İçeriğe atla
Noroxi

opensuse project kayıtları

opensuse project üreticisine ait 54 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
3
Düzeltme kaydı olan
%79,6
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

54 kayıt
  • CVE-2017-6542
    46Planlayın

    The ssh_agent_channel_data function in PuTTY before 0.68 allows remote attackers to have unspecified impact via a large length value in an a

    KritikCVSS 9,8Kavram kanıtıEPSS %22

    putty · putty27 Mar 2017

  • CVE-2014-1528
    42Planlayın

    The sse2_composite_src_x888_8888 function in Pixman, as used in Cairo in Mozilla Firefox 28.0 and SeaMonkey 2.25 on Windows, allows remote a

    KritikCVSS 10,0İstismar yokEPSS %6

    mozilla · firefox30 Nis 2014

  • CVE-2014-9846
    40Planlayın

    Buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact.

    KritikCVSS 9,8İstismar yokEPSS %5

    imagemagick · imagemagick20 Mar 2017

  • CVE-2014-9847
    40Planlayın

    The jng decoder in ImageMagick 6.8.9.9 allows remote attackers to have an unspecified impact.

    KritikCVSS 9,8İstismar yokEPSS %5

    imagemagick · imagemagick20 Mar 2017

  • CVE-2016-9961
    40Planlayın

    game-music-emu before 0.6.1 mishandles unspecified integer values.

    KritikCVSS 9,8İstismar yokEPSS %4

    game-music-emu project · game-music-emu6 Haz 2017

  • CVE-2014-9841
    40Planlayın

    The ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors, re

    KritikCVSS 9,8İstismar yokEPSS %4

    imagemagick · imagemagick20 Mar 2017

  • CVE-2014-9843
    40Planlayın

    The DecodePSDPixels function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors.

    KritikCVSS 9,8İstismar yokEPSS %4

    imagemagick · imagemagick20 Mar 2017

  • CVE-2014-1494
    39İzleyin

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers t

    KritikCVSS 9,3İstismar yokEPSS %5

    mozilla · seamonkey19 Mar 2014

  • CVE-2016-10048
    32İzleyin

    Directory traversal vulnerability in magick/module.c in ImageMagick 6.9.4-7 allows remote attackers to load arbitrary modules via unspecifie

    YüksekCVSS 7,5İstismar yokEPSS %7

    imagemagick · imagemagick23 Mar 2017

  • CVE-2015-3405
    32İzleyin

    ntp-keygen in ntp 4.2.8px before 4.2.8p2-RC2 and 4.3.x before 4.3.12 does not generate MD5 keys with sufficient entropy on big endian machin

    YüksekCVSS 7,5İstismar yokEPSS %5

    ntp · ntp9 Ağu 2017

  • CVE-2016-9958
    32İzleyin

    game-music-emu before 0.6.1 allows remote attackers to write to arbitrary memory locations.

    YüksekCVSS 7,8İstismar yokEPSS %2

    opensuse · leap12 Nis 2017

  • CVE-2016-9959
    32İzleyin

    game-music-emu before 0.6.1 allows remote attackers to generate out of bounds 8-bit values.

    YüksekCVSS 7,8İstismar yokEPSS %2

    opensuse · leap12 Nis 2017

  • CVE-2016-9957
    32İzleyin

    Stack-based buffer overflow in game-music-emu before 0.6.1.

    YüksekCVSS 7,8İstismar yokEPSS %2

    opensuse · leap12 Nis 2017

  • CVE-2014-9848
    31İzleyin

    Memory leak in ImageMagick allows remote attackers to cause a denial of service (memory consumption).

    YüksekCVSS 7,5İstismar yokEPSS %4

    imagemagick · imagemagick20 Mar 2017

  • CVE-2014-9851
    31İzleyin

    ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (application crash).

    YüksekCVSS 7,5İstismar yokEPSS %4

    imagemagick · imagemagick20 Mar 2017

  • CVE-2014-9850
    31İzleyin

    Logic error in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (resource consumption).

    YüksekCVSS 7,5İstismar yokEPSS %4

    imagemagick · imagemagick20 Mar 2017

  • CVE-2014-9849
    31İzleyin

    The png coder in ImageMagick allows remote attackers to cause a denial of service (crash).

    YüksekCVSS 7,5İstismar yokEPSS %4

    imagemagick · imagemagick20 Mar 2017

  • CVE-2014-9842
    31İzleyin

    Memory leak in the ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (memor

    YüksekCVSS 7,5İstismar yokEPSS %4

    imagemagick · imagemagick20 Mar 2017

  • CVE-2016-7797
    31İzleyin

    Pacemaker before 1.1.15, when using pacemaker remote, might allow remote attackers to cause a denial of service (node disconnection) via an

    YüksekCVSS 7,5İstismar yokEPSS %3

    clusterlabs · pacemaker24 Mar 2017

  • CVE-2016-1254
    31İzleyin

    Tor before 0.2.8.12 might allow remote attackers to cause a denial of service (client crash) via a crafted hidden service descriptor.

    YüksekCVSS 7,5İstismar yokEPSS %3

    torproject · tor5 Ara 2017

  • CVE-2015-3138
    31İzleyin

    print-wb.c in tcpdump before 4.7.4 allows remote attackers to cause a denial of service (segmentation fault and process crash).

    YüksekCVSS 7,5İstismar yokEPSS %2

    tcpdump · tcpdump27 Eyl 2017

  • CVE-2017-17806
    31İzleyin

    The HMAC implementation (crypto/hmac.c) in the Linux kernel before 4.14.8 does not validate that the underlying cryptographic hash algorithm

    YüksekCVSS 7,8İstismar yokEPSS %1

    linux · linux kernel20 Ara 2017

  • CVE-2017-17805
    31İzleyin

    The Salsa20 encryption algorithm in the Linux kernel before 4.14.8 does not correctly handle zero-length inputs, allowing a local attacker a

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux kernel20 Ara 2017

  • CVE-2014-1542
    29İzleyin

    Buffer overflow in the Speex resampler in the Web Audio subsystem in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrar

    OrtaCVSS 6,8İstismar yokEPSS %5

    mozilla · firefox11 Haz 2014

  • CVE-2014-4258
    27İzleyin

    Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier and 5.6.17 and earlier allows remote authenticate

    OrtaCVSS 6,5İstismar yokEPSS %3

    oracle · mysql17 Tem 2014