Read the docs

openSUSE

Records3295All Threatist records
Exploited (KEV)61In CISA KEV
CVSS critical454CVSS 9.0–10.0
CVSS high1241CVSS 7.0–8.9

Exploited now

openSUSE records in CISA KEV
TI-2015-02923 ProFTPD Improper Access Control Vulnerability Priority CRITICAL 100KEV 2026-10-08TI-2015-04610 ISC BIND Data Processing Errors Vulnerability Priority CRITICAL 92KEV 2026-10-08TI-2015-02874 Red Hat Libuser Race Condition Vulnerability Priority CRITICAL 92KEV 2026-08-26TI-2026-23989 Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability Priority CRITICAL 93KEV 2026-05-01TI-2025-23530 Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability Priority CRITICAL 99KEV 2025-09-29TI-2019-03828 Rails Ruby on Rails Path Traversal Vulnerability Priority CRITICAL 90KEV 2025-07-07

Components

Products in the NVD configurations · select one to filter the records
Leap 1898 records CRITICAL Opensuse 1456 records CRITICAL Backports Sle 326 records CRITICAL Backports 97 records MEDIUM Evergreen 44 records CRITICAL Open Build Service 22 records MEDIUM Libsolv 13 records MEDIUM Factory 10 records LOW

Records

44 records in Evergreen · all components

TI-2015-04302 CVE-2015-5123 · GHSA-6hpg-rw47-66vr

Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3)…

Priority CRITICAL 100KEV

Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through 18.0.0.203 on Windows and OS X, 11.x through…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.1883 Published 2015-07-14 Fixed CWE-416
TI-2015-04301 CVE-2015-5122 · GHSA-9h3m-vp3m-35pw

Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3)…

Priority CRITICAL 100KEV

Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through 18.0.0.203 on Windows and OS X, 11.x thro…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.87033 Published 2015-07-14 Fixed CWE-416
TI-2015-04298 CVE-2015-5119 · GHSA-3792-ff84-674w

Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3)…

Priority CRITICAL 100KEV

Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.296 and 14.x through 18.0.0.194 on Windows and OS X and 11.x through 11.2.202.468 o…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.98618 Published 2015-07-08 Fixed CWE-416
TI-2015-02747 CVE-2015-3113 · GHSA-fcrm-7q5r-w4rw

Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x…

Priority CRITICAL 100KEV

Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11.2.202.468 on Linux allows remote attackers to execute arbitrary code via unspec…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.99812 Published 2015-06-23 Fixed CWE-122
TI-2015-02679 CVE-2015-3043 · GHSA-68qr-58pp-42rr

Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows…

Priority CRITICAL 100KEV

Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.73862 Published 2015-04-14 Fixed CWE-787
TI-2015-00277 CVE-2015-0313 · GHSA-fg66-4vpm-36cx

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through…

Priority CRITICAL 100KEV

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows remote attackers to execute arbitrary code via unsp…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.95341 Published 2015-02-02 No fix listed CWE-416
TI-2015-07113 CVE-2015-8651 · GHSA-8p63-f9jh-3gch

Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before…

Priority CRITICAL 97KEV

Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe A…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.67698 Published 2015-12-28 Fixed CWE-190
TI-2015-04610 CVE-2015-5477 · GHSA-4622-vjcx-p39j

Assertion failure in ISC BIND named via TKEY queries

Priority CRITICAL 92KEV

named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.99584 Published 2015-07-29 Partial fix CWE-617
TI-2014-00547 CVE-2014-0569 · GHSA-43mw-6w68-5pvw

Integer overflow in Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before…

Priority HIGH 83

Integer overflow in Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe A…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.9128 Published 2014-10-15 Fixed CWE-190
TI-2014-01216 CVE-2014-1563 · GHSA-r4rg-39xh-pg83

Use-after-free vulnerability in the mozilla::DOMSVGLength::GetTearOff function in Mozilla…

Priority MEDIUM 52

Use-after-free vulnerability in the mozilla::DOMSVGLength::GetTearOff function in Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 allows remote attackers to execute arbitrary c…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05801 Published 2014-09-03 No fix listed CWE-416
TI-2015-04304 CVE-2015-5125 · GHSA-xc3j-45j3-3c29

Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on…

Priority MEDIUM 51

Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to c…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05652 Published 2015-08-14 No fix listed CWE-119
TI-2014-01206 CVE-2014-1553 · GHSA-rvvr-h4rh-2hm5

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before…

Priority MEDIUM 51

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 allow remote attackers to cause a denial of service (memory corrup…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05721 Published 2014-09-03 No fix listed CWE-119
TI-2014-03003 CVE-2014-3687 · GHSA-g3cq-4g9m-v985

The sctp_assoc_lookup_asconf_ack function in net/sctp/associola.c in the SCTP…

Priority MEDIUM 44

The sctp_assoc_lookup_asconf_ack function in net/sctp/associola.c in the SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a denial of service (panic) via duplicate ASCONF chunks tha…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.08579 Published 2014-11-10 Partial fix CWE-400
Load more
Open these records in search →