Skip to contentOpensuse Leap vulnerabilities
- oracle vm virtualbox, opensuse leap +1 moreVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)....CVE-2020-14648Fix available5.3 Medium
- oracle vm virtualbox, opensuse leap +1 moreVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)....CVE-2020-14647Fix available7.5 High
- oracle vm virtualbox, opensuse leap +1 moreVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)....CVE-2020-14646Fix available7.5 High
- oracle vm virtualbox, opensuse leap +1 moreVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)....CVE-2020-14629Fix available6.0 Medium
- oracle vm virtualbox, opensuse leap +1 moreVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)....CVE-2020-14628Fix available8.2 High
- apache tomcat, canonical ubuntu linux, debian linux +15 more +17 moreInfinite Loop in Apache TomcatCVE-2020-13935Public exploitFix availableEPSS 86.6%7.5 High
- apache tomcat, canonical ubuntu linux, debian linux +11 more +13 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in Apache TomcatCVE-2020-13934Fix availableEPSS 64.1%7.5 High
- openldap, redhat enterprise linux, mcafee policy auditor +2 more +4 morelibldap in certain third-party OpenLDAP packages has a certificate-validation flaw when the third...CVE-2020-15719Fix available4.2 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +21 more +23 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP)....CVE-2020-14621Fix available5.3 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +18 more +20 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D)....CVE-2020-14593Fix available7.4 High
- oracle corporation java, canonical ubuntu linux, debian linux +18 more +20 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries)....CVE-2020-14583Fix available8.3 High
- oracle corporation java, canonical ubuntu linux, debian linux +19 more +21 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D)....CVE-2020-14581Fix available3.7 Low
- oracle corporation java, canonical ubuntu linux, debian linux +19 more +21 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries)....CVE-2020-14579Fix available3.7 Low
- oracle corporation java, canonical ubuntu linux, debian linux +19 more +21 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries)....CVE-2020-14578Fix available3.7 Low
- oracle corporation java, canonical ubuntu linux, debian linux +18 more +20 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE)....CVE-2020-14577Fix available3.7 Low
- oracle corporation java, canonical ubuntu linux, debian linux +7 more +9 moreVulnerability in the Java SE product of Oracle Java SE (component: Hotspot). Supported versions...CVE-2020-14573Fix available3.7 Low
- oracle corporation java, canonical ubuntu linux, debian linux +7 more +9 moreVulnerability in the Java SE product of Oracle Java SE (component: ImageIO). Supported versions...CVE-2020-14562Fix available5.3 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +18 more +20 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries)....CVE-2020-14556Fix available4.8 Medium
- webkitgtk, wpewebkit wpe webkit, canonical ubuntu linux +3 more +5 moreThe bubblewrap sandbox of WebKitGTK and WPE WebKit, prior to 2.28.3, failed to properly block...CVE-2020-13753Fix available10.0 Critical
- python, canonical ubuntu linux, debian linux +8 more +10 moreIn Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to...CVE-2019-20907Fix available7.5 High
- libslirp project libslirp, canonical ubuntu linux, debian linux +3 more +5 moreImportant: virt:rhel security updateCVE-2020-10756Fix available6.5 Medium
- cli, npmjs npm, fedoraproject fedora +1 more +3 moreSensitive information exposure through logs in npm cliCVE-2020-15095Fix available4.4 Medium
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Xen through 4.13.x, allowing Intel guest OS users to gain privileges...CVE-2020-15567Fix available7.8 High
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Xen through 4.13.x, allowing x86 Intel HVM guest OS users to cause a...CVE-2020-15565Fix available8.8 High
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Xen through 4.13.x, allowing x86 HVM guest OS users to cause a...CVE-2020-15563Fix available6.5 Medium
- samba, canonical ubuntu linux, debian linux +2 more +4 moreA flaw was found in the AD DC NBT server in all Samba versions before 4.10.17, before 4.11.11 and...CVE-2020-14303Fix available7.5 High
- opensuse openldap2, leap 15.1, leap 15.2 +19 more +21 moreLocal privilege escalation from ldap to root when using OPENLDAP_CONFIG_BACKEND=ldap in openldap2CVE-2020-8023Fix available7.7 High
- wireshark, debian linux, opensuse leap +2 moreIn Wireshark 3.2.0 to 3.2.4, the GVCP dissector could go into an infinite loop. This was...CVE-2020-15466Fix available7.5 High
- samba, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreA use-after-free flaw was found in all samba LDAP server versions before 4.10.17, before 4.11.11,...CVE-2020-10760Fix available6.5 Medium
- samba, debian linux, fedoraproject fedora +1 more +3 moreA flaw was found in all Samba versions before 4.10.17, before 4.11.11 and before 4.12.4 in the...CVE-2020-10745Fix available7.5 High
- debian linux, samba, fedoraproject fedora +2 more +4 moreA NULL pointer dereference, or possible use-after-free flaw was found in Samba AD LDAP server in...CVE-2020-10730Fix available6.5 Medium
- mozilla firefox, opensuse leap +1 moreMozilla developers and community members reported memory safety bugs present in Firefox 77. Some...CVE-2020-12426Fix available8.8 High
- mozilla firefox, opensuse leap +1 moreWhen constructing a permission prompt for WebRTC, a URI was supplied from the content process....CVE-2020-12424Fix available6.5 Medium
- mozilla firefox, opensuse leap +1 moreIn non-standard configurations, a JPEG image created by JavaScript could have caused an internal...CVE-2020-12422Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreWhen trying to connect to a STUN server, a race condition could have caused a use-after-free of a...CVE-2020-12420Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreWhen processing callbacks that occurred during window flushing in the parent process, the...CVE-2020-12419Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreManipulating individual parts of a URL object could have caused an out-of-bounds read, leaking...CVE-2020-12418Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreDue to confusion about ValueTags on JavaScript Objects, an object may pass through the type...CVE-2020-12417Fix available8.8 High
- mozilla firefox, opensuse leap +1 moreA VideoStreamEncoder may have been freed in a race condition with VideoBroadcaster:...CVE-2020-12416Fix available8.8 High
- mozilla firefox, opensuse leap +1 moreWhen "%2F" was present in a manifest URL, Firefox's AppCache behavior may have become confused...CVE-2020-12415Fix available6.5 Medium
- ifax hylafax enterprise, fedoraproject fedora, hylafax\+ project hylafax\+ +2 more +4 moreIn HylaFAX+ through 7.0.2 and HylaFAX Enterprise, the faxsetup utility calls chown on files in...CVE-2020-15396Fix available7.8 High
- libvncserver project libvncserver, canonical ubuntu linux, fedoraproject fedora +7 more +9 moreIt was discovered that websockets.c in LibVNCServer prior to 0.9.12 did not properly decode...CVE-2017-18922Fix available9.8 Critical
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreIn the Linux kernel through 5.7.6, usbtest_disconnect in drivers/usb/misc/usbtest.c has a memory...CVE-2020-15393Fix available5.5 Medium
- opensuse leap, leap 15.1, tumbleweed +2 more +4 morekopano-python-services: Local privilege escalation from kopano to root in kopano-spamd subpackageCVE-2020-80147.7 High
- opensuse factory, leap 15.1, leap 15.2 +2 more +4 moreProblematic permissions in hylafax+ packaging allow escalation from uucp to other usersCVE-2020-8024Fix available5.3 Medium
- coturn, canonical ubuntu linux, debian linux +2 more +4 moreImproper Initialization in coturnCVE-2020-4067Fix available7.0 High
- apache tomcat, canonical ubuntu linux, debian linux +5 more +7 moreUncontrolled Resource Consumption in Apache TomcatCVE-2020-11996Public exploitFix availableEPSS 26.7%7.5 High
- linux kernel, opensuse leap, redhat enterprise linux +2 moreA buffer over-read flaw was found in RH kernel versions before 5.0 in crypto_authenc_extractkeys...CVE-2020-10769Fix available5.5 Medium
- apache tomcat, suse enterprise storage 5, linux enterprise server 12-sp2-bcl +13 more +15 moreUser-writeable configuration file /usr/lib/tmpfiles.d/tomcat.conf allows for escalation of priviligesCVE-2020-8022Fix available7.7 High
- openexr, fedoraproject fedora, opensuse leap +2 moreAn issue was discovered in OpenEXR before 2.5.2. An invalid tiled input file could cause invalid...CVE-2020-15304Fix available5.5 Medium
- Show moreLoading…