Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Leap
(Opensuse_project)Repositories |
• https://github.com/ImageMagick/ImageMagick
• https://github.com/tats/w3m • https://github.com/torvalds/linux • https://github.com/mdadams/jasper • https://github.com/viewvc/viewvc |
#Vulnerabilities | 35 |
Date | Id | Summary | Products | Score | Patch | Annotated |
---|---|---|---|---|---|---|
2017-03-02 | CVE-2016-10068 | The MSL interpreter in ImageMagick before 6.9.6-4 allows remote attackers to cause a denial of service (segmentation fault and application crash) via a crafted XML file. | Imagemagick, Leap, Leap | 5.5 | ||
2017-03-23 | CVE-2016-10048 | Directory traversal vulnerability in magick/module.c in ImageMagick 6.9.4-7 allows remote attackers to load arbitrary modules via unspecified vectors. | Imagemagick, Leap | 7.5 | ||
2017-03-27 | CVE-2015-8010 | Cross-site scripting (XSS) vulnerability in the Classic-UI with the CSV export link and pagination feature in Icinga before 1.14 allows remote attackers to inject arbitrary web script or HTML via the query string to cgi-bin/status.cgi. | Icinga, Leap, Leap | 6.1 | ||
2015-11-09 | CVE-2015-5218 | Buffer overflow in text-utils/colcrt.c in colcrt in util-linux before 2.27 allows local users to cause a denial of service (crash) via a crafted file, related to the page global variable. | Util\-Linux, Opensuse, Leap | N/A | ||
2017-09-27 | CVE-2015-3138 | print-wb.c in tcpdump before 4.7.4 allows remote attackers to cause a denial of service (segmentation fault and process crash). | Leap, Leap, Tcpdump | 7.5 | ||
2017-03-20 | CVE-2014-9851 | ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (application crash). | Ubuntu_linux, Imagemagick, Opensuse, Leap, Suse_linux_enterprise_debuginfo, Suse_linux_enterprise_desktop, Suse_linux_enterprise_server, Suse_linux_enterprise_software_development_kit, Suse_linux_enterprise_workstation_extension | 7.5 | ||
2017-03-20 | CVE-2014-9850 | Logic error in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (resource consumption). | Ubuntu_linux, Imagemagick, Opensuse, Leap, Suse_linux_enterprise_desktop, Suse_linux_enterprise_server, Suse_linux_enterprise_software_development_kit, Suse_linux_enterprise_workstation_extension | 7.5 | ||
2017-03-20 | CVE-2014-9849 | The png coder in ImageMagick allows remote attackers to cause a denial of service (crash). | Ubuntu_linux, Imagemagick, Opensuse, Leap, Suse_linux_enterprise_debuginfo, Suse_linux_enterprise_desktop, Suse_linux_enterprise_server, Suse_linux_enterprise_software_development_kit, Suse_linux_enterprise_workstation_extension | 7.5 | ||
2017-03-20 | CVE-2014-9847 | The jng decoder in ImageMagick 6.8.9.9 allows remote attackers to have an unspecified impact. | Ubuntu_linux, Imagemagick, Opensuse, Leap, Studio_onsite, Suse_linux_enterprise_debuginfo, Suse_linux_enterprise_desktop, Suse_linux_enterprise_server, Suse_linux_enterprise_software_development_kit, Suse_linux_enterprise_workstation_extension | 9.8 | ||
2017-03-20 | CVE-2014-9846 | Buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact. | Ubuntu_linux, Imagemagick, Leap, Opensuse, Leap, Suse_linux_enterprise_debuginfo, Suse_linux_enterprise_desktop, Suse_linux_enterprise_server, Suse_linux_enterprise_software_development_kit, Suse_linux_enterprise_workstation_extension, Studio_onsite | 9.8 |