Opensuse Project vulnerabilitiesNone on the known-exploited list.
Opensuse Project has 54 published vulnerabilities across 9 products in our catalogue. None of them is on the list of flaws known to be exploited today. The most affected product is Leap, with 35. If you run Opensuse Project software, patch the exploited flaws first.
We keep watching the known-exploited list.
Which Opensuse Project products have the most vulnerabilities?
Leap leads with 35 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.
Which Opensuse Project vulnerabilities are being exploited?
This is the list that matters most: flaws criminals are using now.
None of Opensuse Project's published vulnerabilities is on the list of flaws known to be exploited today. We keep watching that list.
Which Opensuse Project flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- 22%CVE-2017-6542Critical
The ssh_agent_channel_data function in PuTTY before 0.68 allows remote attackers to have unspecified impact via a large length value in an agent protocol message and leveraging the ability to connect to the...
- 9.2%CVE-2014-3004Medium
The default configuration for the Xerces SAX Parser in Castor before 1.3.3 allows context-dependent attackers to conduct XML External Entity (XXE) attacks via a crafted XML document.
- 8.1%CVE-2014-4616Medium
Array index error in the scanstring function in the _json module in Python 2.7 through 3.5 and simplejson before 2.6.1 allows context-dependent attackers to read arbitrary process memory via a negative index value in...
- 6.5%CVE-2016-10048High
Directory traversal vulnerability in magick/module.c in ImageMagick 6.9.4-7 allows remote attackers to load arbitrary modules via unspecified vectors.
- 5.6%CVE-2014-1528Critical
The sse2_composite_src_x888_8888 function in Pixman, as used in Cairo in Mozilla Firefox 28.0 and SeaMonkey 2.25 on Windows, allows remote attackers to execute arbitrary code or cause a denial of service...
- 5.3%CVE-2014-1542Medium
Buffer overflow in the Speex resampler in the Web Audio subsystem in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrary code via vectors related to a crafted AudioBuffer channel count and sample...
- 5.3%CVE-2015-3405High
ntp-keygen in ntp 4.2.8px before 4.2.8p2-RC2 and 4.3.x before 4.3.12 does not generate MD5 keys with sufficient entropy on big endian machines when the lowest order byte of the temp variable is between 0x20 and 0x7f...
- 5.1%CVE-2014-1494Critical
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to cause a denial of service (memory corruption and application crash) or...
- 4.9%CVE-2014-9846Critical
Buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact.
- 4.6%CVE-2014-9847Critical
The jng decoder in ImageMagick 6.8.9.9 allows remote attackers to have an unspecified impact.
All Opensuse Project products we track.
9 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.
- Leapleap35 vulnerabilities3 versions
- Opensuseopensuse16 vulnerabilities7 versions
- Suse Linux Enterprise Desktopsuse_linux_enterprise_desktop13 vulnerabilities2 versions
- Suse Linux Enterprise Software Development Kitsuse_linux_enterprise_software_development_kit13 vulnerabilities2 versions
- Suse Linux Enterprise Serversuse_linux_enterprise_server12 vulnerabilities2 versions
- Suse Linux Enterprise Workstation Extensionsuse_linux_enterprise_workstation_extension11 vulnerabilities1 version
- Suse Linux Enterprise Debuginfosuse_linux_enterprise_debuginfo7 vulnerabilities1 version
- Studio Onsitestudio_onsite1 vulnerability1 version
- Suse Linux Enterprise Server for Raspberry Pisuse_linux_enterprise_server_for_raspberry_pi1 vulnerability1 version
Running Opensuse Project? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 new flaw affects software Acme tracks
The ssh_agent_channel_data function in PuTTY before 0.68 allows remote attackers to have unspecified impact via a large length value in an agent protocol message and leveraging the ability to connect to the Unix-domain socket representing the forwarded agent connection, which trigger a buffer overflow.
- Matched to
- Opensuse Project on Acme's software list
- What to do
- Plan in the vendor’s update
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
Our catalogue lists 54 published vulnerabilities across 9 products and 20 versions from Opensuse Project.
None of Opensuse Project's vulnerabilities is on the list of flaws known to be exploited today.
Leap, with 35 published vulnerabilities. Its own page lists the ones known to be exploited.
Create a Precursor Intelligence account and track the Opensuse Project products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.