5%

    imagemagick · imagemagickMar 20, 2017

  • CVE-2016-9961
    40Plan

    game-music-emu before 0.6.1 mishandles unspecified integer values.

    CriticalCVSS 9.8No exploitEPSS 4%

    game-music-emu project · game-music-emuJun 6, 2017

  • CVE-2014-9841
    40Plan

    The ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors, re

    CriticalCVSS 9.8No exploitEPSS 4%

    imagemagick · imagemagickMar 20, 2017

  • CVE-2014-9843
    40Plan

    The DecodePSDPixels function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors.

    CriticalCVSS 9.8No exploitEPSS 4%

    imagemagick · imagemagickMar 20, 2017

  • CVE-2014-1494
    39Monitor

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers t

    CriticalCVSS 9.3No exploitEPSS 5%

    mozilla · seamonkeyMar 19, 2014

  • CVE-2016-10048
    32Monitor

    Directory traversal vulnerability in magick/module.c in ImageMagick 6.9.4-7 allows remote attackers to load arbitrary modules via unspecifie

    HighCVSS 7.5No exploitEPSS 7%

    imagemagick · imagemagickMar 23, 2017

  • CVE-2015-3405
    32Monitor

    ntp-keygen in ntp 4.2.8px before 4.2.8p2-RC2 and 4.3.x before 4.3.12 does not generate MD5 keys with sufficient entropy on big endian machin

    HighCVSS 7.5No exploitEPSS 5%

    ntp · ntpAug 9, 2017

  • CVE-2016-9958
    32Monitor

    game-music-emu before 0.6.1 allows remote attackers to write to arbitrary memory locations.

    HighCVSS 7.8No exploitEPSS 2%

    opensuse · leapApr 12, 2017

  • CVE-2016-9959
    32Monitor

    game-music-emu before 0.6.1 allows remote attackers to generate out of bounds 8-bit values.

    HighCVSS 7.8No exploitEPSS 2%

    opensuse · leapApr 12, 2017

  • CVE-2016-9957
    32Monitor

    Stack-based buffer overflow in game-music-emu before 0.6.1.

    HighCVSS 7.8No exploitEPSS 2%

    opensuse · leapApr 12, 2017

  • CVE-2014-9848
    31Monitor

    Memory leak in ImageMagick allows remote attackers to cause a denial of service (memory consumption).

    HighCVSS 7.5No exploitEPSS 4%

    imagemagick · imagemagickMar 20, 2017

  • CVE-2014-9851
    31Monitor

    ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (application crash).

    HighCVSS 7.5No exploitEPSS 4%

    imagemagick · imagemagickMar 20, 2017

  • CVE-2014-9850
    31Monitor

    Logic error in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (resource consumption).

    HighCVSS 7.5No exploitEPSS 4%

    imagemagick · imagemagickMar 20, 2017

  • CVE-2014-9849
    31Monitor

    The png coder in ImageMagick allows remote attackers to cause a denial of service (crash).

    HighCVSS 7.5No exploitEPSS 4%

    imagemagick · imagemagickMar 20, 2017

  • CVE-2014-9842
    31Monitor

    Memory leak in the ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (memor

    HighCVSS 7.5No exploitEPSS 4%

    imagemagick · imagemagickMar 20, 2017

  • CVE-2016-7797
    31Monitor

    Pacemaker before 1.1.15, when using pacemaker remote, might allow remote attackers to cause a denial of service (node disconnection) via an

    HighCVSS 7.5No exploitEPSS 3%

    clusterlabs · pacemakerMar 24, 2017

  • CVE-2016-1254
    31Monitor

    Tor before 0.2.8.12 might allow remote attackers to cause a denial of service (client crash) via a crafted hidden service descriptor.

    HighCVSS 7.5No exploitEPSS 3%

    torproject · torDec 5, 2017

  • CVE-2015-3138
    31Monitor

    print-wb.c in tcpdump before 4.7.4 allows remote attackers to cause a denial of service (segmentation fault and process crash).

    HighCVSS 7.5No exploitEPSS 2%

    tcpdump · tcpdumpSep 27, 2017

  • CVE-2017-17806
    31Monitor

    The HMAC implementation (crypto/hmac.c) in the Linux kernel before 4.14.8 does not validate that the underlying cryptographic hash algorithm

    HighCVSS 7.8No exploitEPSS 1%

    linux · linux kernelDec 20, 2017

  • CVE-2017-17805
    31Monitor

    The Salsa20 encryption algorithm in the Linux kernel before 4.14.8 does not correctly handle zero-length inputs, allowing a local attacker a

    HighCVSS 7.8No exploitEPSS 0%

    linux · linux kernelDec 20, 2017

  • CVE-2014-1542
    29Monitor

    Buffer overflow in the Speex resampler in the Web Audio subsystem in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrar

    MediumCVSS 6.8No exploitEPSS 5%

    mozilla · firefoxJun 11, 2014

  • CVE-2014-4258
    27Monitor

    Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier and 5.6.17 and earlier allows remote authenticate

    MediumCVSS 6.5No exploitEPSS 3%

    oracle · mysqlJul 17, 2014