Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

opensuse suse package hub vulnerabilities and exploits

(subscribe to this query)
668
VMScore
CVE-2016-4303
The parse_string function in cjson.c in the cJSON library mishandles UTF8/16 strings, which allows remote malicious users to cause a denial of service (crash) or execute arbitrary code via a non-hex character in a JSON string, which triggers a heap-based buffer overflow.
Iperf3 Project Iperf3Novell Suse Package Hub For Suse Linux Enterprise 12Opensuse Leap 42.1Opensuse Opensuse 13.2Debian Debian Linux 8.0
632
VMScore
CVE-2016-1956
Mozilla Firefox prior to 45.0 on Linux, when an Intel video driver is used, allows remote malicious users to cause a denial of service (memory consumption or stack memory corruption) by triggering use of a WebGL shader.
Mozilla FirefoxNovell Suse Package Hub For Suse Linux Enterprise 12Opensuse Opensuse 13.1Opensuse Leap 42.1Opensuse Opensuse 13.2
606
VMScore
CVE-2019-13730
Type confusion in JavaScript in Google Chrome before 79.0.3945.79 allowed a remote malicious user to potentially exploit heap corruption via a crafted HTML page.
Google ChromeDebian Debian Linux 9.0Debian Debian Linux 10.0Fedoraproject Fedora 30Fedoraproject Fedora 31Novell Suse Package Hub For Suse Linux Enterprise 12Opensuse Backports Sle-15Redhat Enterprise Linux For Scientific Computing 6.0Redhat Enterprise Linux Desktop 6.0Redhat Enterprise Linux Server 6.0Redhat Enterprise Linux Workstation 6.0
605
VMScore
CVE-2016-1952
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox prior to 45.0 and Firefox ESR 38.x prior to 38.7 allow remote malicious users to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vector...
Oracle Linux 6Oracle Linux 5.0Oracle Linux 7Opensuse Leap 42.1Opensuse Opensuse 13.2Opensuse Opensuse 13.1Novell Suse Package Hub For Suse Linux Enterprise 12Mozilla Firefox Esr 38.6.1Mozilla Firefox Esr 38.6.0Mozilla Firefox Esr 38.1.1Mozilla Firefox Esr 38.1.0Mozilla Firefox Esr 38.4.0Mozilla Firefox Esr 38.3.0Mozilla Firefox Esr 38.0Mozilla FirefoxMozilla ThunderbirdMozilla Firefox Esr 38.2.1Mozilla Firefox Esr 38.2.0Mozilla Firefox Esr 38.5.1Mozilla Firefox Esr 38.5.0Mozilla Firefox Esr 38.0.5Mozilla Firefox Esr 38.0.1
605
VMScore
CVE-2016-1953
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox prior to 45.0 allow remote malicious users to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to js/src/jit/arm/Assembler-arm.c...
Mozilla Firefox Esr 38.6.1Mozilla Firefox Esr 38.6.0Mozilla Firefox Esr 38.1.1Mozilla Firefox Esr 38.5.1Mozilla Firefox Esr 38.5.0Mozilla Firefox Esr 38.0.5Mozilla Firefox Esr 38.0.1Mozilla ThunderbirdMozilla Firefox Esr 38.2.1Mozilla Firefox Esr 38.2.0Mozilla Firefox Esr 38.1.0Mozilla Firefox Esr 38.4.0Mozilla Firefox Esr 38.3.0Mozilla Firefox Esr 38.0Mozilla FirefoxNovell Suse Package Hub For Suse Linux Enterprise 12Opensuse Leap 42.1Opensuse Opensuse 13.2Opensuse Opensuse 13.1
605
VMScore
CVE-2016-1954
The nsCSPContext::SendReports function in dom/security/nsCSPContext.cpp in Mozilla Firefox prior to 45.0 and Firefox ESR 38.x prior to 38.7 does not prevent use of a non-HTTP report-uri for a Content Security Policy (CSP) violation report, which allows remote malicious users to c...
Mozilla Firefox Esr 38.3.0Mozilla Firefox Esr 38.2.1Mozilla Firefox Esr 38.2.0Mozilla FirefoxMozilla Firefox Esr 38.5.0Mozilla Firefox Esr 38.4.0Mozilla Firefox Esr 38.0Mozilla ThunderbirdMozilla Firefox Esr 38.6.0Mozilla Firefox Esr 38.5.1Mozilla Firefox Esr 38.0.5Mozilla Firefox Esr 38.0.1Mozilla Firefox Esr 38.6.1Mozilla Firefox Esr 38.1.1Mozilla Firefox Esr 38.1.0Opensuse Opensuse 13.2Opensuse Opensuse 13.1Novell Suse Package Hub For Suse Linux Enterprise 12Opensuse Leap 42.1Oracle Linux 6Oracle Linux 5.0Oracle Linux 7
454
VMScore
CVE-2019-9811
As part of a winning Pwn2Own entry, a researcher demonstrated a sandbox escape by installing a malicious language pack and then opening a browser feature that used the compromised translation. This vulnerability affects Firefox ESR < 60.8, Firefox < 68, and Thunderbird <...
Mozilla FirefoxMozilla Firefox EsrMozilla ThunderbirdDebian Debian Linux 8.0Novell Suse Package Hub For Suse Linux Enterprise 12Opensuse Leap 15.0Opensuse Leap 15.1
445
VMScore
CVE-2019-15623
Exposure of Private Information in Nextcloud Server 16.0.1 causes the server to send it's domain and user IDs to the Nextcloud Lookup Server without any further data when the Lookup server is disabled.
Nextcloud Nextcloud ServerOpensuse Backports Sle 15.0Suse Package Hub -
445
VMScore
CVE-2019-11717
A vulnerability exists where the caret ("^") character is improperly escaped constructing some URIs due to it being used as a separator, allowing for possible spoofing of origin attributes. This vulnerability affects Firefox ESR < 60.8, Firefox < 68, and Thunderbi...
Mozilla FirefoxMozilla Firefox EsrMozilla ThunderbirdDebian Debian Linux 8.0Novell Suse Package Hub For Suse Linux Enterprise 12Opensuse Leap 15.0Opensuse Leap 15.1
383
VMScore
CVE-2019-5798
Lack of correct bounds checking in Skia in Google Chrome before 73.0.3683.75 allowed a remote malicious user to perform an out of bounds memory read via a crafted HTML page.
Google ChromeDebian Debian Linux 8.0Debian Debian Linux 9.0Redhat Enterprise Linux 7.0Redhat Enterprise Linux 6.0Opensuse Leap 42.3Canonical Ubuntu Linux 18.04Opensuse Leap 15.0Canonical Ubuntu Linux 18.10Canonical Ubuntu Linux 19.04Suse Package Hub -Redhat Enterprise Linux 8.0Opensuse Backports Sle-15Opensuse Leap 15.1Canonical Ubuntu Linux 16.04
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook