[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fmYeXMXgAKID74lwwRkxNlf1jwE0_K3fqEAUl9O7Ff_s":3,"g5a-family:suse\u002Fstudio_onsite":135,"g5a-ex:suse\u002Fstudio_onsite@*":138},{"success":4,"data":5},true,{"product":6,"versions":36,"topVulnerabilitiesByEpss":45,"kevVulnerabilities":105,"seoMetadata":113,"meta":132},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":35},"suse","studio_onsite",8,22,2,"2020-01-27",[14,19,21,24,27,29,31,33],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},"1.2",5,0,false,{"version":20,"cve_count":17,"kev_count":17,"has_kev":18},"1.2.1",{"version":22,"cve_count":23,"kev_count":11,"has_kev":4},"1.3",16,{"version":25,"cve_count":26,"kev_count":17,"has_kev":18},"1.3.1",1,{"version":28,"cve_count":26,"kev_count":17,"has_kev":18},"1.3.2",{"version":30,"cve_count":26,"kev_count":17,"has_kev":18},"1.3.3",{"version":32,"cve_count":26,"kev_count":17,"has_kev":18},"1.3.4",{"version":34,"cve_count":26,"kev_count":17,"has_kev":18},"1.3.5","Studio Onsite by Suse is a technology product with 8 tracked versions and 22 known security vulnerabilities including 2 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[37,38,39,40,41,42,43,44],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},{"version":20,"cve_count":17,"kev_count":17,"has_kev":18},{"version":22,"cve_count":23,"kev_count":11,"has_kev":4},{"version":25,"cve_count":26,"kev_count":17,"has_kev":18},{"version":28,"cve_count":26,"kev_count":17,"has_kev":18},{"version":30,"cve_count":26,"kev_count":17,"has_kev":18},{"version":32,"cve_count":26,"kev_count":17,"has_kev":18},{"version":34,"cve_count":26,"kev_count":17,"has_kev":18},[46,54,59,67,72,79,84,89,95,100],{"cveId":47,"description":48,"publishedDate":49,"cvssScore":50,"cvssVersion":51,"severity":52,"isKev":4,"epssScore":53},"CVE-2014-6271","GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution, aka \"ShellShock.\"  NOTE: the original fix for this issue was incorrect; CVE-2014-7169 has been assigned to cover the vulnerability that is still present after the incorrect fix.","2014-09-24",9.8,"v3.1","Critical",0.99999,{"cveId":55,"description":56,"publishedDate":57,"cvssScore":50,"cvssVersion":51,"severity":52,"isKev":4,"epssScore":58},"CVE-2014-7169","GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possibly have unknown other impact via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-6271.","2014-09-25",0.9994,{"cveId":60,"description":61,"publishedDate":62,"cvssScore":63,"cvssVersion":64,"severity":65,"isKev":18,"epssScore":66},"CVE-2013-4547","nginx 0.8.41 through 1.4.3 and 1.5.x before 1.5.7 allows remote attackers to bypass intended restrictions via an unescaped space character in a URI.","2013-11-23",7.5,"v2","High",0.67718,{"cveId":68,"description":69,"publishedDate":70,"cvssScore":50,"cvssVersion":51,"severity":52,"isKev":18,"epssScore":71},"CVE-2016-5118","The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote attackers to execute arbitrary code via a | (pipe) character at the start of a filename.","2016-06-10",0.49982,{"cveId":73,"description":74,"publishedDate":75,"cvssScore":76,"cvssVersion":64,"severity":77,"isKev":18,"epssScore":78},"CVE-2015-1283","Multiple integer overflows in the XML_GetBuffer function in Expat through 2.1.0, as used in Google Chrome before 44.0.2403.89 and other products, allow remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted XML data, a related issue to CVE-2015-2716.","2015-07-23",6.8,"Medium",0.18439,{"cveId":80,"description":81,"publishedDate":82,"cvssScore":50,"cvssVersion":51,"severity":52,"isKev":18,"epssScore":83},"CVE-2016-0718","Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed input document, which triggers a buffer overflow.","2016-05-26",0.13335,{"cveId":85,"description":86,"publishedDate":87,"cvssScore":76,"cvssVersion":64,"severity":77,"isKev":18,"epssScore":88},"CVE-2011-4315","Heap-based buffer overflow in compression-pointer processing in core\u002Fngx_resolver.c in nginx before 1.0.10 allows remote resolvers to cause a denial of service (daemon crash) or possibly have unspecified other impact via a long response.","2011-12-08",0.05962,{"cveId":90,"description":91,"publishedDate":92,"cvssScore":50,"cvssVersion":93,"severity":52,"isKev":18,"epssScore":94},"CVE-2014-9846","Buffer overflow in the ReadRLEImage function in coders\u002Frle.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact.","2017-03-20","v3.0",0.04852,{"cveId":96,"description":97,"publishedDate":98,"cvssScore":63,"cvssVersion":64,"severity":65,"isKev":18,"epssScore":99},"CVE-2011-3180","kiwi before 4.98.08, as used in SUSE Studio Onsite 1.2 before 1.2.1 and SUSE Studio Extension for System z 1.2 before 1.2.1, allows attackers to execute arbitrary commands via shell metacharacters in the path of an overlay file, related to chown.","2014-04-16",0.02578,{"cveId":101,"description":102,"publishedDate":92,"cvssScore":103,"cvssVersion":93,"severity":77,"isKev":18,"epssScore":104},"CVE-2014-9844","The ReadRLEImage function in coders\u002Frle.c in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted image file.",5.5,0.02054,[106,111],{"cveId":47,"description":48,"publishedDate":49,"cvssScore":50,"severity":52,"isKev":4,"epssScore":53,"cisaVulnName":107,"cisaDateAdded":108,"cisaShortDescription":109,"cisaRequiredAction":110},"GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability","2022-01-28","GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code.","Apply updates per vendor instructions.",{"cveId":55,"description":56,"publishedDate":57,"cvssScore":50,"severity":52,"isKev":4,"epssScore":58,"cisaVulnName":107,"cisaDateAdded":108,"cisaShortDescription":112,"cisaRequiredAction":110},"GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code. This CVE correctly remediates the vulnerability in CVE-2014-6271.",{"title":114,"metaDescription":115,"keywords":116,"structuredData":117},"Studio Onsite by Suse - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Studio Onsite by Suse covering 8 versions with 22 tracked vulnerabilities including 2 critical and 0 high-severity issues and 2 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Studio Onsite vulnerabilities, Studio Onsite security, Studio Onsite CVE, Suse Studio Onsite, Studio Onsite threat intelligence, Suse security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Studio Onsite KEV, Studio Onsite exploited vulnerabilities",{"@context":118,"@type":119,"name":120,"description":115,"url":121,"manufacturer":122,"applicationCategory":126,"softwareVersion":127,"mainEntity":128},"https:\u002F\u002Fschema.org","SoftwareApplication","Studio Onsite","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fsuse\u002Fstudio_onsite",{"@type":123,"name":124,"url":125},"Organization","Suse","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fsuse","Security Software","8 versions tracked",{"@type":129,"name":130,"description":131,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Studio Onsite Security Vulnerabilities","Security vulnerabilities affecting Studio Onsite by Suse",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":133,"apiVersion":134},"2026-10-17T16:54:28.729Z","3.0",[136],{"product":137,"cves":26},"studio_onsite_appliance",{"rows":139,"total":11,"capped":18,"failed":17},[140,144],{"cveId":47,"name":107,"severity":52,"cvss":50,"added":108,"epss":53,"published":141,"ranges":142,"checked":4,"hits":143,"covers":18},"2014-09-24T18:48:04.477",[22],[],{"cveId":55,"name":107,"severity":52,"cvss":50,"added":108,"epss":58,"published":145,"ranges":146,"checked":4,"hits":147,"covers":18},"2014-09-25T01:55:04.367",[22],[]]