Skip to contentOpensuse vulnerabilities
Newest
- suse linux enterprise server, linux enterprise server 12, linux enterprise server 15 +1 more +3 moremysql-systemd-helper allows setting 640 permissions of arbitrary filesCVE-2019-189015.1 Medium
- debian linux, linux kernel, canonical ubuntu linux +9 more +11 moreAn issue was discovered in the Linux kernel through 5.5.6. set_fdc in drivers/block/floppy.c...CVE-2020-9383Fix available7.1 High
- apache tomcat, geode, blackberry good control +18 more +20 moreImproper Privilege Management in TomcatCVE-2020-1938In KEVPublic exploitFix availableEPSS 99.3%9.8 Critical
- apache tomcat, canonical ubuntu linux, debian linux +17 more +19 morePotential HTTP request smuggling in Apache TomcatCVE-2020-1935Fix available4.8 Medium
- apache tomcat, tomee, debian linux +13 more +15 morePotential HTTP request smuggling in Apache TomcatCVE-2019-17569Fix available4.8 Medium
- ruby-lang rake, canonical ubuntu linux, debian linux +2 more +4 moreOS Command Injection in RakeCVE-2020-8130Fix available6.4 Medium
- cacti, debian linux, fedoraproject fedora +2 more +4 moregraph_realtime.php in Cacti 1.2.8 allows remote attackers to execute arbitrary OS commands via...CVE-2020-8813Public exploitFix availableEPSS 73.9%8.8 High
- proftpd, debian linux, fedoraproject fedora +4 more +6 moreIn ProFTPD 1.3.7, it is possible to corrupt the memory pool by interrupting the data transfer...CVE-2020-9273Public exploitFix availableEPSS 11.8%8.8 High
- proftpd, opensuse backports sle, leap +2 more +4 moreProFTPD 1.3.7 has an out-of-bounds (OOB) read vulnerability in mod_cap via the cap_text.c...CVE-2020-9272Fix available7.5 High
- debian linux, fedoraproject fedora, openidc mod auth openidc +1 more +3 moreA flaw was found in mod_auth_openidc before version 2.4.1. An open redirect issue exists in URLs...CVE-2019-20479Fix available6.1 Medium
- linux kernel, canonical ubuntu linux, netapp active iq unified manager +7 more +9 moreext4_protect_reserved_inode in fs/ext4/block_validity.c in the Linux kernel through 5.5.3 allows...CVE-2020-8992Fix available5.5 Medium
- apple icloud, icloud for windows, ios +8 more +10 moreMultiple memory corruption issues were addressed with improved memory handling. This issue is...CVE-2020-3868Fix available8.8 High
- apple icloud, icloud for windows, ios +9 more +11 moreA logic issue was addressed with improved state management. This issue is fixed in iOS 13.3.1 and...CVE-2020-3867Fix available6.1 Medium
- apple icloud, icloud for windows, ios +8 more +10 moreMultiple memory corruption issues were addressed with improved memory handling. This issue is...CVE-2020-3865Fix available8.8 High
- apple icloud, icloud for windows, ios +8 more +10 moreA denial of service issue was addressed with improved memory handling. This issue is fixed in iOS...CVE-2020-3862Fix available6.5 Medium
- intel software guard extensions sdk, opensuse backports, leap +2 moreImproper initialization in the Intel(R) SGX SDK before v2.6.100.1 may allow an authenticated user...CVE-2020-05617.8 High
- weechat, debian linux, fedoraproject fedora +2 more +4 moreirc_mode_channel_update in plugins/irc/irc-mode.c in WeeChat through 2.7 allows remote attackers...CVE-2020-8955Fix available9.8 Critical
- otrs faq, itsm, opensuse +2 moreA Cross-Site Scripting (XSS) Vulnerability exists in OTRS ITSM prior to 3.2.4, 3.1.8, and 3.0.7...CVE-2013-2637Public exploit6.1 Medium
- qemu, debian linux, opensuse leap +2 more +4 moreAn out-of-bounds heap buffer access flaw was found in the way the iSCSI Block driver in QEMU...CVE-2020-1711Fix available7.7 High
- libgd, canonical ubuntu linux, debian linux +2 more +4 moregdImageClone in gd.c in libgd 2.1.0-rc2 through 2.2.5 has a NULL pointer dereference allowing...CVE-2018-14553Fix available7.5 High
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreInsufficient data validation in streams in Google Chrome prior to 80.0.3987.87 allowed a remote...CVE-2020-6416Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreInappropriate implementation in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a...CVE-2020-6415Fix available8.8 High
- google chrome, opensuse backports sle +1 moreInsufficient policy enforcement in Safe Browsing in Google Chrome prior to 80.0.3987.87 allowed a...CVE-2020-6414Fix available8.8 High
- google chrome, opensuse backports sle +1 moreInappropriate implementation in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote...CVE-2020-6413Fix available8.8 High
- google chrome, opensuse backports sle +1 moreInsufficient validation of untrusted input in Omnibox in Google Chrome prior to 80.0.3987.87...CVE-2020-6412Fix available5.4 Medium
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreInsufficient policy enforcement in CORS in Google Chrome prior to 80.0.3987.87 allowed a local...CVE-2020-6408Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreInappropriate implementation in Blink in Google Chrome prior to 80.0.3987.87 allowed a local...CVE-2020-6404Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreIncorrect implementation in Omnibox in Google Chrome on iOS prior to 80.0.3987.87 allowed a...CVE-2020-6403Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreInsufficient policy enforcement in downloads in Google Chrome on OS X prior to 80.0.3987.87...CVE-2020-6402Fix available8.8 High
- google chrome, opensuse backports sle +1 moreInsufficient validation of untrusted input in Omnibox in Google Chrome prior to 80.0.3987.87...CVE-2020-6401Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreInappropriate implementation in CORS in Google Chrome prior to 80.0.3987.87 allowed a remote...CVE-2020-6400Fix available6.5 Medium
- google chrome, opensuse backports sle +1 moreInsufficient policy enforcement in AppCache in Google Chrome prior to 80.0.3987.87 allowed a...CVE-2020-6399Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreUse of uninitialized data in PDFium in Google Chrome prior to 80.0.3987.87 allowed a remote...CVE-2020-6398Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreInappropriate implementation in sharing in Google Chrome prior to 80.0.3987.87 allowed a remote...CVE-2020-6397Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreInappropriate implementation in Skia in Google Chrome prior to 80.0.3987.87 allowed a remote...CVE-2020-6396Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreInsufficient policy enforcement in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote...CVE-2020-6394Fix available5.4 Medium
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreInsufficient policy enforcement in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote...CVE-2020-6393Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreInsufficient policy enforcement in extensions in Google Chrome prior to 80.0.3987.87 allowed an...CVE-2020-6392Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreInsufficient validation of untrusted input in Blink in Google Chrome prior to 80.0.3987.87...CVE-2020-6391Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreOut of bounds memory access in streams in Google Chrome prior to 80.0.3987.87 allowed a remote...CVE-2020-6390Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreInsufficient policy enforcement in storage in Google Chrome prior to 80.0.3987.87 allowed a...CVE-2020-6385Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreType confusion in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to...CVE-2020-6382Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreInteger overflow in JavaScript in Google Chrome on ChromeOS and Android prior to 80.0.3987.87...CVE-2020-6381Fix available8.8 High
- debian linux, linuxfoundation runc, canonical ubuntu linux +2 more +4 moreopencontainers runc contains procfs race condition with a shared volume mountCVE-2019-19921Fix available7.0 High
- nodejs node, debian linux, nodejs node.js +5 more +7 moreIncluding trailing white space in HTTP header values in Nodejs 10, 12, and 13 causes bypass of...CVE-2019-15606Fix availableEPSS 20.0%9.8 Critical
- nodejs node, node.js, debian linux +8 more +10 moreImproper Certificate Validation in Node.js 10, 12, and 13 causes the process to abort when...CVE-2019-15604Fix availableEPSS 20.0%7.5 High
- nodejs node, node.js, debian linux +11 more +13 moreHTTP request smuggling in Node.js 10, 12, and 13 causes malicious payload delivery when transfer...CVE-2019-15605Public exploitFix availableEPSS 57.1%9.8 Critical
- opensuse leap 15.1, pcp, suse linux enterprise high performance computing 15-espos +8 more +10 morepcp: Local privilege escalation from user pcp to root through migrate_tempdirsCVE-2019-36968.4 High
- opensuse leap 15.1, pcp, suse linux enterprise high performance computing 15-espos +8 more +10 morepcp: Local privilege escalation from user pcp to rootCVE-2019-36958.4 High
- libslirp project libslirp, debian linux, opensuse leap +2 moreIn libslirp 4.1.0, as used in QEMU 4.2.0, tcp_subr.c misuses snprintf return values, leading to a...CVE-2020-8608Fix available5.6 Medium
- Show moreLoading…