Skip to contentSuse vulnerabilities
Products
Show 140 moreShow less
Newest
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreInsufficient policy enforcement in audio in Google Chrome prior to 79.0.3945.79 allowed a remote...CVE-2019-13745Fix available6.5 Medium
- google chrome, canonical ubuntu linux, debian linux +12 more +14 moreOut of bounds write in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to...CVE-2019-13734Fix available8.8 High
- opensuse factory, munge, suse linux enterprise server 15 +2 moreLocal privilege escalation from user munge to rootCVE-2019-3691Fix available7.7 High
- suse permissions, opensuse leap +1 morechkstat follows untrusted symbolic linksCVE-2019-3690Fix available6.8 Medium
- canonical cloud-init, debian linux, suse linux enterprise server +2 moreAn privilege elevation vulnerability exists in Cloud-init before 0.7.0 when requests to an...CVE-2012-6639Fix available8.8 High
- opensuse leap 15.1, suse mailman, linux enterprise server 11 +2 more +4 moreLocal privilege escalation from user wwwrun to root in the packaging of mailmanCVE-2019-3693Fix available7.7 High
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreLinux kernel CIFS implementation, version 4.9.0 is vulnerable to a relative paths injection in...CVE-2019-10220Public exploitFix available8.0 High
- suse linux enterprise server 12, linux enterprise server 15, linux enterprise server +2 moresquid: /usr/sbin/pinger packaged with wrong permissionCVE-2019-36885.1 Medium
- linux-nfs nfs-utils, suse linux enterprise server 12, linux enterprise server 15 +2 morenfs-utils: root-owned files stored in insecure /var/lib/nfs directoryCVE-2019-3689Fix available5.1 Medium
- suse rancherRancher Vulnerable to Cross-site Request Forgery (CSRF)CVE-2019-13209Fix available6.1 Medium
- open build service build service, opensuse open build service +1 moreMissing TLS certificate validation for HTTPS connections in oscCVE-2019-3685Fix available7.4 High
- suse rancherRancher Recreates Default User With Known Password Despite DeletionCVE-2019-11202Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +3 more +5 moreA vulnerability exists where if a user opens a locally saved HTML file, this file can use file:...CVE-2019-11730Public exploitFix availableEPSS 20.3%6.5 Medium
- mozilla firefox, firefox esr, thunderbird +3 more +5 moreMozilla developers and community members reported memory safety bugs present in Firefox 67 and...CVE-2019-11709Fix available9.8 Critical
- libgd, php, canonical ubuntu linux +10 more +12 moreUninitialized read in gdImageCreateFromXbmCVE-2019-11038Fix available3.1 Low
- suse rancherRancher Login Parameter Can Be EditedCVE-2019-11881Public exploit4.7 Medium
- suse rancherRancher Privilege Escalation VulnerabilityCVE-2019-12274Fix available8.8 High
- suse rancherRancher code injection via fluentd config commandsCVE-2019-12303Fix available8.8 High
- suse manager, uyuni +1 moresusemanager installer creates world-readable swap filesCVE-2019-3684Fix available4.0 Medium
- suse rancherRancher Project Members Have Continued Access to Namespaces After Being Removed From ThemCVE-2019-6287Fix available8.1 High
- suse rancherAccess Control BypassCVE-2018-20321Fix available8.8 High
- google chrome, canonical ubuntu linux, debian linux +4 more +6 moreLack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote...CVE-2019-5798Fix available6.5 Medium
- hcl software leap, suse linux enterprise server 15, linux enterprise server +1 more +3 moreyast2-rmt exposes CA private key passhrase in log-fileCVE-2018-20105Fix available4.0 Medium
- opensuse yast2-printerSMB printer settings don't escape characters in passwords properlyCVE-2018-201066.5 Medium
- opensuse yast2-samba-provisionPassword exposed in process listingCVE-2018-17956Fix available3.3 Low
- opensuse yast2-multipathStatic tempfile name allows overwriting of arbitrary filesCVE-2018-17955Fix available2.2 Low
- opensuse supportutilsLocal root exploit via inclusion of attacker controlled shell scriptCVE-2018-196367.3 High
- opensuse factory, suse linux enterprise server 15, obs-service-tar scm +2 moreobs-service-extract_file's outfilename parameter allows to write files outside of package directoryCVE-2018-124764.3 Medium
- gnu pspp, fedoraproject fedora, suse backports +2 moreThere is a reachable assertion abort in the function write_long_string_missing_values() in data...CVE-2019-9211Fix available6.5 Medium
- opensuse supportutilsCode execution if run with command line switch -vCVE-2018-196404.4 Medium
- opensuse supportutilsCode execution if run with command line switch -vCVE-2018-196396.7 Medium
- opensuse supportutilsUser can overwrite arbitrary log files in support tarCVE-2018-196382.2 Low
- opensuse supportutilsStatic temporary filename allows overwriting of filesCVE-2018-196372.8 Low
- python python-gnupg, canonical ubuntu linux, debian linux +2 more +4 moreImproper Input Validation python-gnupgCVE-2019-6690Public exploitFix available7.5 High
- red hat ansible, canonical ubuntu linux, debian linux +6 more +8 moreAnsible sensitive information disclosureCVE-2018-16876Fix available3.1 Low
- suse repository mirroring tool, yast2-rmt +1 moreyast2-rmt leaks database passwords in process listCVE-2018-17957Fix available3.4 Low
- [unknown] golang, golang go, debian linux +3 more +5 moreIn Go before 1.10.6 and 1.11.x before 1.11.3, the "go get" command is vulnerable to directory...CVE-2018-16874Fix available6.8 Medium
- [unknown] golang, golang go, debian linux +3 more +5 moreIn Go before 1.10.6 and 1.11.x before 1.11.3, the "go get" command is vulnerable to remote code...CVE-2018-16873Fix availableEPSS 66.3%7.5 High
- dcraw project dcraw, suse linux enterprise desktop, linux enterprise server +2 moreA stack-based buffer overflow in the find_green() function of dcraw through 9.28, as used in...CVE-2018-19655Fix available8.8 High
- node.js, suse enterprise storage, linux enterprise server +1 more +3 moreNode.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Slowloris HTTP Denial...CVE-2018-12122Fix availableEPSS 41.3%7.5 High
- node.js, suse enterprise storage, linux enterprise server +1 more +3 moreNode.js: All versions prior to Node.js 6.15.0 and 8.14.0: HTTP request splitting: If Node.js can...CVE-2018-12116Fix available7.5 High
- suse pam, kernel linux-pam +1 morepam_access does not handle netmask matches correctlyCVE-2018-17953Fix available7.5 High
- jasper project jasper, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in JasPer 2.0.14. There is a heap-based buffer over-read of size 8 in the...CVE-2018-195437.8 High
- jasper project jasper, canonical ubuntu linux, debian linux +3 more +5 moreAn issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function...CVE-2018-19542Fix available6.5 Medium
- jasper project jasper, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900...CVE-2018-195418.8 High
- jasper project jasper, debian linux, suse linux enterprise desktop +1 more +3 moreAn issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900...CVE-2018-195408.8 High
- jasper project jasper, debian linux, opensuse leap +2 more +4 moreAn issue was discovered in JasPer 2.0.14. There is an access violation in the function...CVE-2018-195396.5 Medium
- libwpd project libwpd, redhat enterprise linux, suse linux enterprise server +2 moreIn libwpd 0.10.2, there is a NULL pointer dereference in the function WP6ContentListener:...CVE-2018-19208Fix available6.5 Medium
- lighttpd, debian linux, opensuse backports sle +2 more +4 moreAn issue was discovered in mod_alias_physical_handler in mod_alias.c in lighttpd before 1.4.50....CVE-2018-19052Public exploitFix availableEPSS 13.7%7.5 High
- jasper project jasper, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function...CVE-2018-18873Fix available5.5 Medium
- Show moreLoading…