GCVE - cpe:2.3:o:opensuse:opensuse:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:opensuse:opensuse:*:*:*:*:*:*:*:*

part: o version: * update: *

Vendor	Opensuse (`3380e48e-e718-5685-8ad0-092ef58910e5`)
Product	Opensuse (`bd638cba-8b33-5f52-b0bd-0bc812a0fd06`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/opensuse/kernel`	purl2cpe	2026-06-01 10:15:35.993299
`pkg:github/suse/kernel`	purl2cpe	2026-06-01 10:15:35.993302
`pkg:opensuse/opensuse`	purl2cpe	2026-06-01 10:15:35.993305
`pkg:rpm/opensuse/opensuse-release`	purl2cpe	2026-06-01 10:15:35.993308

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2010-4040`	vulnerable	2026-06-08 04:55:18.614482	Details available Google Chrome before 7.0.517.41 does not properly handle animated GIF images, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted image. Published: 2010-10-21T18:12:00.000Z Updated: 2024-08-07T03:34:36.803Z Open on db.gcve.eu Reference links http://www.mandriva.com/security/advisories?name=MDVSA-2011:039 http://secunia.com/advisories/43068 http://www.vupen.com/english/advisories/2010/2731 http://code.google.com/p/chromium/issues/detail?id=54500 http://www.vupen.com/english/advisories/2011/0212	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-1297`	vulnerable	2026-06-08 04:54:07.064120	Details available Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted SWF content, related to authplay.dll and the ActionScript Virtual Machine 2 (AVM2) newfunction instruction, as exploited in the wild in June 2010. Published: 2010-06-08T18:00:00.000Z Updated: 2025-10-22T00:05:52.284Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2010/1636 http://community.websense.com/blogs/securitylabs/archive/2010/06/09/having-fun-with-adobe-0-day-exploits.aspx http://www.vupen.com/english/advisories/2010/1349 http://www.adobe.com/support/security/bulletins/apsb10-15.html http://www.vupen.com/english/advisories/2011/0192	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-0013`	vulnerable	2026-06-08 04:51:52.321443	Details available Directory traversal vulnerability in slp.c in the MSN protocol plugin in libpurple in Pidgin 2.6.4 and Adium 1.3.8 allows remote attackers to read arbitrary files via a .. (dot dot) in an application/x-msnmsgrp2p MSN emoticon (aka custom smiley) request, a related issue to CVE-2004-0122. NOTE: it could be argued that this is resultant from a vulnerability in which an emoticon download request is processed even without a preceding text/x-mms-emoticon message that announced availability of the emoticon. Published: 2010-01-09T18:00:00.000Z Updated: 2024-08-07T00:37:52.483Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2010/01/02/1 http://secunia.com/advisories/37953 http://d.pidgin.im/viewmtn/revision/info/3d02401cf232459fc80c0837d31e05fae7ae5467 https://bugzilla.redhat.com/show_bug.cgi?id=552483 http://sunsolve.sun.com/search/document.do?assetkey=1-66-277450-1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-3231`	vulnerable	2026-06-08 04:51:32.956146	Details available The core server component in PostgreSQL 8.3 before 8.3.8 and 8.2 before 8.2.14, when using LDAP authentication with anonymous binds, allows remote attackers to bypass authentication via an empty password. Published: 2009-09-17T10:00:00.000Z Updated: 2024-08-07T06:22:23.182Z Open on db.gcve.eu Reference links https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00307.html http://www.postgresql.org/docs/8.3/static/release-8-3-8.html http://www.securityfocus.com/bid/36314 http://marc.info/?l=bugtraq&m=134124585221119&w=2 http://secunia.com/advisories/36837	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-2416`	vulnerable	2026-06-08 04:51:28.364797	Details available Multiple use-after-free vulnerabilities in libxml2 2.5.10, 2.6.16, 2.6.26, 2.6.27, and 2.6.32, and libxml 1.8.17, allow context-dependent attackers to cause a denial of service (application crash) via crafted (1) Notation or (2) Enumeration attribute types in an XML file, as demonstrated by the Codenomicon XML fuzzing framework. Published: 2009-08-11T18:00:00.000Z Updated: 2025-01-21T15:30:42.200Z Open on db.gcve.eu Reference links http://www.ubuntu.com/usn/USN-815-1 https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00537.html http://secunia.com/advisories/36631 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9262 http://www.networkworld.com/columnists/2009/080509-xml-flaw.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-2408`	vulnerable	2026-06-08 04:51:28.240472	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-0749`	vulnerable	2026-06-08 04:51:11.071300	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-0115`	vulnerable	2026-06-08 04:51:07.716025	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-4989`	vulnerable	2026-06-08 04:50:48.764791	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-2931`	vulnerable	2026-06-08 04:50:32.594372	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.