Skip to contentOpensuse vulnerabilities
Newest
- opensuse libsolvBuffer overflow vulnerability in function pool_disabled_solvable in src/repo.h in libsolv before...CVE-2021-33929Fix available7.5 High
- opensuse libsolvBuffer overflow vulnerability in function pool_installable in src/repo.h in libsolv before 0.7.17...CVE-2021-33928Fix available7.5 High
- opensuse factory, suse linux enterprise server, opensuse factory +2 more +4 moreclone-master-clean-up: dangerous file system operationsCVE-2021-32000Fix available3.2 Low
- opensuse factory, leap 15.2, suse arpwatch +3 more +5 morearpwatch: Local privilege escalation from runtime user to rootCVE-2021-25321Fix available7.8 High
- opensuse cryptctl, suse linux enterprise server for sap 12-sp5, manager server 4.0 +2 morecryptctl: client side password hashing is equivalent to clear text password storageCVE-2019-18906Fix available9.8 Critical
- opensuse factory, leap 15.2, python-hyperkitty project python-hyperkitty +2 morepython-HyperKitty: hyperkitty-permissions.sh used during %post allows local privilege escalation from hyperkitty user to rootCVE-2021-253226.8 Medium
- opensuse factory, leap 15.2, python-postorius +2 morepython-postorius: postorius-permissions.sh used during %post allows local privilege escalation from postorius user to rootCVE-2021-319976.8 Medium
- opensuse inn, backports sle-15-sp2, leap 15.2 +1 more +3 moreinn: %post calls user owned file allowing local privilege escalation to rootCVE-2021-31998Fix available6.8 Medium
- opensuse libsolv, oracle communications cloud native core policy +1 moreBuffer overflow vulnerability in libsolv 2020-12-13 via the Solver * testcase_read(Pool *pool,...CVE-2021-3200Fix available3.3 Low
- opensuse factoryvirtualbox: missing sticky bit for /etc/vbox allows local root exploit for members of vboxusers groupCVE-2021-253197.8 High
- opensuse factory, leap 15.2, suse cups +4 more +6 morecups: ownership of /var/log/cups allows the lp user to create files as rootCVE-2021-25317Fix available3.3 Low
- opensuse tumbleweed, saltstack salt, suse linux enterprise server 15 sp 3 +2 moresalt-api unauthenticated remote code executionCVE-2021-25315Fix available9.8 Critical
- opensuse cyrus-sasl, factory +1 moreLocal privilege escalation to root due to insecure tmp file usageCVE-2020-8032Fix available6.7 Medium
- opensuse open build serviceobs: Stored XSSCVE-2020-8031Fix available6.3 Medium
- intel connman, debian linux, opensuse leap +2 moregdhcp in ConnMan before 1.39 could be used by network-adjacent attackers to leak sensitive stack...CVE-2021-26676Fix available6.5 Medium
- intel connman, debian linux, opensuse leap +2 moreA stack-based buffer overflow in dnsproxy in ConnMan before 1.39 could be used by network...CVE-2021-26675Fix available8.8 High
- saltstack salt, debian linux, fedoraproject fedora +1 more +3 moreSaltStack Salt Command Injection in netapi ssh clientCVE-2020-16846In KEVPublic exploitFix availableEPSS 99.6%9.8 Critical
- sddm project sddm, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in SDDM before 0.19.0. It incorrectly starts the X server in a way that -...CVE-2020-28049Fix available6.3 Medium
- google chrome, debian linux, opensuse backports sle +1 more +3 moreHeap buffer overflow in UI in Google Chrome on Windows prior to 86.0.4240.183 allowed a remote...CVE-2020-16011Fix available9.6 Critical
- google chrome, cefsharp, debian linux +6 more +8 moreInappropriate implementation in V8CVE-2020-16009In KEVFix availableEPSS 48.3%8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreStack buffer overflow in WebRTC in Google Chrome prior to 86.0.4240.183 allowed a remote attacker...CVE-2020-16008Fix available8.8 High
- google chrome, debian linux, opensuse backports sle +1 more +3 moreInsufficient data validation in installer in Google Chrome prior to 86.0.4240.183 allowed a local...CVE-2020-16007Fix available7.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote...CVE-2020-16006Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in ANGLE in Google Chrome prior to 86.0.4240.183 allowed a remote...CVE-2020-16005Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreUse after free in user interface in Google Chrome prior to 86.0.4240.183 allowed a remote...CVE-2020-16004Fix available8.8 High
- samba, debian linux, fedoraproject fedora +1 more +3 moreA null pointer dereference flaw was found in samba's Winbind service in versions before 4.11.15,...CVE-2020-14323Fix available5.5 Medium
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreUse after free in printing in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to...CVE-2020-16003Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreUse after free in PDFium in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to...CVE-2020-16002Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreUse after free in media in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to...CVE-2020-16001Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreInappropriate implementation in Blink in Google Chrome prior to 86.0.4240.111 allowed a remote...CVE-2020-16000Fix available8.8 High
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Xen through 4.14.x allowing x86 guest OS users to cause a denial of...CVE-2020-27670Fix available7.8 High
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Xen through 4.14.x allowing x86 HVM and PVH guest OS users to cause a...CVE-2020-27671Fix available7.8 High
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Xen through 4.14.x allowing x86 guest OS users to cause a host OS...CVE-2020-27672Fix available7.0 High
- debian linux, linux kernel, xen +1 more +3 moreAn issue was discovered in the Linux kernel through 5.9.1, as used with Xen through 4.14.x. Guest...CVE-2020-27673Fix available5.5 Medium
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreInappropriate implementation in networking in Google Chrome prior to 86.0.4240.75 allowed a...CVE-2020-6557Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreInsufficient policy enforcement in networking in Google Chrome prior to 86.0.4240.75 allowed a...CVE-2020-15992Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreUse after free in password manager in Google Chrome prior to 86.0.4240.75 allowed a remote...CVE-2020-15991Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreUse after free in autofill in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who...CVE-2020-15990Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreUninitialized data in PDFium in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to...CVE-2020-15989Fix available5.5 Medium
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreInsufficient policy enforcement in downloads in Google Chrome on Windows prior to 86.0.4240.75...CVE-2020-15988Fix available6.3 Medium
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreUse after free in WebRTC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to...CVE-2020-15987Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreInteger overflow in media in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to...CVE-2020-15986Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreInappropriate implementation in Blink in Google Chrome prior to 86.0.4240.75 allowed a remote...CVE-2020-15985Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreInsufficient policy enforcement in Omnibox in Google Chrome on iOS prior to 86.0.4240.75 allowed...CVE-2020-15984Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreInsufficient data validation in webUI in Google Chrome on ChromeOS prior to 86.0.4240.75 allowed...CVE-2020-15983Fix available7.8 High
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreInappropriate implementation in cache in Google Chrome prior to 86.0.4240.75 allowed a remote...CVE-2020-15982Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreOut of bounds read in audio in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to...CVE-2020-15981Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreInsufficient policy enforcement in Intents in Google Chrome on Android prior to 86.0.4240.75...CVE-2020-15980Fix available7.8 High
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreInappropriate implementation in V8 in Google Chrome prior to 86.0.4240.75 allowed a remote...CVE-2020-15979Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreInsufficient data validation in navigation in Google Chrome on Android prior to 86.0.4240.75...CVE-2020-15978Fix available8.8 High
- Show moreLoading…