Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

novell suse package hub for suse linux enterprise 12 vulnerabilities and exploits

(subscribe to this query)
9.8
CVSSv3
CVE-2016-4303
The parse_string function in cjson.c in the cJSON library mishandles UTF8/16 strings, which allows remote malicious users to cause a denial of service (crash) or execute arbitrary code via a non-hex character in a JSON string, which triggers a heap-based buffer overflow.
Iperf3 Project Iperf3Novell Suse Package Hub For Suse Linux Enterprise 12Opensuse Leap 42.1Opensuse Opensuse 13.2Debian Debian Linux 8.0
8.8
CVSSv3
CVE-2019-13730
Type confusion in JavaScript in Google Chrome before 79.0.3945.79 allowed a remote malicious user to potentially exploit heap corruption via a crafted HTML page.
Google ChromeDebian Debian Linux 9.0Debian Debian Linux 10.0Fedoraproject Fedora 30Fedoraproject Fedora 31Novell Suse Package Hub For Suse Linux Enterprise 12Opensuse Backports Sle-15Redhat Enterprise Linux For Scientific Computing 6.0Redhat Enterprise Linux Desktop 6.0Redhat Enterprise Linux Server 6.0Redhat Enterprise Linux Workstation 6.0
8.8
CVSSv3
CVE-2019-11338
libavcodec/hevcdec.c in FFmpeg 3.4 and 4.1.2 mishandles detection of duplicate first slices, which allows remote malicious users to cause a denial of service (NULL pointer dereference and out-of-array access) or possibly have unspecified other impact via crafted HEVC data.
Ffmpeg Ffmpeg 3.4Ffmpeg Ffmpeg 4.1.2Debian Debian Linux 8.0Debian Debian Linux 9.0Novell Suse Package Hub For Suse Linux Enterprise 12Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 18.10Canonical Ubuntu Linux 19.04Canonical Ubuntu Linux 20.04Canonical Ubuntu Linux 16.04
8.8
CVSSv3
CVE-2016-1952
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox prior to 45.0 and Firefox ESR 38.x prior to 38.7 allow remote malicious users to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vector...
Oracle Linux 6Oracle Linux 5.0Oracle Linux 7Opensuse Leap 42.1Opensuse Opensuse 13.2Opensuse Opensuse 13.1Novell Suse Package Hub For Suse Linux Enterprise 12Mozilla Firefox Esr 38.6.1Mozilla Firefox Esr 38.6.0Mozilla Firefox Esr 38.1.1Mozilla Firefox Esr 38.1.0Mozilla Firefox Esr 38.4.0Mozilla Firefox Esr 38.3.0Mozilla Firefox Esr 38.0Mozilla FirefoxMozilla ThunderbirdMozilla Firefox Esr 38.2.1Mozilla Firefox Esr 38.2.0Mozilla Firefox Esr 38.5.1Mozilla Firefox Esr 38.5.0Mozilla Firefox Esr 38.0.5Mozilla Firefox Esr 38.0.1
8.8
CVSSv3
CVE-2016-1953
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox prior to 45.0 allow remote malicious users to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to js/src/jit/arm/Assembler-arm.c...
Mozilla Firefox Esr 38.6.1Mozilla Firefox Esr 38.6.0Mozilla Firefox Esr 38.1.1Mozilla Firefox Esr 38.5.1Mozilla Firefox Esr 38.5.0Mozilla Firefox Esr 38.0.5Mozilla Firefox Esr 38.0.1Mozilla ThunderbirdMozilla Firefox Esr 38.2.1Mozilla Firefox Esr 38.2.0Mozilla Firefox Esr 38.1.0Mozilla Firefox Esr 38.4.0Mozilla Firefox Esr 38.3.0Mozilla Firefox Esr 38.0Mozilla FirefoxNovell Suse Package Hub For Suse Linux Enterprise 12Opensuse Leap 42.1Opensuse Opensuse 13.2Opensuse Opensuse 13.1
8.8
CVSSv3
CVE-2016-1954
The nsCSPContext::SendReports function in dom/security/nsCSPContext.cpp in Mozilla Firefox prior to 45.0 and Firefox ESR 38.x prior to 38.7 does not prevent use of a non-HTTP report-uri for a Content Security Policy (CSP) violation report, which allows remote malicious users to c...
Mozilla Firefox Esr 38.3.0Mozilla Firefox Esr 38.2.1Mozilla Firefox Esr 38.2.0Mozilla FirefoxMozilla Firefox Esr 38.5.0Mozilla Firefox Esr 38.4.0Mozilla Firefox Esr 38.0Mozilla ThunderbirdMozilla Firefox Esr 38.6.0Mozilla Firefox Esr 38.5.1Mozilla Firefox Esr 38.0.5Mozilla Firefox Esr 38.0.1Mozilla Firefox Esr 38.6.1Mozilla Firefox Esr 38.1.1Mozilla Firefox Esr 38.1.0Opensuse Opensuse 13.2Opensuse Opensuse 13.1Novell Suse Package Hub For Suse Linux Enterprise 12Opensuse Leap 42.1Oracle Linux 6Oracle Linux 5.0Oracle Linux 7
8.3
CVSSv3
CVE-2019-9811
As part of a winning Pwn2Own entry, a researcher demonstrated a sandbox escape by installing a malicious language pack and then opening a browser feature that used the compromised translation. This vulnerability affects Firefox ESR < 60.8, Firefox < 68, and Thunderbird <...
Mozilla FirefoxMozilla Firefox EsrMozilla ThunderbirdDebian Debian Linux 8.0Novell Suse Package Hub For Suse Linux Enterprise 12Opensuse Leap 15.0Opensuse Leap 15.1
6.5
CVSSv3
CVE-2016-1956
Mozilla Firefox prior to 45.0 on Linux, when an Intel video driver is used, allows remote malicious users to cause a denial of service (memory consumption or stack memory corruption) by triggering use of a WebGL shader.
Mozilla FirefoxNovell Suse Package Hub For Suse Linux Enterprise 12Opensuse Opensuse 13.1Opensuse Leap 42.1Opensuse Opensuse 13.2
5.9
CVSSv3
CVE-2017-8932
A bug in the standard library ScalarMult implementation of curve P-256 for amd64 architectures in Go prior to 1.7.6 and 1.8.x prior to 1.8.2 causes incorrect results to be generated for specific input points. An adaptive attack can be mounted to progressively extract the scalar i...
Golang Go 1.8Golang Go 1.8.1Golang GoFedoraproject Fedora 25Novell Suse Package Hub For Suse Linux Enterprise 12Opensuse Leap 42.2
5.3
CVSSv3
CVE-2019-11717
A vulnerability exists where the caret ("^") character is improperly escaped constructing some URIs due to it being used as a separator, allowing for possible spoofing of origin attributes. This vulnerability affects Firefox ESR < 60.8, Firefox < 68, and Thunderbi...
Mozilla FirefoxMozilla Firefox EsrMozilla ThunderbirdDebian Debian Linux 8.0Novell Suse Package Hub For Suse Linux Enterprise 12Opensuse Leap 15.0Opensuse Leap 15.1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook