Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

suse package hub for suse linux enterprise vulnerabilities and exploits

(subscribe to this query)
383
VMScore
CVE-2016-1955
Mozilla Firefox prior to 45.0 allows remote malicious users to bypass the Same Origin Policy and obtain sensitive information by reading a Content Security Policy (CSP) violation report that contains path information associated with an IFRAME element.
Opensuse Opensuse 13.1Opensuse Leap 42.1Opensuse Opensuse 13.2Novell Suse Package Hub For Suse Linux Enterprise 12Mozilla Firefox
632
VMScore
CVE-2016-1956
Mozilla Firefox prior to 45.0 on Linux, when an Intel video driver is used, allows remote malicious users to cause a denial of service (memory consumption or stack memory corruption) by triggering use of a WebGL shader.
Mozilla FirefoxNovell Suse Package Hub For Suse Linux Enterprise 12Opensuse Opensuse 13.1Opensuse Leap 42.1Opensuse Opensuse 13.2
668
VMScore
CVE-2016-4303
The parse_string function in cjson.c in the cJSON library mishandles UTF8/16 strings, which allows remote malicious users to cause a denial of service (crash) or execute arbitrary code via a non-hex character in a JSON string, which triggers a heap-based buffer overflow.
Iperf3 Project Iperf3Novell Suse Package Hub For Suse Linux Enterprise 12Opensuse Leap 42.1Opensuse Opensuse 13.2Debian Debian Linux 8.0
383
VMScore
CVE-2017-8932
A bug in the standard library ScalarMult implementation of curve P-256 for amd64 architectures in Go prior to 1.7.6 and 1.8.x prior to 1.8.2 causes incorrect results to be generated for specific input points. An adaptive attack can be mounted to progressively extract the scalar i...
Golang Go 1.8Golang Go 1.8.1Golang GoFedoraproject Fedora 25Novell Suse Package Hub For Suse Linux Enterprise 12Opensuse Leap 42.2
445
VMScore
CVE-2019-11717
A vulnerability exists where the caret ("^") character is improperly escaped constructing some URIs due to it being used as a separator, allowing for possible spoofing of origin attributes. This vulnerability affects Firefox ESR < 60.8, Firefox < 68, and Thunderbi...
Mozilla FirefoxMozilla Firefox EsrMozilla ThunderbirdDebian Debian Linux 8.0Novell Suse Package Hub For Suse Linux Enterprise 12Opensuse Leap 15.0Opensuse Leap 15.1
454
VMScore
CVE-2019-9811
As part of a winning Pwn2Own entry, a researcher demonstrated a sandbox escape by installing a malicious language pack and then opening a browser feature that used the compromised translation. This vulnerability affects Firefox ESR < 60.8, Firefox < 68, and Thunderbird <...
Mozilla FirefoxMozilla Firefox EsrMozilla ThunderbirdDebian Debian Linux 8.0Novell Suse Package Hub For Suse Linux Enterprise 12Opensuse Leap 15.0Opensuse Leap 15.1
606
VMScore
CVE-2019-13730
Type confusion in JavaScript in Google Chrome before 79.0.3945.79 allowed a remote malicious user to potentially exploit heap corruption via a crafted HTML page.
Google ChromeDebian Debian Linux 9.0Debian Debian Linux 10.0Fedoraproject Fedora 30Fedoraproject Fedora 31Novell Suse Package Hub For Suse Linux Enterprise 12Opensuse Backports Sle-15Redhat Enterprise Linux For Scientific Computing 6.0Redhat Enterprise Linux Desktop 6.0Redhat Enterprise Linux Server 6.0Redhat Enterprise Linux Workstation 6.0
605
VMScore
CVE-2019-11338
libavcodec/hevcdec.c in FFmpeg 3.4 and 4.1.2 mishandles detection of duplicate first slices, which allows remote malicious users to cause a denial of service (NULL pointer dereference and out-of-array access) or possibly have unspecified other impact via crafted HEVC data.
Ffmpeg Ffmpeg 3.4Ffmpeg Ffmpeg 4.1.2Debian Debian Linux 8.0Debian Debian Linux 9.0Novell Suse Package Hub For Suse Linux Enterprise 12Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 18.10Canonical Ubuntu Linux 19.04Canonical Ubuntu Linux 20.04Canonical Ubuntu Linux 16.04
383
VMScore
CVE-2019-5798
Lack of correct bounds checking in Skia in Google Chrome before 73.0.3683.75 allowed a remote malicious user to perform an out of bounds memory read via a crafted HTML page.
Google ChromeDebian Debian Linux 8.0Debian Debian Linux 9.0Redhat Enterprise Linux 7.0Redhat Enterprise Linux 6.0Opensuse Leap 42.3Canonical Ubuntu Linux 18.04Opensuse Leap 15.0Canonical Ubuntu Linux 18.10Canonical Ubuntu Linux 19.04Suse Package Hub -Redhat Enterprise Linux 8.0Opensuse Backports Sle-15Opensuse Leap 15.1Canonical Ubuntu Linux 16.04
605
VMScore
CVE-2016-1952
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox prior to 45.0 and Firefox ESR 38.x prior to 38.7 allow remote malicious users to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vector...
Oracle Linux 6Oracle Linux 5.0Oracle Linux 7Opensuse Leap 42.1Opensuse Opensuse 13.2Opensuse Opensuse 13.1Novell Suse Package Hub For Suse Linux Enterprise 12Mozilla Firefox Esr 38.6.1Mozilla Firefox Esr 38.6.0Mozilla Firefox Esr 38.1.1Mozilla Firefox Esr 38.1.0Mozilla Firefox Esr 38.4.0Mozilla Firefox Esr 38.3.0Mozilla Firefox Esr 38.0Mozilla FirefoxMozilla ThunderbirdMozilla Firefox Esr 38.2.1Mozilla Firefox Esr 38.2.0Mozilla Firefox Esr 38.5.1Mozilla Firefox Esr 38.5.0Mozilla Firefox Esr 38.0.5Mozilla Firefox Esr 38.0.1
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
deserializationCVE-2024-4040cross-site scriptingCVE-2023-25790CVE-2024-2961XML external entityCVE-2024-26926CVE-2024-32806CVE-2024-32711
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook