Skip to contentSuse vulnerabilities
Products
Show 140 moreShow less
Newest
- [unknown] ansible, debian linux, redhat ansible engine +2 more +4 moreAnsible Leaks Data Passed to ssh-keygenCVE-2018-16837Fix available7.8 High
- kyzer libmspack, canonical ubuntu linux, debian linux +5 more +7 morechmd_read_headers in mspack/chmd.c in libmspack before 0.8alpha accepts a filename that has '\0'...CVE-2018-18585Fix available4.3 Medium
- cabextract project cabextract, libmspack project libmspack, canonical ubuntu linux +4 more +6 moreIn mspack/cab.h in libmspack before 0.8alpha and cabextract before 1.8, the CAB block input...CVE-2018-18584Fix available6.5 Medium
- opensuse open build serviceRequest controller allows to create requests with arbitrary request IDsCVE-2018-12479Fix available6.5 Medium
- opensuse open build serviceobs-service-replace_using_package_version allows to specify arbitrary input filesCVE-2018-124784.8 Medium
- opensuse open build service, leap +1 moreobs-service-refresh_patches can be tricked into deleting '..' or other unrelated directoriesCVE-2018-12477Fix available3.5 Low
- opensuse open build service, tar scm +1 moreCrafted service parameters allows to induce unexpected behaviour in obs-service-tar_scmCVE-2018-124745.4 Medium
- qemu, canonical ubuntu linux, debian linux +1 more +3 moreQemu has a Buffer Overflow in pcnet_receive in hw/net/pcnet.c because an incorrect integer data...CVE-2018-17962Fix available7.5 High
- opensuse open build servicepath traversal in obs-service-tar_scmCVE-2018-124733.1 Low
- suse linux smt, suse subscription management tool +1 moreAuthentication bypass in sibling checkCVE-2018-12472Fix available7.3 High
- suse linux smt, suse subscription management tool +1 moreExternal Entity processing in the RegistrationSharing moduleCVE-2018-124716.5 Medium
- suse linux smt, suse subscription management tool +1 moreSQL injection in RegistrationSharing moduleCVE-2018-124709.8 Critical
- suse shadowPrivilege escalation can occur in the SUSE useradd.c code in useradd, as distributed in the SUSE...CVE-2018-165887.8 High
- pidgin, suse linux enterprise server +1 morePidgin version <2.11.0 contains a vulnerability in X.509 Certificates imports specifically due to...CVE-2016-1000030Fix available9.8 Critical
- opensuse libzypplibzypp does not reevaluate malicious rpms once downloadedCVE-2018-7685Fix available7.8 High
- linuxcontainers lxc, canonical ubuntu linux, opensuse leap +3 more +5 moreThe lxc-user-nic component of LXC allows unprivileged users to open arbitrary filesCVE-2018-6556Fix available3.3 Low
- open shortest path first (ospf) protocol, quagga, suse opensuse +2 more +4 moreOpen Shortest Path First (OSPF) protocol implementations may improperly determine LSA recency in affected Quagga and downstream implementations (SUSE, openSUSE, and Red Hat packages)CVE-2017-32248.2 High
- aubio, opensuse leap, suse linux enterprise +2 moreAubio is vulnerable to out of bound read when samplerate > 50kHzCVE-2018-14523Fix available8.8 High
- aubio, opensuse leap, suse linux enterprise +2 moreAubio is vulnerable to denial of service via aubio_pitch_set_unit functionCVE-2018-14522Fix available8.8 High
- [unknown] ansible, canonical ubuntu linux, debian linux +8 more +10 moreAnsible Arbitrary Code ExecutionCVE-2018-10875Fix available7.8 High
- opensuse open build serviceopen build service allows anyone to upload rpmsCVE-2011-41836.5 Medium
- opensuse open build serviceopen build service information leak via unauthorized source accessCVE-2011-41814.3 Medium
- opensuse open build serviceCSRF protection incorrectly disabledCVE-2014-05948.8 High
- opensuse open build serviceNo write permission check in change_role commandCVE-2013-37038.8 High
- crowbar project crowbarinsecure permissions on files containing confidential dataCVE-2012-04333.3 Low
- suse kdump, linux enterprise desktop, linux enterprise server +2 moreMissing verification of host key for kdump serverCVE-2011-41905.9 Medium
- suse linux enterprise, linux enterprise server +1 moreunix2_chkpwd do not check for a valid accountCVE-2011-3172Fix available5.4 Medium
- suse studio onsite, studio onsite 1.1 appliance, studio onsite appliance +2 moreSQL injection in SUSE studio via select parameterCVE-2011-04678.8 High
- opensuse open build serviceOpen Build Service arbitrary package modificationCVE-2018-7689Fix available7.1 High
- opensuse open build serviceOpen Build Service accepts arbitrary reviewsCVE-2018-7688Fix available7.1 High
- lrzsz project lrzsz, debian linux, suse linux enterprise debuginfo +2 more +4 morelrzsz before version 0.12.21~rc can leak information to the receiving side due to an incorrect...CVE-2018-10195Fix available7.1 High
- debian linux, linux kernel, canonical ubuntu linux +9 more +11 moreThe Linux kernel 4.15 has a Buffer Overflow via an SNDRV_SEQ_IOCTL_SET_CLIENT_POOL ioctl write...CVE-2018-7566Fix available7.8 High
- suse portusThe Djelibeybi configuration examples for use of NGINX in SUSE Portus 2.3, when applied to...CVE-2018-80598.8 High
- opensuse open buildservice, suse open build service +1 moreopen build service source server symlink exploitation via source patchCVE-2015-07966.3 Medium
- nextcloud, opensuse leap +1 morenextcloud package security issues with /srv/www/htdocsCVE-2017-92867.8 High
- opensuse zypper, fedoraproject fedora +1 moreproxy credentials written to log files by zypperCVE-2017-9271Fix available4.0 Medium
- opensuse open build serviceopen-build-service retrigger / wipebinaries hitting the wrong project bypassing access permissionsCVE-2017-9268Fix available4.4 Medium
- opensuse open build serviceOBS worker VM escape via relative symbolic linksCVE-2017-5188Fix available5.0 Medium
- libtiff, opensuse leap, suse linux enterprise desktop +2 more +4 more** DISPUTED ** LibTIFF 4.0.8 has multiple memory leak vulnerabilities, which allow attackers to...CVE-2017-16232Fix availableDisputed7.5 High
- arm cortex-a12 firmware, cortex-a15 firmware, cortex-a17 firmware +306 more +308 moreCVE-2017-5753 does not affect BellSoft softwareCVE-2017-5753Public exploitFix availableEPSS 93.8%5.6 Medium
- debian linux, linux kernel, arista eos +26 more +28 moreThe tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11,...CVE-2017-18017Fix availableEPSS 52.8%9.8 Critical
- debian linux, linux kernel, canonical ubuntu linux +4 more +6 moreThe HMAC implementation (crypto/hmac.c) in the Linux kernel before 4.14.8 does not validate that...CVE-2017-17806Fix available7.8 High
- debian linux, linux kernel, canonical ubuntu linux +4 more +6 moreThe Salsa20 encryption algorithm in the Linux kernel before 4.14.8 does not correctly handle zero...CVE-2017-17805Fix available7.8 High
- linux kernel, suse linux enterprise server +1 moreThe usb_destroy_configuration function in drivers/usb/core/config.c in the USB core subsystem in...CVE-2017-17558Fix available6.6 Medium
- opensuse obs-service-source validatorosc executes spec code during "osc commit"CVE-2017-9274Fix available7.8 High
- suse build, opensuse leap, suse linux enterprise software development kit +2 morepackage builds could use directory traversal to write outside of target areaCVE-2017-14804Fix available9.9 Critical
- postgresql, suse postgresql-init, linux enterprise server +2 morelocal privilege escalation in SUSE postgresql init scriptCVE-2017-14798Public exploitFix available7.3 High
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreThe sctp_do_peeloff function in net/sctp/socket.c in the Linux kernel before 4.14 does not check...CVE-2017-15115Fix available7.8 High
- suse susefirewall2The SuSEfirewall2 package before 3.6.312-2.13.1 in SUSE Linux Enterprise (SLE) Desktop 12 SP2,...CVE-2017-15638Fix available6.5 Medium
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Station-To-Station-Link (STSL)...CVE-2017-130846.8 Medium
- Show moreLoading…