Skip to contentOpensuse Leap vulnerabilities
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in extensions in Google Chrome prior to 81.0.4044.92 allowed a...CVE-2020-6433Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in navigations in Google Chrome prior to 81.0.4044.92 allowed a...CVE-2020-6432Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in full screen in Google Chrome prior to 81.0.4044.92 allowed a...CVE-2020-6431Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreType Confusion in V8 in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to...CVE-2020-6430Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreUse after free in audio in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to...CVE-2020-6423Fix available8.8 High
- wireshark, debian linux, opensuse leap +2 moreIn Wireshark 3.2.0 to 3.2.2, 3.0.0 to 3.0.9, and 2.6.0 to 2.6.15, the BACapp dissector could...CVE-2020-11647Fix available7.5 High
- linux kernel, opensuse leap, redhat enterprise linux +2 moreAn issue was discovered in the Linux kernel before 5.2 on the powerpc platform. arch/powerpc...CVE-2020-11669Fix available5.5 Medium
- varnish-cache varnish cache, opensuse backports sle, leap +2 moreAn issue was discovered in Varnish Cache before 6.0.5 LTS, 6.1.x and 6.2.x before 6.2.2, and 6.3...CVE-2019-20637Fix available7.5 High
- varnish-cache varnish cache, debian linux, opensuse backports sle +1 more +3 moreAn issue was discovered in Varnish Cache before 6.0.6 LTS, 6.1.x and 6.2.x before 6.2.3, and 6.3...CVE-2020-11653Fix available7.5 High
- google chrome, fedoraproject fedora, opensuse backports +1 more +3 moreHeap buffer overflow in media in Google Chrome prior to 80.0.3987.162 allowed a remote attacker...CVE-2020-6452Fix available8.8 High
- google chrome, fedoraproject fedora, opensuse backports sle +1 more +3 moreUse after free in WebAudio in Google Chrome prior to 80.0.3987.162 allowed a remote attacker to...CVE-2020-6451Fix available8.8 High
- google chrome, fedoraproject fedora, opensuse backports sle +1 more +3 moreUse after free in WebAudio in Google Chrome prior to 80.0.3987.162 allowed a remote attacker to...CVE-2020-6450Fix available8.8 High
- linux kernel, canonical ubuntu linux, opensuse leap +2 moreLinux kernel KVM Power8 conflicting use of HSTATE_HOST_R1CVE-2020-8834Fix available6.5 Medium
- gnu gnutls, canonical ubuntu linux, debian linux +5 more +7 moreGnuTLS 3.6.x before 3.6.13 uses incorrect cryptography for DTLS. The earliest affected version is...CVE-2020-11501Fix available7.4 High
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreAn issue was discovered in slc_bump in drivers/net/can/slcan.c in the Linux kernel through 5.6.2....CVE-2020-11494Fix available4.4 Medium
- opensuse leap, leap 15.1, texlive-filesystem +3 more +5 morerace condition on texlive-filesystem cron job allows for the deletion of unintended filesCVE-2020-80176.2 Medium
- opensuse leap 15.1, texlive-filesystem, suse linux enterprise module for desktop applications 15-sp1 +2 more +4 morerace condition in the packaging of texlive-filesystenCVE-2020-80164.9 Medium
- haproxy, canonical ubuntu linux, debian linux +3 more +5 moreIn hpack_dht_insert in hpack-tbl.c in the HPACK decoder in HAProxy 1.8 through 2.x before 2.1.4,...CVE-2020-11100Fix availableEPSS 61.6%8.8 High
- apache http server, broadcom brocade fabric operating system, canonical ubuntu linux +11 more +13 moreIn Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended...CVE-2020-1927Fix availableEPSS 56.7%6.1 Medium
- apache http server, canonical ubuntu linux, debian linux +8 more +10 moreIn Apache HTTP Server 2.4.0 to 2.4.41, mod_proxy_ftp may use uninitialized memory when proxying...CVE-2020-1934Fix availableEPSS 52.0%5.3 Medium
- php, debian linux, opensuse leap +1 more +3 moreget_headers() silently truncates after a null byteCVE-2020-7066Fix available5.3 Medium
- php, canonical ubuntu linux, debian linux +2 more +4 moreUse-of-uninitialized-value in exifCVE-2020-7064Fix available6.5 Medium
- gstreamer, gstreamer project gst-rtsp-server, opensuse backports sle +1 more +3 moreAn exploitable denial of service vulnerability exists in the GstRTSPAuth functionality of...CVE-2020-6095Fix available7.5 High
- otrs, otrs ag ((otrs)) community edition, debian linux +2 more +4 moreInformation DisclosureCVE-2020-1772Fix available6.5 Medium
- otrs, otrs ag ((otrs)) community edition, debian linux +2 more +4 moreInformation disclosure in support bundle filesCVE-2020-1770Fix available2.4 Low
- otrs, otrs ag ((otrs)) community edition, opensuse backports sle +1 more +3 moreAutocomplete in the form login screensCVE-2020-1769Fix available3.5 Low
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreIn the Linux kernel before 5.5.8, get_raw_socket in drivers/vhost/net.c lacks validation of an...CVE-2020-10942Fix available5.3 Medium
- graphicsmagick, debian linux, opensuse backports +1 more +3 moreGraphicsMagick before 1.3.35 has an integer overflow and resultant heap-based buffer overflow in...CVE-2020-10938Fix available9.8 Critical
- pyyaml, fedoraproject fedora, opensuse leap +1 more +3 moreImproper Input Validation in PyYAMLCVE-2020-1747Fix available9.8 Critical
- torproject tor, opensuse backports sle, leap +2 moreTor before 0.3.5.10, 0.4.x before 0.4.1.9, and 0.4.2.x before 0.4.2.7 allows remote attackers to...CVE-2020-10593Fix available7.5 High
- phpmyadmin, fedoraproject fedora, opensuse backports sle +2 more +4 morephpMyAdmin SQL InjectionCVE-2020-10804Fix available8.0 High
- phpmyadmin, debian linux, fedoraproject fedora +3 more +5 morephpMyAdmin SQL injection vulnerabilityCVE-2020-10803Fix available5.4 Medium
- phpmyadmin, debian linux, fedoraproject fedora +3 more +5 morephpMyAdmin SQL injection vulnerabilityCVE-2020-10802Fix available8.0 High
- squid-cache squid, canonical ubuntu linux, debian linux +1 more +3 moreSquid before 4.9, when certain web browsers are used, mishandles HTML in the host (aka hostname)...CVE-2019-18860Fix available6.1 Medium
- torproject tor, opensuse backports, leap +2 moreTor before 0.3.5.10, 0.4.x before 0.4.1.9, and 0.4.2.x before 0.4.2.7 allows remote attackers to...CVE-2020-10592Fix available7.5 High
- rails actionview, debian linux, fedoraproject fedora +1 more +3 morePossible XSS vulnerability in ActionViewCVE-2020-5267Public exploitFix available4.0 Medium
- denx u-boot, opensuse leap, siemens ruggedcom rox mx5000 +10 more +12 moreDas U-Boot through 2020.01 allows attackers to bypass verified boot restrictions and subsequently...CVE-2020-10648Fix available7.8 High
- graphicsmagick, debian linux, opensuse backports sle +1 more +3 moreIn GraphicsMagick before 1.3.32, the text filename component allows remote attackers to read...CVE-2019-12921Fix available6.5 Medium
- bluez, canonical ubuntu linux, debian linux +1 more +3 moreImproper access control in subsystem for BlueZ before version 5.53 may allow an unauthenticated...CVE-2020-0556Fix available7.1 High
- icu-project international components for unicode, canonical ubuntu linux, debian linux +11 more +13 moreAn issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An...CVE-2020-10531Fix available8.8 High
- substack minimist, opensuse leap +1 morePrototype Pollution in minimistCVE-2020-7598Public exploitFix available5.6 Medium
- qemu, canonical ubuntu linux, debian linux +1 more +3 moreQEMU 4.1.0 has a memory leak in zrle_compress_data in ui/vnc-enc-zrle.c during a VNC disconnect...CVE-2019-20382Fix available3.5 Low
- gnu glibc, canonical ubuntu linux, debian linux +11 more +13 moreThe GNU C Library (aka glibc or libc6) before 2.32 could overflow an on-stack buffer during range...CVE-2020-10029Fix available5.5 Medium
- webkitgtk, wpewebkit wpe webkit, canonical ubuntu linux +3 more +5 moreaccessibility/AXObjectCache.cpp in WebKit, as used in WebKitGTK through 2.26.4 and WPE WebKit...CVE-2020-10018Fix available9.8 Critical
- opensuse factory, suse linux enterprise server, linux enterprise server 12 +2 more +4 moreLocal privilege escalation from user salt to rootCVE-2019-188978.4 High
- suse linux enterprise server, linux enterprise server 11, linux enterprise server 12 +2 more +4 morepermissions: chkstat sets unintended setuid/capabilities for mrsh and wodimCVE-2020-8013Fix available2.2 Low
- nagios, opensuse factory, suse linux enterprise server 11 +3 more +5 morenagios cron job allows privilege escalation from user nagios to rootCVE-2019-36985.7 Medium
- wireshark, debian linux, fedoraproject fedora +1 more +3 moreIn Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the EAP dissector could crash....CVE-2020-9428Fix available7.5 High
- wireshark, opensuse leap +1 moreIn Wireshark 3.2.0 to 3.2.1, the WireGuard dissector could crash. This was addressed in epan...CVE-2020-9429Fix available7.5 High
- wireshark, debian linux, fedoraproject fedora +1 more +3 moreIn Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the WiMax DLMAP dissector could...CVE-2020-9430Fix available7.5 High
- Show moreLoading…