VYPR
← SUSE S.A.

Vendor CVEs

SUSE S.A.

All CVEs

1,571 total · sorted by risk
  • CVE-2017-18200MedFeb 26, 2018
    Linux
    Kernel
    risk 0.00cvss 5.5epss 0.00

    The f2fs implementation in the Linux kernel before 4.14 mishandles reference counts associated with f2fs_wait_discard_bios calls, which allows local users to cause a denial of service (BUG), as demonstrated by fstrim.

  • CVE-2017-18193MedFeb 22, 2018
    Linux
    Kernel
    risk 0.00cvss 5.5epss 0.00

    fs/f2fs/extent_cache.c in the Linux kernel before 4.13 mishandles extent trees, which allows local users to cause a denial of service (BUG) via an application with multiple threads.

  • CVE-2018-6412HigJan 31, 2018
    Linux
    Kernel
    risk 0.00cvss 7.5epss 0.02

    In the function sbusfb_ioctl_helper() in drivers/video/fbdev/sbuslib.c in the Linux kernel through 4.15, an integer signedness error allows arbitrary information leakage for the FBIOPUTCMAP_SPARC and FBIOGETCMAP_SPARC commands.

  • CVE-2017-15128MedJan 14, 2018
    Linux
    Kernel
    risk 0.00cvss 5.5epss 0.00

    A flaw was found in the hugetlb_mcopy_atomic_pte function in mm/hugetlb.c in the Linux kernel before 4.13.12. A lack of size check could cause a denial of service (BUG).

  • CVE-2017-15127MedJan 14, 2018
    Linux
    Kernel
    risk 0.00cvss 5.5epss 0.00

    A flaw was found in the hugetlb_mcopy_atomic_pte function in mm/hugetlb.c in the Linux kernel before 4.13. A superfluous implicit page unlock for VM_SHARED hugetlbfs mapping could trigger a local denial of service (BUG).

  • CVE-2017-15126HigJan 14, 2018
    Linux
    Kernel
    risk 0.00cvss 8.1epss 0.04

    A use-after-free flaw was found in fs/userfaultfd.c in the Linux kernel before 4.13.6. The issue is related to the handling of fork failure when dealing with event messages. Failure to fork correctly can lead to a situation where a fork event will be removed from an already…

  • CVE-2018-5344HigJan 12, 2018
    Linux
    Kernel
    risk 0.00cvss 7.8epss 0.00

    In the Linux kernel through 4.14.13, drivers/block/loop.c mishandles lo_release serialization, which allows attackers to cause a denial of service (__lock_acquire use-after-free) or possibly have unspecified other impact.

  • CVE-2015-5006Dec 7, 2015
    IBM
    Java
    risk 0.00cvss —epss 0.00

    IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR2, 7 R1 before SR3 FP20, 7 before SR9 FP20, 6 R1 before SR8 FP15, and 6 before SR16 FP15 allow physically proximate attackers to obtain sensitive information by reading the Kerberos Credential Cache.

  • CVE-2015-0272Nov 17, 2015
    GNOME Foundation
    Networkmanager
    risk 0.00cvss —epss 0.05

    GNOME NetworkManager allows remote attackers to cause a denial of service (IPv6 traffic disruption) via a crafted MTU value in an IPv6 Router Advertisement (RA) message, a different vulnerability than CVE-2015-8215.

  • CVE-2015-2697Nov 9, 2015
    Mit
    Kerberos 5
    risk 0.00cvss —epss 0.04

    The build_principal_va function in lib/krb5/krb/bld_princ.c in MIT Kerberos 5 (aka krb5) before 1.14 allows remote authenticated users to cause a denial of service (out-of-bounds read and KDC crash) via an initial '\0' character in a long realm field within a TGS request.

  • CVE-2015-2696Nov 9, 2015
    Mit
    Kerberos 5
    risk 0.00cvss —epss 0.05

    lib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an inappropriate context handle, which allows remote attackers to cause a denial of service (incorrect pointer read and process crash) via a crafted IAKERB packet that is mishandled during a…

  • CVE-2015-2695Nov 9, 2015
    Mit
    Kerberos 5
    risk 0.00cvss —epss 0.06

    lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an inappropriate context handle, which allows remote attackers to cause a denial of service (incorrect pointer read and process crash) via a crafted SPNEGO packet that is mishandled during a…

  • CVE-2015-4830Oct 21, 2015
    Fedoraproject
    Fedora
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect integrity via unknown vectors related to Server : Security : Privileges.

  • CVE-2015-5707Oct 19, 2015
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    Integer overflow in the sg_start_req function in drivers/scsi/sg.c in the Linux kernel 2.6.x through 4.x before 4.1 allows local users to cause a denial of service or possibly have unspecified other impact via a large iov_count value in a write request.

  • CVE-2015-1781Sep 28, 2015
    GNU
    Glibc
    risk 0.00cvss —epss 0.05

    Buffer overflow in the gethostbyname_r and other unspecified NSS functions in the GNU C Library (aka glibc or libc6) before 2.22 allows context-dependent attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response, which triggers a call…

  • CVE-2015-5706Aug 31, 2015
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    Use-after-free vulnerability in the path_openat function in fs/namei.c in the Linux kernel 3.x and 4.x before 4.0.4 allows local users to cause a denial of service or possibly have unspecified other impact via O_TMPFILE filesystem operations that leverage a duplicate cleanup…

  • CVE-2015-3290Aug 31, 2015
    Linux
    Kernel
    risk 0.00cvss —epss 0.01

    arch/x86/entry/entry_64.S in the Linux kernel before 4.1.6 on the x86_64 platform improperly relies on espfix64 during nested NMI processing, which allows local users to gain privileges by triggering an NMI within a certain instruction window.

  • CVE-2015-5154Aug 12, 2015
    QEMU
    Qemu
    risk 0.00cvss —epss 0.01

    Heap-based buffer overflow in the IDE subsystem in QEMU, as used in Xen 4.5.x and earlier, when the container has a CDROM drive enabled, allows local guest users to execute arbitrary code on the host via unspecified ATAPI commands.

  • CVE-2015-3281Jul 6, 2015
    Haproxy
    Haproxy
    risk 0.00cvss —epss 0.04

    The buffer_slow_realign function in HAProxy 1.5.x before 1.5.14 and 1.6-dev does not properly realign a buffer that is used for pending outgoing data, which allows remote attackers to obtain sensitive information (uninitialized memory contents of previous requests) via a crafted…

  • CVE-2015-2738Jul 6, 2015
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.03

    The YCbCrImageDataDeserializer::ToDataSourceSurface function in the YCbCr implementation in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 reads data from uninitialized memory locations, which has unspecified impact…

  • CVE-2015-2737Jul 6, 2015
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.03

    The rx::d3d11::SetBufferData function in the Direct3D 11 implementation in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 reads data from uninitialized memory locations, which has unspecified impact and attack vectors.

  • CVE-2015-2734Jul 6, 2015
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.03

    The CairoTextureClientD3D9::BorrowDrawTarget function in the Direct3D 9 implementation in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 reads data from uninitialized memory locations, which has unspecified impact and…

  • CVE-2015-4106Jun 3, 2015
    QEMU
    Qemu
    risk 0.00cvss —epss 0.00

    QEMU does not properly restrict write access to the PCI config space for certain PCI pass-through devices, which might allow local x86 HVM guests to gain privileges, cause a denial of service (host crash), obtain sensitive information, or possibly have other unspecified impact…

  • CVE-2014-8162May 14, 2015
    Red Hat
    Satellite
    risk 0.00cvss —epss 0.03

    XML external entity (XXE) in the RPC interface in Spacewalk and Red Hat Network (RHN) Satellite 5.7 and earlier allows remote attackers to read arbitrary files and possibly have other unspecified impact via unknown vectors.

  • CVE-2015-0797May 14, 2015
    Gstreamer
    Gstreamer
    risk 0.00cvss —epss 0.05

    GStreamer before 1.4.5, as used in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 on Linux, allows remote attackers to cause a denial of service (buffer over-read and application crash) or possibly execute arbitrary code via crafted H.264…

  • CVE-2015-3340Apr 28, 2015
    Xen
    Xen
    risk 0.00cvss —epss 0.01

    Xen 4.2.x through 4.5.x does not initialize certain fields, which allows certain remote service domains to obtain sensitive information from memory via a (1) XEN_DOMCTL_gettscinfo or (2) XEN_SYSCTL_getdomaininfolist request.

  • CVE-2015-2041Apr 21, 2015
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    net/llc/sysctl_net_llc.c in the Linux kernel before 3.19 uses an incorrect data type in a sysctl table, which allows local users to obtain potentially sensitive information from kernel memory or possibly have unspecified other impact by accessing a sysctl entry.

  • CVE-2015-1241Apr 19, 2015
    Google
    Chrome
    risk 0.00cvss —epss 0.02

    Google Chrome before 42.0.2311.90 does not properly consider the interaction of page navigation with the handling of touch events and gesture events, which allows remote attackers to trigger unintended UI actions via a crafted web site that conducts a "tapjacking" attack.

  • CVE-2015-2576Apr 16, 2015
    Oracle Corporation
    MySQL
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in the MySQL Utilities component in Oracle MySQL 1.5.1 and earlier, when running on Windows, allows local users to affect integrity via unknown vectors related to Installation.

  • CVE-2015-2575Apr 16, 2015
    MySQL
    MySQL
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in the MySQL Connectors component in Oracle MySQL 5.1.34 and earlier allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Connector/J.

  • CVE-2015-2573Apr 16, 2015
    MariaDB
    MariaDB
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows remote authenticated users to affect availability via vectors related to DDL.

  • CVE-2015-2571Apr 16, 2015
    MariaDB
    MariaDB
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : Optimizer.

  • CVE-2015-0505Apr 16, 2015
    MariaDB
    MariaDB
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect availability via vectors related to DDL.

  • CVE-2015-0500Apr 16, 2015
    Oracle Corporation
    MySQL
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated users to affect availability via unknown vectors.

  • CVE-2015-0499Apr 16, 2015
    MariaDB
    MariaDB
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : Federated.

  • CVE-2015-0492Apr 16, 2015
    Oracle Corporation
    Javafx
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in Oracle Java SE 7u76 and 8u40, and JavaFX 2.2.76, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2015-0484.

  • CVE-2015-0491Apr 16, 2015
    Oracle Corporation
    Java Se
    risk 0.00cvss —epss 0.06

    Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and Java FX 2.2.76, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2015-0459.

  • CVE-2015-0484Apr 16, 2015
    Oracle Corporation
    Java Se
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in Oracle Java SE 7u76 and 8u40, and Java FX 2.2.76, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2015-0492.

  • CVE-2015-0441Apr 16, 2015
    MariaDB
    MariaDB
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : Security : Encryption.

  • CVE-2015-0439Apr 16, 2015
    Novell
    Suse Linux Enterprise Desktop
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : InnoDB, a different vulnerability than CVE-2015-4756.

  • CVE-2015-0433Apr 16, 2015
    MariaDB
    MariaDB
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows remote authenticated users to affect availability via vectors related to InnoDB : DML.

  • CVE-2015-3041Apr 14, 2015
    Adobe Inc.
    Flashplayer
    risk 0.00cvss —epss 0.06

    Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than…

  • CVE-2015-3040Apr 14, 2015
    Adobe Inc.
    Flashplayer
    risk 0.00cvss —epss 0.05

    Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a…

  • CVE-2015-0360Apr 14, 2015
    Adobe Inc.
    Flashplayer
    risk 0.00cvss —epss 0.06

    Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than…

  • CVE-2015-0355Apr 14, 2015
    Adobe Inc.
    Flashplayer
    risk 0.00cvss —epss 0.06

    Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than…

  • CVE-2015-0354Apr 14, 2015
    Adobe Inc.
    Flashplayer
    risk 0.00cvss —epss 0.06

    Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than…

  • CVE-2015-0353Apr 14, 2015
    Adobe Inc.
    Flashplayer
    risk 0.00cvss —epss 0.06

    Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than…

  • CVE-2015-0352Apr 14, 2015
    Adobe Inc.
    Flashplayer
    risk 0.00cvss —epss 0.06

    Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than…

  • CVE-2015-0350Apr 14, 2015
    Adobe Inc.
    Flashplayer
    risk 0.00cvss —epss 0.06

    Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than…

  • CVE-2015-0347Apr 14, 2015
    Adobe Inc.
    Flashplayer
    risk 0.00cvss —epss 0.06

    Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than…

Page 22 of 32