Evergreen (Opensuse) - vulnerabilities (CVEs)

44 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2016-05-11. Vendor: Opensuse.

CVEs of Evergreen

CVE-2016-4117 - CVSS 9.8 (critical), 2016-05-11: Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in May 2016.
CVE-2015-8651 - CVSS 8.8 (high), 2015-12-28: Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR…
CVE-2015-7645 - CVSS 7.8 (high), 2015-10-15: Adobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11.x through 11.2.202.535 on Linux allows remote attackers to…
CVE-2015-5134 - CVSS 10 (critical), 2015-08-14: Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe…
CVE-2015-5133 - CVSS 10 (critical), 2015-08-14: Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK…
CVE-2015-5132 - CVSS 10 (critical), 2015-08-14: Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK…
CVE-2015-5131 - CVSS 10 (critical), 2015-08-14: Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK…
CVE-2015-5130 - CVSS 10 (critical), 2015-08-14: Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe…
CVE-2015-5129 - CVSS 10 (critical), 2015-08-14: Heap-based buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe…
CVE-2015-5127 - CVSS 10 (critical), 2015-08-14: Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe…
CVE-2015-5125 - CVSS 10 (critical), 2015-08-14: Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and…
CVE-2015-5477 - CVSS 7.5 (high), 2015-07-29: named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon…
CVE-2015-5124 - CVSS 10 (critical), 2015-07-20: Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before…
CVE-2015-5123 - CVSS 9.8 (critical), 2015-07-14: Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and…
CVE-2015-5122 - CVSS 9.8 (critical), 2015-07-14: Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows…
CVE-2015-5119 - CVSS 9.8 (critical), 2015-07-08: Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.296 and 14.x through…
CVE-2015-3113 - CVSS 9.8 (critical), 2015-06-23: Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11.2.202.468 on…
CVE-2015-3107 - CVSS 10 (critical), 2015-06-10: Use-after-free vulnerability in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on…
CVE-2015-3043 - CVSS 9.8 (critical), 2015-04-14: Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute…
CVE-2015-0833 - CVSS 6.9 (medium), 2015-02-25: Multiple untrusted search path vulnerabilities in updater.exe in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 on…
CVE-2015-0313 - CVSS 9.8 (critical), 2015-02-02: Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on…
CVE-2014-9585 - CVSS 2.1 (low), 2015-01-09: The vdso_addr function in arch/x86/vdso/vma.c in the Linux kernel through 3.18.2 does not properly choose memory locations for the vDSO area, which makes it…
CVE-2014-9584 - CVSS 2.1 (low), 2015-01-09: The parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel before 3.18.2 does not validate a length value in the Extensions Reference…
CVE-2014-9322 - CVSS 7.8 (high), 2014-12-17: arch/x86/kernel/entry_64.S in the Linux kernel before 3.17.5 does not properly handle faults associated with the Stack Segment (SS) segment register, which…
CVE-2014-9323 - CVSS 5 (medium), 2014-12-16: The xdr_status_vector function in Firebird before 2.1.7 and 2.5.x before 2.5.3 SU1 allows remote attackers to cause a denial of service (NULL pointer…
CVE-2014-8134 - CVSS 3.3 (low), 2014-12-12: The paravirt_ops_setup function in arch/x86/kernel/kvm.c in the Linux kernel through 3.18 uses an improper paravirt_enabled setting for KVM guest kernels,…
CVE-2014-8559 - CVSS 5.5 (medium), 2014-11-10: The d_walk function in fs/dcache.c in the Linux kernel through 3.17.2 does not properly maintain the semantics of rename_lock, which allows local users to…
CVE-2014-7826 - CVSS 7.8 (high), 2014-11-10: kernel/trace/trace_syscalls.c in the Linux kernel through 3.17.2 does not properly handle private syscall numbers during use of the ftrace subsystem, which…
CVE-2014-8369 - CVSS 7.8 (high), 2014-11-10: The kvm_iommu_map_pages function in virt/kvm/iommu.c in the Linux kernel through 3.17.2 miscalculates the number of pages during the handling of a mapping…
CVE-2014-3690 - CVSS 5.5 (medium), 2014-11-10: arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 3.17.2 on Intel processors does not ensure that the value in the CR4 control register…
CVE-2014-3673 - CVSS 7.5 (high), 2014-11-10: The SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a denial of service (system crash) via a malformed ASCONF chunk,…
CVE-2014-3647 - CVSS 5.5 (medium), 2014-11-10: arch/x86/kvm/emulate.c in the KVM subsystem in the Linux kernel through 3.17.2 does not properly perform RIP changes, which allows guest OS users to cause a…
CVE-2014-3646 - CVSS 5.5 (medium), 2014-11-10: arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel through 3.17.2 does not have an exit handler for the INVVPID instruction, which allows guest OS…
CVE-2014-3687 - CVSS 7.5 (high), 2014-11-10: The sctp_assoc_lookup_asconf_ack function in net/sctp/associola.c in the SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to…
CVE-2014-3610 - CVSS 5.5 (medium), 2014-11-10: The WRMSR processing functionality in the KVM subsystem in the Linux kernel through 3.17.2 does not properly handle the writing of a non-canonical address to…
CVE-2014-0569 - CVSS 9.3 (critical), 2014-10-15: Integer overflow in Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux, Adobe AIR…
CVE-2014-0564 - CVSS 10 (critical), 2014-10-15: Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux, Adobe AIR before 15.0.0.293,…
CVE-2014-5459 - CVSS 3.6 (low), 2014-09-27: The PEAR_REST class in REST.php in PEAR in PHP through 5.6.0 allows local users to write to arbitrary files via a symlink attack on a (1) rest.cachefile or…
CVE-2014-1564 - CVSS 4.3 (medium), 2014-09-03: Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 do not properly initialize memory for GIF rendering, which allows…
CVE-2014-1563 - CVSS 10 (critical), 2014-09-03: Use-after-free vulnerability in the mozilla::DOMSVGLength::GetTearOff function in Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird…
CVE-2014-1553 - CVSS 10 (critical), 2014-09-03: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1…
CVE-2014-3601 - CVSS 4.3 (medium), 2014-09-01: The kvm_iommu_map_pages function in virt/kvm/iommu.c in the Linux kernel through 3.16.1 miscalculates the number of pages during the handling of a mapping…
CVE-2014-0181 - CVSS 2.1 (low), 2014-04-27: The Netlink implementation in the Linux kernel through 3.14.1 does not provide a mechanism for authorizing socket operations based on the opener of a socket,…
CVE-2014-0131 - CVSS 2.9 (low), 2014-03-24: Use-after-free vulnerability in the skb_segment function in net/core/skbuff.c in the Linux kernel through 3.13.6 allows attackers to obtain sensitive…