Skip to contentOpensuse Leap vulnerabilities
- php, debian linux, opensuse leap +2 more +4 moreglobal buffer-overflow in mbfl_filt_conv_big5_wcharCVE-2020-7060Fix available6.5 Medium
- php, debian linux, opensuse leap +2 more +4 moreOOB read in php_strip_tags_exCVE-2020-7059Fix available6.5 Medium
- red hat ansible, redhat ansible engine, fedoraproject fedora +6 more +8 moreExternally Controlled Reference to a Resource in Another Sphere, Improper Input Validation, and External Control of File Name or Path in AnsibleCVE-2019-14905Fix available7.3 High
- intel intel(r) processors, canonical ubuntu linux, debian linux +429 more +431 moreCleanup errors in some data cache evictions for some Intel(R) Processors may allow an...CVE-2020-0549Fix available5.5 Medium
- opensuse factory, leap 15.1, privoxy +2 moreLocal privilege escalation from user privoxy to rootCVE-2019-36997.7 High
- gnu gnump3d, opensuse leap, leap 15.1 +2 moreLocal privilege escalation from user gnump3d to rootCVE-2019-36977.7 High
- opensuse factory, leap 15.1, munin +2 moreLocal privilege escalation from munin to root in the packaging of muninCVE-2019-36947.7 High
- opensuse factory, leap, leap 15.1 +3 more +5 moreLocal privilege escalation from user news to root in the packaging of innCVE-2019-3692Fix available7.7 High
- apt-cacher-ng project apt-cacher-ng, opensuse leap 15.1, backports +2 moreapt-cacher-ng insecure use of /run/apt-cacher-ngCVE-2019-188996.2 Medium
- xmlsoft libxml2, debian linux, fedoraproject fedora +24 more +26 morexmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak.CVE-2019-20388Fix available7.5 High
- storebackup, canonical ubuntu linux, debian linux +2 more +4 morestoreBackup.pl in storeBackup through 3.5 relies on the /tmp/storeBackup.lock pathname, which...CVE-2020-7040Fix available8.1 High
- apt-cacher-ng project apt-cacher-ng, debian linux, opensuse backports +1 more +3 moreapt-cacher-ng through 3.3 allows local users to obtain sensitive information by hijacking the...CVE-2020-5202Fix available5.5 Medium
- squid analysis report generator project analysis report generator, opensuse backports sle, leap +2 morelog.c in Squid Analysis Report Generator (sarg) through 2.3.11 allows local privilege escalation....CVE-2019-18932Fix available7.0 High
- systemd project systemd, canonical ubuntu linux, fedoraproject fedora +4 more +6 moreAn issue was discovered in button_open in login/logind-button.c in systemd before 243. When...CVE-2019-20386Fix available2.4 Low
- red hat samba, canonical ubuntu linux, opensuse leap +4 more +6 moreThere is a use-after-free issue in all samba 4.9.x versions before 4.9.18, all samba 4.10.x...CVE-2019-19344Fix available6.5 Medium
- [unknown] samba, canonical ubuntu linux, debian linux +1 more +3 moreThere is an issue in all samba 4.11.x versions before 4.11.5, all samba 4.10.x versions before 4...CVE-2019-14902Fix available5.4 Medium
- saltstack salt, canonical ubuntu linux, debian linux +1 more +3 moreSaltStack Salt is vulnerable to command injectionCVE-2019-17361Fix availableEPSS 15.1%9.8 Critical
- libslirp project libslirp, qemu, debian linux +1 more +3 moretcp_emu in tcp_subr.c in libslirp 4.1.0, as used in QEMU 4.2.0, mismanages memory, as...CVE-2020-7039Fix available5.6 Medium
- cacti, debian linux, fedoraproject extra packages for enterprise linux +4 more +6 moreCacti 1.2.8 has stored XSS in data_sources.php, color_templates_item.php, graphs.php, graph_items...CVE-2020-7106Fix available6.1 Medium
- wireshark, fedoraproject fedora, opensuse leap +2 more +4 moreIn Wireshark 3.2.x before 3.2.1, the WASSP dissector could crash. This was addressed in epan...CVE-2020-7044Fix available7.5 High
- oracle corporation java, canonical ubuntu linux, debian linux +21 more +23 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking)....CVE-2020-2659Fix available3.7 Low
- oracle corporation java, canonical ubuntu linux, debian linux +21 more +23 moreVulnerability in the Java SE product of Oracle Java SE (component: Libraries). Supported versions...CVE-2020-2654Fix available3.7 Low
- oracle graalvm, oracle corporation java, canonical ubuntu linux +25 more +27 moreVulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM (component: Java...CVE-2020-2604Fix available8.1 High
- oracle corporation java, canonical ubuntu linux, debian linux +21 more +23 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security)....CVE-2020-2601Fix available6.8 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +22 more +24 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking)....CVE-2020-2593Fix available4.8 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +22 more +24 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security)....CVE-2020-2590Fix available3.7 Low
- oracle corporation java, canonical ubuntu linux, debian linux +22 more +24 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component:...CVE-2020-2583Fix available3.7 Low
- oracle mysql, canonical ubuntu linux, mariadb +6 more +8 moreVulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions...CVE-2020-2574Fix available5.9 Medium
- schedmd slurm, opensuse leap +1 moreSchedMD Slurm before 18.08.9 and 19.x before 19.05.5 has weak slurmdbd.conf permissions.CVE-2019-19727Fix available5.5 Medium
- schedmd slurm, debian linux, opensuse leap +2 moreSchedMD Slurm before 18.08.9 and 19.x before 19.05.5 executes srun --uid with incorrect privileges.CVE-2019-19728Fix available7.5 High
- otrs, otrs ag ((otrs)) community edition, debian linux +2 more +4 moreSpoofing of From field in several screensCVE-2020-1765Fix available3.5 Low
- google chrome, debian linux, fedoraproject fedora +4 more +6 moreUse after free in audio in Google Chrome prior to 79.0.3945.117 allowed a remote attacker to...CVE-2020-6377Fix available8.8 High
- f5 nginx, apple xcode, canonical ubuntu linux +2 more +4 moreNGINX before 1.17.7, with certain error_page configurations, allows HTTP request smuggling, as...CVE-2019-20372Public exploitFix availableEPSS 15.0%5.3 Medium
- mozilla firefox, firefox esr, canonical ubuntu linux +9 more +11 moreMozilla developers reported memory safety bugs present in Firefox 71 and Firefox ESR 68.3. Some...CVE-2019-17024Fix available8.8 High
- mozilla firefox, firefox esr, opensuse leap +2 moreDuring the initialization of a new content process, a race condition occurs that can allow a...CVE-2019-170215.3 Medium
- gnu libredwg, opensuse backports sle, leap +2 moreGNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in read_pages_map in decode_r2007.c.CVE-2020-66098.8 High
- gnu libredwg, opensuse backports, leap +2 moreGNU LibreDWG 0.9.3.2564 has an attempted excessive memory allocation in read_sections_map in...CVE-2020-66106.5 Medium
- gnu libredwg, opensuse backports sle, leap +2 moreGNU LibreDWG 0.9.3.2564 has a NULL pointer dereference in get_next_owned_entity in dwg.c.CVE-2020-66116.5 Medium
- gnu libredwg, opensuse backports sle, leap +2 moreGNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in copy_compressed_bytes in...CVE-2020-66128.1 High
- gnu libredwg, opensuse backports sle, leap +2 moreGNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bit_search_sentinel in bits.c.CVE-2020-66138.1 High
- gnu libredwg, opensuse backports sle, leap +2 moreGNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bfr_read in decode.c.CVE-2020-66148.1 High
- gnu libredwg, opensuse backports sle, leap +2 moreGNU LibreDWG 0.9.3.2564 has an invalid pointer dereference in dwg_dynapi_entity_value in dynapi.c...CVE-2020-66156.5 Medium
- freedesktop libbsd, canonical ubuntu linux, debian linux +4 more +6 morenlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name...CVE-2019-20367Fix available9.1 Critical
- e2fsprogs project e2fsprogs, canonical ubuntu linux, debian linux +7 more +9 moreA code execution vulnerability exists in the directory rehashing functionality of E2fsprogs...CVE-2019-5188Fix available7.5 High
- freeradius, opensuse leap +1 moreIn FreeRADIUS 3.0.x before 3.0.20, the EAP-pwd module used a global OpenSSL BN_CTX instance to...CVE-2019-17185Fix available7.5 High
- fontforge, opensuse leap +1 moreFontForge 20190801 has a heap-based buffer overflow in the Type2NotDefSplines() function in...CVE-2020-5496Fix available8.8 High
- fontforge, fedoraproject fedora, opensuse leap +2 moreFontForge 20190801 has a use-after-free in SFD_GetFontMetaData in sfd.c.CVE-2020-5395Fix available8.8 High
- otrs, debian linux, opensuse backports sle +1 more +3 moreAn issue was discovered in Open Ticket Request System (OTRS) 7.0.x through 7.0.12, and Community...CVE-2019-18179Fix available3.5 Low
- linux kernel, opensuse leap +1 moreIn the Linux kernel 5.0.0-rc7 (as distributed in ubuntu/linux.git on kernel.ubuntu.com), mounting...CVE-2019-19927Fix available6.0 Medium
- linux kernel, netapp 8300 firmware, 8700 firmware +11 more +13 moremwifiex_tm_cmd in drivers/net/wireless/marvell/mwifiex/cfg80211.c in the Linux kernel before 5.1...CVE-2019-20095Fix available5.5 Medium
- Show moreLoading…