Skip to contentOpensuse Leap vulnerabilities
- libemf project libemf, fedoraproject fedora, opensuse leap +2 morelibEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows denial of service (issue 1 of 2).CVE-2020-11863Fix available5.5 Medium
- apache tomcat, canonical ubuntu linux, debian linux +23 more +25 morePotential remote code execution in Apache TomcatCVE-2020-9484Public exploitFix availableEPSS 55.5%7.0 High
- libexif project libexif, canonical ubuntu linux, debian linux +1 more +3 moreexif_entry_get_value in exif-entry.c in libexif 0.6.21 has a divide-by-zero error.CVE-2020-12767Fix available5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +20 more +22 moreAn issue was discovered in the Linux kernel before 5.4.17. drivers/spi/spi-dw.c allows attackers...CVE-2020-12769Fix available5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +21 more +23 moreAn issue was discovered in the Linux kernel through 5.6.11. btree_gc_coalesce in drivers/md...CVE-2020-12771Fix available5.5 Medium
- linux kernel, canonical ubuntu linux, debian linux +19 more +21 moreThere is a use-after-free in kernel versions before 5.5 due to a race condition between the...CVE-2020-10690Fix available6.5 Medium
- google chrome, debian linux, opensuse leap +2 moreType confusion in Blink in Google Chrome prior to 81.0.4044.138 allowed a remote attacker to...CVE-2020-6464Fix available8.8 High
- oneidentity syslog-ng, opensuse backports sle-15-sp1, leap 15.1 +6 more +8 moresyslog-ng: Local privilege escalation from new to root in %postCVE-2020-8019Fix available7.7 High
- gnu mailman, canonical ubuntu linux, debian linux +3 more +5 more/options/mailman in GNU Mailman before 2.1.31 allows Arbitrary Content Injection.CVE-2020-12108Fix available6.5 Medium
- graphicsmagick, debian linux, opensuse backports sle +1 more +3 moreGraphicsMagick through 1.3.35 has a heap-based buffer overflow in ReadMNGImage in coders/png.c.CVE-2020-12672Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +3 more +5 moreA buffer overflow could occur when parsing and validating SCTP chunks in WebRTC. This could have...CVE-2020-6831Fix available9.8 Critical
- linux kernel, canonical ubuntu linux, opensuse leap +2 moregss_mech_free in net/sunrpc/auth_gss/gss_mech_switch.c in the rpcsec_gss_krb5 implementation in...CVE-2020-12656Fix availableDisputed5.5 Medium
- debian linux, linux kernel, netapp a700s firmware +19 more +21 moreAn issue was found in Linux kernel before 5.5.4. The mwifiex_cmd_append_vsie_tlv() function in...CVE-2020-12653Fix available7.8 High
- roundcube webmail, opensuse backports sle, leap +2 moreRoundcube Webmail before 1.4.4 allows attackers to include local files and execute code via...CVE-2020-12640Public exploitFix available9.8 Critical
- roundcube webmail, opensuse backports sle, leap +2 morercube_image.php in Roundcube Webmail before 1.4.4 allows attackers to execute arbitrary code via...CVE-2020-12641In KEVPublic exploitFix availableEPSS 84.4%9.8 Critical
- roundcube webmail, debian linux, opensuse backports sle +1 more +3 moreAn issue was discovered in Roundcube Webmail before 1.4.4. There is a cross-site scripting (XSS)...CVE-2020-12625Public exploitFix available6.1 Medium
- saltstack salt, blackberry workspaces server, canonical ubuntu linux +3 more +5 moreSaltStack Salt is vulnerable Arbitrary Directory AccessCVE-2020-11652In KEVPublic exploitFix availableEPSS 86.4%6.5 Medium
- saltstack salt, canonical ubuntu linux, debian linux +2 more +4 moreSaltStack Salt Unauthenticated Remote Code ExecutionCVE-2020-11651In KEVPublic exploitFix availableEPSS 96.6%9.8 Critical
- jquery, debian linux, drupal +67 more +69 morejQuery has a potential XSS vulnerabilityCVE-2020-11022Public exploitFix availableEPSS 99.2%6.9 Medium
- dom4j project dom4j, canonical ubuntu linux, netapp oncommand api services +35 more +37 moredom4j allows External Entities by default which might enable XXE attacksCVE-2020-10683Fix available9.8 Critical
- openldap, apple mac os x, broadcom brocade fabric operating system +18 more +20 moreIn filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean...CVE-2020-12243Fix available7.5 High
- red hat samba, debian linux, fedoraproject fedora +1 more +3 moreA flaw was found when using samba as an Active Directory Domain Controller. Due to the way samba...CVE-2020-10704Fix available7.5 High
- red hat samba, fedoraproject fedora, opensuse leap +2 moreA use-after-free flaw was found in the way samba AD DC LDAP servers, handled 'Paged Results'...CVE-2020-10700Fix available5.3 Medium
- artifex jbig2dec, debian linux, opensuse leap +2 morejbig2_image_compose in jbig2_image.c in Artifex jbig2dec before 0.18 has a heap-based buffer...CVE-2020-12268Fix available9.8 Critical
- gnu mailman, canonical ubuntu linux, debian linux +3 more +5 moreGNU Mailman 2.x before 2.1.30 uses the .obj extension for scrubbed application/octet-stream MIME...CVE-2020-12137Fix available6.1 Medium
- infradead openconnect, opensuse leap +1 moreOpenConnect through 8.08 mishandles negative return values from X509_check_ function calls, which...CVE-2020-12105Fix available5.9 Medium
- squid-cache squid, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in Squid before 5.0.2. A remote attacker can replay a sniffed Digest...CVE-2020-11945Fix availableEPSS 27.2%9.8 Critical
- libslirp project libslirp, canonical ubuntu linux, debian linux +2 more +4 morelibslirp: use after free vulnerability cause a denial of service.CVE-2020-1983Fix available7.5 High
- teeworlds, canonical ubuntu linux, debian linux +3 more +5 moreCServer::SendMsg in engine/server/server.cpp in Teeworlds 0.7.x before 0.7.5 allows remote...CVE-2020-12066Fix available7.5 High
- teeworlds, opensuse leap +1 moreTeeworlds before 0.7.4 has an integer overflow when computing a tilemap size.CVE-2019-20787Fix available9.8 Critical
- openssl, broadcom fabric operating system, debian linux +23 more +25 moreSegmentation fault in SSL_check_chainCVE-2020-1967Public exploitFix availableEPSS 53.3%7.5 High
- ntp, debian linux, netapp all flash fabric-attached storage 8300 firmware +14 more +16 morentpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows an off-path attacker to block...CVE-2020-11868Fix available5.9 Medium
- webkitgtk, wpewebkit wpe webkit, canonical ubuntu linux +2 more +4 moreA use-after-free issue exists in WebKitGTK before 2.28.1 and WPE WebKit before 2.28.1 via crafted...CVE-2020-11793Fix available8.8 High
- squid-cache squid, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in Squid through 4.7. When handling the tag esi:when when ESI is enabled,...CVE-2019-12519Fix available9.8 Critical
- squid-cache squid, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in Squid through 4.7. When Squid is parsing ESI, it keeps the ESI...CVE-2019-12521Fix available5.9 Medium
- oracle vm virtualbox, opensuse leap +1 moreVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)....CVE-2020-2959Fix available8.6 High
- oracle vm virtualbox, opensuse leap +1 moreVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)....CVE-2020-2958Fix available7.5 High
- oracle vm virtualbox, opensuse leap +1 moreVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)....CVE-2020-2951Fix available6.5 Medium
- oracle vm virtualbox, opensuse leap +1 moreVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)....CVE-2020-2929Fix available7.8 High
- oracle vm virtualbox, opensuse leap +1 moreVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)....CVE-2020-2914Fix available7.0 High
- oracle vm virtualbox, opensuse leap +1 moreVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)....CVE-2020-2913Fix available7.0 High
- oracle vm virtualbox, opensuse leap +1 moreVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)....CVE-2020-2911Fix available7.5 High
- oracle vm virtualbox, opensuse leap +1 moreVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)....CVE-2020-2910Fix available6.5 Medium
- oracle vm virtualbox, opensuse leap +1 moreVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)....CVE-2020-2909Fix available2.8 Low
- oracle vm virtualbox, opensuse leap +1 moreVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)....CVE-2020-2908Fix available8.2 High
- oracle vm virtualbox, opensuse leap +1 moreVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)....CVE-2020-2907Fix available7.5 High
- oracle vm virtualbox, opensuse leap +1 moreVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)....CVE-2020-2905Fix available8.2 High
- oracle vm virtualbox, opensuse leap +1 moreVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)....CVE-2020-2902Fix available8.8 High
- oracle vm virtualbox, opensuse leap +1 moreVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)....CVE-2020-2894Fix available6.0 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +19 more +21 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency)...CVE-2020-2830Fix available5.3 Medium
- Show moreLoading…