Skip to contentOpensuse vulnerabilities
Newest
- oracle corporation java, canonical ubuntu linux, debian linux +21 more +23 moreVulnerability in the Java SE product of Oracle Java SE (component: Libraries). Supported versions...CVE-2020-2654Fix available3.7 Low
- oracle graalvm, oracle corporation java, canonical ubuntu linux +25 more +27 moreVulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM (component: Java...CVE-2020-2604Fix available8.1 High
- oracle corporation java, canonical ubuntu linux, debian linux +21 more +23 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security)....CVE-2020-2601Fix available6.8 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +22 more +24 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking)....CVE-2020-2593Fix available4.8 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +22 more +24 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security)....CVE-2020-2590Fix available3.7 Low
- oracle corporation java, canonical ubuntu linux, debian linux +22 more +24 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component:...CVE-2020-2583Fix available3.7 Low
- oracle mysql, canonical ubuntu linux, mariadb +6 more +8 moreVulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions...CVE-2020-2574Fix available5.9 Medium
- schedmd slurm, opensuse leap +1 moreSchedMD Slurm before 18.08.9 and 19.x before 19.05.5 has weak slurmdbd.conf permissions.CVE-2019-19727Fix available5.5 Medium
- schedmd slurm, debian linux, opensuse leap +2 moreSchedMD Slurm before 18.08.9 and 19.x before 19.05.5 executes srun --uid with incorrect privileges.CVE-2019-19728Fix available7.5 High
- opensuse libzypp, suse caas platform 3.0, linux enterprise server 12 +1 more +3 morelibzypp stores cookies world readableCVE-2019-18900Fix available4.0 Medium
- otrs, otrs ag ((otrs)) community edition, debian linux +2 more +4 moreSpoofing of From field in several screensCVE-2020-1765Fix available3.5 Low
- google chrome, debian linux, fedoraproject fedora +4 more +6 moreUse after free in audio in Google Chrome prior to 79.0.3945.117 allowed a remote attacker to...CVE-2020-6377Fix available8.8 High
- f5 nginx, apple xcode, canonical ubuntu linux +2 more +4 moreNGINX before 1.17.7, with certain error_page configurations, allows HTTP request smuggling, as...CVE-2019-20372Public exploitFix availableEPSS 15.0%5.3 Medium
- mozilla firefox, firefox esr, canonical ubuntu linux +9 more +11 moreMozilla developers reported memory safety bugs present in Firefox 71 and Firefox ESR 68.3. Some...CVE-2019-17024Fix available8.8 High
- mozilla firefox, firefox esr, opensuse leap +2 moreDuring the initialization of a new content process, a race condition occurs that can allow a...CVE-2019-170215.3 Medium
- gnu libredwg, opensuse backports sle, leap +2 moreGNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in read_pages_map in decode_r2007.c.CVE-2020-66098.8 High
- gnu libredwg, opensuse backports, leap +2 moreGNU LibreDWG 0.9.3.2564 has an attempted excessive memory allocation in read_sections_map in...CVE-2020-66106.5 Medium
- gnu libredwg, opensuse backports sle, leap +2 moreGNU LibreDWG 0.9.3.2564 has a NULL pointer dereference in get_next_owned_entity in dwg.c.CVE-2020-66116.5 Medium
- gnu libredwg, opensuse backports sle, leap +2 moreGNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in copy_compressed_bytes in...CVE-2020-66128.1 High
- gnu libredwg, opensuse backports sle, leap +2 moreGNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bit_search_sentinel in bits.c.CVE-2020-66138.1 High
- gnu libredwg, opensuse backports sle, leap +2 moreGNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bfr_read in decode.c.CVE-2020-66148.1 High
- gnu libredwg, opensuse backports sle, leap +2 moreGNU LibreDWG 0.9.3.2564 has an invalid pointer dereference in dwg_dynapi_entity_value in dynapi.c...CVE-2020-66156.5 Medium
- freedesktop libbsd, canonical ubuntu linux, debian linux +4 more +6 morenlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name...CVE-2019-20367Fix available9.1 Critical
- e2fsprogs project e2fsprogs, canonical ubuntu linux, debian linux +7 more +9 moreA code execution vulnerability exists in the directory rehashing functionality of E2fsprogs...CVE-2019-5188Fix available7.5 High
- freeradius, opensuse leap +1 moreIn FreeRADIUS 3.0.x before 3.0.20, the EAP-pwd module used a global OpenSSL BN_CTX instance to...CVE-2019-17185Fix available7.5 High
- fontforge, opensuse leap +1 moreFontForge 20190801 has a heap-based buffer overflow in the Type2NotDefSplines() function in...CVE-2020-5496Fix available8.8 High
- fontforge, fedoraproject fedora, opensuse leap +2 moreFontForge 20190801 has a use-after-free in SFD_GetFontMetaData in sfd.c.CVE-2020-5395Fix available8.8 High
- otrs, debian linux, opensuse backports sle +1 more +3 moreAn issue was discovered in Open Ticket Request System (OTRS) 7.0.x through 7.0.12, and Community...CVE-2019-18179Fix available3.5 Low
- linux kernel, opensuse leap +1 moreIn the Linux kernel 5.0.0-rc7 (as distributed in ubuntu/linux.git on kernel.ubuntu.com), mounting...CVE-2019-19927Fix available6.0 Medium
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreUse after free in media picker in Google Chrome prior to 79.0.3945.88 allowed a remote attacker...CVE-2019-13767Fix availableEPSS 15.5%8.8 High
- linux kernel, netapp 8300 firmware, 8700 firmware +11 more +13 moremwifiex_tm_cmd in drivers/net/wireless/marvell/mwifiex/cfg80211.c in the Linux kernel before 5.1...CVE-2019-20095Fix available5.5 Medium
- upx, opensuse backports, leap +2 moreAn invalid memory address dereference was discovered in the canUnpack function in p_mach.cpp in...CVE-2019-20053Fix available5.5 Medium
- gnu libredwg, opensuse backports sle, leap +2 moreAn issue was discovered in GNU LibreDWG before 0.93. Crafted input will lead to an attempted...CVE-2019-200096.5 Medium
- gnu libredwg, opensuse backports sle, leap +2 moreAn issue was discovered in GNU LibreDWG 0.92. There is a heap-based buffer over-read in...CVE-2019-200118.8 High
- gnu libredwg, opensuse backports sle, leap +2 moreAn issue was discovered in GNU LibreDWG 0.92. Crafted input will lead to an attempted excessive...CVE-2019-200126.5 Medium
- gnu libredwg, opensuse backports sle, leap +2 moreAn issue was discovered in GNU LibreDWG before 0.93. Crafted input will lead to an attempted...CVE-2019-200136.5 Medium
- gnu libredwg, opensuse backports sle, leap +2 moreAn issue was discovered in GNU LibreDWG before 0.93. There is a double-free in dwg_free in free.c.CVE-2019-200148.8 High
- gnu libredwg, opensuse backports sle, leap +2 moreAn issue was discovered in GNU LibreDWG 0.92. Crafted input will lead to an attempted excessive...CVE-2019-200156.5 Medium
- gnu libredwg, opensuse backports sle, leap +2 moreAn issue was discovered in GNU LibreDWG 0.92. There is a use-after-free in...CVE-2019-200108.8 High
- gnome networkmanager, canonical ubuntu linux, debian linux +2 more +4 moreIn NetworkManager 0.9.2.0, when a new wireless network was created with WPA/WPA2 security in...CVE-2012-2736Fix available4.4 Medium
- kaspersky tigervnc, opensuse leap +1 moreTigerVNC version prior to 1.10.1 is vulnerable to stack buffer overflow, which could be triggered...CVE-2019-15695Fix available7.2 High
- kaspersky tigervnc, opensuse leap +1 moreTigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow, which could be triggered...CVE-2019-15694Fix available7.2 High
- kaspersky tigervnc, opensuse leap +1 moreTigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow. Vulnerability could be...CVE-2019-15692Fix available7.2 High
- kaspersky tigervnc, opensuse leap +1 moreTigerVNC version prior to 1.10.1 is vulnerable to stack use-after-return, which occurs due to...CVE-2019-15691Fix available7.2 High
- debian linux, linux kernel, canonical ubuntu linux +13 more +15 moreIn the Linux kernel through 5.4.6, there is a NULL pointer dereference in drivers/scsi/libsas...CVE-2019-19965Fix available4.7 Medium
- debian linux, linux kernel, netapp active iq unified manager +10 more +12 moreIn the Linux kernel before 5.1.6, there is a use-after-free in cpia2_exit() in drivers/media/usb...CVE-2019-19966Fix available4.6 Medium
- sqlite, debian linux, netapp cloud backup +11 more +13 morezipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update...CVE-2019-19925Fix available7.5 High
- sqlite, debian linux, netapp cloud backup +11 more +13 moreflattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving...CVE-2019-19923Fix available7.5 High
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreIn ImageMagick 7.0.8-43 Q16, there is a heap-based buffer overflow in the function WriteSGIImage...CVE-2019-19948Fix available9.8 Critical
- graphicsmagick, debian linux, opensuse backports +1 more +3 moreIn GraphicsMagick 1.4 snapshot-20190403 Q8, there is a use-after-free in ThrowException and...CVE-2019-19950Fix available9.8 Critical
- Show moreLoading…