Skip to contentOpensuse Backports vulnerabilities
- storebackup, canonical ubuntu linux, debian linux +2 more +4 morestoreBackup.pl in storeBackup through 3.5 relies on the /tmp/storeBackup.lock pathname, which...CVE-2020-7040Fix available8.1 High
- apt-cacher-ng project apt-cacher-ng, debian linux, opensuse backports +1 more +3 moreapt-cacher-ng through 3.3 allows local users to obtain sensitive information by hijacking the...CVE-2020-5202Fix available5.5 Medium
- squid analysis report generator project analysis report generator, opensuse backports sle, leap +2 morelog.c in Squid Analysis Report Generator (sarg) through 2.3.11 allows local privilege escalation....CVE-2019-18932Fix available7.0 High
- cacti, debian linux, fedoraproject extra packages for enterprise linux +4 more +6 moreCacti 1.2.8 has stored XSS in data_sources.php, color_templates_item.php, graphs.php, graph_items...CVE-2020-7106Fix available6.1 Medium
- otrs, otrs ag ((otrs)) community edition, debian linux +2 more +4 moreSpoofing of From field in several screensCVE-2020-1765Fix available3.5 Low
- google chrome, debian linux, fedoraproject fedora +4 more +6 moreUse after free in audio in Google Chrome prior to 79.0.3945.117 allowed a remote attacker to...CVE-2020-6377Fix available8.8 High
- gnu libredwg, opensuse backports sle, leap +2 moreGNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in read_pages_map in decode_r2007.c.CVE-2020-66098.8 High
- gnu libredwg, opensuse backports, leap +2 moreGNU LibreDWG 0.9.3.2564 has an attempted excessive memory allocation in read_sections_map in...CVE-2020-66106.5 Medium
- gnu libredwg, opensuse backports sle, leap +2 moreGNU LibreDWG 0.9.3.2564 has a NULL pointer dereference in get_next_owned_entity in dwg.c.CVE-2020-66116.5 Medium
- gnu libredwg, opensuse backports sle, leap +2 moreGNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in copy_compressed_bytes in...CVE-2020-66128.1 High
- gnu libredwg, opensuse backports sle, leap +2 moreGNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bit_search_sentinel in bits.c.CVE-2020-66138.1 High
- gnu libredwg, opensuse backports sle, leap +2 moreGNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bfr_read in decode.c.CVE-2020-66148.1 High
- gnu libredwg, opensuse backports sle, leap +2 moreGNU LibreDWG 0.9.3.2564 has an invalid pointer dereference in dwg_dynapi_entity_value in dynapi.c...CVE-2020-66156.5 Medium
- otrs, debian linux, opensuse backports sle +1 more +3 moreAn issue was discovered in Open Ticket Request System (OTRS) 7.0.x through 7.0.12, and Community...CVE-2019-18179Fix available3.5 Low
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreUse after free in media picker in Google Chrome prior to 79.0.3945.88 allowed a remote attacker...CVE-2019-13767Fix availableEPSS 15.5%8.8 High
- upx, opensuse backports, leap +2 moreAn invalid memory address dereference was discovered in the canUnpack function in p_mach.cpp in...CVE-2019-20053Fix available5.5 Medium
- gnu libredwg, opensuse backports sle, leap +2 moreAn issue was discovered in GNU LibreDWG before 0.93. Crafted input will lead to an attempted...CVE-2019-200096.5 Medium
- gnu libredwg, opensuse backports sle, leap +2 moreAn issue was discovered in GNU LibreDWG 0.92. There is a heap-based buffer over-read in...CVE-2019-200118.8 High
- gnu libredwg, opensuse backports sle, leap +2 moreAn issue was discovered in GNU LibreDWG 0.92. Crafted input will lead to an attempted excessive...CVE-2019-200126.5 Medium
- gnu libredwg, opensuse backports sle, leap +2 moreAn issue was discovered in GNU LibreDWG before 0.93. Crafted input will lead to an attempted...CVE-2019-200136.5 Medium
- gnu libredwg, opensuse backports sle, leap +2 moreAn issue was discovered in GNU LibreDWG before 0.93. There is a double-free in dwg_free in free.c.CVE-2019-200148.8 High
- gnu libredwg, opensuse backports sle, leap +2 moreAn issue was discovered in GNU LibreDWG 0.92. Crafted input will lead to an attempted excessive...CVE-2019-200156.5 Medium
- gnu libredwg, opensuse backports sle, leap +2 moreAn issue was discovered in GNU LibreDWG 0.92. There is a use-after-free in...CVE-2019-200108.8 High
- sqlite, debian linux, netapp cloud backup +11 more +13 morezipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update...CVE-2019-19925Fix available7.5 High
- sqlite, debian linux, netapp cloud backup +11 more +13 moreflattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving...CVE-2019-19923Fix available7.5 High
- graphicsmagick, debian linux, opensuse backports +1 more +3 moreIn GraphicsMagick 1.4 snapshot-20190403 Q8, there is a use-after-free in ThrowException and...CVE-2019-19950Fix available9.8 Critical
- graphicsmagick, debian linux, opensuse backports +1 more +3 moreIn GraphicsMagick 1.4 snapshot-20190423 Q8, there is a heap-based buffer overflow in the function...CVE-2019-19951Fix available9.8 Critical
- graphicsmagick, debian linux, opensuse backports +1 more +3 moreIn GraphicsMagick 1.4 snapshot-20191208 Q8, there is a heap-based buffer over-read in the...CVE-2019-19953Fix available9.1 Critical
- sqlite, debian linux, netapp cloud backup +11 more +13 moremultiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as...CVE-2019-19926Fix available7.5 High
- lout project lout, fedoraproject fedora, opensuse backports sle +1 more +3 moreLout 3.40 has a buffer overflow in the StringQuotedWord() function in z39.c.CVE-2019-199177.8 High
- lout project lout, fedoraproject fedora, opensuse backports sle +1 more +3 moreLout 3.40 has a heap-based buffer overflow in the srcnext() function in z02.c.CVE-2019-199187.8 High
- sqlite, debian linux, netapp cloud backup +11 more +13 moreexprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer...CVE-2019-19880Fix available7.5 High
- excon, debian linux, opensuse backports sle +1 more +3 moreIn RubyGem excon, interrupted Persistent Connections May Leak Response DataCVE-2019-16779Fix available5.8 Medium
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreType confusion in JavaScript in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to...CVE-2019-13764Public exploitFix available8.8 High
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreInsufficient policy enforcement in audio in Google Chrome prior to 79.0.3945.79 allowed a remote...CVE-2019-13745Fix available6.5 Medium
- google chrome, canonical ubuntu linux, debian linux +12 more +14 moreOut of bounds write in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to...CVE-2019-13734Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +6 more +8 moreType confusion in JavaScript in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to...CVE-2019-13730Fix available8.8 High
- red hat ansible, debian linux, opensuse backports sle +5 more +7 moreInclusion of Sensitive Information in Log Files and Improper Output Neutralization for Logs in AnsibleCVE-2019-14864Fix available5.7 Medium
- shadowsocks shadowsocks-libev, opensuse backports sle, leap +2 moreAn exploitable code execution vulnerability exists in the ss-manager binary of Shadowsocks-libev...CVE-2019-5164Fix available7.8 High
- shadowsocks shadowsocks-libev, opensuse backports, leap +2 moreAn exploitable denial-of-service vulnerability exists in the UDPRelay functionality of...CVE-2019-5163Fix available5.9 Medium
- [unknown] ansible, opensuse backports sle, leap +1 more +3 moreAnsible password prompts could expose passwordsCVE-2019-14856Fix available6.4 Medium
- opensuse leap 15.1, suse mailman, linux enterprise server 11 +2 more +4 moreLocal privilege escalation from user wwwrun to root in the packaging of mailmanCVE-2019-3693Fix available7.7 High
- phpmyadmin, fedoraproject fedora, opensuse backports sle +1 more +3 moreSQL injection in phpMyAdminCVE-2019-18622Fix available9.8 Critical
- google chrome, fedoraproject fedora, opensuse backports +3 more +5 moreUse after free in WebBluetooth in Google Chrome prior to 78.0.3904.108 allowed a remote attacker...CVE-2019-13723Fix available8.8 High
- google chrome, opensuse backports sle +1 moreIncorrect security UI in full screen mode in Google Chrome prior to 78.0.3904.70 allowed a remote...CVE-2019-13719Fix available4.3 Medium
- google chrome, opensuse backports sle +1 moreInsufficient data validation in Omnibox in Google Chrome prior to 78.0.3904.70 allowed a remote...CVE-2019-13718Fix available4.3 Medium
- google chrome, opensuse backports sle +1 moreIncorrect security UI in full screen mode in Google Chrome prior to 78.0.3904.70 allowed a remote...CVE-2019-13717Fix available4.3 Medium
- google chrome, opensuse backports sle +1 moreInsufficient policy enforcement in service workers in Google Chrome prior to 78.0.3904.70 allowed...CVE-2019-13716Fix available4.3 Medium
- google chrome, opensuse backports sle +1 moreInsufficient validation of untrusted input in Omnibox in Google Chrome prior to 78.0.3904.70...CVE-2019-13715Fix available4.3 Medium
- google chrome, opensuse backports sle +1 moreInsufficient validation of untrusted input in Color Enhancer extension in Google Chrome prior to...CVE-2019-13714Fix available6.1 Medium
- Show moreLoading…