Skip to contentOpensuse Leap vulnerabilities
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreUse after free in offscreen canvas in Google Chrome prior to 85.0.4183.102 allowed a remote...CVE-2020-6576Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreRace in Mojo in Google Chrome prior to 85.0.4183.102 allowed a remote attacker who had...CVE-2020-6575Fix available8.3 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in installer in Google Chrome on OS X prior to 85.0.4183.102...CVE-2020-6574Fix available7.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreUse after free in video in Google Chrome on Android prior to 85.0.4183.102 allowed a remote...CVE-2020-6573Fix available9.6 Critical
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in extensions in Google Chrome prior to 85.0.4183.121 allowed an...CVE-2020-15966Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreType confusion in V8 in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to...CVE-2020-15965Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient data validation in media in Google Chrome prior to 85.0.4183.121 allowed a remote...CVE-2020-15964Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in extensions in Google Chrome prior to 85.0.4183.121 allowed an...CVE-2020-15963Fix available9.6 Critical
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy validation in serial in Google Chrome prior to 85.0.4183.121 allowed a remote...CVE-2020-15962Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy validation in extensions in Google Chrome prior to 85.0.4183.121 allowed an...CVE-2020-15961Fix available9.6 Critical
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreHeap buffer overflow in storage in Google Chrome prior to 85.0.4183.121 allowed a remote attacker...CVE-2020-15960Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in networking in Google Chrome prior to 85.0.4183.102 allowed an...CVE-2020-15959Fix available4.3 Medium
- nodejs node, node.js, fedoraproject fedora +1 more +3 moreNode.js < 12.18.4 and < 14.11 can be exploited to perform HTTP desync attacks and deliver...CVE-2020-8201Fix available7.4 High
- nodejs node, node.js, fedoraproject fedora +1 more +3 moreThe implementation of realpath in libuv < 10.22.1, < 12.18.4, and < 14.9.0 used within Node.js...CVE-2020-8252Fix available7.8 High
- google android, opensuse leap +1 moreIn skb_to_mamac of networking.c, there is a possible out of bounds write due to an integer...CVE-2020-0432Fix available7.8 High
- google android, opensuse leap +1 moreIn kbd_keycode of keyboard.c, there is a possible out of bounds write due to a missing bounds...CVE-2020-0431Fix available6.7 Medium
- perl dbi, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in the DBI module before 1.643 for Perl. The hv_fetch() documentation...CVE-2019-20919Fix available4.7 Medium
- google android, debian linux, opensuse leap +1 more +3 moreIn create_pinctrl of core.c, there is a possible out of bounds read due to a use after free. This...CVE-2020-0427Fix available5.5 Medium
- sylabs singularity, opensuse leap +1 moreInsecure permissions on build temporary rootfs in SingularityCVE-2020-25040Fix available8.8 High
- sylabs singularity, opensuse leap +1 moreInsecure permissions on user namespace / fakeroot temporary rootfs in SingularityCVE-2020-25039Fix available8.1 High
- microsoft perl-dbi, debian linux, fedoraproject fedora +2 more +4 moreA buffer overflow was found in perl-DBI < 1.643 in DBI.xs. A local attacker who is able to supply...CVE-2020-14393Fix available7.1 High
- google brotli, canonical ubuntu linux, debian linux +7 more +9 moreBuffer overflow in Brotli libraryCVE-2020-8927Public exploitFix available5.3 Medium
- debian linux, linux kernel, opensuse leap +2 moreThe rbd block device driver in drivers/block/rbd.c in the Linux kernel through 5.8.9 used...CVE-2020-25284Fix available4.1 Medium
- microsoft perl-dbi, canonical ubuntu linux, debian linux +3 more +5 moreAn untrusted pointer dereference flaw was found in Perl-DBI < 1.643. A local attacker who is able...CVE-2020-14392Fix available5.5 Medium
- atftp project atftp, debian linux, opensuse leap +2 moreAn exploitable denial of service vulnerability exists in the atftpd daemon functionality of atftp...CVE-2020-6097Fix available7.5 High
- libproxy project libproxy, canonical ubuntu linux, debian linux +2 more +4 moreurl::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger...CVE-2020-25219Fix available7.5 High
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreA TOCTOU mismatch in the NFS client code in the Linux kernel before 5.8.3 could be used by local...CVE-2020-25212Fix available7.0 High
- cifs-utils, fedoraproject fedora, opensuse leap +2 moreIt was found that cifs-utils' mount.cifs was invoking a shell when requesting the Samba password,...CVE-2020-14342Fix available4.4 Medium
- pypa pip, debian linux, opensuse leap +2 more +4 morePath Traversal in pipCVE-2019-20916Fix available7.5 High
- gnu gnutls, canonical ubuntu linux, fedoraproject fedora +4 more +6 moreAn issue was discovered in GnuTLS before 3.6.15. A server can trigger a NULL pointer dereference...CVE-2020-24659Fix available7.5 High
- debian linux, linux kernel, fedoraproject fedora +1 more +3 moreCVE-2020-14386 does not affect BellSoft softwareCVE-2020-14386Public exploitFix available6.7 Medium
- xmlsoft libxml2, debian linux, fedoraproject fedora +18 more +20 moreGNOME project libxml2 v2.9.10 and earlier have a global Buffer Overflow vulnerability in...CVE-2020-24977Fix available6.5 Medium
- golang go, fedoraproject fedora, opensuse leap +1 more +3 moreGo before 1.14.8 and 1.15.x before 1.15.1 allows XSS because text/html is the default for CGI...CVE-2020-24553Fix available6.1 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient data validation in Omnibox in Google Chrome prior to 85.0.4183.83 allowed a remote...CVE-2020-6571Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInformation leakage in WebRTC in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to...CVE-2020-6570Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInteger overflow in WebUSB in Google Chrome prior to 85.0.4183.83 allowed a remote attacker who...CVE-2020-6569Fix available6.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in intent handling in Google Chrome on Android prior to 85.0.4183...CVE-2020-6568Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient validation of untrusted input in command line handling in Google Chrome on Windows...CVE-2020-6567Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in media in Google Chrome prior to 85.0.4183.83 allowed a remote...CVE-2020-6566Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInappropriate implementation in Omnibox in Google Chrome on iOS prior to 85.0.4183.83 allowed a...CVE-2020-6565Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInappropriate implementation in permissions in Google Chrome prior to 85.0.4183.83 allowed a...CVE-2020-6564Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in intent handling in Google Chrome on Android prior to 85.0.4183...CVE-2020-6563Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in Blink in Google Chrome prior to 85.0.4183.83 allowed a remote...CVE-2020-6562Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInappropriate implementation in Content Security Policy in Google Chrome prior to 85.0.4183.83...CVE-2020-6561Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in autofill in Google Chrome prior to 85.0.4183.83 allowed a...CVE-2020-6560Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreUse after free in presentation API in Google Chrome prior to 85.0.4183.83 allowed a remote...CVE-2020-6559Fix available8.8 High
- google chrome, debian linux, opensuse backports sle +1 more +3 moreInsufficient policy enforcement in iOSWeb in Google Chrome on iOS prior to 85.0.4183.83 allowed a...CVE-2020-6558Fix available6.5 Medium
- flask-cors project flask-cors, debian linux, opensuse backports sle +1 more +3 moreFlask-Cors Directory Traversal vulnerabilityCVE-2020-25032Fix available7.5 High
- microsoft librepo, fedoraproject fedora, opensuse backports sle +1 more +3 moreA flaw was found in librepo in versions before 1.12.1. A directory traversal vulnerability was...CVE-2020-14352Fix available8.0 High
- kleopatra project kleopatra, fedoraproject fedora, opensuse backports sle +1 more +3 moreThe Kleopatra component before 3.1.12 (and before 20.07.80) for GnuPG allows remote attackers to...CVE-2020-24972Public exploitFix available8.8 High
- Show moreLoading…