Skip to contentOpensuse vulnerabilities
Newest
- gnome gnome-shell, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in certain configurations of GNOME gnome-shell through 3.36.4. When...CVE-2020-17489Fix available4.3 Medium
- qemu, canonical ubuntu linux, debian linux +1 more +3 moreIn QEMU through 5.0.0, an assertion failure can occur in the network packet processing. This...CVE-2020-16092Fix available3.8 Low
- apache http server, canonical ubuntu linux, debian linux +10 more +12 moreApache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module...CVE-2020-11993Fix availableEPSS 56.6%7.5 High
- apache http server, canonical ubuntu linux, debian linux +10 more +12 moreApache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCECVE-2020-11984Public exploitFix availableEPSS 90.0%9.8 Critical
- apache http server, canonical ubuntu linux, debian linux +22 more +24 moreApache HTTP Server versions 2.4.20 to 2.4.43. A specially crafted value for the 'Cache-Digest'...CVE-2020-9490Fix availableEPSS 88.8%7.5 High
- opensuse leap 15.1, tumbleweed, suse linux enterprise server +6 more +8 moreoutdated entries in permissions profiles for /var/lib/pcp/tmp/* may cause security issuesCVE-2020-8025Fix available6.1 Medium
- opensuse leap, leap 15.1, leap 15.2 +3 more +5 moreinn: non-root owned filesCVE-2020-8026Fix available8.4 High
- golang go, debian linux, fedoraproject fedora +1 more +3 moreWithdrawn Advisory: Infinite loop in xzCVE-2020-16845Fix available7.5 High
- firejail project firejail, debian linux, fedoraproject fedora +1 more +3 moreFirejail through 0.9.62 mishandles shell metacharacters during use of the --output or --output...CVE-2020-17368Fix available9.8 Critical
- firejail project firejail, debian linux, fedoraproject fedora +1 more +3 moreFirejail through 0.9.62 does not honor the -- end-of-options indicator after the --output option,...CVE-2020-17367Fix available7.8 High
- lilypond, debian linux, fedoraproject fedora +2 more +4 morescm/define-stencil-commands.scm in LilyPond through 2.20.0, and 2.21.x through 2.21.4, when ...CVE-2020-17353Fix available9.8 Critical
- the x11 project libx11, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreAn integer overflow leading to a heap-buffer overflow was found in The X Input Method (XIM)...CVE-2020-14344Fix available6.7 Medium
- kde ark, canonical ubuntu linux, debian linux +2 more +4 moreIn kerfuffle/jobs.cpp in KDE Ark before 20.08.0, a crafted archive can install files outside the...CVE-2020-16116Fix available3.3 Low
- debian linux, linux kernel, canonical ubuntu linux +12 more +14 moreThe Linux kernel through 5.7.11 allows remote attackers to make observations that help to obtain...CVE-2020-16166Fix available3.7 Low
- gnome balsa, opensuse backports sle, leap +2 moreIn GNOME Balsa before 2.6.0, a malicious server operator or man in the middle can trigger a NULL...CVE-2020-16118Fix available7.5 High
- gnu grub2, canonical ubuntu linux, debian linux +12 more +14 moreGRUB2: avoid loading unsigned kernels when GRUB is booted directly under secureboot without shimCVE-2020-15705Fix available6.4 Medium
- debian linux, gnu grub2, canonical ubuntu linux +13 more +15 moreGRUB2 contained integer overflows when handling the initrd command, leading to a heap-based buffer overflow.CVE-2020-15707Fix available5.7 Medium
- gnu grub2, canonical ubuntu linux, debian linux +12 more +14 moreGRUB2 contains a race condition leading to a use-after-free vulnerability which can be triggered by redefining a function whilst the same function is already executing.CVE-2020-15706Fix available6.4 Medium
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreMozilla developers and community members reported memory safety bugs present in Firefox 78 and...CVE-2020-15659Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreJIT optimizations involving the Javascript arguments object could confuse later optimizations....CVE-2020-15656Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreA redirected HTTP request which is observed or modified through a web extension could bypass...CVE-2020-15655Fix available6.5 Medium
- gnu grub2, canonical ubuntu linux, opensuse leap +4 more +6 moreThere is an issue with grub2 before version 2.06 while handling symlink on ext filesystems. A...CVE-2020-14311Fix available5.7 Medium
- gnu grub2, canonical ubuntu linux, opensuse leap +4 more +6 moreThere is an issue on grub2 before version 2.06 at function read_section_as_string(). It expects a...CVE-2020-14310Fix available5.7 Medium
- gnu grub2, open source grub, opensuse leap +2 moreThere's an issue with grub2 in all versions before 2.06 when handling squashfs filesystems...CVE-2020-14309Fix available6.7 Medium
- gnu grub2, open source grub, opensuse leap +2 moreIn grub2 versions before 2.06 the grub memory allocator doesn't check for possible arithmetic...CVE-2020-14308Fix available6.4 Medium
- gnu grub2, open source grub, debian linux +2 more +4 moreA flaw was found in grub2, prior to version 2.06. An attacker may use the GRUB 2 flaw to hijack...CVE-2020-10713Public exploitFix available8.2 High
- artifex ghostscript, canonical ubuntu linux, opensuse leap +2 moreA memory corruption issue was found in Artifex Ghostscript 9.50 and 9.52. Use of a non-standard...CVE-2020-15900Fix available9.8 Critical
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreInteger Overflow in FreeRDPCVE-2020-15103Fix available3.5 Low
- claws-mail, fedoraproject fedora, opensuse backports sle +1 more +3 morecommon/session.c in Claws Mail before 3.17.6 has a protocol violation because suffix data after...CVE-2020-15917Fix available9.8 Critical
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreIncorrect security UI in PWAs in Google Chrome prior to 84.0.4147.89 allowed a remote attacker...CVE-2020-6536Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient data validation in WebUI in Google Chrome prior to 84.0.4147.89 allowed a remote...CVE-2020-6535Fix available6.1 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreHeap buffer overflow in WebRTC in Google Chrome prior to 84.0.4147.89 allowed a remote attacker...CVE-2020-6534Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreType Confusion in V8 in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to...CVE-2020-6533Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreSide-channel information leakage in scroll to text in Google Chrome prior to 84.0.4147.89 allowed...CVE-2020-6531Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreOut of bounds memory access in developer tools in Google Chrome prior to 84.0.4147.89 allowed an...CVE-2020-6530Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker...CVE-2020-6529Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreIncorrect security UI in basic auth in Google Chrome on iOS prior to 84.0.4147.89 allowed a...CVE-2020-6528Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in CSP in Google Chrome prior to 84.0.4147.89 allowed a remote...CVE-2020-6527Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInappropriate implementation in iframe sandbox in Google Chrome prior to 84.0.4147.89 allowed a...CVE-2020-6526Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreHeap buffer overflow in Skia in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to...CVE-2020-6525Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreHeap buffer overflow in WebAudio in Google Chrome prior to 84.0.4147.89 allowed a remote attacker...CVE-2020-6524Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreOut of bounds write in Skia in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to...CVE-2020-6523Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInappropriate implementation in external protocol handlers in Google Chrome prior to 84.0.4147.89...CVE-2020-6522Fix available9.6 Critical
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreSide-channel information leakage in autofill in Google Chrome prior to 84.0.4147.89 allowed a...CVE-2020-6521Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreBuffer overflow in Skia in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to...CVE-2020-6520Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 morePolicy bypass in CSP in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to bypass...CVE-2020-6519Public exploitFix availableEPSS 10.3%6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreUse after free in developer tools in Google Chrome prior to 84.0.4147.89 allowed a remote...CVE-2020-6518Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreHeap buffer overflow in history in Google Chrome prior to 84.0.4147.89 allowed a remote attacker...CVE-2020-6517Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 morePolicy bypass in CORS in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to leak...CVE-2020-6516Public exploitFix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreUse after free in tab strip in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to...CVE-2020-6515Fix available8.8 High
- Show moreLoading…