Skip to contentOpensuse Backports Sle vulnerabilities
- roundcube webmail, debian linux, opensuse backports sle +1 more +3 moreAn issue was discovered in Roundcube Webmail before 1.4.4. There is a cross-site scripting (XSS)...CVE-2020-12625Public exploitFix available6.1 Medium
- sqliteodbc project sqliteodbc, fedoraproject fedora, opensuse backports sle +2 moreSQLiteODBC 0.9996, as packaged for certain Linux distributions as 0.9996-4, has a race condition...CVE-2020-12050Fix available7.0 High
- gnu mailman, canonical ubuntu linux, debian linux +3 more +5 moreGNU Mailman 2.x before 2.1.30 uses the .obj extension for scrubbed application/octet-stream MIME...CVE-2020-12137Fix available6.1 Medium
- teeworlds, canonical ubuntu linux, debian linux +3 more +5 moreCServer::SendMsg in engine/server/server.cpp in Teeworlds 0.7.x before 0.7.5 allows remote...CVE-2020-12066Fix available7.5 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreUse after free in extensions in Google Chrome prior to 81.0.4044.92 allowed an attacker who...CVE-2020-6454Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreUse after free in V8 in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to...CVE-2020-6448Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInappropriate implementation in developer tools in Google Chrome prior to 81.0.4044.92 allowed a...CVE-2020-6447Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreUninitialized use in WebRTC in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to...CVE-2020-6444Fix available6.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in extensions in Google Chrome prior to 81.0.4044.92 allowed an...CVE-2020-6438Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreUse after free in window management in Google Chrome prior to 81.0.4044.92 allowed a remote...CVE-2020-6436Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreUse after free in devtools in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to...CVE-2020-6434Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreType Confusion in V8 in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to...CVE-2020-6430Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreUse after free in audio in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to...CVE-2020-6423Fix available8.8 High
- varnish-cache varnish cache, opensuse backports sle, leap +2 moreAn issue was discovered in Varnish Cache before 6.0.5 LTS, 6.1.x and 6.2.x before 6.2.2, and 6.3...CVE-2019-20637Fix available7.5 High
- varnish-cache varnish cache, debian linux, opensuse backports sle +1 more +3 moreAn issue was discovered in Varnish Cache before 6.0.6 LTS, 6.1.x and 6.2.x before 6.2.3, and 6.3...CVE-2020-11653Fix available7.5 High
- google chrome, fedoraproject fedora, opensuse backports sle +1 more +3 moreUse after free in WebAudio in Google Chrome prior to 80.0.3987.162 allowed a remote attacker to...CVE-2020-6451Fix available8.8 High
- google chrome, fedoraproject fedora, opensuse backports sle +1 more +3 moreUse after free in WebAudio in Google Chrome prior to 80.0.3987.162 allowed a remote attacker to...CVE-2020-6450Fix available8.8 High
- gstreamer, gstreamer project gst-rtsp-server, opensuse backports sle +1 more +3 moreAn exploitable denial of service vulnerability exists in the GstRTSPAuth functionality of...CVE-2020-6095Fix available7.5 High
- otrs, otrs ag ((otrs)) community edition, debian linux +2 more +4 moreInformation DisclosureCVE-2020-1772Fix available6.5 Medium
- otrs, otrs ag ((otrs)) community edition, debian linux +2 more +4 moreInformation disclosure in support bundle filesCVE-2020-1770Fix available2.4 Low
- otrs, otrs ag ((otrs)) community edition, opensuse backports sle +1 more +3 moreAutocomplete in the form login screensCVE-2020-1769Fix available3.5 Low
- torproject tor, opensuse backports sle, leap +2 moreTor before 0.3.5.10, 0.4.x before 0.4.1.9, and 0.4.2.x before 0.4.2.7 allows remote attackers to...CVE-2020-10593Fix available7.5 High
- phpmyadmin, fedoraproject fedora, opensuse backports sle +2 more +4 morephpMyAdmin SQL InjectionCVE-2020-10804Fix available8.0 High
- phpmyadmin, debian linux, fedoraproject fedora +3 more +5 morephpMyAdmin SQL injection vulnerabilityCVE-2020-10803Fix available5.4 Medium
- phpmyadmin, debian linux, fedoraproject fedora +3 more +5 morephpMyAdmin SQL injection vulnerabilityCVE-2020-10802Fix available8.0 High
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreUse after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to...CVE-2020-6429Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreUse after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to...CVE-2020-6428Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreUse after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to...CVE-2020-6427Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreInappropriate implementation in V8 in Google Chrome prior to 80.0.3987.149 allowed a remote...CVE-2020-6426Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreUse after free in media in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to...CVE-2020-6424Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreUse after free in WebGL in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to...CVE-2020-6422Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreUse after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to...CVE-2020-6449Fix available8.8 High
- graphicsmagick, debian linux, opensuse backports sle +1 more +3 moreIn GraphicsMagick before 1.3.32, the text filename component allows remote attackers to read...CVE-2019-12921Fix available6.5 Medium
- nagios, opensuse factory, suse linux enterprise server 11 +3 more +5 morenagios cron job allows privilege escalation from user nagios to rootCVE-2019-36985.7 Medium
- openfortivpn project openfortivpn, fedoraproject fedora, opensuse backports sle +1 more +3 moreAn issue was discovered in openfortivpn 1.11.0 when used with OpenSSL before 1.0.2. tunnel.c...CVE-2020-7043Fix available9.1 Critical
- openfortivpn project openfortivpn, fedoraproject fedora, opensuse backports sle +1 more +3 moreAn issue was discovered in openfortivpn 1.11.0 when used with OpenSSL 1.0.2 or later. tunnel.c...CVE-2020-7042Fix available5.3 Medium
- openfortivpn project openfortivpn, fedoraproject fedora, opensuse backports sle +1 more +3 moreAn issue was discovered in openfortivpn 1.11.0 when used with OpenSSL 1.0.2 or later. tunnel.c...CVE-2020-7041Fix available5.3 Medium
- proftpd, debian linux, fedoraproject fedora +4 more +6 moreIn ProFTPD 1.3.7, it is possible to corrupt the memory pool by interrupting the data transfer...CVE-2020-9273Public exploitFix availableEPSS 11.8%8.8 High
- proftpd, opensuse backports sle, leap +2 more +4 moreProFTPD 1.3.7 has an out-of-bounds (OOB) read vulnerability in mod_cap via the cap_text.c...CVE-2020-9272Fix available7.5 High
- weechat, debian linux, fedoraproject fedora +2 more +4 moreirc_mode_channel_update in plugins/irc/irc-mode.c in WeeChat through 2.7 allows remote attackers...CVE-2020-8955Fix available9.8 Critical
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreInsufficient data validation in streams in Google Chrome prior to 80.0.3987.87 allowed a remote...CVE-2020-6416Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreInappropriate implementation in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a...CVE-2020-6415Fix available8.8 High
- google chrome, opensuse backports sle +1 moreInsufficient policy enforcement in Safe Browsing in Google Chrome prior to 80.0.3987.87 allowed a...CVE-2020-6414Fix available8.8 High
- google chrome, opensuse backports sle +1 moreInappropriate implementation in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote...CVE-2020-6413Fix available8.8 High
- google chrome, opensuse backports sle +1 moreInsufficient validation of untrusted input in Omnibox in Google Chrome prior to 80.0.3987.87...CVE-2020-6412Fix available5.4 Medium
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreInsufficient policy enforcement in CORS in Google Chrome prior to 80.0.3987.87 allowed a local...CVE-2020-6408Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreInappropriate implementation in Blink in Google Chrome prior to 80.0.3987.87 allowed a local...CVE-2020-6404Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreIncorrect implementation in Omnibox in Google Chrome on iOS prior to 80.0.3987.87 allowed a...CVE-2020-6403Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreInsufficient policy enforcement in downloads in Google Chrome on OS X prior to 80.0.3987.87...CVE-2020-6402Fix available8.8 High
- google chrome, opensuse backports sle +1 moreInsufficient validation of untrusted input in Omnibox in Google Chrome prior to 80.0.3987.87...CVE-2020-6401Fix available6.5 Medium
- Show moreLoading…