SUSE CVE-2015-5006

IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR2, 7 R1 before SR3 FP20, 7 before SR9 FP20, 6 R1 before SR8 FP15, and 6 before SR16 FP15 allow physically proximate attackers to obtain sensitive information by reading the Kerberos Credential Cache...

SUSE CVE-2016-5746

libstorage, libstorage-ng, and yast-storage improperly store passphrases for encrypted storage devices in a temporary file on disk, which might allow local users to obtain sensitive information by reading the file, as demonstrated by /tmp/libstorage-XXXXXX/pwdf...

SUSE CVE-2016-6293

The ulocacceptLanguageFromHTTP function in common/uloc.cpp in International Components for Unicode ICU through 57.1 for C/C++ does not ensure that there is a '\0' character at the end of a certain temporary array, which allows remote attackers to cause a denial of service out-of-bounds read or...

SUSE CVE-2016-7415

Stack-based buffer overflow in the Locale class in common/locid.cpp in International Components for Unicode ICU through 57.1 for C/C++ allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a long locale string...

SUSE CVE-2016-10397

In PHP before 5.6.28 and 7.x before 7.0.13, incorrect handling of various URI components in the URL parser could be used by attackers to bypass hostname-specific URL checks, as demonstrated by evil.example.com:[email protected]/ and evil.example.com:[email protected]/ inputs to the parseurl...

SUSE CVE-2017-0891

Nextcloud Server before 9.0.58 and 10.0.5 and 11.0.3 are vulnerable to an inadequate escaping of error messages leading to XSS vulnerabilities in multiple components...

SUSE CVE-2017-7868

International Components for Unicode ICU for C/C++ before 2017-02-13 has an out-of-bounds write caused by a heap-based buffer overflow related to the utf8TextAccess function in common/utext.cpp and the utextmoveIndex32 function...

SUSE CVE-2017-7867

International Components for Unicode ICU for C/C++ before 2017-02-13 has an out-of-bounds write caused by a heap-based buffer overflow related to the utf8TextAccess function in common/utext.cpp and the utextsetNativeIndex function...

SUSE CVE-2017-15396

A stack buffer overflow in NumberingSystem in International Components for Unicode ICU for C/C++ before 60.2, as used in V8 in Google Chrome prior to 62.0.3202.75 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

SUSE CVE-2017-1000050

JasPer 2.0.12 is vulnerable to a NULL pointer exception in the function jp2encode which failed to check to see if the image contained at least one component resulting in a denial-of-service...

SUSE CVE-2018-4323

Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7...

SUSE CVE-2018-6954

systemd-tmpfiles in systemd through 237 mishandles symlinks present in non-terminal path components, which allows local users to obtain ownership of arbitrary files via vectors involving creation of a directory and a file under that directory, and later replacing that directory with a symlink. Th...

SUSE CVE-2018-7175

An issue was discovered in xpdf 4.00. A NULL pointer dereference in readCodestream allows an attacker to cause denial of service via a JPX image with zero components...

SUSE CVE-2018-20822

LibSass 3.5.4 allows attackers to cause a denial-of-service uncontrolled recursion in Sass::ComplexSelector::perform in ast.hpp and Sass::Inspect::operator in inspect.cpp...

SUSE CVE-2019-6233

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution...

SUSE CVE-2019-8707

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13, iTunes for Windows 12.10.1, iCloud for Windows 10.7, iCloud for Windows 7.14. Processing maliciously crafted web content may lead to arbitrary code execution...

SUSE CVE-2019-8733

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13, iTunes for Windows 12.10.1, iCloud for Windows 10.7, iCloud for Windows 7.14. Processing maliciously crafted web content may lead to arbitrary code execution...

@adelosrios/plugin-dependencytrack (>=0.2.8, <=0.2.9), @anshulgarg.cse/plugin-backstage-code-star-prerelease (0.0.2) +243 more potentially affected by CVE-2023-25571 via @backstage/core-components (>=0.0.0-nightly-20220310022859, <=0.11.2)

@backstage/core-components NPM version =0.0.0-nightly-20220310022859, =0.2.8, =0.0.1-alpha.18, =0.1.0, =0.0.0-nightly-2021101222132, =0.0.0-nightly-202010102951, =0.0.0-nightly-20220310022859, =0.1.1-alpha.7, =0.0.0-nightly-202010102951, =0.0.0-nightly-2021101022158, =0.0.0-nightly-20240929023448...

@adelosrios/plugin-dependencytrack (>=0.2.8, <=0.2.9), @anshulgarg.cse/plugin-backstage-code-star-prerelease (0.0.2) +243 more potentially affected by CVE-2023-25571 via @backstage/core-components (>=0.0.0-nightly-20220310022859, <=0.11.2)

@backstage/core-components NPM version =0.0.0-nightly-20220310022859, =0.2.8, =0.0.1-alpha.18, =0.1.0, =0.0.0-nightly-2021101222132, =0.0.0-nightly-202010102951, =0.0.0-nightly-20220310022859, =0.1.1-alpha.7, =0.0.0-nightly-202010102951, =0.0.0-nightly-2021101022158, =0.0.0-nightly-20240929023448...

@adelosrios/plugin-dependencytrack (>=0.2.8, <=0.2.9), @anshulgarg.cse/plugin-backstage-code-star-prerelease (0.0.2) +243 more potentially affected by CVE-2023-25571 via @backstage/core-components (>=0.0.0-nightly-20220310022859, <=0.11.2)

@backstage/core-components NPM version =0.0.0-nightly-20220310022859, =0.2.8, =0.0.1-alpha.18, =0.1.0, =0.0.0-nightly-2021101222132, =0.0.0-nightly-202010102951, =0.0.0-nightly-20220310022859, =0.1.1-alpha.7, =0.0.0-nightly-202010102951, =0.0.0-nightly-2021101022158, =0.0.0-nightly-20240929023448...