Skip to contentOpensuse vulnerabilities
Newest
- python, canonical ubuntu linux, debian linux +8 more +10 moreIn Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to...CVE-2019-20907Fix available7.5 High
- libslirp project libslirp, canonical ubuntu linux, debian linux +3 more +5 moreImportant: virt:rhel security updateCVE-2020-10756Fix available6.5 Medium
- cli, npmjs npm, fedoraproject fedora +1 more +3 moreSensitive information exposure through logs in npm cliCVE-2020-15095Fix available4.4 Medium
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Xen through 4.13.x, allowing Intel guest OS users to gain privileges...CVE-2020-15567Fix available7.8 High
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Xen through 4.13.x, allowing x86 Intel HVM guest OS users to cause a...CVE-2020-15565Fix available8.8 High
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Xen through 4.13.x, allowing x86 HVM guest OS users to cause a...CVE-2020-15563Fix available6.5 Medium
- samba, canonical ubuntu linux, debian linux +2 more +4 moreA flaw was found in the AD DC NBT server in all Samba versions before 4.10.17, before 4.11.11 and...CVE-2020-14303Fix available7.5 High
- opensuse openldap2, leap 15.1, leap 15.2 +19 more +21 moreLocal privilege escalation from ldap to root when using OPENLDAP_CONFIG_BACKEND=ldap in openldap2CVE-2020-8023Fix available7.7 High
- wireshark, debian linux, opensuse leap +2 moreIn Wireshark 3.2.0 to 3.2.4, the GVCP dissector could go into an infinite loop. This was...CVE-2020-15466Fix available7.5 High
- samba, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreA use-after-free flaw was found in all samba LDAP server versions before 4.10.17, before 4.11.11,...CVE-2020-10760Fix available6.5 Medium
- samba, debian linux, fedoraproject fedora +1 more +3 moreA flaw was found in all Samba versions before 4.10.17, before 4.11.11 and before 4.12.4 in the...CVE-2020-10745Fix available7.5 High
- debian linux, samba, fedoraproject fedora +2 more +4 moreA NULL pointer dereference, or possible use-after-free flaw was found in Samba AD LDAP server in...CVE-2020-10730Fix available6.5 Medium
- mozilla firefox, opensuse leap +1 moreMozilla developers and community members reported memory safety bugs present in Firefox 77. Some...CVE-2020-12426Fix available8.8 High
- mozilla firefox, opensuse leap +1 moreWhen constructing a permission prompt for WebRTC, a URI was supplied from the content process....CVE-2020-12424Fix available6.5 Medium
- mozilla firefox, opensuse leap +1 moreIn non-standard configurations, a JPEG image created by JavaScript could have caused an internal...CVE-2020-12422Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreWhen trying to connect to a STUN server, a race condition could have caused a use-after-free of a...CVE-2020-12420Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreWhen processing callbacks that occurred during window flushing in the parent process, the...CVE-2020-12419Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreManipulating individual parts of a URL object could have caused an out-of-bounds read, leaking...CVE-2020-12418Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreDue to confusion about ValueTags on JavaScript Objects, an object may pass through the type...CVE-2020-12417Fix available8.8 High
- mozilla firefox, opensuse leap +1 moreA VideoStreamEncoder may have been freed in a race condition with VideoBroadcaster:...CVE-2020-12416Fix available8.8 High
- mozilla firefox, opensuse leap +1 moreWhen "%2F" was present in a manifest URL, Firefox's AppCache behavior may have become confused...CVE-2020-12415Fix available6.5 Medium
- ifax hylafax enterprise, fedoraproject fedora, hylafax\+ project hylafax\+ +2 more +4 moreIn HylaFAX+ through 7.0.2 and HylaFAX Enterprise, the faxsetup utility calls chown on files in...CVE-2020-15396Fix available7.8 High
- libvncserver project libvncserver, canonical ubuntu linux, fedoraproject fedora +7 more +9 moreIt was discovered that websockets.c in LibVNCServer prior to 0.9.12 did not properly decode...CVE-2017-18922Fix available9.8 Critical
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreIn the Linux kernel through 5.7.6, usbtest_disconnect in drivers/usb/misc/usbtest.c has a memory...CVE-2020-15393Fix available5.5 Medium
- opensuse leap, leap 15.1, tumbleweed +2 more +4 morekopano-python-services: Local privilege escalation from kopano to root in kopano-spamd subpackageCVE-2020-80147.7 High
- opensuse factory, leap 15.1, leap 15.2 +2 more +4 moreProblematic permissions in hylafax+ packaging allow escalation from uucp to other usersCVE-2020-8024Fix available5.3 Medium
- coturn, canonical ubuntu linux, debian linux +2 more +4 moreImproper Initialization in coturnCVE-2020-4067Fix available7.0 High
- apache tomcat, canonical ubuntu linux, debian linux +5 more +7 moreUncontrolled Resource Consumption in Apache TomcatCVE-2020-11996Public exploitFix availableEPSS 26.7%7.5 High
- linux kernel, opensuse leap, redhat enterprise linux +2 moreA buffer over-read flaw was found in RH kernel versions before 5.0 in crypto_authenc_extractkeys...CVE-2020-10769Fix available5.5 Medium
- apache tomcat, suse enterprise storage 5, linux enterprise server 12-sp2-bcl +13 more +15 moreUser-writeable configuration file /usr/lib/tmpfiles.d/tomcat.conf allows for escalation of priviligesCVE-2020-8022Fix available7.7 High
- openexr, fedoraproject fedora, opensuse leap +2 moreAn issue was discovered in OpenEXR before 2.5.2. An invalid tiled input file could cause invalid...CVE-2020-15304Fix available5.5 Medium
- openexr, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in OpenEXR before 2.5.2. Invalid input could cause a use-after-free in...CVE-2020-15305Fix available5.5 Medium
- openexr, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in OpenEXR before v2.5.2. Invalid chunkCount attributes could cause a...CVE-2020-15306Fix available5.5 Medium
- linuxfoundation ceph, red hat ceph storage, canonical ubuntu linux +3 more +5 moreA flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway). The vulnerability is...CVE-2020-10753Fix available5.4 Medium
- ntp, netapp 8300 firmware, 8700 firmware +13 more +15 morentpd in ntp 4.2.8 before 4.2.8p15 and 4.3.x before 4.3.101 allows remote attackers to cause a...CVE-2020-15025Fix available4.4 Medium
- sane-project sane backends, canonical ubuntu linux, debian linux +1 more +3 moreAn out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to...CVE-2020-12862Fix available4.3 Medium
- sane-project sane backends, canonical ubuntu linux, debian linux +1 more +3 moreAn out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to...CVE-2020-12863Fix available4.3 Medium
- sane-project sane backends, canonical ubuntu linux, opensuse leap +2 moreAn out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to...CVE-2020-12864Fix available4.3 Medium
- sane-project sane backends, canonical ubuntu linux, debian linux +1 more +3 moreA heap buffer overflow in SANE Backends before 1.0.30 may allow a malicious device connected to...CVE-2020-12865Fix available8.0 High
- sane-project sane backends, canonical ubuntu linux, opensuse leap +2 moreA NULL pointer dereference in SANE Backends before 1.0.30 allows a malicious device connected to...CVE-2020-12866Fix available5.7 Medium
- sane-project sane backends, canonical ubuntu linux, opensuse leap +2 moreA heap buffer overflow in SANE Backends before 1.0.30 allows a malicious device connected to the...CVE-2020-12861Fix available8.8 High
- chocolate-doom chocolate doom, crispy doom, opensuse backports +1 more +3 moreThe server in Chocolate Doom 3.0.0 and Crispy Doom 5.8.0 doesn't validate the user-controlled...CVE-2020-14983Fix available9.8 Critical
- google guest-oslogin, opensuse leap +1 morePriviged Escalation in Google Cloud Platform's Guest-OSLoginCVE-2020-8933Fix available9.3 Critical
- google guest-oslogin, opensuse leap +1 morePriviged Escalation in Google Cloud Platform's Guest-OSLoginCVE-2020-8907Fix available9.3 Critical
- google guest-oslogin, opensuse leap +1 morePriviged Escalation in Google Cloud Platform's Guest-OSLoginCVE-2020-8903Fix available7.3 High
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreOOB Read in RLEDECOMPRESS in FreeRDPCVE-2020-4033Fix available3.1 Low
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreInteger casting vulnerability in `update_recv_secondary_order` in FreeRDPCVE-2020-4032Fix available3.1 Low
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreUse-After-Free in gdi_SelectObject in FreeRDPCVE-2020-4031Fix available3.5 Low
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreOOB read in `TrioParse` in FreeRDPCVE-2020-4030Fix available3.5 Low
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreOOB Read in license_read_new_or_upgrade_license_packet in FreeRDPCVE-2020-11099Fix available3.5 Low
- Show moreLoading…