Vulnerabilidades do SUSE Linux Enterprise Debuginfo
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam SUSE Linux Enterprise Debuginfo: 8 registro(s), com versões afetadas e correções.cpe:2.3:a:suse:linux_enterprise_debuginfo
CVE-2016-0718
Crítica · 9.8
CWE-119 26/05/2016
Buffer Errors (Improper Restriction of Operations within Memory Bounds) em Mozilla Firefox
Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed input document, which triggers a buffer overflow.
CVE-2016-3718
Média · 5.5
KEV Alta · 61 Exploit público CWE-918 05/05/2016
ImageMagick Server-Side Request Forgery (SSRF) Vulnerability
The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted image.
CVE-2016-3715
Média · 5.5
KEV Alta · 61 Exploit público CWE-552 05/05/2016
ImageMagick Arbitrary File Deletion Vulnerability
The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.
CVE-2015-4495
Alta · 8.8
KEV Urgente · 76 Exploit público CWE-346 07/08/2015
Mozilla Firefox Security Feature Bypass Vulnerability
The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows remote attackers to bypass the Same Origin Policy, and read arbitrary files or gain privileges, via vectors involving crafted JavaScript code and a native setter, as exploited in the wild in August 2015.
CVE-2015-5477
Alta · 7.5
KEV Urgente · 79 Exploit público CWE-19 29/07/2015
ISC BIND Data Processing Errors Vulnerability
named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.
CVE-2015-2590
Crítica · 9.8
KEV Alta · 63 16/07/2015
Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability
Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2015-4732.
CVE-2009-3953
Alta · 8.8
KEV Urgente · 76 Exploit público CWE-787 13/01/2010
Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability
The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and Mac OS X, and 7.x before 7.1.4 allows remote attackers to execute arbitrary code via malformed U3D data in a PDF document, related to a CLODProgressiveMeshDeclaration "array boundary issue," a different vulnerability than CVE-2009-2994.
CVE-2009-4324
Alta · 7.8
KEV Urgente · 86 Exploit público CWE-416 15/12/2009
Adobe Acrobat and Reader Use-After-Free Vulnerability
Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted PDF file using ZLib compressed streams, as exploited in the wild in December 2009.