Skip to contentOpensuse vulnerabilities
Newest
- microsoft perl-dbi, debian linux, fedoraproject fedora +2 more +4 moreA buffer overflow was found in perl-DBI < 1.643 in DBI.xs. A local attacker who is able to supply...CVE-2020-14393Fix available7.1 High
- google brotli, canonical ubuntu linux, debian linux +7 more +9 moreBuffer overflow in Brotli libraryCVE-2020-8927Public exploitFix available5.3 Medium
- debian linux, linux kernel, opensuse leap +2 moreThe rbd block device driver in drivers/block/rbd.c in the Linux kernel through 5.8.9 used...CVE-2020-25284Fix available4.1 Medium
- microsoft perl-dbi, canonical ubuntu linux, debian linux +3 more +5 moreAn untrusted pointer dereference flaw was found in Perl-DBI < 1.643. A local attacker who is able...CVE-2020-14392Fix available5.5 Medium
- atftp project atftp, debian linux, opensuse leap +2 moreAn exploitable denial of service vulnerability exists in the atftpd daemon functionality of atftp...CVE-2020-6097Fix available7.5 High
- libproxy project libproxy, canonical ubuntu linux, debian linux +2 more +4 moreurl::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger...CVE-2020-25219Fix available7.5 High
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreA TOCTOU mismatch in the NFS client code in the Linux kernel before 5.8.3 could be used by local...CVE-2020-25212Fix available7.0 High
- cifs-utils, fedoraproject fedora, opensuse leap +2 moreIt was found that cifs-utils' mount.cifs was invoking a shell when requesting the Samba password,...CVE-2020-14342Fix available4.4 Medium
- pypa pip, debian linux, opensuse leap +2 more +4 morePath Traversal in pipCVE-2019-20916Fix available7.5 High
- gnu gnutls, canonical ubuntu linux, fedoraproject fedora +4 more +6 moreAn issue was discovered in GnuTLS before 3.6.15. A server can trigger a NULL pointer dereference...CVE-2020-24659Fix available7.5 High
- debian linux, linux kernel, fedoraproject fedora +1 more +3 moreCVE-2020-14386 does not affect BellSoft softwareCVE-2020-14386Public exploitFix available6.7 Medium
- xmlsoft libxml2, debian linux, fedoraproject fedora +18 more +20 moreGNOME project libxml2 v2.9.10 and earlier have a global Buffer Overflow vulnerability in...CVE-2020-24977Fix available6.5 Medium
- golang go, fedoraproject fedora, opensuse leap +1 more +3 moreGo before 1.14.8 and 1.15.x before 1.15.1 allows XSS because text/html is the default for CGI...CVE-2020-24553Fix available6.1 Medium
- opensuse open build serviceobs-service-download_files allows downloading from localhost or intranet hostsCVE-2018-124756.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient data validation in Omnibox in Google Chrome prior to 85.0.4183.83 allowed a remote...CVE-2020-6571Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInformation leakage in WebRTC in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to...CVE-2020-6570Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInteger overflow in WebUSB in Google Chrome prior to 85.0.4183.83 allowed a remote attacker who...CVE-2020-6569Fix available6.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in intent handling in Google Chrome on Android prior to 85.0.4183...CVE-2020-6568Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient validation of untrusted input in command line handling in Google Chrome on Windows...CVE-2020-6567Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in media in Google Chrome prior to 85.0.4183.83 allowed a remote...CVE-2020-6566Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInappropriate implementation in Omnibox in Google Chrome on iOS prior to 85.0.4183.83 allowed a...CVE-2020-6565Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInappropriate implementation in permissions in Google Chrome prior to 85.0.4183.83 allowed a...CVE-2020-6564Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in intent handling in Google Chrome on Android prior to 85.0.4183...CVE-2020-6563Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in Blink in Google Chrome prior to 85.0.4183.83 allowed a remote...CVE-2020-6562Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInappropriate implementation in Content Security Policy in Google Chrome prior to 85.0.4183.83...CVE-2020-6561Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in autofill in Google Chrome prior to 85.0.4183.83 allowed a...CVE-2020-6560Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreUse after free in presentation API in Google Chrome prior to 85.0.4183.83 allowed a remote...CVE-2020-6559Fix available8.8 High
- google chrome, debian linux, opensuse backports sle +1 more +3 moreInsufficient policy enforcement in iOSWeb in Google Chrome on iOS prior to 85.0.4183.83 allowed a...CVE-2020-6558Fix available6.5 Medium
- flask-cors project flask-cors, debian linux, opensuse backports sle +1 more +3 moreFlask-Cors Directory Traversal vulnerabilityCVE-2020-25032Fix available7.5 High
- microsoft librepo, fedoraproject fedora, opensuse backports sle +1 more +3 moreA flaw was found in librepo in versions before 1.12.1. A directory traversal vulnerability was...CVE-2020-14352Fix available8.0 High
- kleopatra project kleopatra, fedoraproject fedora, opensuse backports sle +1 more +3 moreThe Kleopatra component before 3.1.12 (and before 20.07.80) for GnuPG allows remote attackers to...CVE-2020-24972Public exploitFix available8.8 High
- kde ark, canonical ubuntu linux, debian linux +2 more +4 moreIn KDE Ark before 20.08.1, a crafted TAR archive with symlinks can install files outside the...CVE-2020-24654Fix available3.3 Low
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreHeap buffer overflow in SwiftShader in Google Chrome prior to 84.0.4147.135 allowed a remote...CVE-2020-6556Fix available8.8 High
- fossil-scm fossil, fedoraproject fedora, opensuse backports sle +1 more +3 moreFossil before 2.10.2, 2.11.x before 2.11.2, and 2.12.x before 2.12.1 allows remote authenticated...CVE-2020-24614Fix available8.8 High
- squid-cache squid, canonical ubuntu linux, debian linux +2 more +4 moreModerate: squid:4 security, bug fix, and enhancement updateCVE-2020-24606Fix available8.6 High
- qemu, canonical ubuntu linux, debian linux +4 more +6 moreAn out-of-bounds read/write access flaw was found in the USB emulator of the QEMU in versions...CVE-2020-14364Public exploitFix available5.0 Medium
- squid-cache squid, canonical ubuntu linux, debian linux +2 more +4 moresquid3 - security updateCVE-2020-15811Fix available6.5 Medium
- squid-cache squid, canonical ubuntu linux, debian linux +2 more +4 moresquid3 - security updateCVE-2020-15810Fix available6.5 Medium
- isc bind, canonical ubuntu linux, debian linux +4 more +6 moreupdate-policy rules of type "subdomain" are enforced incorrectlyCVE-2020-8624Fix available4.3 Medium
- isc bind, canonical ubuntu linux, debian linux +5 more +7 moreA flaw in native PKCS#11 code can lead to a remotely triggerable assertion failure in pk11.cCVE-2020-8623Fix available7.5 High
- isc bind, canonical ubuntu linux, debian linux +6 more +8 moreA truncated TSIG response can lead to an assertion failureCVE-2020-8622Fix available6.5 Medium
- isc bind, canonical ubuntu linux, isc bind9 +3 more +5 moreAttempting QNAME minimization after forwarding can lead to an assertion failure in resolver.cCVE-2020-8621Fix available7.5 High
- isc bind, canonical ubuntu linux, isc bind9 +2 more +4 moreIn BIND 9.15.6 -> 9.16.5, 9.17.0 -> 9.17.3, An attacker who can establish a TCP connection with...CVE-2020-8620Fix available7.5 High
- debian linux, linux kernel, canonical ubuntu linux +7 more +9 moreA flaw null pointer dereference in the Linux kernel cgroupv2 subsystem in versions before 5.7.10...CVE-2020-14356Public exploitFix available7.8 High
- linux kernel, canonical ubuntu linux, opensuse leap +2 more +4 moreIn the Linux kernel before 5.7.8, fs/nfsd/vfs.c (in the NFS server) can set incorrect permissions...CVE-2020-24394Fix available7.1 High
- microsoft netlogon, canonical ubuntu linux, debian linux +24 more +26 moreNetlogon Elevation of Privilege VulnerabilityCVE-2020-1472In KEVPublic exploitFix availableEPSS 99.4%5.5 Medium
- ui edgeswitch firmware, opensuse backports sle, leap +2 moreA command injection vulnerability exists in EdgeSwitch firmware <v1.9.0 that allowed an...CVE-2020-82338.8 High
- postgresql, canonical ubuntu linux, debian linux +1 more +3 moreUntrusted Search Path in PostgreSQLCVE-2020-14350Fix available7.3 High
- postgresql, opensuse leap +1 moreIt was found that PostgreSQL versions before 12.4, before 11.9 and before 10.14 did not properly...CVE-2020-14349Fix available7.1 High
- wireshark, fedoraproject fedora, opensuse leap +1 more +3 moreIn Wireshark 3.2.0 to 3.2.5, the Kafka protocol dissector could crash. This was addressed in epan...CVE-2020-17498Fix available6.5 Medium
- Show moreLoading…