Skip to contentOpensuse vulnerabilities
Newest
- opensuse leap, leap 15.1, texlive-filesystem +3 more +5 morerace condition on texlive-filesystem cron job allows for the deletion of unintended filesCVE-2020-80176.2 Medium
- opensuse leap 15.1, texlive-filesystem, suse linux enterprise module for desktop applications 15-sp1 +2 more +4 morerace condition in the packaging of texlive-filesystenCVE-2020-80164.9 Medium
- exim, opensuse factory +1 moreLocal privilege escalation in exim package from user mail to rootCVE-2020-8015Fix available8.4 High
- haproxy, canonical ubuntu linux, debian linux +3 more +5 moreIn hpack_dht_insert in hpack-tbl.c in the HPACK decoder in HAProxy 1.8 through 2.x before 2.1.4,...CVE-2020-11100Fix availableEPSS 61.6%8.8 High
- apache http server, broadcom brocade fabric operating system, canonical ubuntu linux +11 more +13 moreIn Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended...CVE-2020-1927Fix availableEPSS 56.7%6.1 Medium
- apache http server, canonical ubuntu linux, debian linux +8 more +10 moreIn Apache HTTP Server 2.4.0 to 2.4.41, mod_proxy_ftp may use uninitialized memory when proxying...CVE-2020-1934Fix availableEPSS 52.0%5.3 Medium
- php, debian linux, opensuse leap +1 more +3 moreget_headers() silently truncates after a null byteCVE-2020-7066Fix available5.3 Medium
- php, canonical ubuntu linux, debian linux +2 more +4 moreUse-of-uninitialized-value in exifCVE-2020-7064Fix available6.5 Medium
- gstreamer, gstreamer project gst-rtsp-server, opensuse backports sle +1 more +3 moreAn exploitable denial of service vulnerability exists in the GstRTSPAuth functionality of...CVE-2020-6095Fix available7.5 High
- otrs, otrs ag ((otrs)) community edition, debian linux +2 more +4 moreInformation DisclosureCVE-2020-1772Fix available6.5 Medium
- otrs, otrs ag ((otrs)) community edition, debian linux +2 more +4 moreInformation disclosure in support bundle filesCVE-2020-1770Fix available2.4 Low
- otrs, otrs ag ((otrs)) community edition, opensuse backports sle +1 more +3 moreAutocomplete in the form login screensCVE-2020-1769Fix available3.5 Low
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreIn the Linux kernel before 5.5.8, get_raw_socket in drivers/vhost/net.c lacks validation of an...CVE-2020-10942Fix available5.3 Medium
- graphicsmagick, debian linux, opensuse backports +1 more +3 moreGraphicsMagick before 1.3.35 has an integer overflow and resultant heap-based buffer overflow in...CVE-2020-10938Fix available9.8 Critical
- pyyaml, fedoraproject fedora, opensuse leap +1 more +3 moreImproper Input Validation in PyYAMLCVE-2020-1747Fix available9.8 Critical
- torproject tor, opensuse backports sle, leap +2 moreTor before 0.3.5.10, 0.4.x before 0.4.1.9, and 0.4.2.x before 0.4.2.7 allows remote attackers to...CVE-2020-10593Fix available7.5 High
- phpmyadmin, fedoraproject fedora, opensuse backports sle +2 more +4 morephpMyAdmin SQL InjectionCVE-2020-10804Fix available8.0 High
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreInsufficient policy enforcement in extensions in Google Chrome prior to 80.0.3987.149 allowed an...CVE-2020-6425Fix available5.4 Medium
- phpmyadmin, debian linux, fedoraproject fedora +3 more +5 morephpMyAdmin SQL injection vulnerabilityCVE-2020-10803Fix available5.4 Medium
- phpmyadmin, debian linux, fedoraproject fedora +3 more +5 morephpMyAdmin SQL injection vulnerabilityCVE-2020-10802Fix available8.0 High
- squid-cache squid, canonical ubuntu linux, debian linux +1 more +3 moreSquid before 4.9, when certain web browsers are used, mishandles HTML in the host (aka hostname)...CVE-2019-18860Fix available6.1 Medium
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreUse after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to...CVE-2020-6429Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreUse after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to...CVE-2020-6428Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreUse after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to...CVE-2020-6427Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreInappropriate implementation in V8 in Google Chrome prior to 80.0.3987.149 allowed a remote...CVE-2020-6426Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreUse after free in media in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to...CVE-2020-6424Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreUse after free in WebGL in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to...CVE-2020-6422Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreUse after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to...CVE-2020-6449Fix available8.8 High
- torproject tor, opensuse backports, leap +2 moreTor before 0.3.5.10, 0.4.x before 0.4.1.9, and 0.4.2.x before 0.4.2.7 allows remote attackers to...CVE-2020-10592Fix available7.5 High
- rails actionview, debian linux, fedoraproject fedora +1 more +3 morePossible XSS vulnerability in ActionViewCVE-2020-5267Public exploitFix available4.0 Medium
- denx u-boot, opensuse leap, siemens ruggedcom rox mx5000 +10 more +12 moreDas U-Boot through 2020.01 allows attackers to bypass verified boot restrictions and subsequently...CVE-2020-10648Fix available7.8 High
- graphicsmagick, debian linux, opensuse backports sle +1 more +3 moreIn GraphicsMagick before 1.3.32, the text filename component allows remote attackers to read...CVE-2019-12921Fix available6.5 Medium
- bluez, canonical ubuntu linux, debian linux +1 more +3 moreImproper access control in subsystem for BlueZ before version 5.53 may allow an unauthenticated...CVE-2020-0556Fix available7.1 High
- icu-project international components for unicode, canonical ubuntu linux, debian linux +11 more +13 moreAn issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An...CVE-2020-10531Fix available8.8 High
- substack minimist, opensuse leap +1 morePrototype Pollution in minimistCVE-2020-7598Public exploitFix available5.6 Medium
- qemu, canonical ubuntu linux, debian linux +1 more +3 moreQEMU 4.1.0 has a memory leak in zrle_compress_data in ui/vnc-enc-zrle.c during a VNC disconnect...CVE-2019-20382Fix available3.5 Low
- gnu glibc, canonical ubuntu linux, debian linux +11 more +13 moreThe GNU C Library (aka glibc or libc6) before 2.32 could overflow an on-stack buffer during range...CVE-2020-10029Fix available5.5 Medium
- webkitgtk, wpewebkit wpe webkit, canonical ubuntu linux +3 more +5 moreaccessibility/AXObjectCache.cpp in WebKit, as used in WebKitGTK through 2.26.4 and WPE WebKit...CVE-2020-10018Fix available9.8 Critical
- opensuse factory, suse linux enterprise server, linux enterprise server 12 +2 more +4 moreLocal privilege escalation from user salt to rootCVE-2019-188978.4 High
- suse linux enterprise server, linux enterprise server 11, linux enterprise server 12 +2 more +4 morepermissions: chkstat sets unintended setuid/capabilities for mrsh and wodimCVE-2020-8013Fix available2.2 Low
- nagios, opensuse factory, suse linux enterprise server 11 +3 more +5 morenagios cron job allows privilege escalation from user nagios to rootCVE-2019-36985.7 Medium
- wireshark, debian linux, fedoraproject fedora +1 more +3 moreIn Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the EAP dissector could crash....CVE-2020-9428Fix available7.5 High
- wireshark, opensuse leap +1 moreIn Wireshark 3.2.0 to 3.2.1, the WireGuard dissector could crash. This was addressed in epan...CVE-2020-9429Fix available7.5 High
- wireshark, debian linux, fedoraproject fedora +1 more +3 moreIn Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the WiMax DLMAP dissector could...CVE-2020-9430Fix available7.5 High
- wireshark, debian linux, fedoraproject fedora +1 more +3 moreIn Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the LTE RRC dissector could...CVE-2020-9431Fix available7.5 High
- php, debian linux, opensuse leap +1 more +3 moreFiles added to tar with Phar::buildFromIterator have all-access permissionsCVE-2020-7063Fix available5.5 Medium
- php, canonical ubuntu linux, debian linux +1 more +3 moreNull Pointer Dereference in PHP Session Upload ProgressCVE-2020-7062Fix available7.5 High
- openfortivpn project openfortivpn, fedoraproject fedora, opensuse backports sle +1 more +3 moreAn issue was discovered in openfortivpn 1.11.0 when used with OpenSSL before 1.0.2. tunnel.c...CVE-2020-7043Fix available9.1 Critical
- openfortivpn project openfortivpn, fedoraproject fedora, opensuse backports sle +1 more +3 moreAn issue was discovered in openfortivpn 1.11.0 when used with OpenSSL 1.0.2 or later. tunnel.c...CVE-2020-7042Fix available5.3 Medium
- openfortivpn project openfortivpn, fedoraproject fedora, opensuse backports sle +1 more +3 moreAn issue was discovered in openfortivpn 1.11.0 when used with OpenSSL 1.0.2 or later. tunnel.c...CVE-2020-7041Fix available5.3 Medium
- Show moreLoading…